The default firewall is pretty good, but these things are relative. There is no substitute for working out what you want to do and ruling out everything else.
# iptables -L
should print out the rules (and tell you if it is on or not).
How much you do depends on how secure you want to be (i.e. how much inconvenience you want to put up with.) For standard security, there are gui tools like firestarter available through the repos. Old hands prefer to edit the iptables scripts directly.
Last edited by Simon Bridge; 09-08-2007 at 08:35 AM.
|