Re: Hardening a Solaris system.

From: Dr. David Kirkby (see_my_signature_for_my_real_address_at_hotmail.com)
Date: 11/15/03


Date: 15 Nov 2003 09:18:33 -0800

nmm1@cus.cam.ac.uk (Nick Maclaren) wrote in message news:<bp2v3g$d1h$1@pegasus.csx.cam.ac.uk>...
> Oh, I forgot. START by running JASS and probably shutting down
> all external connectivity to SSH.
>
>
> Regards,
> Nick Maclaren.

I'll look at JASS - I was not aware of that. There's an ADSL modem
with router and firewall, which as a 'demilitrilised zone', such that
you can isolate things like a webserver/ftpserver on one port and have
your LAN on the other. The LAN can connect to the web server, but not
the other way around. I'll put Ipfiler on it as soon as I can download
a binary - the sunfreeware site seems to be full and the few mirrors I
tried did not have the current version. Needless to say I don't have a
compiler on the machine.

I don't know if it would be possible to build a 32-bit version of
ipfilter on a 64 bit Sun, then move it to the SPARC 20. Probably less
hassle to get a download from sunfreeware.