From owner-freebsd-security Mon Aug 23 12:59:22 1999 Delivered-To: freebsd-security@freebsd.org Received: from apollo.backplane.com (apollo.backplane.com [209.157.86.2]) by hub.freebsd.org (Postfix) with ESMTP id 5CC8515731 for ; Mon, 23 Aug 1999 12:59:20 -0700 (PDT) (envelope-from dillon@apollo.backplane.com) Received: (from dillon@localhost) by apollo.backplane.com (8.9.3/8.9.1) id MAA10488; Mon, 23 Aug 1999 12:58:50 -0700 (PDT) (envelope-from dillon) Date: Mon, 23 Aug 1999 12:58:50 -0700 (PDT) From: Matthew Dillon Message-Id: <199908231958.MAA10488@apollo.backplane.com> To: Bill Fumerola Cc: Nate Williams , freebsd-security@FreeBSD.ORG Subject: Re: IPFW/DNS rules References: Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org :On Mon, 23 Aug 1999, Matthew Dillon wrote: : :> You can create allow/deny lists in named.conf, configuration options are :> well documented in the bind distribution, in your source tree: : :He wants to secure the server with firewall rules, not the service, I :believe. : :-- :- bill fumerola - billf@chc-chimes.com - BF1560 - computer horizons corp - :- ph:(800) 252-2421 - bfumerol@computerhorizons.com - billf@FreeBSD.org - Simply do not run any other services on the server except, say, sshd. That's what we did at BEST. -Matt Matthew Dillon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message