Web lists-archives.com

Re: Why does Debian allow all incoming traffic by default




	Hi.

On Fri, Sep 21, 2018 at 09:59:40PM -0000, Dan Purgert wrote:
> Reco wrote:
> > 	Hi.
> >
> > On Fri, Sep 21, 2018 at 11:18:36PM +0200, deloptes wrote:
> >> Reco wrote:
> >> 
> >> > So, in this regard Debian is imperfect, but at least they give you right
> >> > tools to solve the problem (iptables suite), and do not force braindead
> >> > firewall policies by default (like RHEL does).
> >> 
> >> So this is why a wise guy buys an industrial pc for 200 US or wrt capable
> >> router for 20-30 US installs linux and makes a good firewall then puts it
> >> between ISP and his own network.
> >
> > That's one way of solving it as such measure only covers one's
> > conventional household needs. Barely - as there's this guest Wi-Fi and
> > that curious neighbour kid.
> 
> You don't firewall between your guest wifi and your trusted stuff?

Personally I went as far as putting household Wi-Fi into distinct VLAN,
and guest Wi-Fi into another one.
The question is - can you expect that D-Link/ASUS/TPLink box to do it by default?

Reco