From owner-freebsd-isp@FreeBSD.ORG  Sat Aug  2 02:02:48 2003
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D6CC737B401
	for <freebsd-isp@freebsd.org>; Sat,  2 Aug 2003 02:02:48 -0700 (PDT)
Received: from emerald.incredible.com.na (nsp.incredible.com.na
	[196.44.138.114])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B89D143FBD
	for <freebsd-isp@freebsd.org>; Sat,  2 Aug 2003 02:02:47 -0700 (PDT)
	(envelope-from schalk@home.incredible.com.na)
Received: from [10.222.101.2] (helo=Fujitsu)
	by emerald.incredible.com.na with smtp (Exim 4.12)
	id 19isG7-0003Fi-00; Sat, 02 Aug 2003 10:01:03 +0100
Message-ID: <001501c358d4$eb701c90$0265de0a@Fujitsu>
From: "Schalk Erasmus" <schalk@home.incredible.com.na>
To: "Schalk Erasmus" <schalk@home.incredible.com.na>,
	<freebsd-isp@freebsd.org>
References: <000a01c358d3$dcc94eb0$0265de0a@Fujitsu>
Date: Sat, 2 Aug 2003 10:03:20 +0100
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Subject: Re: FreeBSD - Secure by DEFAULT ?? [hosts.allow]
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 02 Aug 2003 09:02:49 -0000

I guess I also need to allow the other Services, in this order:

sshd : myhomepc : allow
exim : ALL : allow
httpd : ALL : allow
ftpd : ALL : allow
ALL : ALL : deny

Is this right?

> # Start by allowing everything (this prevents the rest of the file
> # from working, so remove it when you need protection).
> # The rules here work on a "First match wins" basis.
> ALL : ALL : allow
>
> # Wrapping sshd(8) is not normally a good idea, but if you
> # need to do it, here's how
> #sshd : .evil.cracker.example.com : deny
>
> Regards
> Schalk Erasmus
>
>
>
> _______________________________________________
> freebsd-isp@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
>