On Thu, 2003-02-13 at 14:38, Javelin wrote:
> I would agree that there is something to be said for learning to batten
> down your linux boxen.

There is a lot to be said for that. Everyone should do it.

> However, keeping things  behind a firewall is
> just good practice.

No one should think that these two are mutually exclusive; everyone
really should do BOTH, not just one or the other.

> Yes, it may give one a false sense of security, but

But it shouldn't. One should install a firewall knowing that it does not
protect you magically, and understand just what it _does_ protect you
against.

In particular, one should be aware that most hacks are perpetrated
through services which are legitimately offered and which the firewall
is specifically configured to allow through. Neither your firewall nor
your "battened-down" box are of any use to you if your SMTP server is
cracked through a vulnerability you had not yet patched, or for which a
patch was not yet available, or for which you were 15 minutes late
applying the patch, or whatever.

-- 
Rodolfo J. Paiz
[EMAIL PROTECTED]




-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to