securing Ubuntu and firewall
Tom Smith
tom71713-ubuntu at yahoo.com
Fri Feb 24 23:54:48 UTC 2006
I disagree...
I guess it depends on how you define "nasty". I use Webmin, for example,
but only want it accessible from the console. The program isn't "nasty",
I just want to ensure that no one from anywhere other than the console
can connect directly to it. I have other such programs that I protect in
a similar fashion. The only two ports I have open for management are
5900 (encrypted VNC connection to X :0) and 22. The only other open
ports are for services the server provides such as web or email services.
The firewall acts to ensure that no ports are made publicly accessible
without deliberately opening the port to allow access to them. If you're
using a desktop like Gnome or KDE, too, there are many programs that
will open ports dynamically such as networkable games.
Firewalls can also help protect against DoS attacks, as well as other
types of network-based attacks that are aimed at disrupting the computer.
I think most people would agree that a firewall is a necessary feature
to implement on any server or Internet-connected computer, as well as
any network-connected computer if it's connected to an untrusted network
(like a Wi-Fi service).
~ Tom
John Richard Moser wrote:
> you don't need a firewall unless you installed something nasty. Ubuntu
> doesn't open ports by default on the outside.
>
> H.S. wrote:
>
> >Hi,
>
> >Just wondering, what application is usually used to configure iptables
> >to secure a Ubuntu box? I am currently looking for a GUI firewall
> >application to introduce to a friend who has converted from Windows to
> >Ubuntu on his home machine, but who is not a typical Windows ignorant
> >user (considering that he knows vi!).
>
> >I have so far found firestarter. Comments and suggestions are welcome.
>
> >->HS
>
>
>
>
> --
> All content of all messages exchanged herein are left in the
> Public Domain, unless otherwise explicitly stated.
>
> Creative brains are a valuable, limited resource. They shouldn't be
> wasted on re-inventing the wheel when there are so many fascinating
> new problems waiting out there.
> -- Eric Steven Raymond
>
> We will enslave their women, eat their children and rape their
> cattle!
> -- Evil alien overlord from Blasto
More information about the ubuntu-users
mailing list