On Mon, 25 Aug 2003, Ian Pilcher wrote:
It seems to me that the fundamental problem is the lack of
"linkage"
(for lack of a better word) between service configuration and
firewall configuration.
well, there's so much policy involved. Eg you could perhaps add
special comment lines to init scripts (ala the chkconfig lines) to
indicate ports which are used by an app - but how do you tell whether
the user wants them accessible to the network? and if so, the whole
internet? his local network? ???
Just some thoughts on future directions. Flame away!
got any ideas? :)
one thing i would like is a portmap with hooks on rpc client
registration/deregister (ie to setup firewalls).
regards,
--
Paul Jakma paul(a)clubi.ie paul(a)jakma.org Key ID: 64A2FF6A
warning: do not ever send email to spam(a)dishone.st
Fortune:
It is difficult to legislate morality in the absence of moral legislators.