Re: Only two services running

["Saad Kadhi (Work Accnt)" <Saad.Kadhi@neurocom.com>]

Robert Johannes wrote:

> I'm sure you guys can help with this question: When I have only sshd and
> sendmail running, do I still need to configure ipf rules to block access
> to ports that aren't open to begin with?  I will be doing NAT for port
> 80; port 80 on the firewall will be redirected to port xxxx on an internal
> machine.

Well if your netstat -an only lists 22 (ssh) & 25 (sendmail) you don't 
need to put ipf rules to block access to ports but you'll do implicitly 
when you put a block in log all somewhere (remember: deny everything and 
open up only what is necessary is the best policy !).

-- 
Saad
"[...]Unfortunately, many journalists and writers have been fooled
into using the word 'hacker' to describe crackers [...]The basic
difference is: hackers build things, crackers break them".

nodisclaimer