4FDVSJOH /FUXPSL 4FSWJDFT In general, it is a good idea to disable services that you do not use. Kali makes it easy to do this since most network services are disabled by default. As long as services remain disabled, they do not pose any security threat. However, you must be careful when you enable them because: • there is no firewall by default, so if they listen on all network interfaces, they are effectively publicly available. • some services have no authentication credentials and let you set them on first use; others have default (and thus widely known) credentials preset. Make sure to (re)set any password to something that only you know. • many services run as root with full administrator privileges, so the consequences of unauthorized access or a security breach are therefore usually severe. %FGBVMU $SFEFOUJBMT
8F XPOŮ‹U MJTU IFSF BMM UPPMT UIBU DPNF XJUI EFGBVMU DSFEFOUJBMT JOTUFBE ZPV TIPVME DIFDL UIF README.Debian GJMF PG UIF SFTQFDUJWF QBDLBHFT BT XFMM BT EPDT LBMJ PSH1 BOE UPPMT LBMJ PSH2 UP TFF JG UIF TFSWJDF OFFET TPNF TQFDJBM DBSF UP CF TFDVSFE *G ZPV SVO JO MJWF NPEF UIF QBTTXPSE PG UIF SPPU BDDPVOU JT ŮŽUPPS Ů? 5IVT ZPV TIPVME OPU FOBCMF 44) CFGPSF DIBOHJOH UIF QBTTXPSE PG UIF SPPU BDDPVOU PS CFGPSF IBWJOH UXFBLFE JUT DPOGJHVSBUJPO UP EJTBMMPX QBTTXPSE CBTFE MPHJOT "MTP OPUF UIBU UIF #F&' QSPKFDU GSPN UIF BMSFBEZ JOTUBMMFE QBDLBHF CFFG YTT JT BMTP LOPXO UP IBWF EFGBVMU DSFEFOUJBMT VTFS ŮŽCFFࣺŮ? QBTTXPSE ŮŽCFFࣺŮ? IBSEDPEFE JO JUT EF GBVMU DPOGJHVSBUJPO GJMF
'JSFXBMM PS 1BDLFU 'JMUFSJOH A firewall is a piece of computer equipment with hardware, software, or both that parses the incoming or outgoing network packets (coming to or leaving from a local network) and only lets through those matching certain predefined conditions. A filtering network gateway is a type of firewall that protects an entire network. It is usually installed on a dedicated machine configured as a gateway for the network so that it can parse all packets that pass in and out of the network. Alternatively, a local firewall is a software service that runs on one particular machine in order to filter or limit access to some services on that machine, or possibly to prevent outgoing connections by rogue software that a user could, willingly or not, have installed. 1 2
https://docs.kali.org https://tools.kali.org
$IBQUFS ‍ ن‏4FDVSJOH BOE .POJUPSJOH ,BMJ -JOVY