[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Security: FreeBSD vs OpenBSD



In some mail from Luiz Gustavo, sie said:
> 
> On Mon, Feb 04, 2002 at 01:40:08AM -0200, rss@cin.ufpe.br wrote:
>  
> > >  About < 1023 *issue* theres one good explanation from Theo for
> > >  why not OpenBSD developers dont like it.   
> > 
> > Sure, you must not use this solution in user shell machines ;-)
> > And really... if you break in any user, you can start daemons
> > in priv ports...
> > 
> > And I prefer the redirect stuff... you can block some
> > range of hight ports and use it for redirecting. Or start a
> > jail for every service.
> 
>  I dont think abuse of rdr on servers looks good, why you will need
>  pf *running* on every server?

And the problem is?

I know companies that use IPFilter on every server/desktop
running Unix.

Darren