Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 12 Sep 1999 09:34:08 -0600
From:      Nate Williams <nate@mt.sri.com>
To:        Dag-Erling Smorgrav <des@flood.ping.uio.no>
Cc:        Ben Smithurst <ben@scientia.demon.co.uk>, "Jeremy L. Ramirez" <jramirez@digicomsystems.net>, dev-null@ns1.digicomsystems.net, freebsd-questions@FreeBSD.ORG, freebsd-security@FreeBSD.ORG
Subject:   Re: How to prevent motd including os info
Message-ID:  <199909121534.JAA18584@mt.sri.com>
In-Reply-To: <xzpn1usmka2.fsf@flood.ping.uio.no>
References:  <4.2.0.58.19990911151659.00aa8d60@ns1.digicomsystems.net> <19990912012524.B41509@lithium.scientia.demon.co.uk> <xzpn1usmka2.fsf@flood.ping.uio.no>

next in thread | previous in thread | raw e-mail | index | archive | help
> > An even better way is to disable telnet completely, and use ssh like you
> > should. Note that people can still use nmap or something to guess at
> > your OS.
> 
> # ipfw add 1 deny tcp from any to any in tcpflags syn,fin
> 
> No they can't.

Except if you do this the box is unable to provide *ANY* external
sevices, including email and/or DNS service. :(



Nate


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199909121534.JAA18584>