From owner-freebsd-questions Wed Feb 4 01:46:51 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id BAA21298 for questions-outgoing; Wed, 4 Feb 1998 01:46:51 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from righi.df.unibo.it (RIGHI.DF.UNIBO.IT [137.204.49.17]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id BAA21293 for ; Wed, 4 Feb 1998 01:46:48 -0800 (PST) (envelope-from admin@righi.df.unibo.it) Received: from localhost (admin@localhost) by righi.df.unibo.it (8.8.7/8.8.7) with SMTP id LAA00382; Wed, 4 Feb 1998 11:44:26 GMT (envelope-from admin@righi.df.unibo.it) Date: Wed, 4 Feb 1998 11:44:17 +0000 (GMT) From: The Administrator To: nik@iii.co.uk cc: captain , freebsd-questions@FreeBSD.ORG Subject: Re: LAND and FOOF In-Reply-To: <19980204093220.02791@iii.co.uk> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG X-To-Unsubscribe: mail to majordomo@FreeBSD.org "unsubscribe questions" You absolutely do not need to install the stable version of 2.2.5 release. For example I could not remake it because I have not space to do it. So I protected myself from hackers attacks (Expecially from land program) installing a firewall with these rules /sbin/ipfw -q add deny all from 137.204.49.17 to 137.204.49.17 /sbin/ipfw -q add allow all from any to any to protect your system against land you must disable packets from your host to your host, my host is 137.204.49.17 then I Also installed tcpd wrapper daemon it is very useful to debug attacks to your system and to have a control on acess to your system. You can restrict logins for certain domains using tcpd. tcpd is in the precompiled packages so it is very simple to install. bye Rick On Wed, 4 Feb 1998 nik@iii.co.uk wrote: > On Tue, Feb 03, 1998 at 01:51:38PM -0800, captain wrote: > > I would like to get more information on how to protect my servers from > > these types of attacks. I have two servers running FreeBSD 2.2.5 . One > > is a Pentium 200, and the other is a Pentium 75. I have used CVSup to > > update my src/ files, but I would like to know what else I have to do. > > Thank You. > > If that's all you've done, you'll need to 'remake the world' to build a > new system. > > A tutorial for this is available at > > http://www.nothing-going-on.demon.co.uk/FreeBSD/make-world/make-world.html > > N > -- > --+==[ Nik Clayton is Just Another Perl Hacker at Interactive Investor ]==+-- > . . . and relax >