Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 30 May 2001 11:33:35 +0300
From:      Giorgos Keramidas <keramidi@otenet.gr>
To:        David Banning <david@banning.com>
Cc:        Lim Seng Chor <Lim.Seng.Chor@sit.edu.my>, questions@FreeBSD.ORG
Subject:   Re: telnet security question
Message-ID:  <20010530113335.D3735@hades.hell.gr>
In-Reply-To: <20010527170228.B4092@yahoo.com>; from sky_tracker@yahoo.com on Sun, May 27, 2001 at 05:02:28PM -0500
References:  <200105270809.f4R89ZB01609@d.tracker> <3B11271E.13364.8EF1A94@localhost> <20010527170228.B4092@yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, May 27, 2001 at 05:02:28PM -0500, David Banning wrote:
| I notice you didn't mention a firewall. What would be your reasons 
| for the points you suggested versus a firewall, which was someone 
| else's suggestion?

Plus, you can always use *both* tcpwrappers and some kind of firewall.
I remember a setup we did with a friend of mine a few months ago, which looked
more or less like:

	.. internet => [ router ] => [ freebsd ]

with all of the followign enabled:

.	access lists in [ router ]
.	ipfw firewall in freebsd
.	tcpwrappers in freebsd

after all, every extra obstacle you can add to the way of those who want to
break-in is always that.. an extra obstacle.

but lets not be too paranoid, shall we?

--giorgos


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010530113335.D3735>