On Tue, Apr 22, 2008 at 1:55 AM, William Stein <[EMAIL PROTECTED]> wrote:

Excellent! And here I was about to post a WireShark dump showing SAGE
replying with a RST, ACK in response to the web browser request from
the Windows machine.

Now that I know this behavior is expected, I modified the README.txt
for the vmware-sage-deluxe-2.11 VM (which uses Xubuntu, and so already
has a specific startup sequence). Perhaps similar comments on the
standard VMWare image (especially since this is changed default
behavior)? (Or you could steal mine, leaving off the 'sudo' since that
may not be required)

>  >  Another consideration is that I think it's easier to have the server
>  >  listen to everything and use a firewall to selectively block access. I
>  >  think firewalls, in general, are easier to configure if one wants to
>  >  restrict address to a certain block of addresses, etc.

I actually agree with the default local only -- it's possible the user
only wants to use SAGE on that workstation, in which case opening
Twisted up to the internet isn't a good default behavior ... IMHO.

When I install Mathematica on my workstation, I don't expect it to
start a front-end server accessible to the internet.

Now, if we could get a port to OpenBSD (with privsep), I'd be less
concerned with the security of the system. ;-)

But I tend to be a little on the cautious side ...

>  +1 I'm ok with this.
>  What do people think.  It would be easy to make this the default.
>
>
>
>  William

Adam
-- 
"Invincibility is in oneself, vulnerability in the opponent." -- Sun Tzu

--~--~---------~--~----~------------~-------~--~----~
To post to this group, send email to sage-support@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/sage-support
URLs: http://www.sagemath.org
-~----------~----~----~----~------~----~------~--~---

Reply via email to