[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Required firewall support



On Thu, Mar 17, 2005 at 01:09:33PM +0100, Marc Haber wrote:
> On Wed, 16 Mar 2005 20:39:48 -0700, Joel Aelwyn <fenton@debian.org>
> wrote:
> >* The first rule of securing a machine exposed to the wilds is "Deny by
> >  default, allow by need".
> 
> Which is pretty well accomplished by only running needed services.

Note that some packages, directly or indirectly, build-depend on
packages containing daemons that will be started by default if
installed. In that light, a firewall really is required to keep things
safe.

-- 
         EARTH
     smog  |   bricks
 AIR  --  mud  -- FIRE
soda water |   tequila
         WATER
 -- with thanks to fortune



Reply to: