Re: Why not have firewall rules by default?

2008-01-27 Thread Florian Weimer
* Henrique de Moraes Holschuh: > On Wed, 23 Jan 2008, Rolf Kutz wrote: >> On 23/01/08 08:29 -0700, Michael Loftis wrote: >>> It's better to leave the service disabled, or even better, completely >>> uninstalled from a security standpoint, and from a DoS standpoint as >>> well. The Linux kernel

Re: Why not have firewall rules by default?

2008-01-27 Thread Javier Fernández-Sanguino Peña
On Wed, Jan 23, 2008 at 11:22:41PM +0100, Florian Weimer wrote: > The daemon might have been installed by a package dependency, more or > less by accident. Debian should have a policy that all daemons bind to > the loopback interface by default, but as long as this is not the case, > I can underst

Re: Why not have firewall rules by default?

2008-01-27 Thread Jonas Andradas
Hello, As Javier says: > See > > http://www.debian.org/doc/manuals/securing-debian-howto/ch-sec-services..en.html#s-firewall-setup > : > > Just in case somebody doesn't notice, there is a typo in this URL (double-dot), so I will post it correctly http://www.debian.org/doc/manuals/securing-debian

Re: Why not have firewall rules by default?

2008-01-27 Thread Javier Fernández-Sanguino Peña
On Wed, Jan 23, 2008 at 01:15:18PM -0600, William Twomey wrote: > I guess my point is if the 'iptables' package is installed by default on > Debian, then better integration with Debian would probably be a good > idea. Iptables provides the tools, the init.d script was removed since it conflicte