I use on my own machines and one that I have had great success with.
security(7) on their FreeBSD system.
can use for securing your machine.
that the attacker already has a local login on the machine.
You may adapt this to suit your own needs.
Now, let's discuss why I've set things up this way.
'make installworld', since a fairly normal /tmp is required for this.
Enabling NOEXEC may also limit your ability to find an intruder.
support to limit the amount of disk space that your users may use.
Both /usr and /var are standard partitions with soft-updates enabled.
happy medium between security and usability.
that can be done to help harden the machine.
extremely powerful and are essential in securing FreeBSD.
what they do, please read the man page for init(8).
vipw(8) to remove this account.
you with the relevant information.
Similarly you may wish to see if you have anything listening via UDP.
Here, you see that syslogd is listening on port 514 (UDP).
See the syslogd(8) man page for more information.
connections to this service may come from.
telnetd with far superior security built in.
you wish to allow inbound connections from.
which offers all the benefits of FTP with the encryption of SSH.
Alternatively, you may also use scp(1).
tranmission of clear text passwords.
man page for ftpd(8) for more information.
system, and which can (and should) have different passwords.
packet, thereby creating a blackhole into which packets dissapear.
It should also be noted that this is NOT a replacement for ipfw/ipf.
users looking at.  The crontab of the root user is a perfect example.
jobs are started by cron.
information, please see the crontab(1) man page.
executing, and it can also be useful when debugging certain problems.
should be.  See the ipfw(8) page for more information.
mail server where it is theoretically out of harms way.
to drop a network card into promiscuous mode.
quota support at the same time.
ipf in the base system.  See LINT for more information.
damage that an attacker who wants to consume disk space can do.
manage your disk usage more effectively.
and repquota(8) to manage quota filesystems.
unless they're in the wheel group.
other users to view their directory contents.
processes are running.  See 'Disabling procfs' for more information.
you do not want to.
filesystem.  You may then mount it manually if needed.
the man page - login.conf(5) - for more information.
for more information on subscribing.
o  A machine that has recently rebooted.
opportunity to bypass system immutable and system append-only flags.
o  Changes in SUID files.
in SUID files.  Pay important attention to these.
o  Changes in critical system files.