What I learned while securing Ubuntu (2015)

Re:What I learned while securing Ubuntu (2015) by slavik81 on Friday June 10, 2016 @11:42PM (#11881934)

> That or they do not understand how wide open the Ubuntu defaults are.

Fair enough. I'd love to learn. What threats does the firewall even defend against?

> The default on Ubuntu should be like all other linux distros where where all unsolicited incoming connections are blocked.

I don't understand why I should care. Evil hackers can send all they want, but the only things listening on my end should be those that I explicitly installed or enabled. The firewall seems redundant as the set of running applications and my set of firewall exceptions should match exactly.

[ Parent | on HN ]

Re:What I learned while securing Ubuntu (2015) by JupiterMoon on Sunday June 12, 2016 @06:51AM (#11887539)

> Fair enough. I'd love to learn. What threats does the firewall even defend against?

Many Debian/Ubuntu packages have a dependency on postfix. Even some trivial ones. Installing these packages installs postfix (which at least asks you to configure it during install). Having a firewall active means that your grandmother won't have services you didn't realise she had running listening.

[ Parent | on HN ]

Re:What I learned while securing Ubuntu (2015) by spydum on Saturday June 11, 2016 @12:11AM (#11882012)

Firewall is a component to a layered defense. One of the points about Ubuntu was starting the service immediately after install, was it not?

[ Parent | on HN ]