Re: Newbie friendly security and firewall docs (cookbook?)

[Richard Owlett <rowlett@cloud85.net>]

Dominic Walden wrote:
> Richard Owlett <rowlett@cloud85.net> writes:
>
> > I'm looking for a reference document that wouldn't scare my
> > friend off Debian and also give me the required information to:
> >     1. close the maximum number of ports.
> >        I see him using browser, email, ftp file downloading.
> >        I don't see him being a server. All incoming packets should
> > be to
> >        fulfill a previous outgoing request - [correctly phrased?].
>
> Totally not self-promotion or anything - ;) - but to achieve what you
> need I have a firewall script and some explanation on my site
> (drw.ninth.su/gnu.html). It is based on what you'll find in the Securing
> Debian Manual (which is well worth a read if you feel up to it).
>
> Let me know if you have any questions.
>
> Dom

I don't think giving a useful answer to a publicly asked question 
is "self promotion".

I have a minor problem with the page. It states "... updated to 
use the newer init system used now on Debian." Newer than what? 
Is this referring to a Debian release later than Lenny or is it 
requiring systemd? All I essentially know about init systems is 
that people either love or hate systemd. Will your script run on 
Squeeze and Wheezy?

A more heavily commented commented version might be a suitable 
instructional tool for newbies.