Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Do I need SELinux and firewall under VMWare with NAT
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Installing Gentoo
View previous topic :: View next topic  
Author Message
zhak
n00b
n00b


Joined: 04 May 2015
Posts: 21

PostPosted: Wed May 20, 2015 11:25 pm    Post subject: Do I need SELinux and firewall under VMWare with NAT Reply with quote

Hi guys,
I'm new to linux and networking, and try to configure kernel to use under vmware.
I'm not sure if I need to enable and configure firewall and SELinux if I use NAT networking. As I understand it, if IP is shared with the host (Win system), then there's no need in additional firewalling?
Thanks in advance for any feedback
Back to top
View user's profile Send private message
charles17
Advocate
Advocate


Joined: 02 Mar 2008
Posts: 2617

PostPosted: Thu May 21, 2015 4:41 am    Post subject: Reply with quote

Depends on if you trust the host's firewall.
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 43221
Location: 56N 3W

PostPosted: Thu May 21, 2015 6:34 pm    Post subject: Reply with quote

zhak,

Gentoo runs nothing by default, so you won't have any listening services until you start them.
This means you can add a firewall later if you wish.

Your firewall can work both ways. It can keep bad things out and stop them phoning home if they do get in.
It all depends on your requirements.
Either way, you can add it later.

SELinux is a whole world of pain on its own. Learn Gentoo first. Get to know what it offers.
Make up your mind what threats you want to defend against then pick a security system that can defend against those threats.
Keep in mind that there is a security/usability trade off to be considered.
If you are worried about network threats, don't use the network. Thats an extreme illustration.

Also, security is not absolute. If a government wants your secrets, they can kidnap you and beat them out of you.
The general idea is to make it difficult for casual attackers to get in, so they go and attack a less secure system.

There are lots of 'script kiddies' out there who will scan and attack large IP ranges on any internet connected system.
A firewall is a part of the defence but not all of it. Most important is good housekeeping.
Use strong passwords, or don't use passwords at all - use keys. Disable remote root logins.

You don't need either a firewall nor SELinux - yet.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Installing Gentoo All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum