[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ALL: PARANOID from /etc/hosts.deny Should be Commented by default



On Thu, Apr 19, 2001 at 11:04:04AM +0200, Robert van der Meulen wrote:
> Hi,
> 
> Quoting Craig Sanders (cas@taz.net.au):
> > this is good security practice: deny everything except that which you
> > know you need to allow.
> Thanks for the clear explanation; my vision was getting a bit clouded, late
> at night (and annoyed by the troll :) )
> I totally agree with all this.

Of course you do, because it's 100% correct.  But this thread isn't about
what individual administrators do, or what they should do, it's about what
Debian should do by default.  And PARANOID should not be used at all, let
alone be the default.  (Except for pedants as previously illustrated.)

--Adam

-- 
Adam McKenna  <adam@debian.org>  <adam@flounder.net>



Reply to: