On Sat, 2004-01-10 at 15:21, Riku Meskanen wrote:
BTW, I've been wondering loooong time why default FW has not been stateful?
[snip]
Any reason not to ship a stateful filter by default? It would make people with less experience with networking easier to get things working out of box and withouth necessarily punching silly holes in initscripts and like. (Haven't looked recently if those are still there ...)
Above template allows directly to client use DHCP, NTP, NFS, etc. without a single line modification. Only the incoming connections need to be customized and ONLY in server use and providing services to other computers, workstations do not necessarily need to be touched. A simple python/perl script could do that if nothing else.
Any plans yet?
I felt the same and submitted patches in Aug 2003.
Fedora Core v1 and Red Hat Enteprise Linux v3 both create stateful firewalls by default. No breakage for locally initiated connections. Big improvement over RHL9 and earlier.
Didn't you read the Release Notes?
Dax Kelson Guru Labs