Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 Feb 2001 21:02:35 +0100
From:      Christoph Sold <so@server.i-clue.de>
To:        Phelip Cray <phelipc@yahoo.com>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: lock file-system
Message-ID:  <3A917BDB.E085A489@i-clue.de>
References:  <20010219191051.91807.qmail@web12407.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Raising kern.securelevel along with chflags schg on critical files will
help, too.

HTH
-Christoph Sold

Phelip Cray schrieb:
> 
> Hello everyone,
> 
> I am installing a server that will do mail ( exim /
> gpop3d ) and webmail - apache + a few scripts.
> 
> this server will stay behind a firewall ( watchguard )
> and off course will have its own IPF activated.
> 
> My questions is simple:
> 
> 1 - I intend to block (IPF) everything except 25,110,
> 80 and ssh. Is there anything else I should do?
> 
> 2 - I am considering using chflags on the file system
> to make it read-only - if you were in my shoes, what
> parts of the system would you turn ead only?
> 
> 3 - Are there other secrity measures that can be taken
> besides the ones above?


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A917BDB.E085A489>