3 ms·

> That or they do not understand how wide open the Ubuntu defaults are. Fair enough. I'd love to learn. What threats does the firewall even defend against? >

> That or they do not understand how wide open the Ubuntu defaults are. Fair enough. I'd love to learn. What threats does the firewall even defend against? > The default on Ubuntu should be like all other linux distros where where all unsolicited incoming connections are blocked. I don't understand why I should care. Evil hackers can send all they want, but the only things listening on my end should be those that I explicitly installed or enabled. The firewall seems redundant as the set of running applications and my set of firewall exceptions should match exactly.

spydum 10y ago
Firewall is a component to a layered defense. One of the points about Ubuntu was starting the service immediately after install, was it not?
JupiterMoon 10y ago
> Fair enough. I'd love to learn. What threats does the firewall even defend against? Many Debian/Ubuntu packages have a dependency on postfix. Even some trivial ones. Installing these packages installs postfix (which at least asks you to configure it during install). Having a firewall active means that your grandmother won't have services you didn't realise she had running listening.