ubuntu post installation hardening

[Derek Broughton]

Hal Burgiss wrote:

> On Tue, May 19, 2009 at 10:52:43AM -0300, Derek Broughton wrote:
>> That is, of course, "good enough for most people", but I have to admit I
>> find it a bit scary - it's way too easy for a user to open up ports
>> without knowing the potential consequences (say, sudo aptitude install
>> telnetd).
> 
> I wonder how many people have computers connected directly to the
> internet these days? I personally don't know anyone that is not on DSL
> or cable, and connect via a router, which does NAT, and makes
> accidental inbound connections difficult. But maybe thats not as
> common as I think it is.

I think it's extremely common - the reason we still don't have decent ipv6 
support is that NAT'ed connections came along and made it mostly 
unnecessary, so the ISPs who will have to provide IPV6-capable routers 
stopped worrying.   
-- 
derek