Re: Re: A simple question FORK! Something that bugs me about net-installsand security
For console, you can use lokkit: lokkit - basic interactive firewall configuration tool (console interface) But I don't think it gives you as much control as iptables. Angelo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: A simple question FORK! Something that bugs me about net-installsand security
On Sat, 27 Jan 2007 17:21:36 -0500 Angelo Bertolli [EMAIL PROTECTED] wrote: For console, you can use lokkit: lokkit - basic interactive firewall configuration tool (console interface) But I don't think it gives you as much control as iptables. My point was that it would be very difficult to reach consensus over which firewall to use as default. It might be even tougher than the usual GNOME/KDE, vim/emacs, apt-get/aptitude, ... because there are so many choices and it would be very difficult to create a default set of rules that would work for many people. Regards, Andrei -- If you can't explain it simply, you don't understand it well enough. (Albert Einstein) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: A simple question FORK! Something that bugs me about net-installsand security
to create a default set of rules that would work for many people. The default set of rules only needs to get people through the installation safely. After that, they can alter them with their favourite program, as needed. The rules here: http://www.debian.org/doc/manuals/securing-debian-howto/ap-fw-security-update.en.html entered at the console (and before running tasksel) gives access to security updates and nothing else. It needs DNS and only works with HTTP URLs. Maybe a user could be told (during installation) to enter this (or something like it) before selecting packages. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]