Margaret,
I think about the single most important security hole to plug
is who has access to your computer with tcp wrappers.
Its easy to start:
/etc/default/inetd => ENABLE_TCPWRAPPERS=YES
pkill inetd
/etc/rc2.d/S72inetsvc start (or just reboot)
/etc/hosts.deny => ALL: ALL
/etc/hosts.allow => ALL: 192.148.117.4, 192.148.117.8, 192.148.117.10,\
192.148.117.12, etc
The hosts.allow can be changed on the fly to let a machine talk to yours.
With only a small number of known machines able to access yours, you are
a much smaller target.
hth,
dave scott
iowa state university
Received on Mon Apr 12 2004 - 10:12:56 MST