※ 引述《psilotum (好小孩)》之铭言： : 看一下 handbook 吧 : http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security.html : 你有很急着把服务弄起来吗？如果只是想试试看，不如多花一点时间把 : handbook 看一看，freebsd 的文件都写的很好。 : 1. 你可以订阅安全性通知的邮递论坛 : http://lists.freebsd.org/mailman/listinfo/freebsd-security-notifications : 2. 用 ports 安装的第三方软体可以透过 portaudit 定期检查是否有 : 安全上的问题 : http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ports-overview.html : 3. 设定防火墙，目前有 ipfw, ipf, pf 可以使用 : http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html : 4. 不需要的服务不要安装 : 5. 如果要更高一点的安全性，可以考虑把服务装在 jail 里面 : http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/jails.html 谢谢您~~ 说真的回答下面这句可能会被打..不过我英文真的不是很好 > < 这并不是很急的case只想学看看不想老是活在xp毕竟它要钱 架个server起来还要再多付几千块而且无聊人事萤幕开起来就乱点一通怎麽死都不知道 所以想投靠freebsd毕竟看到free就爽了 XD 防火墙我研究看看怎麽安装好了 服务的话我只有灌我说的那几种应该吧 jail听都没听过暂时不考虑不过还是会去google查查那是什麽 以下是灌好目前的东西 我用预设安装freebsd然後用port安装apache php proftp mysql而已 不过我的pkg下面出现很多 请问有哪些是不需要的服务呢 谢谢 # pkg_info apache-2.2.9_5 Version 2.2.x of Apache web server with prefork MPM. autoconf-2.62 Automatically configure source code on many Un*x platforms autoconf-wrapper-20071109 Wrapper script for GNU autoconf bigreqsproto-1.0.2 BigReqs extension headers expat-2.0.1 XML 1.0 parser written in C freetype2-2.3.7 A free and portable TrueType font rendering engine gettext-0.17_1 GNU gettext package gmake-3.81_3 GNU version of 'make' utility help2man-1.36.4_2 Automatically generating simple manual pages from program o inputproto-1.4.2.1 Input extension headers jpeg-6b_7 IJG's jpeg compression utilities kbproto-1.0.3 KB extension headers libICE-1.0.4_1,1 Inter Client Exchange library for X11 libSM-1.0.3_1,1 Session Management library for X11 libX11-1.1.3_1,1 X11 library libXau-1.0.3_2 Authentication Protocol library for X11 libXaw-1.0.4_1,1 X Athena Widgets library libXdmcp-1.0.2_1 X Display Manager Control Protocol library libXext-1.0.3,1 X11 Extension library libXmu-1.0.3,1 X Miscellaneous Utilities libraries libXp-1.0.0,1 X print library libXpm-3.5.7 X Pixmap library libXt-1.0.5_1 X Toolkit library libiconv-1.11_1 A character set conversion library libltdl-1.5.26 System independent dlopen wrapper libmcrypt-2.5.8 Multi-cipher cryptographic library (used in PHP) libtool-1.5.26 Generic shared library support script libxml2-2.6.32 XML parser library for GNOME linux_base-fc-4_13 Base set of packages needed in Linux mode (for i386/amd64) m4-1.4.11,1 GNU m4 mysql-client-5.1.28_1 Multithreaded SQL database (client) mysql-server-5.1.28_1 Multithreaded SQL database (server) p5-gettext-1.05_2 Message handling functions pcre-7.7_1 Perl Compatible Regular Expressions library pecl-filter-0.11.0 PHP extension for safely dealing with input parameters pecl-hash-1.5 HASH Message Digest Framework for PHP pecl-json-1.2.1 PHP extension for JSON (JavaScript Object Notation) seriali pecl-zip-1.9.0 A PECL extension to create and read zip files perl-5.8.8_1 Practical Extraction and Report Language php5-5.2.8 PHP Scripting Language php5-ctype-5.2.8 The ctype shared extension for php php5-dom-5.2.8 The dom shared extension for php php5-extensions-1.2 A "meta-port" to install PHP extensions php5-ftp-5.2.8 The ftp shared extension for php php5-gd-5.2.8 The gd shared extension for php php5-iconv-5.2.8 The iconv shared extension for php php5-mbstring-5.2.8 The mbstring shared extension for php php5-mcrypt-5.2.8 The mcrypt shared extension for php php5-mysql-5.2.8 The mysql shared extension for php php5-mysqli-5.2.8 The mysqli shared extension for php php5-openssl-5.2.8 The openssl shared extension for php php5-pdo-5.2.8 The pdo shared extension for php php5-pdo_sqlite-5.2.8 The pdo_sqlite shared extension for php php5-posix-5.2.8 The posix shared extension for php php5-session-5.2.8 The session shared extension for php php5-simplexml-5.2.8 The simplexml shared extension for php php5-spl-5.2.8 The spl shared extension for php php5-sqlite-5.2.8 The sqlite shared extension for php php5-tokenizer-5.2.8 The tokenizer shared extension for php php5-xml-5.2.8 The xml shared extension for php php5-xmlreader-5.2.8 The xmlreader shared extension for php php5-xmlwriter-5.2.8 The xmlwriter shared extension for php php5-zlib-5.2.8 The zlib shared extension for php pkg-config-0.23_1 A utility to retrieve information about installed libraries png-1.2.32 Library for manipulating PNG images printproto-1.0.3 Print extension headers proftpd-1.3.2.r2_1 Highly configurable ftp daemon psearch-2.0.1 An utility for searching the FreeBSD Ports Collection python-2.5,2 The "meta-port" for the default version of Python interpret python25-2.5.2_3 An interpreted object-oriented programming language t1lib-5.1.2,1 A Type 1 Rasterizer Library for UNIX/X11 xcmiscproto-1.1.2 XCMisc extension headers xextproto-7.0.2 XExt extension headers xf86bigfontproto-1.1.2 XFree86-Bigfont extension headers xproto-7.0.10_1 X11 protocol headers xtrans-1.0.4 Abstract network code for X # --

※ 发信站: 批踢踢实业坊(ptt.cc) ◆ From: 220.133.5.175