Re: firewall, newby
From: NeoSadist (neosad1st_at_charter.net)
Date: 01/27/04
- Next message: Jem Berkes: "Busy day for worms! Filtering"
- Previous message: NeoSadist: "Re: iptable vs snort rules"
- In reply to: Joseph Jolic: "firewall, newby"
- Next in thread: Joseph Jolic: "Re: firewall, newby"
- Reply: Joseph Jolic: "Re: firewall, newby"
- Reply: Joseph Jolic: "Re: firewall, newb"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 26 Jan 2004 22:13:00 -0700
Joseph Jolic wrote:
> Hi
> I recently installed mandrake and have realized (after some intrusion
> attacks on my windows partition (running dual boot)) that a firewall is
> absolutely necessary..with mandrake, upon installation the user is asked
> to select the security level desired..i chose the recommended setting..on
> top of this I have also configured a firewall (using the drake firewall
> setup utility)..will this be enough?
What's enough, in your opinion?
You left all boxes unchecked in the firewall config, right? I.e. don't let
anyone have any access to your box?
> or should I remove this firewall and
> download and install another firewall such as lokkit or firestarter?
You should use the mandrake firewall. Trust me, it's good.
> ..I
> don't want to have a separate linux firewall machine, not now anyhow, so
> am looking for simple to install firewall software..
Use the one mandrake comes with.
>
>
> also, what about other security aspects for linux that I have on my
> windows platform..on windows I'm using norton and it provides a firewall,
> and intrustion detection as well as visual tracking...will having just a
> firewall for linux suffice?
Usually, but if you want to install an intrusion detection system, get
SNORT.
> and if its worthwhile, what software could I
> use for intrusion detection for linux?..
SNORT.
> currently I'm thinking of
> installing lokkit or firestarter firewall and am wondering whether that
> will be enough
> to get by..
What you currently have should be enough. Just watch the logs, don't log in
as root (unless it's to a console as "su root"), etc. Most malicious
software vulnerabilities (i.e. adware/spyware) are not possible with linux
due to restrictions: to install software you must be root.
>
> thanks
> J
-- The makers may make and the users may use, but the fixers must fix with but minimal clues
- Next message: Jem Berkes: "Busy day for worms! Filtering"
- Previous message: NeoSadist: "Re: iptable vs snort rules"
- In reply to: Joseph Jolic: "firewall, newby"
- Next in thread: Joseph Jolic: "Re: firewall, newby"
- Reply: Joseph Jolic: "Re: firewall, newby"
- Reply: Joseph Jolic: "Re: firewall, newb"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|