A firewall is nothing more than a locked door to your house. It CAN be broken through given time.<br><br><div class="gmail_quote">On Tue, Jan 22, 2013 at 8:28 PM, Ron Frazier (ALE) <span dir="ltr"><<a href="mailto:atllinuxenthinfo@techstarship.com" target="_blank">atllinuxenthinfo@techstarship.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">The discussion on vpn's and security at Emory prompted me to ask this. This was prompted by some statements in another thread that a PC could be in danger if attached to unfiltered lan ports on Emory's network.<br>
<br>
Assume you have a PC connected directly to the internet. It doesn't matter if it's linux, windows, mac, or android. I'm speaking in conceptual terms. Assume the PC is not running any server type programs, so it is not listening on any ports. Assume no one is browsing to potentially malicious web pages, or even any web pages. The PC is just sitting there idling. Assume the PC has firewall software running. The firewall's only job is to drop all packets that are not part of a response to an inquiry that this PC has issued. I don't want to debate, at this point, the pros and cons of dropping all packets or operating in stealth mode.<br>
<br>
My question is, conceptually speaking, how can this PC POSSIBLY be vulnerable to any remote attack? How could anything phase it?<br>
<br>
Then, how does the answer change depending on whether it is linux, windows, mac, or android.<br>
<br>
Finally, if it were behind a hardware firewall, or router, how could any unwanted packets get on the lan?<br>
<br>
Sincerely,<br>
<br>
Ron<br>
<br>
<br>
--<br>
<br>
Sent from my Android Acer A500 tablet with bluetooth keyboard and K-9 Mail.<br>
Please excuse my potential brevity.<br>
<br>
(To whom it may concern. My email address has changed. Replying to former<br>
messages prior to 03/31/12 with my personal address will go to the wrong<br>
address. Please send all personal correspondence to the new address.)<br>
<br>
(PS - If you email me and don't get a quick response, you might want to<br>
call on the phone. I get about 300 emails per day from alternate energy<br>
mailing lists and such. I don't always see new email messages very quickly.)<br>
<br>
Ron Frazier<br>
<a href="tel:770-205-9422" value="+17702059422">770-205-9422</a> (O) Leave a message.<br>
linuxdude AT <a href="http://techstarship.com" target="_blank">techstarship.com</a><br>
<br>
<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III<br><i><i><i><i><br></i></i></i></i>Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.<br>
- Speech 11/23/1900 Mark Twain<br><i><i><i><i><br><a href="http://electjimkinney.org" target="_blank">http://electjimkinney.org</a><br><a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br>
</i></i></i></i>