"Workstation" Product defaults to wide-open firewall

Reindl Harald h.reindl at thelounge.net
Mon Dec 8 10:35:54 UTC 2014


Am 08.12.2014 um 11:26 schrieb Bastien Nocera:
>> Am 08.12.2014 um 10:51 schrieb Bastien Nocera:
>>>> WTF - "developer oriented firewall" on workstation?
>>>>
>>>> i doubt it is smart that by default my running Eclipse
>>>> accepts incoming connections from the WAN (that i am
>>>> paied for IT security prevents that but only here)
>>>>
>>>> tcp        0      0 0.0.0.0:20080           0.0.0.0:*
>>>> LISTEN      8669/java
>>>>
>>>> tcp        0      0 0.0.0.0:10137           0.0.0.0:*
>>>> LISTEN      8669/java
>>>>
>>>> tcp        0      0 0.0.0.0:9000            0.0.0.0:*
>>>> LISTEN      8669/java
>>>>
>>>> udp        0      0 0.0.0.0:4321            0.0.0.0:*
>>>>            8669/java
>>>
>>> That's an Eclipse bug, surely
>>
>> no - it is a OS bug if that ports ever becomes reachable unintentional
>> from the WAN and there is no but or if
>
> It's not an OS bug, it's an Eclipse bug.

the *whole purpose* of a firewall is to *protect* for whatever bugs

that running Eclipse instance is not part of the distribution and *no* 
Fedora is not only for packages outside the repos - it is a operating system

>> - fankly "That's an Eclipse bug,
>> surely" makes clear that you shoul don't be allowed to implement
>> security related configurations until you had a lesson in IT security
>
> And it's a great shame you're allowed to post until you had some etiquette
> lessons. Swings and roundabouts.

that was as polite as possible

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20141208/af2e7f7d/attachment.sig>


More information about the devel mailing list