View Single Post
  #3   (View Single Post)  
Old 23rd May 2013
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,128
Default

Please note that the install of these monitoring tools comes in the form of a FreeBSD package. Right now I don't have the opportunity to check whether this package has been verified/approved by a FreeBSD ports committer.

From pkg_add(1):
Code:
WARNING
     Since the pkg_add command may execute scripts or programs contained
     within a package file, your system may be susceptible to ``trojan
     horses'' or other subtle attacks from miscreants who create dangerous
     package files.

     You are advised to verify the competence and identity of those who pro-
     vide installable package files.  For extra protection, use the -M flag to
     extract the package file, and inspect its contents and scripts to ensure
     it poses no danger to your system's integrity.  Pay particular attention
     to any +INSTALL, +POST-INSTALL, +DEINSTALL, +POST-DEINSTALL, +REQUIRE or
     +MTREE_DIRS files, and inspect the +CONTENTS file for @cwd, @mode (check
     for setuid), @dirrm, @exec, and @unexec directives, and/or use the
     pkg_info(1) command to examine the package file.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote