[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debian secure by default?



On Thursday 22 May 2008 12:17:59 am Todd A. Jacobs wrote:

> And yes, before someone chimes in and talks about how you can use
> tcpwrappers, .htaccess files, or other application-specific controls to
> manage access, there's something to be said for a defense-in-depth
> approach. So, host-based firewalls are *not* useless, but they may also
> not be necessary for a given configuration.

I see no advantage to host-based firewalls that couldn't be better served by a 
router doing filtering at the edge of the network.  There's no reason to 
expose machines directly to the internet.

-- 
Paul Johnson
baloo@ursine.ca

Explaination of .pgp part: http://linuxmafia.com/faq/Mail/rant-gpg.html

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: