Igor Stoppa <igor.stoppa at nokia.com> writes: >> OK, Igor. Fair enough. But, now I got you. 770 has no firewall. I'm not >> paranoid, but it is must_have for long on the line. >> 770 has stateless iptables. I use another unix branch for everyday surf, >> mailing, doing whatever. Laptop and desktop have statefull firewall for >> filtering. It is transparent, till I take a look into the logs. I know >> that "if you don't have port open, noone can harm you". Wrong. You have >> ports open. You surf, you mail. Anyone could be man in the middle and take >> your shiny new gadget. WEP is easy to walk around, just see wifitap. I >> have 770 for a month and tried to get respond on this subject. Implemented >> iptables is not the one from netfilter manual. [...] > I don't think I have enough knowledge on the subject to give a proper > answer so i won't. Hopefully you'll get an answer from somebody from the > Connectivity team. Netfilter is used to track idle connections and that's why iptables is installed. But to save some flash space, we have stripped all unused modules from the distribution. That's why iptables doesn't work as expected. Personally I don't see any benefit of running firewall in stock 770, it doesn't create any extra security. -- Kalle Valo
