Re: Bug#752450: ftp.debian.org: please consider to strongly tighten the validity period of Release files
On Sat, Nov 01, 2014 at 07:46:42PM +0100, Philipp Kern wrote:
> On Thu, Oct 30, 2014 at 05:52:07PM +0100, Christoph Anton Mitterer wrote:
> > - Debian should ship a default set of firewall rules. Are we the only
> > distro which doesn't do this? I mean a basic ruleset which drops
> > incoming, accepts outgoing and accepts related,establised is so easy to
> > do... and it would help for all those cases where services are started
> > but not yet finally configured/secured by the admin.
>
> Are all of our users admins that grasp firewalls?
Most likely not, and therefore I agree that with the current state of
affairs, enabling a firewall on Debian by default is probably a bad idea.
However, it should be possible to create a tool which helps novice users
in managing their firewall, and such a tool could be installed by
default on at least a Desktop installation. If we go down that route,
and if said tool is easy enough to use and understand for the most
novice of users, I would absolutely agree that enabling a firewall with
this tool on default installations is desirable.
--
It is easy to love a country that is famous for chocolate and beer
-- Barack Obama, speaking in Brussels, Belgium, 2014-03-26
Reply to: