
Mailing List Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [tlug] Debian Firewall
Hi,
No not exactly. It depends on what options you choose for installing
each package. Did you use tasksel to install a default set of
packages? If so
tasksel usually bundles up a pile of packages and dependencies for
installation
and will prompt you along the way for each package for a set of
defaults that
it wants. If you just keep hitting enter the default setting is not
that bad.
Debian tries to hard to install sensible defaults for any of the
network services
you might install by default.
Redhat and Mandrake from what I've seen turn on a bunch of services by
default that I question whether they should be running by default then
throw on the
packet filtering firewall as a stopgap option which imo is band aid
security.
The Debian manual has some tasks for hardening your Debian installation
here as well as finding some packages for installing a firewall with
some utilities that
make the process easier.
http://www.debian.org/doc/manuals/securing-debian-howto/index.en.html
On Dec 24, 2003, at 1:33 PM, Charles Muller wrote:
> I just installed Debian 30r (Woody) on my laptop.
>
> When installing such distros as Mandrake and Red Hat, the
> installation program asks if you want to set up a basic firewall for
> the workstation. This sort of thing does not seem to be part of the
> Debian install process. Should I assume then, that there is presently
> nothing set up in terms of security?
>
> Chuck
>
> ---------------------------
> Charles Muller
>
> Toyo Gakuen University
> Faculty of Humanities
> 1660 Hiregasaki, Nagareyama-shi
> Chiba 270-0161 JAPAN
>
> <acmuller@example.com>
> http://www.acmuller.net
> Mobile Phone: 090-9310-1787
>
> --
> TLUG server is hosted by Open Source Development Lab Japan
> http://www.osdl.jp/
>
> To unsubscribe from this mailing list,
> please see the instructions at <http://www.tlug.jp/list.html>
>
>
"and whatever the bean-counters may say, responsibility
should always be the bottom line." -Arthur C. Clarke
Home |
Main Index |
Thread Index