From owner-freebsd-newbies  Mon Mar  4 10:59:54 2002
Delivered-To: freebsd-newbies@freebsd.org
Received: from odin.acuson.com (odin.acuson.com [157.226.230.71])
	by hub.freebsd.org (Postfix) with ESMTP id C995437B419
	for <freebsd-newbies@freebsd.org>; Mon,  4 Mar 2002 10:59:50 -0800 (PST)
Received: from mvaexch02.acuson.com ([157.226.230.209]) by odin.acuson.com
          (Netscape Messaging Server 3.54)  with ESMTP id AAA2381
          for <freebsd-newbies@freebsd.org>; Mon, 4 Mar 2002 10:59:47 -0800
Received: by mvaexch02.acuson.com with Internet Mail Service (5.5.2653.19)
	id <17X61PGM>; Mon, 4 Mar 2002 10:58:20 -0800
Received: from there (dhcp-46-171.acuson.com [157.226.46.171]) by mvaexch01.acuson.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
	id F5L7XJKH; Mon, 4 Mar 2002 10:49:15 -0800
From: Johnson David <djohnson@acuson.com>
To: freebsd-newbies@freebsd.org
Content-Type: text/plain;
  charset="iso-8859-1"
Organization: Acuson
Subject: Security on Workstations
Date: Mon, 4 Mar 2002 10:59:41 -0800
X-Mailer: KMail [version 1.3.2]
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-Id: <20020304185950.C995437B419@hub.freebsd.org>
Sender: owner-freebsd-newbies@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-newbies.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-newbies>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-newbies>
X-Loop: FreeBSD.org

This months DaemonNews ezine has quite a bit of information on security. 
Interesting to be sure, but I don't think that information really applies to 
my boxen. I only have client systems that I maintain.

At home my system is, well, a home system. I don't run a webpage off of it, 
and the only authorized user is myself. I have an SMC Barricade broadband 
router between it and the rest of the world. At work I have FreeBSD on a 
workstation within the company network. I have to frequently use telnet and 
rlogin to connect to other company systems which don't have ssh.

What's the best strategy for securing these machines? Currently I'm using 
standard FreeBSD settings out of the box, with nothing in not in the default 
enabled. NFS and RPC are disabled.

Thanks,

David

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-newbies" in the body of the message