Security Issues

[ericmarceau]

That list of rules tells me that there are, essentially, no restrictions.

If your system is not default DENY for in or out, then, in my view, there are big holes for Malware to act unimpeded.

Allowing outgoing anywhere will permit any malware already resident "inside" to forward the harvested "goods" to a pre-established destination.

Outgoing should be

• either initiated by only you (an ALLOW rule),       or

• related to your already established connections (another ALLOW rule, which may already exist, but you need to verify that it does exist).

You might also wish to review a few discussions on the topic of security. Allow me to offer the following:

• Reliability or “who” report

• Wondering if detected someone not recognized on your LAN?

• Privacy and security setting menu

• Looking for opinion on how "secure" my Desktop is

You might also want to look at some system configuration files, like

• /etc/security/access.conf.Oasis
• /etc/ssh/ssh_config.Oasis
• /etc/ssh/ssh_config.d/ssh_client.conf.Oasis
• /etc/ssh/sshd_config.d/sshd_server.conf.Oasis
• /etc/pam.d/login.Oasis