From owner-freebsd-security  Thu Jun 21 15:13:59 2001
Delivered-To: freebsd-security@freebsd.org
Received: from point.osg.gov.bc.ca (point.osg.gov.bc.ca [142.32.102.44])
	by hub.freebsd.org (Postfix) with ESMTP id 2883537B403
	for <freebsd-security@FreeBSD.ORG>; Thu, 21 Jun 2001 15:13:56 -0700 (PDT)
	(envelope-from Cy.Schubert@uumail.gov.bc.ca)
Received: (from daemon@localhost)
	by point.osg.gov.bc.ca (8.8.7/8.8.8) id PAA02737;
	Thu, 21 Jun 2001 15:13:49 -0700
Received: from passer.osg.gov.bc.ca(142.32.110.29)
 via SMTP by point.osg.gov.bc.ca, id smtpda02735; Thu Jun 21 15:13:49 2001
Received: (from uucp@localhost)
	by passer.osg.gov.bc.ca (8.11.4/8.9.1) id f5LMDi187315;
	Thu, 21 Jun 2001 15:13:44 -0700 (PDT)
Received: from UNKNOWN(10.1.2.1), claiming to be "cwsys.cwsent.com"
 via SMTP by passer9.cwsent.com, id smtpdQ87312; Thu Jun 21 15:13:06 2001
Received: (from uucp@localhost)
	by cwsys.cwsent.com (8.11.4/8.9.1) id f5LMD4402738;
	Thu, 21 Jun 2001 15:13:04 -0700 (PDT)
Message-Id: <200106212213.f5LMD4402738@cwsys.cwsent.com>
Received: from localhost.cwsent.com(127.0.0.1), claiming to be "cwsys"
 via SMTP by localhost.cwsent.com, id smtpdEy2733; Thu Jun 21 15:12:38 2001
X-Mailer: exmh version 2.3.1 01/18/2001 with nmh-1.0.4
Reply-To: Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>
From: Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>
X-Sender: schubert
To: Malcolm <malcolm@ocf.berkeley.edu>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: IPFilter and security 
In-reply-to: Your message of "Wed, 20 Jun 2001 18:18:33 PDT."
             <Pine.SOL.4.33.0106201809290.23365-100000@famine.OCF.Berkeley.EDU> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Thu, 21 Jun 2001 15:12:38 -0700
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

In message <Pine.SOL.4.33.0106201809290.23365-100000@famine.OCF.Berkeley
.EDU>,
Malcolm writes:
> Hi folks,
>   What do we think about installing IPFilter on non-gateway boxes
> and using it to block all incoming traffic except for whatever ports
> we want to use on our server (e.g., http, ftp)?

I have a number of servers w/IPF installed for this purpose.  That's 
the beauty of IPF:  It can be used to protect a server or network.


Regards,                         Phone:  (250)387-8437
Cy Schubert                        Fax:  (250)387-5766
Team Leader, Sun/Alpha Team   Internet:  Cy.Schubert@osg.gov.bc.ca
Open Systems Group, ITSD, ISTA
Province of BC



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message