Re: security tips requested

[Steven Pritchard <steve@silug.org>]

Robert Threet said:
> I read a doc on armoring Solaris that said "there are 35
> services in inetd.conf... you can turn them all off but
> telnet and ftp".  Is this true?  Actually, I've already
> turned off telnet and ftp.  So, I can turn off all of the
> rest?!  Is this common?  What might I miss?

If you are running sshd and you don't need ftp (hint - you don't),
just shut off inetd completely.  You'll never miss it.

> Also, How insecure are POP and IMAP?

Very.  The various POP3 and IMAP daemons have had lots of security
holes, and they are unencrypted besides.  You can run them
SSL-enabled though, which helps.

Steve
-- 
steve@silug.org           | Southern Illinois Linux Users Group
(618)398-7360             | See web site for meeting details.
Steven Pritchard          | http://www.silug.org/
-
To unsubscribe, send email to majordomo@luci.org with
"unsubscribe luci-discuss" in the body.