Re: Advice for Internet facing Mailserver

2007-03-01 Thread freebsd-security
On Sun, 25 Feb 2007 12:14:24 +0100 (CET), "Johan Berg" wrote: >The FreeBSD Handbook also have some good tips: > >http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security.html > > >Regards, > >-- Johan Berg Also, man SECURITY(7) cheers, joel

Re: Advice for Internet facing Mailserver

2007-02-25 Thread Duane Whitty
On Sat, Feb 24, 2007 at 12:17:00AM +0800, David Schulz wrote: > Hello and good day, > > i have setup a Server which is directly connected to the Internet, > without NAT-Router or other Firewall Appliance. I am using FreeBSD > 6.2. I have pf enabled to only allow traffic on specified Ports. I a

Re: Advice for Internet facing Mailserver

2007-02-25 Thread Johan Berg
The FreeBSD Handbook also have some good tips: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security.html Regards, -- Johan Berg On Fri, February 23, 2007 17:17, David Schulz wrote: > Hello and good day, > > i have setup a Server which is directly connected to the Internet, > wit

Re: Advice for Internet facing Mailserver

2007-02-24 Thread Bob Madore
Another program to consider is DenyHosts http://denyhosts.sourceforge.net/ It works exceptionally well. Bob Derek Ragona wrote: You might want to use /etc/hosts.allow to restrict some protocols further. -Derek At 10:17 AM 2/23/2007, David Schulz wrote: Hello and good day, i ha

Re: Advice for Internet facing Mailserver

2007-02-24 Thread Derek Ragona
You might want to use /etc/hosts.allow to restrict some protocols further. -Derek At 10:17 AM 2/23/2007, David Schulz wrote: Hello and good day, i have setup a Server which is directly connected to the Internet, without NAT-Router or other Firewall Appliance. I am using FreeBSD 6.2. I

Advice for Internet facing Mailserver

2007-02-23 Thread David Schulz
Hello and good day, i have setup a Server which is directly connected to the Internet, without NAT-Router or other Firewall Appliance. I am using FreeBSD 6.2. I have pf enabled to only allow traffic on specified Ports. I am using Apache-13 + Postfix + Dovecot & mysql for my Mail-system. The