RE: [Security Firewall] WELL DONE!!!!

Pascal,

JMHO, but if you're "keeping it safe and simple", why would you add packages
like clamav, spamassassin and amavisd?  I don't believe things like this
belong on a firewall, but again, it's JMHO that anything that gets added
leaves room for a vulnerability.

Why would you add these to a firewall anyway?  What purpose would they serve
(assuming this isn't a mail server or workstation or such)?

And yes Aledr, good job!

Jim

-----Original Message-----
From: security-firewall-owner-4qZELD6FgxheH41UXmfQsti2O/[email protected]
[mailto:security-firewall-owner-4qZELD6FgxheH41UXmfQsti2O/[email protected]] On Behalf Of Pascal
ROBINET
Sent: Tuesday, August 16, 2005 4:32 PM
To: security-firewall-4qZELD6FgxheH41UXmfQsti2O/[email protected]
Cc: firewall-ifgaQWwEsOJWk0Htik3J/[email protected]
Subject: Re: [Security Firewall] WELL DONE!!!!

Well, congrats aledr ! :)

My opinion on your suggested addition is that clamav, spamassassin and
amavisd are a must have.
I add them to most firewall installs since these features are now requested
by customers.
But then I would not put phpMyAdmin in it.
We are in a firewall after all and such tools doesn't belong to it imho.
Remember the security moto "Keep it simple, keep it safe" :)

I have a question : Did you consider doing the same thing for the 10.2
distro so we could start from a more up to date base for this home brew
firewall ?
And then may be time to switch to the other list for this firewall since I
fear this is no more a mandriva MNF but already a fork...

Nice job again :)



Le mardi 16 août 2005 à 14:50 -0300, aledr a écrit :

> 4 - Now I'm thinking to add some packages like these to the
> Installation, to get a FULL server (or almost it) on my build...
>
> Should add?
> clamav
> phpMyAdmin
> MySQL
> SpamAssassin
> Amavisd
> And others...
>
> 5 - Finally I'm trying to change the web interface to pure php
> language to get better results. If it works better I will release the
> files and then someone could make a package (I don't know how to make
> it... sorry).
>
>
> Now, I'm making some tests to know if it is stable (at least) and
>
> **WOULD LIKE TO THANKS MANDRIVA FOR MOTIVATE ME TO LEARN HOW TO BUILD
> MY PERSONAL VERSION AND MAKE IT WORKS!! YOU ARE REALLY GREAT! LOL**
>
> FLORIN, WAIT MY NEXT MAIL TO SEE WHAT WE CAN DO ON THIS NEW FIREWALL..
>
> WELL DONE!!!!
--
Pascal ROBINET <[email protected]>

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________