Security question (simple).

2003-08-22 Thread Lewis Thompson 
Hi,

  I'm fairly new to network/machine security (but I know enough to write
some firewall rules, just the basics.  I guess I'm getting on for
novice, or something ;)

  I'm running two jails on my box, which has a dialup connection to the
'net.  It's all firewalled off and only certain things are available
from outside.  For incoming WWW I have some port-forwarding going on
(natd), which bounces it to the httpd running in the jail.  Am I right
in thinking if I am running some inherently insecure application there
is ABSOLUTELY NO WAY anybody can exploit it if it's not listening on the
dial-up interface?  I mean, without rooting the host system first.  Or,
if it's not, it's still pretty hard, right?

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature

Re: Security question (simple).

2003-08-22 Thread lukek 
I wonder if the better policy is to not run inherently insecure applications
to begin with. In theory if no-one can get to that box or make use of that
application from the internet then your only threats become internal ones.

Just for curiosity sake what does nmap tell you about your box/interface
from an outside perspective ? Another great check is sockstat -4 which will
list the services running and the IP/port number there running on.

HTH

LukeK

- Original Message -
From: "Lewis Thompson" [EMAIL PROTECTED]
To: "FreeBSD-questions" [EMAIL PROTECTED]
Sent: 2003年8月23日 9:08
Subject: Security question (simple).


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"