mirror/freebsd
1
0
Fork 0
mirror of https://git.FreeBSD.org/src.git synced 2025-01-03 12:35:02 +00:00
Code Issues Releases Activity

take the axe a little closer, since I didn't say what I meant either, and

Browse Source 
better empty than wrong.
This commit is contained in:
Adam David 1996-09-07 02:15:56 +00:00
parent c9da8434ea
commit 011e76a24a
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=18096
1 changed files with 2 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
share/doc/handbook/firewalls.sgml
View File

@ -1,4 +1,4 @@
<!-- $Id: firewalls.sgml,v 1.9 1996/09/07 00:34:08 adam Exp $ -->
<!-- $Id: firewalls.sgml,v 1.10 1996/09/07 00:51:36 adam Exp $ -->
<!-- The FreeBSD Documentation Project -->
<sect><heading>Firewalls<label id="firewalls"></heading>
@ -489,15 +489,10 @@ want to allow from the inside. Some general rules are:
<itemize>
<item>Block all incoming access to ports below 1000 for TCP. This is
<item>Block all incoming access to ports below 1024 for TCP. This is
where most of the security sensitive services are, like finger, SMTP
(mail) and telnet.
<item>Block all incoming access also to TCP ports between 1001 and 1024
inclusive, unless rlogin/rsh access from outside is to be enabled, in which
case incoming SYN (<bf>setup</bf>) connections should be blocked on these
ports and allowed on the relevant service port(s).
<item>Block <bf>all</bf> incoming UDP traffic. There are very few
useful services that travel over UDP, and what useful traffic there is
is normally a security threat (e.g. Suns RPC and NFS protocols). This