[clug] Starting k/ubuntu - Debian

Andrew Janke a.janke at gmail.com
Mon May 14 06:46:18 GMT 2007


why not just:

   # sudo echo "ALL:ALL" > /etc/hosts.deny

?

Or am I missing something?


a

On 5/14/07, Michael Cohen <michael.cohen at netspeed.com.au> wrote:
> Algis,
>   You might want to enable port knocking just to hide the ssh port. Keeps all
>   the script kiddies out, with a minimal hassle for you.
>
>   You never know when a zero day becomes available for openssh
>
>   Most home routers use either iptables (running linux) or vxworks. The ones
>   that use iptables are just the same as any other linux firewall in terms of
>   security. The vxworks ones come out with a few vulnerabilities occasionally,
>   but generally in a nat setup they dont really make a huge impact (unless you
>   use IRC - There was a nice IRC vxworks vuln a while ago).
>
>   Michael.
>
> On Mon, May 14, 2007 at 03:55:57PM +1000, Algis Kabaila wrote:
> > On Monday 14 May 2007 11:33, Nathan O'Sullivan wrote:
> > > > Does kubuntu have a firewall or another security measure and if so what?
> > >
> > > While on the topic - K/Ubuntu have a default "no network services"
> > > policy, meaning a brand new installation can be safely connected
> > > directly to the internet without a firewall.
> > >
> > > Regards
> > > Nathan
> > Thanks - it is useful to have confirmation of this detail  I now have the
> > openssh server installed.  As I am the only user of this small home network,
> > I feel reasonably happy with router's "firewall".
> >
> > Regards,
> > OldAl.
> > --
> > Algis Kabaila (Dr)
> > http://members.pcug.org.au/~akabaila/StructuralAnalysis/
> > --
> > linux mailing list
> > linux at lists.samba.org
> > https://lists.samba.org/mailman/listinfo/linux
> --
> linux mailing list
> linux at lists.samba.org
> https://lists.samba.org/mailman/listinfo/linux
>


-- 
Andrew Janke   (a.janke at gmail.com || http://a.janke.googlepages.com/)
Canberra->Australia    +61 (402) 700 883


More information about the linux mailing list