Re: wish list

[Pere Camps <pere@casal.upc.es>]

Hi!

> possibly instead of commenting out the things in /etc/inetd.conf to keep
> the machine functional.. have a firewall script that utilizes ipchains or
> something alike to deny services from to the outside world.

	Possible, but what's the use of having a single host acting as a
firewall?

	I see a possibility if you don't have any services open and you
wish not to be affected by possible secure-related tcp/ip bugs (although I
don't know to what extent ipchains would secure you, I'm no tcp/ip guru.

	I think that even only if you have one service open, then it's
pretty useless to have a single-firewalled host.

	It's much more esasir to simply comment out a service in inetd and
add the proper line in /etc/hosts.allow.

-- p.

-
Securedistros: A common list for all secured Linux distributions
Archive:       http://humbolt.nl.linux.org/lists/