Keeping a large shellbox stable and secure

[Pawel Jakub Dawidek]

On Wed, Apr 23, 2003 at 04:15:20PM -0700, Peter wrote:
+> Would ipfw2 or Ipfilter be better? Should I run RELENG_4 or RELENG_4_8.

I suggest RELENG_4_8 of course.

+> Any ideas would be appreciated. Basically, I'm attempting to make this box
+> as stable and secure as possible. Anything would be appreciated.

If we are talking about security, take a look at CerbNG project:

	http://cerber.sourceforge.net

But there is no stable release yet.
You can find on this page also two different kernel modules:
rexec and lrexec. Those two are stable, but not so functional and
doesn't provide so high security level as CerbNG.

-- 
Pawel Jakub Dawidek                       pawel at dawidek.net
UNIX Systems Programmer/Administrator     http://garage.freebsd.pl
Am I Evil? Yes, I Am!                     http://cerber.sourceforge.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 305 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-hackers/attachments/20030424/0aa8fa67/attachment.bin