On Wed, 14 Jul 1999, bah wrote:

> One last thing what security conserns should i have that maybe i'm not
> thinking of and is there any other rpm's that should be added?or definatly
> not used?
> 

  As a *minimum* in /etc/hosts.deny, add the line

ALL: ALL

  then in /etc/hosts.allow, allow the hosts on your local network to use
your services

ALL: 207.254.254.

  (assuming you have a class c address of 207.254.254.0 through
207.254.254.255).

  Comment out any services you don't need to provide in /etc/inetd.conf.

  Then reboot. <-- (paranoia speaking)

  This will stop 99% of the attacks on your system.  The rest is several
months of study and thought.

bug

Reply via email to