>>>>> "Grzegorz" == Grzegorz B Prokopski <[EMAIL PROTECTED]> writes:
Grzegorz> On Tue, 2005-07-06 at 01:03 +0200, Javier Grzegorz> Fernández-Sanguino Peña wrote: >> [ Installation improvements ] - Firewall configuration during >> installation (ala Fedora Core or SuSE): module for >> d-i. Currently, the system is exposed just during installation >> on some systems (empty root password?) Grzegorz> Right. Especially for workstation installation Grzegorz> something like below would allow to connect from Grzegorz> workstation to anywhere else, but not to any servers ran Grzegorz> on workstation. I would suggest shorewall with a very simple default configuration. IMHO, shorewall seems to be easy to use and configure, and can be used in very simple single computer setups to very complicated networks. The difficulty with supporting firewalls is that people will expect "if I install package X, then it should automatically adjust the firewall to allow it to work". I really do *not* want to go down this path. The firewall is up to the administrator to decide on, not the package maintainers. -- Brian May <[EMAIL PROTECTED]>