※ 引述《psilotum (好小孩)》之銘言： : 看一下 handbook 吧 : http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security.html : 你有很急著把服務弄起來嗎？如果只是想試試看，不如多花一點時間把 : handbook 看一看，freebsd 的文件都寫的很好。 : 1. 你可以訂閱安全性通知的郵遞論壇 : http://lists.freebsd.org/mailman/listinfo/freebsd-security-notifications : 2. 用 ports 安裝的第三方軟體可以透過 portaudit 定期檢查是否有 : 安全上的問題 : http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ports-overview.html : 3. 設定防火牆，目前有 ipfw, ipf, pf 可以使用 : http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html : 4. 不需要的服務不要安裝 : 5. 如果要更高一點的安全性，可以考慮把服務裝在 jail 裡面 : http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/jails.html 謝謝您~~ 說真的回答下面這句可能會被打..不過我英文真的不是很好 > < 這並不是很急的case只想學看看不想老是活在xp畢竟它要錢 架個server起來還要再多付幾千塊而且無聊人事螢幕開起來就亂點一通怎麼死都不知道 所以想投靠freebsd畢竟看到free就爽了 XD 防火牆我研究看看怎麼安裝好了 服務的話我只有灌我說的那幾種應該吧 jail聽都沒聽過暫時不考慮不過還是會去google查查那是什麼 以下是灌好目前的東西 我用預設安裝freebsd然後用port安裝apache php proftp mysql而已 不過我的pkg下面出現很多 請問有哪些是不需要的服務呢 謝謝 # pkg_info apache-2.2.9_5 Version 2.2.x of Apache web server with prefork MPM. autoconf-2.62 Automatically configure source code on many Un*x platforms autoconf-wrapper-20071109 Wrapper script for GNU autoconf bigreqsproto-1.0.2 BigReqs extension headers expat-2.0.1 XML 1.0 parser written in C freetype2-2.3.7 A free and portable TrueType font rendering engine gettext-0.17_1 GNU gettext package gmake-3.81_3 GNU version of 'make' utility help2man-1.36.4_2 Automatically generating simple manual pages from program o inputproto-1.4.2.1 Input extension headers jpeg-6b_7 IJG's jpeg compression utilities kbproto-1.0.3 KB extension headers libICE-1.0.4_1,1 Inter Client Exchange library for X11 libSM-1.0.3_1,1 Session Management library for X11 libX11-1.1.3_1,1 X11 library libXau-1.0.3_2 Authentication Protocol library for X11 libXaw-1.0.4_1,1 X Athena Widgets library libXdmcp-1.0.2_1 X Display Manager Control Protocol library libXext-1.0.3,1 X11 Extension library libXmu-1.0.3,1 X Miscellaneous Utilities libraries libXp-1.0.0,1 X print library libXpm-3.5.7 X Pixmap library libXt-1.0.5_1 X Toolkit library libiconv-1.11_1 A character set conversion library libltdl-1.5.26 System independent dlopen wrapper libmcrypt-2.5.8 Multi-cipher cryptographic library (used in PHP) libtool-1.5.26 Generic shared library support script libxml2-2.6.32 XML parser library for GNOME linux_base-fc-4_13 Base set of packages needed in Linux mode (for i386/amd64) m4-1.4.11,1 GNU m4 mysql-client-5.1.28_1 Multithreaded SQL database (client) mysql-server-5.1.28_1 Multithreaded SQL database (server) p5-gettext-1.05_2 Message handling functions pcre-7.7_1 Perl Compatible Regular Expressions library pecl-filter-0.11.0 PHP extension for safely dealing with input parameters pecl-hash-1.5 HASH Message Digest Framework for PHP pecl-json-1.2.1 PHP extension for JSON (JavaScript Object Notation) seriali pecl-zip-1.9.0 A PECL extension to create and read zip files perl-5.8.8_1 Practical Extraction and Report Language php5-5.2.8 PHP Scripting Language php5-ctype-5.2.8 The ctype shared extension for php php5-dom-5.2.8 The dom shared extension for php php5-extensions-1.2 A "meta-port" to install PHP extensions php5-ftp-5.2.8 The ftp shared extension for php php5-gd-5.2.8 The gd shared extension for php php5-iconv-5.2.8 The iconv shared extension for php php5-mbstring-5.2.8 The mbstring shared extension for php php5-mcrypt-5.2.8 The mcrypt shared extension for php php5-mysql-5.2.8 The mysql shared extension for php php5-mysqli-5.2.8 The mysqli shared extension for php php5-openssl-5.2.8 The openssl shared extension for php php5-pdo-5.2.8 The pdo shared extension for php php5-pdo_sqlite-5.2.8 The pdo_sqlite shared extension for php php5-posix-5.2.8 The posix shared extension for php php5-session-5.2.8 The session shared extension for php php5-simplexml-5.2.8 The simplexml shared extension for php php5-spl-5.2.8 The spl shared extension for php php5-sqlite-5.2.8 The sqlite shared extension for php php5-tokenizer-5.2.8 The tokenizer shared extension for php php5-xml-5.2.8 The xml shared extension for php php5-xmlreader-5.2.8 The xmlreader shared extension for php php5-xmlwriter-5.2.8 The xmlwriter shared extension for php php5-zlib-5.2.8 The zlib shared extension for php pkg-config-0.23_1 A utility to retrieve information about installed libraries png-1.2.32 Library for manipulating PNG images printproto-1.0.3 Print extension headers proftpd-1.3.2.r2_1 Highly configurable ftp daemon psearch-2.0.1 An utility for searching the FreeBSD Ports Collection python-2.5,2 The "meta-port" for the default version of Python interpret python25-2.5.2_3 An interpreted object-oriented programming language t1lib-5.1.2,1 A Type 1 Rasterizer Library for UNIX/X11 xcmiscproto-1.1.2 XCMisc extension headers xextproto-7.0.2 XExt extension headers xf86bigfontproto-1.1.2 XFree86-Bigfont extension headers xproto-7.0.10_1 X11 protocol headers xtrans-1.0.4 Abstract network code for X # --

※ 發信站: 批踢踢實業坊(ptt.cc) ◆ From: 220.133.5.175