[SOLVED] Arch linux net install: is a firewall necessary?

yanfaun · 01-25-2010, 11:31 PM

I did a net install of Arch via a net install flashdrive. Should I have been behind a firewall during the installation process? If should have been a firewall, then the help guides are grievously negligent in perhaps litigable sense of the term for not stating this fact.

Woodypecker · 01-26-2010, 12:04 AM

In general, it rarely ever hurts using a NAT router unless you want to do pxe-boot(which
you should only do on a trusted network, anyway).
But, unlike a windows install, there are not vulnerable services open to the internet
until you configure some.

~sHyLoCk~ · 01-26-2010, 12:24 AM

slightlystoopid · 01-26-2010, 12:37 AM

This linuxquestions court does hereby find the defendants, Arch linux wiki contributors, not guilty of grievous help guide negligence. Court is adjourned.

yanfaun · 01-26-2010, 09:12 PM

Quote:

Originally Posted by Woodypecker

In general, it rarely ever hurts using a NAT router unless you want to do pxe-boot(which
you should only do on a trusted network, anyway).
But, unlike a windows install, there are not vulnerable services open to the internet
until you configure some.

Thanks for the Detail. I did the base install, then I installd the x-server. I only began to use sudo just before the desktop install. Would it be accurate to say that my actions did not constitute some sort of security breech?
If possible, I prefer a yes or no answer. This is open to Shylock too.

Woodypecker · 01-27-2010, 01:22 AM

Only you know your actions good enough - a standard install followed by security updates, with download from only trusted repos with hash-checks, without opening unconfigured services, or services with "default passwords", does not introduce breeches.

yanfaun · 01-27-2010, 06:34 PM

Quote:

Originally Posted by Woodypecker

Only you know your actions good enough - a standard install followed by security updates, with download from only trusted repos with hash-checks, without opening unconfigured services, or services with "default passwords", does not introduce breeches.

Cool! all I did was follow instructions for the standard install of the base system, x-server & desktop. During my web install of Arch, which was not done behind a firewall, my web usage was confined to the pacman repos, so I am concluding that all is well, unless someone chimes in with some profound warning.