Avoiding Trojans and Rootkits
Subject:   Dubious advice, scaremongering and oversimplification
Date:   2003-12-09 16:56:05
From:   mojogeek
Response to: Dubious advice, scaremongering and oversimplification

...and you don't even have the cohunes to use a real username. If you read her article carefully, she is not, as you say, "unconditionally recommending running some free personal firewall." Her criteria is ROOTKITS, nothing dubious that I see.

Very simply she states "If you're intimidated at the prospect of learning the syntax of ipf or ipfw, invest in an inexpensive, preconfigured hardware firewall. If you're already running a free firewall on your Windows system (and you should be), place your FreeBSD system behind it until you're ready..." The only "implication" I read here is that she is stating an obvious for any system admin running a windows box-that you SHOULD be using a firewall on it, not that you should be using a free firewall!!

You don't do anyone any favour here by stating the obvious- your simple inability to read clearly. Try harder to educate yourself next time.

Full Threads Newest First

Showing messages 1 through 1 of 1.

  • Dubious advice, scaremongering and oversimplification
    2003-12-11 09:46:31  anonymous2 [View]

    im with the granda poster

    you shouldnt lower the task of firewall security.
    pretending that the audience target of this articles is windows users who happen want to and give a try to freebsd is not right. I understand Dru position here, trying to get to a more wider audience and not be too much techinicall about some subjects.

    But freebsd boxes should be protected by some kind of firewall (period). If you happen not to know what a firewall is, dont use freebsd. Its impossible and not eligeble to be comprimissed using a freebsd box by the simple fact that you are not behind a fw or using a lowcrap setuped firewall that even a syn flood cant deter.
    Isnt the awareness of security but the feeling you arent doing whatever you can to avoid it that should oblige everyone to take action.
    Learn iptables, learn ipfw, or ipfilter whatever but dont use a point and click fwall since the diference between that and nothing is NULL.