Re: [Security-Discuss] MDK Update And Shorewall

On Wednesday 22 September 2004 11:07 am, Matt Parker wrote:
> On Wednesday 22 Sep 2004 15:30, Vincent Danen wrote:
> > The advisory for shorewall explicitly stated that you might need to
> > restart your firewall.
> >
> > http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:080
>
> Yes, but I, and most sensible people would IMO, read that as meaning that
> Shorewall would need to be restarted after the upgrade. It does not say
> that the firewall will be down for the duration of the upgrade process
> leaving you open to attack in the meantime.
>
> Regards,
>
> Matt

I agree that it would have been better if it automatically closed the 
connection before removing the fw. Though most sensible network admins 
disconnect the network cable before doing any kind of firewall upgrade.

-- 

Steve Szmidt

"They that would give up essential liberty for temporary safety 
deserve neither liberty nor safety."
                                Benjamin Franklin

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________