On Tue, 5 May 2009, Rajko M. wrote:
On Tuesday 05 May 2009 09:34:11 pm L. V. Lammert wrote:
It seems that you never used personal firewall in that other OS, at least not paid for version. User is asked would he let application [name] to access Internet, with offer to give more details if user wants. So, if you see some application attempting to access Internet, and you are not sure, you click link to more information and read what firewall creators have to say.
Sorry, your assumptions are wrong on boht counts. A *USER* should not be put in a position of knowing what is secure or not - that is just good security practice. Besides, if the system is installed and supported correctly, the question will never arise.
Can you imagine better option for user that is not specialist for computers?
Yes. Have them call support! Again, *USERS* are not security knowledgable.
If they KNOW it is a valid request, it's only three or four mouse clicks to turn on that port - no internal knowledge needed.
How would they know?
Maybe they need to call help? Again, *USERS* are not links in a security chain, except for training to *NOT* click on 'OK'.
Today even kwrite is networked, and second, how you as new to Linux should know which application is benevolent and which not.
If you don't know, you shouldn't be answering the question.
Which port? Applications try to access port, but never tell you which. Some, after failed attempts will tell you what ports are needed, but not many.
Well, you can always Google, or look at services, or look at the firewall config (standard services are listed). Have YOU ever looked at the firewall that runs with the OS that is the subject of this list? It would appear not.
Well if applications are installed that way why we have those that like Samba fail royally on my own LAN? CUPS don't work on the same LAN, and probably more.
Probably because a qualified sysadmin has not done the setup?
Under normaly circumstances, the user would never see a request to open a port; if he/she DOES, it is higly likely that some malicous application is the cause, OR a new application is being installed, which should have been monitored by a qualified professional anyway.
Should I hire qualified professional to make Samba or CUPS working?
If you don't wish to learn what's going on, then yes. If you are supporting clients/customers, that's why we have support agreements.
I'm sure, if I would be lesser do-it-yourself guy, I will take another approach, ditch the non working OS and go back to working.
Why not? Seems like an improvement for all. Lee -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org