Firewall security: Problems with simple Samba file share 3606

Peter T. Breuer

Generally, public access is taken to mean access from the internet, though it can also refer to a public kiosk or similar situation. I think it is quite plain from context what is meant here: the remote machines (the machines that are allowed to access our serger) don't allow public, from the internet, or are configured similarly to our server except that they have its public key.

But regardless, this is another red herring: we all understand that nothing can give us absolute security. We are only talking about increasing our safety - which this firewall does as detailed at

I feel like I'm playing whack-a-mole with you. We've already dispensed with this, but then you switch to something else, we knock that down, and then this pops up again. Once again: no one claims the firewall protects you from all conditions. It can protect you from stolen keys being used from a non-approved ip address. Again, all that is covered

Again, you ignore the stated conditions and set up your strawman yet again. When will you stop?

..

Again (and again and again) nobody but you brought up breaking encryption. That has absolutely no relevance to this discussion. We could be talking up an unencrypted foobah protocol - the firewall can help protect it by limiting the ip's that are allowed to access it.

As has been pointed out to you numerous times (and is plainly stated at obtained the keys by physical means: a stolen usb stick, a carelessly discarded backup tape. But no doubt this mole will continue to pop up, right Peter?

There's no doubt that a person intending such an attack would try to breach the servant. And if succesful, our fw is pointless. But as we keep saying over and over again, so what? When a woman zips her pocketbook shut, it's harder for a pickpocket to get at her wallet. The zipper is useless against someone who grabs the whole bag and runs. That doesn't mean she shouldn't bother with the zipper.

Again, that's not the only scenario the firewall protects against. I've covered that all here numerous times and have summarized it at pretend otherwise. Why is that?

There may be dictionary attacks because of misconfiguration or software flaws that bypbutt the intended configuration.

Complete and utter nonsense, a mistastement of the conditions presented. As has been said more than once.

-- Tony Lawrence