From owner-freebsd-hackers@FreeBSD.ORG  Wed Jul 28 18:15:03 2004
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E2F7016A4CE
	for <freebsd-hackers@freebsd.org>;
	Wed, 28 Jul 2004 18:15:03 +0000 (GMT)
Received: from web21528.mail.yahoo.com (web21528.mail.yahoo.com
	[66.163.170.147])
	by mx1.FreeBSD.org (Postfix) with SMTP id C445C43D4C
	for <freebsd-hackers@freebsd.org>;
	Wed, 28 Jul 2004 18:15:03 +0000 (GMT)
	(envelope-from time_to_hack@yahoo.com)
Message-ID: <20040728181459.24126.qmail@web21528.mail.yahoo.com>
Received: from [24.248.72.254] by web21528.mail.yahoo.com via HTTP;
	Wed, 28 Jul 2004 11:14:59 PDT
Date: Wed, 28 Jul 2004 11:14:59 -0700 (PDT)
From: bsd hack <time_to_hack@yahoo.com>
To: freebsd-hackers@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Content-Filtered-By: Mailman/MimeDel 2.1.1
Subject: Kernel options
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Jul 2004 18:15:04 -0000

Hi,
    I am working with the Kernel config file to optimize it and also to improve the overall security of the system!
 
I have the following quetions:
(1) There are a few options that are not available in the default kernel... like the IPFIREWALL options(and the like)... I basically need to know all possible options I can add to the kernel config file! 
(2) I guess these options can be used to set the kernel variables accessible through the sysctl command. So can I create my own options so that I can set a few kernel variables as and when I build the custom kernel?
(3) and also my aim includes optimizing the kernel... so by enabling only the options I need to I should get a get optimization... is there anything else that can be done?
(4) My aim is to improve local and network security. I guess enabling IPFIREWALL helps with the network security part.... are there any special options for local security?
 
Thank you.
 
HKR

		
---------------------------------
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.