From owner-freebsd-questions@FreeBSD.ORG  Wed Jan 19 07:21:42 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id DE75A16A4CE
	for <questions@freebsd.org>; Wed, 19 Jan 2005 07:21:42 +0000 (GMT)
Received: from mtiwmhc13.worldnet.att.net (mtiwmhc13.worldnet.att.net
	[204.127.131.117])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2324C43D4C
	for <questions@freebsd.org>; Wed, 19 Jan 2005 07:21:36 +0000 (GMT)
	(envelope-from jayobrien@worldnet.att.net)
Received: from [192.168.1.6]
	(dsl093-180-184.sac1.dsl.speakeasy.net[66.93.180.184])
	by worldnet.att.net (mtiwmhc13) with ESMTP
	id <20050119072132113000ji64e>          (Authid: jayobrien@att.net);
	Wed, 19 Jan 2005 07:21:33 +0000
Message-ID: <41EE0A7B.0@att.net>
Date: Tue, 18 Jan 2005 23:21:31 -0800
From: Jay O'Brien <jayobrien@att.net>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
	rv:1.7.2) Gecko/20040803
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: FreeBSD - questions <questions@freebsd.org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Security for webserver behind router?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Jan 2005 07:21:43 -0000

I've brought up a 5.3 Release machine as a learning tool, 
with apache 1.3. It is on a LAN with Windows machines, and 
port 80 (and only port 80) is open and directed by the 
Linksys router to the FreeBSD machine. It is working fine so 
far, but my learning curve is slower than I would like. 

I know that there's lots to learn and do later about 
security, when I bypass the Router and use the FreeBSD box 
as the NAT device, but for now I would like to confine my 
learning to Apache, with only port 80 open. I do have ftp 
and ssh enabled on the LAN for access by the Windows boxes.

As I haven't done anything for security on the FreeBSD 
machine, am I exposed to anything by having port 80 open? Is 
there anything I should do now? 

Jay O'Brien
Rio Linda, California USA