Re: Why not have firewall rules by default?

2008-01-25 Thread Henrique de Moraes Holschuh
On Fri, 25 Jan 2008, Török Edwin wrote: > If it is 2.6, I suggest you to contact the netfilter mailing list [1], > and show them your firewall rules, What makes you think they don't know about this? It is a design detail of the way netfilter is implemented, and the two methods of acceleration I m

Re: Why not have firewall rules by default?

2008-01-25 Thread Török Edwin
Henrique de Moraes Holschuh wrote: > On Wed, 23 Jan 2008, Rolf Kutz wrote: > >> On 23/01/08 08:29 -0700, Michael Loftis wrote: >> >>> It's better to leave the service disabled, or even better, completely >>> uninstalled from a security standpoint, and from a DoS standpoint as >>> well. T

Re: Why not have firewall rules by default?

2008-01-25 Thread Henrique de Moraes Holschuh
On Wed, 23 Jan 2008, Rolf Kutz wrote: > On 23/01/08 08:29 -0700, Michael Loftis wrote: >> It's better to leave the service disabled, or even better, completely >> uninstalled from a security standpoint, and from a DoS standpoint as >> well. The Linux kernel isn't very efficient at processing fir

Re: Why not have firewall rules by default?

2008-01-25 Thread Brent Clark
Hi Little something on the side, while its in my mind. If there was anything i would like to see, that is more of the netfilters patch o matic's available in the kernel. Hence, less need to wget patch o matic and to follow the process. Its not a big task, but still, total time waster. Anyway