Jim,

I'm currently reading Mastering FreeBSD and OpenBSD Security, and thus far
it is proving to be a fantastic book covering many advanced security topics
specifically related to BSD. I suggested you order a copy from
Amazon<http://www.amazon.com/gp/product/0596006268/qid=1147325988/sr=1-1/ref=sr_1_1/102-5661269-0811354?s=books&v=glance&n=283155>;
it's well worth the time...

-David

On 5/10/06, Jim Stapleton <[EMAIL PROTECTED]> wrote:

Rephrase:

I have 5 static IPs
currently 1 is being used to "power" the NAT for all the machines
inside the network, the other 4 are empty.

I'm getting one of those 4 remaining, and having it point directly to
my BSD machine.



On 5/10/06, fbsd <[EMAIL PROTECTED]> wrote:
> There is no difference between a dynamic and static ip
> address from the point of the firewall.
>
> If you felt secure before, then getting a static ip
> address will have no effect on that.
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Jim
> Stapleton
> Sent: Wednesday, May 10, 2006 9:18 AM
> To: freebsd-questions@freebsd.org
> Subject: securing beyond the handbook
>
>
> I'm about to get a static IP and direct outside access for my BSD
> box
> (before it was hidden behind a firewall/NAT). I was comfortable with
> the level of security I've had, but with the whole "open to the
> outside world" setup I'll have, what would you suggest for securing
> it?
>
> I'll be running:
> Apache
> PHP
> MySQL
> SSH/SFTP
> OpenRPG (only occasionally, from a special nonpriv account)
>
> Any suggestions, any of these that you know are such huge security
> holes that you would absolutely demand something else be run?
>
> Any other security suggestions?
>
> Thanks,
> -Jim
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>
>
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "
[EMAIL PROTECTED]"

_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to