View Single Post
Old 11th May 2008
lumiwa lumiwa is offline
Package Pilot
 
Join Date: May 2008
Posts: 145
Default

I am a newbie in FreeBSD world. All my life ) I was OS/2 and Linux user but last three or for months ( am I old??) ion my computer is just FreeBSD 7.0 and I am upset with myself why I didn't install this great system 15 years ago .
I like to work in console but I like KDE too and I use a computer as a destop machine. What I did for hardening and I hope that is okay:
In the "rc.conf" I have:

syslogd_flags="-ss"
clear_tmp_enable="YES"
log_in_vain="1"
tcp_drop_synfin="YES"
icmp_drop_redirect="YES"
icmp_log_redirect="YES"
ntpdate_enable="YES"
ntpdate_flags="ntp1.cs.wisc.edu"
linux_enable="YES"
pf_enable="YES"
pflog_enable="YES"
update_motd="NO"

Yes, I run openbsd firewall.

In sysctl.conf I wrote:

security.bsd.see_other_uids=0
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1

Maybe there are some changes more but I don't remeber know...
Reply With Quote