Linked by James Smyth on Tue 21st Oct 2003 17:51 UTC
Mandriva, Mandrake, Lycoris MandrakeSoft has recently released the latest version of their desktop operating system. Mandrake Linux 9.2 Download Edition is available on their web site across three ISO files for the Club members. The first disk is about 650megs and the following two are ~700.
Permalink for comment
To read all comments associated with this story, please click here.
re: Security [and LILO]
by Anonymous on Wed 22nd Oct 2003 00:00 UTC

Some important things are missing from this and most reviews. How about a security check at Gibson research Corps Shields Up port probe http://www.grc.com . Mandrake 9.1 at the highest setting leaves all ports visible, and two ports open. None are stealth. This is unacceptable. I would like to know if this non stealth firewall setting persists in 9.2.

Sometimes, stealthing ports does little for security. It does something to help reduce the bandwidth going out in case of a DOS by not sending rejection packets, but it doesn't completely hide your box from a portscanner. There is a reason why stealthing was not included in any RFC--it can increase the incoming bandwidth when clients try to connect to your box without receiving a reject notice. With a stealthed port, the client knows the box exists, it just wonders why the port does not exist and keeps sending requests for longer than needed. If you need to help prevent a DOS, then the rate limit module (-m limit) works well.

If one wishes to look through config files, the firewall script might be in
/etc/init.d/??? <-firewall.rc?
or
/usr/sbin/BastilleSomething
/usr/bin/BastilleSomething
.
Then, you can replace instances of REJECT with instances of DROP.