On Sat, Feb 24, 2007 at 12:17:00AM +0800, David Schulz wrote:
> Hello and good day,
>
> i have setup a Server which is directly connected to the Internet,
> without NAT-Router or other Firewall Appliance. I am using FreeBSD
> 6.2. I have pf enabled to only allow traffic on specified Ports. I a
The FreeBSD Handbook also have some good tips:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security.html
Regards,
-- Johan Berg
On Fri, February 23, 2007 17:17, David Schulz wrote:
> Hello and good day,
>
> i have setup a Server which is directly connected to the Internet,
> wit
On 2007.02.21 22:18:15 +0100, Momchil Ivanov wrote:
> > But is there any way to disbale related php functions? is there any well
> > defined configuration examples for mod_php?
>
> Is this what you are looking for:
> http://www.php.net/manual/en/features.safe-mode.php
You should not rely on PHP
Momchil Ivanov wrote:
[...]
- Web users and executed web scripts shouldn't be able to read other
users data
Solution:
run suPHP for php scripts as well as suEXEC for cgi-scripts
implement ufs_acl so that the www (Web Server) user can access any
user directory
Add a u
