[Freedombox-discuss] What is new in FreedomBox version 0.2 compared to 0.1?

[Nick Daly]

On Thu, Mar 20, 2014 at 11:11 AM, Petter Reinholdtsen <pere at hungry.com> wrote:
> What about the ssh server?  Was it present in 0.1?

Yup, that's how we administered the box remotely.

> And the latest version contain avahi daemon, ldap server and lxc
> support.  There is also a DNS and DHCP server handed out on eth1.

All new!

> These are the open ports:
>
> root at freedombox:~# netstat -a|grep 'LISTEN '
> tcp        0      0 *:ldap                  *:*                     LISTEN
> tcp        0      0 *:xmpp-client           *:*                     LISTEN
> tcp        0      0 *:4431                  *:*                     LISTEN
> tcp        0      0 *:epmd                  *:*                     LISTEN
> tcp        0      0 *:xmpp-server           *:*                     LISTEN
> tcp        0      0 *:domain                *:*                     LISTEN
> tcp        0      0 *:ssh                   *:*                     LISTEN
> tcp        0      0 localhost:52854         *:*                     LISTEN
> tcp        0      0 localhost:9050          *:*                     LISTEN
> tcp        0      0 *:57756                 *:*                     LISTEN
> tcp        0      0 *:5280                  *:*                     LISTEN
> tcp        0      0 localhost:8000          *:*                     LISTEN
> tcp        0      0 freedombox:7777         *:*                     LISTEN
> tcp6       0      0 [::]:ldap               [::]:*                  LISTEN
> tcp6       0      0 [::]:http               [::]:*                  LISTEN
> tcp6       0      0 [::]:domain             [::]:*                  LISTEN
> tcp6       0      0 [::]:ssh                [::]:*                  LISTEN
> tcp6       0      0 localhost:8118          [::]:*                  LISTEN
> tcp6       0      0 [::]:https              [::]:*                  LISTEN

That's nuts!  Can we map each of these to the owning services?  I want
to start wrangling that information while it's still manageable.
That'll help make decent automated firewall management *possible.*