* Marc Haber: > I am routinely running systems without any packet filtering capability > on the network, and they are perfectly able to cope. They just only > accept network connections for needed services. This is a bit dangerous because any invocation of "apt-get install" or "apt-get upgrade" can start new server daemons.