Mailinglist Archive: opensuse (1332 mails)

[Prasun Dhara <prasun_instru@xxxxxxxxx>]

Yes Lee I am new to this OSS world and I agree that i am not a security 
expert.That is why i am trying to learn from the discussion made by experts 
like you.

But I can not agree with you on the point #1.

When one particular application will listen to a port, it totally depends on 
the application.
It may be during installation,may be during anytime the application wish.

 I am totally agree with you Jim.

--Prasun  


----- Original Message ----
From: L. V. Lammert <lvl@xxxxxxxxxxx>
To: Prasun Dhara <prasun_instru@xxxxxxxxx>
Cc: Jim Henderson <hendersj@xxxxxxxxx>; opensuse@xxxxxxxxxxxx
Sent: Thursday, May 7, 2009 7:06:32 PM
Subject: Re: [opensuse]  Re: Interactive Firewall Needed

On Wed, 6 May 2009, Prasun Dhara wrote:

> Is everyone getting my points what i wanted to say below.....
Have you been listening to the points others have made? Seems not.

> -->Now he wants to listen a song.so he needs to run a player(say
> kaffaine or VLC or amarok etc)These players also needs some open port.
1) IF an applicaiton needs an open port, it is opened upon *INSTALLATION*,
not use!
2) A mp3 player should not USE an open port, so select one designed
properly.

> So when ever he tries to run the application request is silently drops.
No, an application like that never gets installed, because the installer
program [or person] in that situation is/was not capable of
installing/creating a proper application. See #1 above.

> --->Now he wants to chat/voice chat with some one using a VOIP
> messenger. but since this program also needs an open port.He cant do
> voice chat.
No, he/she CAN. See #1 above.

It's fairly obvious that you come from the MS world, where either the
applications lack good security design, is not installed properly, or
'add-on' software is being used (e.g. standalone firewall application).

Security is fundamental to a good system installation, and it's simple
with Linux. The fact that the MS world HAS no good security should not be
fodder for a lenghty thread here.

    Lee



      
-- 
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx