Securing your NetBSD system

[anomie]

[ I vaguely recall a similar thread on the old forum... ]

NetBSD obviously offers a lot of the fundamental security advantages that many *nix systems provide. At the base system level we have the benefit of an advanced, well tested OS.

The manpages for security(8) are illuminating, but I wonder if there aren't further tips (sysctl MIBs? other configuration/hardening ideas?) specific to NetBSD that could help secure a system.

Is anyone using Veriexec, or any of the other NetBSD exploit mitigation tools? How about other NetBSD OS-level security tools or resources you would like to share?

Feedback appreciated.

[JMJ_coder]

Hello,

Here's a question to ask about NetBSD security:

Which is a better firewall - in performance, popularity, future, etc. - ipfilter or pf?

[anomie]

Performance: I have no idea, and don't have the time/energy to test the multitude of scenarios.

Popularity: based on published books, and frequency of discussions, my guess would be that pf easily wins.

Future: ?

[JMJ_coder]

Hello,

Originally Posted by anomie

Performance: I have no idea, and don't have the time/energy to test the multitude of scenarios.

Maybe I should have been more descriptive. I guess one can measure performance in terms of speed, memory usage, etc. - indeed, that is probably the most popular meaning of the word in computers. But, I meant performance in terms of effectiveness (I should have just said effectiveness). And this question is the most important.

How effective is each in doing its job - i.e., keeping the bad guys out?

[tonyex]

I use to write some scripts to denied the sshd script kiddies the access to my boxes
It was in the old forum.
I use an script and ipf rules to do that.
Reg /T