Re: Shuttle & via epia... now firewalls

[Andy Laurence <andy@xxxxxxx>]

> > To access those files, you'd need to enable more services
> > which would open
> > up more possible holes.
>
> I would need to open port 80, as am running andromeda.
> The alternative would involve opening port 80 on some other
machine
> inside the network.

Well, that's one hole.....

> > > a DOS attack that crashes out my web server.
> >
> > ....or uses your machine to DoS a lawyer's server....
>
> I said not all attacks are fatal, which includes being fatal to
someone
> else's machine.
> I'm not denying that ppl can get into machines and use them to
attack
> other machines.
> I am saying that not all security breaches result in this.

I'd agree with you entirely, but the chances of your machine being 
compromised, and the hacker being able to use it for whatever (s)he likes
are higher if you've added more services to the distro.  That's the
only 
point I'm trying to make.

> > > off the server stops then it's not exactly catastrophic now
is it?
> >
> > For you?  No.
>
> Exactly.  How many other ppl on the list are running home servers
to
> check their light on/off status, play music, program their tivo
etc?
> I am not suggesting this is ideal for a corporate network, merely
saying
> that, in a home/amateur environment, it is not necessarily essential
to
> have the same level of security as you would in a company.
> If it was, well we'd all have security guards and patrol dogs too
24hrs
> a day guarding our premises as if it were a bank vault.

Ah, but you won't get into trouble if someone uses your well locked up gun
to shoot someone.  However, if you left a licensed gun on the kitchen
table, and someone was shot with it, you may be in trouble.

> > > I am strictly a Micro$shaft shop.
> >
> > OK, it's equivalent to someone getting console access as
> > "Administrator".
>
> What's a 'console'? :-)

:-)

Before someone tells me to get off my high horse, I'd like to point out
that I am in the process of modifying a firewall distro.  Security is
not 
the main aim of the distribution, rather a solution which does not yet 
exist.

Andy (running a Microsoft firewall at home :-/ )
-- 
Building a community network for Bristol
http://consume.andylaurence.co.uk
- updated 03/07
4x4 in town - bog brush for your teeth
NB: Alternate E-Mail - andylaurence at yahoo dot co dot uk


For more information: http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx 
Subscribe:  ukha_d-subscribe@xxxxxxx 
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
List owner:  ukha_d-owner@xxxxxxx

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.