4 ms·
I don't mean to defend Mongo here, but as a counter argument to the broad principle: Ubuntu doesn't ship with iptables blocking all incoming connections by defa
by orblivion 10y ago
I don't mean to defend Mongo here, but as a counter argument to the broad principle: Ubuntu doesn't ship with iptables blocking all incoming connections by default. Should it?
- user5994461 10y agoWell, if you're on a laptop, Linux may ship with no Wifi card support and thus no internet whatsoever. Guess that's even more secure!
- rodgerd 10y agoYes.
- peterwwillis 10y agoThe modern consensus is that it should ask you what class of network you're connected to and configure it accordingly, as more permissive rules are better for home networks and the opposite for public networks. But also, if Ubuntu didn't run network services by default, there would be no need to secure them with iptables. So defaults affect defaults.
- kalleboo 10y agoHonestly, in this day and age, it probably should. As well as whitelisting software that is allowed to make outgoing connections. At least for server installations. Network security is still a complete joke.