On Sat, December 17, 2005 3:04 pm, Jeff Spaleta said: > There's a big difference between users delibrately deciding to poke > holes in their firewall, and having the operating system let any > application automatically poke holes without authentication to allow > the action. > > I'd be perfectly fine with a mechanism that applications could use > which first request permissions to open ports from the user and > notified the user as to which application was making the request, > before ports were dynamically opened. Well, the user is going to have to do something explicit to open up the firewall on the local machine. But the fact is, if the feature is enabled on the router, there is nothing Fedora can do to stop some malicious program from using it. So all you're doing is stopping trusted programs from using the feature and its still available to be used by untrusted apps. The feature really must be disabled on the router itself if you don't like it. Sean -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list
