Re: [cobalt-users] ipchains installation

["Nico Meijer" <cobalt-users@xxxxxxxxxxxxxxx>]

Hi Rodolfo!

Great to see you're back.

> ipchains will be the first thing on your box to see a packet; Portsentry
> will only see what gets passed from there.

Very true.

> (Which raises an interesting
> question: if only the ports in use are passed by ipchains, but Portsentry
> only checks ports that are *not* in use, then what use is Portsentry on a
> machine with ipchains?)

In that case portsentry is utterly useless.

Maybe look at it this way: (sorry for the grim happenings below; don't let
you kids read this)

portsentry: Some guy, possible burglar, pushes your front door to see if
it'll open up. Once he does, he is electrocuted by your extra special,
Zircon encrusted door knob.

ipchains: Some guy, possible burglar, *wants* to push your front door to see
if it'll open up. Once he walks up to the gates, he's Dobermann food.

Which solution would you choose for your valuable server?

> Why on Earth would you use a default ACCEPT policy?

That's a scary thought... Nico