<div dir="ltr">On Thu, Sep 4, 2008 at 10:39 AM, Soren Hansen <span dir="ltr"><<a href="mailto:soren@ubuntu.com">soren@ubuntu.com</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">On Thu, Sep 04, 2008 at 09:58:40AM -0500, James Dinkel wrote:<br>
> I would say leave the ports open and leave the profile files. Leave<br>
> it up to the user to manage the firewall. If the package is removed,<br>
> it's not going to be listening on those ports any more anyway.<br>
<br>
</div>If "not listening" was sufficient, there'd be little point in having a<br>
firewall in the first place, wouldn't there?<br>
<font color="#888888"><br>
--<br>
Soren Hansen</font></blockquote><div><br>Well, 'not listening' _should_ be sufficient, however I prefer (and suggest) to use a firewall as an extra layer of protection. I must have been mistaken, I did not realize we were debating the merits of a firewall, only whether or not packages should automatically change firewall rules. Of course, if I trusted packages to manage opening and closing their own firewall rules, then I might as well trust them to listen or not on those ports, so in that case then yes there would be little point in having a firewall in the first place.<br>
<br>James<br></div></div><br><div class="gmail_quote">On Thu, Sep 4, 2008 at 10:02 AM, Cody A.W. Somerville <span dir="ltr"><<a href="mailto:cody-somerville@ubuntu.com">cody-somerville@ubuntu.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div dir="ltr"><div class="gmail_quote"><br><div>Why don't we just leave all ports open then? :P<br clear="all">
</div></div><br>-- <br>Cody A.W. Somerville<a href="mailto:cody.somerville@canonical.com" target="_blank"></a><br>
</div>
</blockquote></div><br><br>Well, for a long time that was the standard setup for Ubuntu. As I mentioned above though, I would suggest using a firewall with all ports blocked by default as an additional layer of protection.<br>
</div>