Having restrictions one port is a good idea but should be the only thing
you should do for firewalling.

Use a solid ipchains script for static firewalling, portsenty for dymic
firewalling, and use tcpserver to control access once connected.


Bruno Wolff III wrote:
> 
> On Wed, Sep 06, 2000 at 06:23:47AM -0000,
>   John Conover <[EMAIL PROTECTED]> wrote:
> > Is anyone using tcpserver on a few daemon sockets as an alternative to
> > a firewall?
> 
> That isn't such a good idea. That will potentially protect those ports,
> but won't do much for other ports on the system. You can use something
> like ipchains to block remote access to all ports by default and prevent
> accidentally shooting yourself in the foot later. You may also have
> some processes listenning on ports that won't work with tcpserver.

Reply via email to