Securing linux

Well, personally i can't make much sense of its rules.

That can be true, i hear that a lot. But i prefer something that enforces that anyway.

Indeed easier, but not for laptops, and in the end it's like Alphalutra1 says, it's iptables anyway

 

Well, this can be tested very easily with any portscan website. But I'm behind a router with SPI firewall, anyhow, so I don't really care ...

 

... and therefore write-protected if you are logged on as user (which is what you always do in Linux). So no need to bother about.