From owner-freebsd-questions Fri Sep 4 08:33:41 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA05819 for freebsd-questions-outgoing; Fri, 4 Sep 1998 08:33:41 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from sinatra.acc-uk.com (sinatra.acc-uk.com [212.240.133.162]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA05812 for ; Fri, 4 Sep 1998 08:33:37 -0700 (PDT) (envelope-from raymond@acc-uk.com) Received: from vanilla (vanilla.acc-uk.com [212.240.133.190]) by sinatra.acc-uk.com (8.8.8/8.8.8) with SMTP id QAA08931; Fri, 4 Sep 1998 16:37:14 +0100 (BST) (envelope-from raymond@acc-uk.com) Reply-To: From: "Raymond Hunter" To: "'Adam Maloney'" , Subject: RE: bpfilter Date: Fri, 4 Sep 1998 16:35:31 +0100 Message-ID: <000a01bdd819$a7aa9bc0$be85f0d4@vanilla.acc-uk.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0 In-Reply-To: <007c01bdd814$b0566740$091962d1@kilroy.ns.intexp.com> X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Importance: Normal Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG . >Hello, > >I have a FreeBSD machine setup as a secondary DNS and sendmail fallback for >my network. I'd also like to use the machine as a network monitor. I >downloaded a package (trafshow-2.0) which requires the berkely packet filter >to be enabled. > >In the FreeBSD handbook, there's a paragraph that talks about the bpfilter >and how it can be a security risk to your network. What are the security >risks of running bpfilter, and how should I set it up? > >Thanks, >Adam Maloney > > >To Unsubscribe: send mail to majordomo@FreeBSD.org .with "unsubscribe freebsd-questions" in the body of the message Thr security risks relate to people who have root access on your box. People with such access can use sniffer programs to listen for plain text passwords etc. POP3 would thus be affected. If you and other admins are the only people with root, there is no security risk. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message