On Thu, Apr 22, 2004 at 07:24:02PM -0400, Havoc Pennington wrote:
For the firewall example specifically, there's no real reason firewalls on most systems should even _require_ configuration - we know what services are up, we should open those ports and close the other ports. On a desktop, that probably means everything is closed. If someone starts a service, the initscript or whatever can open the port. If you don't want a port open, stop the service.
In that case, why even _have_ a firewall? If nothing's listening on a port, it's not like anyone can connect to it.