From owner-freebsd-hackers Thu Sep 9 22: 5:16 1999 Delivered-To: freebsd-hackers@freebsd.org Received: from ns.mt.sri.com (ns.mt.sri.com [206.127.79.91]) by hub.freebsd.org (Postfix) with ESMTP id 44EC715328 for ; Thu, 9 Sep 1999 22:05:13 -0700 (PDT) (envelope-from nate@mt.sri.com) Received: from mt.sri.com (rocky.mt.sri.com [206.127.76.100]) by ns.mt.sri.com (8.9.3/8.9.3) with SMTP id XAA22595; Thu, 9 Sep 1999 23:04:22 -0600 (MDT) (envelope-from nate@rocky.mt.sri.com) Received: by mt.sri.com (SMI-8.6/SMI-SVR4) id XAA09058; Thu, 9 Sep 1999 23:04:21 -0600 Date: Thu, 9 Sep 1999 23:04:21 -0600 Message-Id: <199909100504.XAA09058@mt.sri.com> From: Nate Williams MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit To: "James E. Housley" Cc: freebsd-hackers@FreeBSD.ORG Subject: Re: A Challenge In-Reply-To: <37D87080.4D44E9C4@thehousleys.net> References: <37D87080.4D44E9C4@thehousleys.net> X-Mailer: VM 6.34 under 19.16 "Lille" XEmacs Lucid Reply-To: nate@mt.sri.com (Nate Williams) Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > The box is just going to be running NATD and IPFW, maybe DHCLIENT. > > Mr. NT is been told he can try and break-in, crash what ever this box > from the internet side. > > I am asking for links, pointer to make sure this is configured as > secure/solid as possible. I will be installing 3.3-STABLE over this > weekend (9/11/1999). I really want to make sure we win. Turn off inetd on the computer, since you have no need for external services. In any case, if you install a recent version of FreeBSD, I doubt Mr. NT is capable of crashing FreeBSD from externally. Just make sure he doesn't have an account on it, since it's much easier to cause Denial Of Service attacks if you don't spend alot of time setting up limits and such. Nate To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message