Mailinglist Archive: opensuse (4244 mails)
| < Previous | Next > |
[opensuse] sorting firewall utility
- From: jdd <jdd@xxxxxxxxx>
- Date: Fri, 12 Oct 2007 11:17:24 +0200
- Message-id: <470F3BA4.1060804@xxxxxxxxx>
Hello,
I'm on the way of configuring a hosted server and wonder why I should setup a firewall.
AFAIK, a firewall have several goals:
* secure an internal network,
* NAT
* redirect ports
...?
none of these goals are relevant for a single host.
If I understand well the Linux network way of life, no application is listening a port if not instructed to do so, so there is no reason to forgive a port access on a one root user host.
single user will be restricted to sftp (in write sense)
I have for now installed apache and vsftp and will have some more, but still very limited applications running
is that basically good?
thanks
jdd
--
http://www.dodin.net
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx
I'm on the way of configuring a hosted server and wonder why I should setup a firewall.
AFAIK, a firewall have several goals:
* secure an internal network,
* NAT
* redirect ports
...?
none of these goals are relevant for a single host.
If I understand well the Linux network way of life, no application is listening a port if not instructed to do so, so there is no reason to forgive a port access on a one root user host.
single user will be restricted to sftp (in write sense)
I have for now installed apache and vsftp and will have some more, but still very limited applications running
is that basically good?
thanks
jdd
--
http://www.dodin.net
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx
| < Previous | Next > |