Firewall security: Problems with simple Samba file share 3597

There isn't. Precisely none, to a value of none as close to zero as makes no difference at all. Closer than I could mark with a pencil.

And your f-w will make no differnce, because it will be allowing access to that service - that's why you have the service running, no?

I know what the server is intended to do. What you intend is your business.

If you had a service that you wanted to give to only a special group of people, you would configure it that way. And you wouldn't be a newbie.

Let's get specific. You want to let some people use mysql, so you run the server, open it to every IP, and give your users a login. You don't know that there is a default mysql user with a login "mysql", so the world can use it to search around with.

Wrong. If mysql came configured that way, it would be a security hole, so it isn't.

Anyway, you were the one who deliberately went and spcified the netmask as 0! You get it in the arse. Your job.

So you won't do that, will you?

Personal responsibility is so nice, when the server comes configured safe by default!

It does - the distro's job is to make it so.

History shows that it IS true - name one vulnerability that has not been corrected within hours of first exploitation (or way before!) by any distro.

There you are.

See?

Peter