>> 4. Put iptables.
>
> For what I know, the box have only port 80, 443, 21 forwarded from the
> firewall ...
> Still useful iptables?

Two thoughts,

Multiple lines of defense are always good.

If the firewall only controls inbound traffic, the server could still be
compromised by an attack on port 80 and then it could establish
outbound connections. You can set up iptables to block all unused
outbound ports.


Brian



_______________________________________________
tsl-discuss mailing list
[email protected]
http://lists.trustix.org/mailman/listinfo/tsl-discuss

Reply via email to