Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Aug 1998 07:45:16 -0400
From:      "Gary Palmer" <gpalmer@FreeBSD.ORG>
To:        Seppo Kallio <kallio@silmu.st.jyu.fi>
Cc:        security@FreeBSD.ORG
Subject:   Re: post breakin log (Saint/Nessus/?) 
Message-ID:  <10629.904218316@gjp.erols.com>
In-Reply-To: Your message of "Thu, 27 Aug 1998 13:04:01 %2B0300." <19980827130401.B546@beeblebrox.cc.jyu.fi> 

next in thread | previous in thread | raw e-mail | index | archive | help
Seppo Kallio wrote in message ID
<19980827130401.B546@beeblebrox.cc.jyu.fi>:
> We are managing 10-20 Sun/Linux/FreeBSD nodes at cc, 
> AND a lot of University staff have Linux/Sun workstations.

Put the staff machines behind a strong firewall/bastion host so that they 
can't run `services'. Without services, the machines are inpenetrable (unless 
your firewall box gets hacked). Then you don't have to care what they run, 
unless you're worried about them hacking each other :)

Gary
--
Gary Palmer                                          FreeBSD Core Team Member
FreeBSD: Turning PC's into workstations. See http://www.FreeBSD.ORG/ for info



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?10629.904218316>