Hi,


first: please don't post html-Emails to mailinglists. There are many users
here who works with email-clients that don't support that.


> Hi.  My friend had told me that Linux does not have a good firewall.
> Linux can be broken into easily (according to his job's system
> administrator).  Would any of you know if this is true?  He says his
> friend likes Linux.  Any facts?

Your friend is right and wrong. Funny thing, eh?

The facts:

Linux _can_ be one of the securest operating systems IF CONFIGURED PROPERLY.
Unfortunately, most distributions install in a way that can steal your
sleep. But if you have the right knowledge you can harden a linux system in
a way that steal the cracker's sleep. :-)

If your friend thinks, security is only determined by a firewall, he is a
poor system administrator (sorry for saying it in such a way, but it is
true). A firewall is one part of system security. One of many parts. There
are many tools for linux to get it rock-hard but you have to know them and
how to use them.

The "standard" packet-filtering tool ipchains (I think that is what your
friend means when saying "firewall") is able to do his part of the work as
good as any commercial solution (in fact, many commercial solutions rely on
this tool). It's just more effort to learn about it before using, learn
about the TCP/IP protocol family and so on. Not a "point and click"
solution. But if you want to configure a commercial product, knowledge of
these basics is essential, too. Otherwise you would get very surprised one
day...


hth

 -volker





-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to