Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 19 Nov 2002 10:30:06 +0100
From:      Pierrick Brossin <pbrossin@swissgeeks.com>
To:        Avleen Vig <lists-freebsd@silverwraith.com>
Cc:        Giorgos Keramidas <keramida@ceid.upatras.gr>, Greg 'groggy' Lehey <grog@FreeBSD.ORG>, "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG>
Subject:   Re: FreeBSD Easy Server
Message-ID:  <1037698206.3dda049e32874@www.swissgeeks.com>
In-Reply-To: <20021119090804.T53207-100000@apple.silverwraith.com>
References:  <20021119090804.T53207-100000@apple.silverwraith.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> Errrr..
> The only real benefits you get from a firewall are:
> 1) controlling which IP addresses can access a service
> 2) *maybe* bandwidth shaping. *maybe*.
> 3) packet re-writing.

That's all ?

I thought the firewall was THE thing to have when you have a server which is
running 24 jours a day, 365 days per year!

I'm considering myself as a newbie under FreeBSD for the moment so I may be
wrong about the next point but what you telling me is that I can restrict access
to certain services to certains IPs ?
So I would use the config file of each service to say this one can access, let's
samba .. this one cant (interfaces=... in smb.conf if I remember correctly).

They are Linux (ouch :D) distributions that are only firewall and don't run any
other services (like smoothwall if I'm right).
So a distribution like this one is superfluous for users like me ?

I own swissgeeks.com and need a little bit of security.
Got a lot of stuff running on this server and if I'm switching to FreeBSD I have
to be sure I won't get hacked, though it's always possible. Let's say I'd like
the same security as SME provides me for the moment.
As known, 1 year and a half and no problem!

This was the story :D

Cya

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1037698206.3dda049e32874>