<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Because I had outgoing rules defined, I
      actually found out I had an infected Windows 98 box (yeah - long
      time ago).  Said Win98 box was running a leading AV program and
      was infected by one of the most popular viruses.  This event
      boosted my faith in outbound monitoring and destroyed my faith in
      AV products.<br>
      <pre class="moz-signature" cols="72">Regards,

George Toft
</pre>
      On 8/27/2014 9:39 AM, Lisa Kachold wrote:<br>
    </div>
    <blockquote
cite="mid:CAEYqmRt5cESf5Um7tCWUVgqSk_zgJuNwFeXFynA=M1R16ckkcA@mail.gmail.com"
      type="cite">
      <div dir="ltr">The most important thing you can do is FIREWALL
        outbound traffic as well as inbound.
        <div><br>
        </div>
        <div>It's a great deal of work, but clearly nepharious traffic
          will be dropped.</div>
      </div>
      <div class="gmail_extra">
        <br>
        <br>
        <div class="gmail_quote">On Wed, Aug 27, 2014 at 7:32 AM, Bob
          Elzer <span dir="ltr"><<a moz-do-not-send="true"
              href="mailto:bob.elzer@gmail.com" target="_blank">bob.elzer@gmail.com</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <p dir="ltr">My question would be, how many times a day does
              someone try to break into your system ?</p>
            <p dir="ltr">If you don't know the answer then maybe you
              should be running a firewall.</p>
            <p dir="ltr">It really depends on whether your network is
              secure or not, usually what secures your network is a
              firewall. If that's the one on your router then that
              should be enough.</p>
            <p dir="ltr">Looking in your log files for strange IP's and
              failed password attempts will let you know if people are
              trying to get in, if you're running a web server look in
              the error logs for attempts to access non existing files,
              usually a bunch from the same IP.</p>
            <p dir="ltr">Windows may have more vulnerabilities, but they
              will still try to break into Linux systems.</p>
            <p dir="ltr">Search and read about fail2ban, that's one tool
              to use when you need to have a service open to the
              internet.</p>
            <p dir="ltr">Hope this helps<br>
            </p>
            <div class="gmail_quote">On Aug 26, 2014 8:15 PM, "Michael
              Havens" <<a moz-do-not-send="true"
                href="mailto:bmike1@gmail.com" target="_blank">bmike1@gmail.com</a>>
              wrote:<br type="attribution">
              <blockquote class="gmail_quote" style="margin:0 0 0
                .8ex;border-left:1px #ccc solid;padding-left:1ex">
                <div dir="ltr">
                  <div>I hear people say, "Even Linux users need a
                    firewall."<br>
                  </div>
                  My question is..... why? I've runlinux since '98 w/o a
                  firewall (aside from the one sent with my
                  modem/router). Isn't that good enough?<br clear="all">
                  <div>
                    <div>
                      <div>:-)~MIKE~(-:</div>
                    </div>
                  </div>
                </div>
                <br>
                ---------------------------------------------------<br>
                PLUG-discuss mailing list - <a moz-do-not-send="true"
                  href="mailto:PLUG-discuss@lists.phxlinux.org"
                  target="_blank">PLUG-discuss@lists.phxlinux.org</a><br>
                To subscribe, unsubscribe, or to change your mail
                settings:<br>
                <a moz-do-not-send="true"
                  href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss"
                  target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br>
              </blockquote>
            </div>
            <br>
            ---------------------------------------------------<br>
            PLUG-discuss mailing list - <a moz-do-not-send="true"
              href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a><br>
            To subscribe, unsubscribe, or to change your mail settings:<br>
            <a moz-do-not-send="true"
              href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss"
              target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">---------------------------------------------------
PLUG-discuss mailing list - <a class="moz-txt-link-abbreviated" href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a>
To subscribe, unsubscribe, or to change your mail settings:
<a class="moz-txt-link-freetext" href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a></pre>
    </blockquote>
    <br>
  </body>
</html>