On Friday 01 April 2005 18:44, Jim Carter wrote:
> On Fri, 1 Apr 2005, Krisztian PIFKO wrote:
> > > WhatÂs is the best way to enable iptables on a guest machine ?
> >
> > the same like everywhere: have iptables support in the kernel and
> > tune it with the userspace utilities.
>
> Or compile iptab
On Fri, 1 Apr 2005, Jim Carter spake:
> A maximally paranoid sysop will disable module loading, but this gives only
> a small benefit in security, because having done a root exploit the hacker
> can write nefarious code into /dev/kmem, as easily as he can load an
> inimical module or install a h
On Fri, 1 Apr 2005, Krisztian PIFKO wrote:
> > What´s is the best way to enable iptables on a guest machine ?
> the same like everywhere: have iptables support in the kernel and
> tune it with the userspace utilities.
Or compile iptables and all the helper routines as modules, and install
those m
> What´s is the best way to enable iptables on a guest machine ?
the same like everywhere: have iptables support in the kernel and
tune it with the userspace utilities.
> this is insecure ?
why would it be?
Krisztian PIFKO
---
This SF.net