Re: [tlug] iptables - Tools for easy configuration

["Stephen J. Turnbull" <stephen@example.com>]

Curt Sampson writes:

 > On Mon, 2 Jul 2007, Stephen J. Turnbull wrote:
 > 
 > > As to why you won't find much on this ....  Thing is, in general you
 > > trust the people *inside* the firewall.
 > 
 > Not at all.

My point was not that there aren't reasons to filter outgoing, but
that the ones with generic solutions ("block outgoing SMTP") are
mostly irrelevant to Linux HOWTO readers.  Most HOWTO readers are
configuring a SOHO-scale setup.  Second, the fact that you trust the
*people* means that you want to enable them to do lots of things, but
that's anathema to firewall simplicity; a 10KB HOWTO just can't do the
subject justice.