Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #257600

Re: is nft running? how do I get info?

From songbird <songbird@anthive.com>
Newsgroups linux.debian.user
Subject Re: is nft running? how do I get info?
Date 2023-04-25 18:00 +0200
Message-ID <Gotfb-4s1T-5@gated-at.bofh.it> (permalink)
References (1 earlier) <Go5Zf-4dim-1@gated-at.bofh.it> <Gon05-4oez-3@gated-at.bofh.it> <GoqqZ-4qfB-3@gated-at.bofh.it> <GoqqZ-4qfB-1@gated-at.bofh.it> <Gotfb-4s1T-7@gated-at.bofh.it>
Organization the little wild kingdom

Show all headers | View raw


Bonno Bloksma wrote:
...
> Why, now that we are at bookworm, is the nftables service not enabled by default? With a default ruleset that pretty much leaves it all open but is a starting point.
> If we do not want that, then at least the default config should contain a warning about first enabling the service or scripting something to have it working (after a reboot).
>
> I think this is the first time I have come across something in Debian that after being installed by default does nothing, even when provided with a valid config file at the proper location.
> I consider that a bug.
>
> Here is something similar.
> Consider opening your door with a key. Every time you open the door with the key it opens. All is well, you bought the cylinder and key for the lock at a very good locksmith. You told him you had been installing cylinders In doors for years and you were able to insert this cylinder in the door.
> Until sometime later you find out the door never locks, it is always open, that is why you could always enter.
> It turns out you first need to enable the cylinder before it did something useful with the key provided.
> That was something completely new, you never heard of it before, neither do I though. ;-)
>
> Bonno Bloksma

  not everyone wants a firewall installed on their system
(non-desktop users or embedded systems being two examples
that easily come to mind).

  i think for most desktop installs there should be a minimal
firewall installed but then you get into the issue of which one?

  personally i run ufw.


  songbird

Back to linux.debian.user | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Re: is nft running? how do I get info? Anssi Saari <as@sci.fi> - 2023-04-24 17:10 +0200
  Re: is nft running? how do I get info? Stanislav Vlasov <stanislav.v.v@gmail.com> - 2023-04-25 11:20 +0200
    Re: is nft running? how do I get info? Greg Wooledge <greg@wooledge.org> - 2023-04-25 13:20 +0200
  Re: is nft running? how do I get info? Christoph Brinkhaus <c.brinkhaus@t-online.de> - 2023-04-25 11:20 +0200
  Re: is nft running? how do I get info? Anssi Saari <as@sci.fi> - 2023-04-25 12:10 +0200
  Re: is nft running? how do I get info? David Wright <deblis@lionunicorn.co.uk> - 2023-04-25 15:00 +0200
    Re: is nft running? how do I get info? songbird <songbird@anthive.com> - 2023-04-25 18:00 +0200
    Re: is nft running? how do I get info? David Wright <deblis@lionunicorn.co.uk> - 2023-04-25 20:20 +0200

csiph-web