From owner-freebsd-stable@FreeBSD.ORG  Tue Jul  8 13:49:59 2003
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id BBF6E37B401
	for <freebsd-stable@freebsd.org>;
	Tue,  8 Jul 2003 13:49:59 -0700 (PDT)
Received: from dsl-mail.kamp.net (mail.kamp-dsl.de [195.62.99.42])
	by mx1.FreeBSD.org (Postfix) with SMTP id 1946143F3F
	for <freebsd-stable@freebsd.org>;
	Tue,  8 Jul 2003 13:49:58 -0700 (PDT)
	(envelope-from me@farid-hajji.de)
Received: (qmail 8459 invoked by uid 505); 8 Jul 2003 20:50:03 -0000
Received: from me@farid-hajji.de by dsl-mail by uid 502 with
	qmail-scanner-1.14  (spamassassin: 2.43.  Clear:. 
	Processed in 0.246221 secs); 08 Jul 2003 20:50:03 -0000
Received: from unknown (HELO reverse-213-146-116-200.dialin.kamp-dsl.de)
	(213.146.116.200)
	by dsl-mail.kamp.net with SMTP; 8 Jul 2003 20:50:03 -0000
From: Farid Hajji <me@farid-hajji.de>
To: Chuck Swiger <cswiger@mac.com>
Date: Tue, 8 Jul 2003 22:50:03 +0200
User-Agent: KMail/1.5.1
References: <20030708200104.GA66624@cnt.org> <3F0B2AAE.5080708@mac.com>
In-Reply-To: <3F0B2AAE.5080708@mac.com>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200307082250.03189.me@farid-hajji.de>
cc: paul@cnt.org
cc: freebsd-stable@freebsd.org
Subject: Re: Hardening production servers
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: me@farid-hajji.de
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Jul 2003 20:50:00 -0000

> If you do a "make package" for each port that you install, you can copy of
> using network filesharing (NFS, Samba, etc) to distribute the
> /usr/ports/packages directory.  Create that directory if it doesn't exist,
> and "make package" will save the .tgz there rather than under each
> individual port directory.

Beware of ports that try to detect the CPU while compiling.
mplayer (IIRC) or some CPU intensive ports _may_ detect
a P4 on the compling machine and use it, so the binary
may not work on vanilla i586s. /etc/make.conf is your friend.

-- 
Farid Hajji. http://www.farid-hajji.net/address.html