On Sat, December 17, 2005 3:04 pm, Jeff Spaleta said:
There's a big difference between users delibrately deciding to
poke
holes in their firewall, and having the operating system let any
application automatically poke holes without authentication to allow
the action.
I'd be perfectly fine with a mechanism that applications could use
which first request permissions to open ports from the user and
notified the user as to which application was making the request,
before ports were dynamically opened.
Well, the user is going to have to do something explicit to open up the
firewall on the local machine.
But the fact is, if the feature is enabled on the router, there is nothing
Fedora can do to stop some malicious program from using it. So all
you're doing is stopping trusted programs from using the feature and its
still available to be used by untrusted apps. The feature really must be
disabled on the router itself if you don't like it.
Sean