Re: Re: A simple question FORK! Something that bugs me about net-installsand security

2007-01-27 Thread Angelo Bertolli
For console, you can use lokkit:

lokkit - basic interactive firewall configuration tool (console interface)

But I don't think it gives you as much control as iptables.

Angelo


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: A simple question FORK! Something that bugs me about net-installsand security

2007-01-27 Thread Andrei Popescu
On Sat, 27 Jan 2007 17:21:36 -0500
Angelo Bertolli [EMAIL PROTECTED] wrote:

 For console, you can use lokkit:
 
 lokkit - basic interactive firewall configuration tool (console
 interface)
 
 But I don't think it gives you as much control as iptables.

My point was that it would be very difficult to reach consensus over
which firewall to use as default. It might be even tougher than the
usual GNOME/KDE, vim/emacs, apt-get/aptitude, ... because there are so
many choices and it would be very difficult to create a default set
of rules that would work for many people.

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: A simple question FORK! Something that bugs me about net-installsand security

2007-01-27 Thread Hodgins Family
 to create a default set of rules that would work for many people.

The default set of rules only needs to get people through the
installation safely. After that, they can alter them with their
favourite program, as needed.

The rules here:
http://www.debian.org/doc/manuals/securing-debian-howto/ap-fw-security-update.en.html

entered at the console (and before running tasksel) gives access to
security updates and nothing else. It needs DNS and only works with HTTP
URLs.

Maybe a user could be told (during installation) to enter this (or
something like it) before selecting packages.




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]