4 ms·
Exactly. By using iptables on his host, as he describes, he is in effect firewalling it. But if you have 25 hosts you probably would want a firewall in front of
by sabat 16y ago
Exactly. By using iptables on his host, as he describes, he is in effect firewalling it. But if you have 25 hosts you probably would want a firewall in front of them.
- silvestrov 16y agoAnd if you have 250 hosts, you want to use a firewall between groups of them so the network is compartmentalized: so if one host is hacked it will not be able to take down all the other hosts. When a server is compromized then iptables on it won't help anymore, not even to detect that the server is compromized! Only a firewall running on a seperate piece of hardware helps. A system should never be designed with the assumption that it will never be hacked: that is like planning for a life where you never get sick.