RH Taroon Beta Open Ports

rhldevel at assursys.co.uk rhldevel at assursys.co.uk
Mon Aug 25 15:45:22 UTC 2003


On Mon, 25 Aug 2003, Bill Nottingham wrote:

> rhldevel at assursys.co.uk (rhldevel at assursys.co.uk) said: 
> > Which local processes? We've already heard about sgi_fam, and we already
> > know about NIS and NFS, but is this really worth leaving it listening on
> > external interfaces in a _default_ install?
> 
> Set up a firewall, as is the default in the install...

Certainly, and allowing easy configuration of Linux's IP filtering
functionality at install time was a very responsible move by RH.

But to a lot of naïve users, firewalls are deeply technical things, that
they worry will interfere with normal usage. As a result, I believe a number
of such users will install with the firewall disabled, or stop it when
attempting to get things working - perhaps never to (re-)enable it. Having
things like X11, portmapper and rpc.statd listening on an external interface
is asking for trouble, IMHO.

> Bill

Best Regards,
Alex.





More information about the fedora-devel-list mailing list