Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 3 Apr 1997 23:37:38 +0200
From:      j@uriah.heep.sax.de (J Wunsch)
To:        hackers@freebsd.org
Subject:   Re: securelevel & IP filter
Message-ID:  <19970403233738.KY42145@uriah.heep.sax.de>
In-Reply-To: <199704031317.FAA21733@freefall.freebsd.org>; from Darren Reed on Apr 3, 1997 23:12:04 %2B1000
References:  <199704031317.FAA21733@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
As Darren Reed wrote:

> It has been suggested that IP Filter disallow changes to filter rules if
> securelevel is set to some level...(I think 3 was the suggestion).  

I personally think securelevel 2 would be sufficient.  It blocks
already enough things, like running an Xserver :).

But the most important is that you make this consistent throughout all
BSDs, including BSD/OS, if possible.

-- 
cheers, J"org

joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19970403233738.KY42145>