[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Is a firewall necessary with a RaQ?
- Subject: Re: [cobalt-users] Is a firewall necessary with a RaQ?
- From: "Gerald Waugh" <gerald@xxxxxxxxx>
- Date: Tue Nov 13 22:25:29 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
> Even with a firewall, good practice dictates that you shut down all
> unnecessary services on your servers (whatever they may be). My
> understanding of the internet "applicance" idea is that only the
> necessary services are there in the first place - so I'm not sure what
> I gain by adding a firewall.
> Thanks!
> Rusty
>
You gain the ability to block certain ip's from accessing the services.
You gain the ability to allow certain ip's access to services.
You gain the ability to block ip spoofing. (important) suppose someone spoofs
127.0.0.1.
The link below describes how ipchains filters packets
http://www.linuxdoc.org/HOWTO/IPCHAINS-HOWTO-4.html#core
Gerald