open ports

[dalila at despiertapr.com]

Gabriel M Dragffy wrote ..
> On Sun, 2006-09-03 at 16:54 +0200, Alexander Skwar wrote:
> > By doing so, your machine is *VERY* visible. There's no such
> > thing as an invisible machine on the Internet.
> 
> This goes against pretty much everything that I've ever read or heard
> about computer security, which is fine. I am very eager to know - why is
> this so?
> 
> > Dropping packages is close to never a good suggestion. Rejecting
> > packages might be worthwhile, though. But for this, a packet
> > filter isn't needed.
> > 
> 
> Should I open some ports or start rejecting packets in the future?
> 
> > Hm - the same can be gained by not opening any ports in the
> > first place. And the less software used, the better.
> 
> 
> The OP has already opened ssh and I assume (incorrectly?) that the OP
> would like for it to remain open.
>


FYI  ....i did want it open 22 ssh, i was not aware of the filtered status so i got a little alarmed as 
other machines i have do not reveal that