Quote Originally Posted by Stephen
For an easy firewall apt-get install guarddog nice graphic interface. For just plain text file Arno's firewall works great simple instructions and easy NAT if you want to share the internet.
I like shorewall. It's reasonably easy to set up, and very powerful.

John -
Regarding you question 1 - pretty much yes. It doesn't run any services, and usually includes the latest secruity updates. There was a stage when it didn't include the latest KDE update, but that was becasue there wasn't a debian package for it.

q 2 - it doesn't matter what filesystem is on the disk or weather it is mounthed or not, becasue if they had root they have access to the raw disk and could di anything e.g. repartition it.

q 3 - You don't need a firewall unless you are running services on your external interface and don't want them accable publicly.
You can see what services are running by doing a
nmap 192.168.1.1 - where that ip address is your ethernet address

q 4 - Running off a cd, I couldn't hack knoppix remotely afaik. I guess the biggest concern with running off the cd, is that if someone gains any access, they gain root access.

Hmm. I have an idea - How bout a cheatcode - rootpassword

So boot up knoppix with rootpassword=MyPassword and instead of the sudo, you have a root password, that is only used for that session, this way, if someone does get user level access, they don't have root access.

And John Doe, Please change the email address in your profile or your account will be deleted.