Mailinglist Archive: opensuse (3100 mails)
| < Previous | Next > |
Re: [SLE] SUSE Firewall not like ZoneAlarm...
- From: Jerry Feldman <gaf@xxxxxxx>
- Date: Mon, 13 Mar 2006 09:15:13 -0500
- Message-id: <200603130915.13614.gaf@xxxxxxx>
On Monday 13 March 2006 9:09 am, Andre Truter wrote:
> tend to disagree. I can write the OP a nice little tool that will
> do what ZoneAlarm does, monitor outgoing traffic and ask the user when
> an app wants to connect the outside, but that will only give him a
> false sense of security, because he is applying Windows tactics to
> Linux, so he is looking for the problems in the wrong place.
>
> This is my whole point with my rant. Windows teach us to look out for
> spyware and viruses, so we apply that to Linux also. We look for the
> same type of vulnerabilities, while the system is designed different
> and has different vulnerabilities.
>
> It is like guarding the door to the stable, while the castle's main
> gates are wide open.
>
> I think it is better for the OP to rather try and understand what the
> vulnerabilities in Linux is and to use the appropriate tools for
> Linux.
I don't really disagree with you. One security guy I know uses the slogan
"Iron doors and paper windows". However, we also want him to be able to
transition comfortably.
--
Jerry Feldman <gaf@xxxxxxx>
Boston Linux and Unix user group
http://www.blu.org PGP key id:C5061EA9
PGP Key fingerprint:053C 73EC 3AC1 5C44 3E14 9245 FB00 3ED5 C506 1EA9
> tend to disagree. I can write the OP a nice little tool that will
> do what ZoneAlarm does, monitor outgoing traffic and ask the user when
> an app wants to connect the outside, but that will only give him a
> false sense of security, because he is applying Windows tactics to
> Linux, so he is looking for the problems in the wrong place.
>
> This is my whole point with my rant. Windows teach us to look out for
> spyware and viruses, so we apply that to Linux also. We look for the
> same type of vulnerabilities, while the system is designed different
> and has different vulnerabilities.
>
> It is like guarding the door to the stable, while the castle's main
> gates are wide open.
>
> I think it is better for the OP to rather try and understand what the
> vulnerabilities in Linux is and to use the appropriate tools for
> Linux.
I don't really disagree with you. One security guy I know uses the slogan
"Iron doors and paper windows". However, we also want him to be able to
transition comfortably.
--
Jerry Feldman <gaf@xxxxxxx>
Boston Linux and Unix user group
http://www.blu.org PGP key id:C5061EA9
PGP Key fingerprint:053C 73EC 3AC1 5C44 3E14 9245 FB00 3ED5 C506 1EA9
| < Previous | Next > |