From owner-freebsd-audit  Thu Mar 23 21:35:31 2000
Delivered-To: freebsd-audit@freebsd.org
Received: from berlin.atlantic.net (berlin.atlantic.net [209.208.0.20])
	by hub.freebsd.org (Postfix) with ESMTP id E358F37B57E
	for <audit@freebsd.org>; Thu, 23 Mar 2000 21:35:22 -0800 (PST)
	(envelope-from bobj@atlantic.net)
Received: from mail.atlantic.net (mail.atlantic.net [209.208.0.71])
	by berlin.atlantic.net (8.9.3/8.9.3) with ESMTP id AAA02193;
	Fri, 24 Mar 2000 00:38:16 -0500
Received: from bsd.cisi.com (ocalflifanb-as-1-r1-ip-156.atlantic.net [209.208.28.156])
	by mail.atlantic.net (8.9.3/8.9.3) with ESMTP id AAA26072;
	Fri, 24 Mar 2000 00:34:42 -0500
Received: from nancy.cisi.com (nancy.cisi.com [192.168.0.131])
	by bsd.cisi.com (8.9.3/8.9.3) with SMTP id AAA19622;
	Fri, 24 Mar 2000 00:30:13 -0500 (EST)
	(envelope-from bobj@atlantic.net)
Message-Id: <3.0.6.32.20000324003034.009ad530@rio.atlantic.net>
X-Sender: bobj@rio.atlantic.net
X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.6 (32)
Date: Fri, 24 Mar 2000 00:30:34 -0500
To: Warner Losh <imp@village.org>
From: Bob Johnson <bobj@atlantic.net>
Subject: Re: Portmapper enabled, IPv6 circumvents FW 
Cc: audit@freebsd.org
In-Reply-To: <200003231937.MAA43099@harmony.village.org>
References: <Your message of "Thu, 23 Mar 2000 20:34:13 +0100."<v0422080cb5002170b286@[195.238.1.121]>
 <v0422080cb5002170b286@[195.238.1.121]>
 <38DA6D77.FB93FC36@vangelderen.org>
 <200003231923.MAA42847@harmony.village.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-audit@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Please, please, please do it!

It's bad enough that I have to keep begging people on our networks 
to turn off all network services as soon as they do an install.   

If Red Hat starts disabling them by default before FreeBSD does, 
I won't even be able to say "you should have used FreeBSD".

-- Bob

At 12:37 PM 03/23/2000 -0700, you wrote:
>In message <v0422080cb5002170b286@[195.238.1.121]> Brad Knowles writes:
>: 	I would like very much to see these patches get committed, so 
>: that the box tends to be secure by default out-of-the-box, and then 
>: you turn on the additional features you want/need.
>
>Eivind submitted them a while ago.  I'll have to dust it off and see
>about committing it.
>
>Warner
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-audit" in the body of the message
>
>

+--------------------------------------------------------
| Bob Johnson
| bobj@atlantic.net
+--------------------------------------------------------



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-audit" in the body of the message