Is the basic setup enough?

[Zordani]

I'm a little paranoid when it comes to network security. I always heard that Linux would be extremely well protected against attacks. My question is, how well protected is the basic setup? Do I need to do more than just install the distro? Thanks a lot.

[Zordani]

What is this, some sort of spam? What's that got to do with what I asked? I'm sorry, but I don't find it very helpfull when people don't answer the questions and rather start copy pasting from the internet. I think I'll flag your post to an admin...

[Jimbob]

What is this, some sort of spam? What's that got to do with what I asked? I'm sorry, but I don't find it very helpfull when people don't answer the questions and rather start copy pasting from the internet. I think I'll flag your post to an admin...

Yes, it was spam and has been deleted.

[Zordani]

Thank you very much, Jimbob, and sorry about that. Can you please help me with my current question? As I've already said, I'm a little paranoid when it comes to network security, do you think the basic setup is enough?

[tongyun]

I'm a little paranoid when it comes to network security. I always heard that Linux would be extremely well protected against attacks. My question is, how well protected is the basic setup? Do I need to do more than just install the distro? Thanks a lot.

Maybe I can help, but I need to know a little bit more otherwise I'm just guessing. Are you trying to protect a business network? Home network? If it's a home network, then the basic set up should work. For a work network, you'll probably want something robust. Which version of Linux are you using?

[Linux]

You could use basic firewall setup in your local machine as well, to do basic packet-filtering. To create a basic firewall you'll need to ensure that your kernel has support compiled in for Network Packet Filtering. In addition, the following components will need to be compiled into the kernel or compiled as modules: ip_tables, ip_conntrack, iptable_filter, and ipt_state. These provide system functions that will be used by this firewall configuration.

You'll get more details from http://wiki.linuxquestions.org/wiki/...xzz0JE9xDwTl&C

[Smash]

The only main points I'm aware of is in regards to an Ubuntu installation.

1) There are no ports set to listen by default.

2) IPTables only accepts connections initiated by the host machine.

What other things should be considered on a general level? I know AppArmour is aprt of the distro now, but for a Desktop environment this is a little too restrictive and only really practical for machine which perform the same tasks over and over again.