From owner-freebsd-questions  Mon Dec  3 11:59:35 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-85.dsl.lsan03.pacbell.net [63.207.60.85])
	by hub.freebsd.org (Postfix) with ESMTP id 08A1837B41C
	for <freebsd-questions@FreeBSD.ORG>; Mon,  3 Dec 2001 11:59:30 -0800 (PST)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 281BF66B0F; Mon,  3 Dec 2001 11:59:29 -0800 (PST)
Date: Mon, 3 Dec 2001 11:59:28 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: Darryl Hoar <darryl@osborne-ind.com>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Security paranoia
Message-ID: <20011203115928.A20630@xor.obsecurity.org>
References: <003201c17c08$406b7010$0701a8c0@darryl>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="TB36FDmn/VVEgNH/"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <003201c17c08$406b7010$0701a8c0@darryl>; from darryl@osborne-ind.com on Mon, Dec 03, 2001 at 08:39:01AM -0600
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


--TB36FDmn/VVEgNH/
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Mon, Dec 03, 2001 at 08:39:01AM -0600, Darryl Hoar wrote:
> Greetings,
> As I've mentioned we're about to plug into broad band
> internet connectivity.  I'm going to be using my Freebsd
> box (4.3-release) as the router from my internal network
> to my ISP connection for internet traffic.  I'm am quite
> paranoid about the 24/7 connect and hackers beating on it.

Well, start by reading the security advisories and acting on them.
4.3-R has a remote root hole out of the box (the first in FreeBSD for
about 4 1/2 years - darnit)

Kris

--TB36FDmn/VVEgNH/
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE8C9mgWry0BWjoQKURAs6dAJ9GgZBWMUYTqJKx8crY96Fq+7W/vACgilTR
x+U1wp/4GhSbfg6rhcKUV9Q=
=v1LS
-----END PGP SIGNATURE-----

--TB36FDmn/VVEgNH/--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message