Re: ipchains

[rpjday <rpjday mindspring com>]

On Thu, 30 May 2002, Kevin Myers wrote:

> On Thu, 30 May 2002 08:03:43 -0400 (EDT), rday wrote:
> 
> >not sure if this is an issue or not, but the "lokkit" and
> >"gnome-lokkit" utilities in red hat 7.3 appear to configure
> >ipchains, when i'm assuming most folks will be using
> >iptables.  this might give users a false sense of security
> >after the configuration when, in fact, they really haven't
> >locked down anything.
> >
> >or am i missing something?
> 
> I think it's worse than that, I suspect that if you run lokkit when iptables
> is configured there's a good chance that it will succeed in configuring
> ipchains, which will in turn stop iptables from starting again.
> 
> Or am I missing something?

i'm willing to bugzilla this, but not before i can appreciate whether this
is a serious issue or just an annoyance.  IMHO, as i said, i think it's
serious in that it deceives people into thinking they've configured 
security.  but i'm interested in whether anyone else has a more
educated opinion.

rday