From nobody Sun Mar 12 19:05:08 2023 X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4PZTlH1qRSz3xVX2 for ; Sun, 12 Mar 2023 19:05:47 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: from mail-lf1-x12d.google.com (mail-lf1-x12d.google.com [IPv6:2a00:1450:4864:20::12d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4PZTlG6k1hz49Cx for ; Sun, 12 Mar 2023 19:05:46 +0000 (UTC) (envelope-from odhiambo@gmail.com) Authentication-Results: mx1.freebsd.org; none Received: by mail-lf1-x12d.google.com with SMTP id g17so13093018lfv.4 for ; Sun, 12 Mar 2023 12:05:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1678647945; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=RuNJ+NCcXZNAJkxEPtZuFUU9MSv+TreFVAB47fuWpEk=; b=MDn6PCm0j6xJ0mesRo8yJRCyBmH0EurGbQZHxHnltAeQO7AxetF8WVNBLcChnCw1pm nhxeBjln5LFm6/uX5afa7UsTbPYzHm+qN5TD4uPTUvmRxtio9Bvsg0MsoIIVnrixvpa9 JCMk/IM+T3qD0KscZhQ0Qat3hqGWOAUjLURDWKrb2iEZbs4M8BUUkaThTJr0h2E+SF/N 6Rx0a5yrqDMPqJq3ELy9SQdal6oLyMx9cNas7LBUIJHgN+D9Sk+UVW987E9xlyq6203N jymqgfapqxsCMxXmd+aCDwpEEtVOYxB7AI54jl7z9QxL6OfGSjxCPnT13pQI4XtRmcij CjMw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1678647945; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=RuNJ+NCcXZNAJkxEPtZuFUU9MSv+TreFVAB47fuWpEk=; b=WevzbAuoz/tqoyzg4dxXEz0R2t76dnTIjbhDElHwIRzqzJ+oO0ScwCd3Kk+FRaQff+ G/ZPpsAJlefqPeba5W5nbu880HHPjoNGSk8TWC3E6/lC1KWAXK13S3m5Vl0DtvjOHxXP FDd7oh3f0R/GVPh/MWmGvfs9nwSLJmjf+ZR1SZfQaF01Fa2t/xE+UWwQf7t3GpYrK49y SLv1x7VdJrqhEKC8frugrD3AhYuXy5yN3w0qzYQAyW+XSFE5VtYYWqWyr6GlP5ybqu1I pTD2IELrQdH6rU5KM17qzkJFeThM4hTF5SXZtY2KyN00E0AZ1yJEexShNw4VLzdkN53n 67Aw== X-Gm-Message-State: AO0yUKWF8LYBe/UBK0YomhSXuW9aSLcyi4z7OwHFMgSeAFm/nuCjNldz HUfz+f/MlV2snzABzAAeu2XptkDSYTk+HSnbUIgKWcNTR0xsFnI0 X-Google-Smtp-Source: AK7set9IGfdRZ5W849qEfcpOfekFmvre6LXY/TAe5v5POdcVLfhousbunoxW5uf8b1FaKTSjF/6k1ZB5Aia0rTSBpB8= X-Received: by 2002:ac2:518b:0:b0:4d5:ca32:6aea with SMTP id u11-20020ac2518b000000b004d5ca326aeamr9615634lfi.10.1678647944778; Sun, 12 Mar 2023 12:05:44 -0700 (PDT) List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org MIME-Version: 1.0 References: In-Reply-To: From: Odhiambo Washington Date: Sun, 12 Mar 2023 22:05:08 +0300 Message-ID: Subject: Re: configuration post installation FreeBSD server To: Jean-Christophe Cc: freebsd-questions@freebsd.org Content-Type: multipart/alternative; boundary="0000000000007395e405f6b8ae42" X-Rspamd-Queue-Id: 4PZTlG6k1hz49Cx X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N --0000000000007395e405f6b8ae42 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable FreeBSD is usually secure by default if you do things right during installation: 1. Select a strong password for root and your user 2. Possibly change the default sshd port from 22 to some obscure number. Further hardening depends on what else you install. Read this: https://forums.freebsd.org/threads/system-hardening-options-post-install.75= 476/ On Sun, Mar 12, 2023 at 9:54=E2=80=AFPM Jean-Christophe < jean-christophe@blues-softwares.net> wrote: > hi, > could you help me to create an plan for post installation configuration > for a FreeBSD server...? > create an doc in french on https://wiki.blues-softwares.net > best regard, > jean-christophe > --=20 Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", egrep -v '^$|^.*#' =C2=AF\_(=E3=83=84)_/=C2=AF :-) --0000000000007395e405f6b8ae42 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
FreeBSD is usually secure by default if you do things righ= t during installation:
1. Select a strong password for root and your use= r
2. Possibly change the default sshd port from 22 to some obscure numb= er.
Further hardening depends on what else you install.


On Sun, Mar = 12, 2023 at 9:54=E2=80=AFPM Jean-Christophe <jean-christophe@blues-softwares.net> wro= te:
hi= ,
could you help me to create an plan for post installation confi= guration for a FreeBSD server...?
create an doc in french on https://wiki.blu= es-softwares.net
best regard,
jean-christophe
=


--
Best regards,
Odhiambo WASHINGTON,<= br>Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft.&qu= ot;,=C2=A0egrep -v '^$|^.*#'= ;=C2=A0=C2=AF\_(=E3=83=84)_/=C2=AF=C2=A0:-)
--0000000000007395e405f6b8ae42--