3 ms·
And updates are ideally pulled from a local cache so that only one server in the DMZ needs to connect to Ubuntu's server. It's disappointing that in 2017 no Li
by dingaling 9y ago
And updates are ideally pulled from a local cache so that only one server in the DMZ needs to connect to Ubuntu's server.
It's disappointing that in 2017 no Linux vendor ships with a default-denial Internet firewall configuration but I suppose stories like this explain why.
- cyphar 9y ago> It's disappointing that in 2017 no Linux vendor ships with a default-denial Internet firewall configuration but I suppose stories like this explain why. I don't believe that's accurate. On openSUSE and SLE you have SuSEFirewall2 which has such a configuration (from memory) and I would be surprised if RHEL doesn't have such a configuration.