[justincormack]

The idea is that it can be turned off from the machine itself, so eg if you get hacked via a website or email, your firewall might get disabled, while another box would also need to be hacked. (Of course things like UPNP give the machines control over the router so making this moot, which is why I dodnt run them).

[kalleboo]

> Of course things like UPNP give the machines control over the router so making this moot

Yep this was exactly my point