From owner-freebsd-questions  Wed May 30  1:53:12 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from mailsrv.otenet.gr (mailsrv.otenet.gr [195.170.0.5])
	by hub.freebsd.org (Postfix) with ESMTP id B220C37B42C
	for <questions@FreeBSD.ORG>; Wed, 30 May 2001 01:53:02 -0700 (PDT)
	(envelope-from keramidi@otenet.gr)
Received: from hades.hell.gr (patr530-b115.otenet.gr [195.167.121.243])
	by mailsrv.otenet.gr (8.11.1/8.11.1) with ESMTP id f4U8qse08241;
	Wed, 30 May 2001 11:52:54 +0300 (EEST)
Received: (from charon@localhost)
	by hades.hell.gr (8.11.3/8.11.3) id f4U8XZt03824;
	Wed, 30 May 2001 11:33:35 +0300 (EEST)
	(envelope-from keramidi@otenet.gr)
Date: Wed, 30 May 2001 11:33:35 +0300
From: Giorgos Keramidas <keramidi@otenet.gr>
To: David Banning <david@banning.com>
Cc: Lim Seng Chor <Lim.Seng.Chor@sit.edu.my>, questions@FreeBSD.ORG
Subject: Re: telnet security question
Message-ID: <20010530113335.D3735@hades.hell.gr>
References: <200105270809.f4R89ZB01609@d.tracker> <3B11271E.13364.8EF1A94@localhost> <20010527170228.B4092@yahoo.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010527170228.B4092@yahoo.com>; from sky_tracker@yahoo.com on Sun, May 27, 2001 at 05:02:28PM -0500
X-PGP-Fingerprint: 3A 75 52 EB F1 58 56 0D - C5 B8 21 B6 1B 5E 4A C2
X-URL: http://students.ceid.upatras.gr/~keramida/index.html
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Sun, May 27, 2001 at 05:02:28PM -0500, David Banning wrote:
| I notice you didn't mention a firewall. What would be your reasons 
| for the points you suggested versus a firewall, which was someone 
| else's suggestion?

Plus, you can always use *both* tcpwrappers and some kind of firewall.
I remember a setup we did with a friend of mine a few months ago, which looked
more or less like:

	.. internet => [ router ] => [ freebsd ]

with all of the followign enabled:

.	access lists in [ router ]
.	ipfw firewall in freebsd
.	tcpwrappers in freebsd

after all, every extra obstacle you can add to the way of those who want to
break-in is always that.. an extra obstacle.

but lets not be too paranoid, shall we?

--giorgos


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message