1 |
> From: Donny Davies [mailto:woodchip@g.o] |
2 |
|
3 |
> Nope. Sorry. Im not in agreement in this at all. Of course, |
4 |
> its open to debate, |
5 |
> Im not saying I know everything, nor Im 100% right. Go ahead, |
6 |
> debate away. |
7 |
> But I dont want any part of it, Ill tell you that! |
8 |
> |
9 |
> If you dont understand the ramnifications of packet |
10 |
> filetering, NAT, etc then |
11 |
> you have *no* business running this software. We are not |
12 |
> Microsoft or Wingate, |
13 |
> opening yuor machine to a wider world. |
14 |
|
15 |
<snip rest of post> |
16 |
|
17 |
I have to agree in principle here, FWIW. The answer to this problem of |
18 |
making the functionality available to everyone is to make sure things are |
19 |
clearly and thoroughly documented. I think we are best served by following |
20 |
the OpenBSD example of a secure default install and then let the users |
21 |
change configuration to suit. |
22 |
|
23 |
Cheers, |
24 |
|
25 |
Sean |