sslug-teknik team mailing list archive

[Sune Vuorela <nospam@xxxxxxxxxx>]

On 2005-01-06, Carl Andersen <tek@xxxxxxxxxxxx> wrote:
> #!/bin/sh
> #
> # /etc/rc.d/firewall: start/stop firewall
> #
>
> if [ "$1" = "start" ]; then
>     /usr/sbin/iptables -F
>     /usr/sbin/iptables -P OUTPUT ACCEPT
>     /usr/sbin/iptables -P FORWARD DROP
>     /usr/sbin/iptables -P INPUT DROP

Er det ikke smartere at lukke for de services man ikke bruger - end bare
at slukke portene?

-- 
Sune