Cleaning up the back yard (with OpenBSD)

Contributed by mitja on 2008-12-20 from the an-OS-even-your-mom-would-love dept.

An alert reader reported that a recent SANS Institute White Paper describes using OpenBSD and a variety of open source software to protect your parent's home network.

It is possible to clean up the back yard with Free Open Source Software and a little design. Using off the shelf components and Open Source software the family geek can deploy a more multilayered security stance that will provide far more visibility and control over the network. This is not to say that large swaths of the Internet can be cleaned up just by plugging in a box, but to say that if anything should be a safe haven on the internet, it should be the family network, the backyard. It makes sense to clean up the backyard before taking on the world�s trash.

Read the whole paper here [PDF - 915KB].

(Comments are closed)

Comments

By Andrew Dalgleish (ajd4096) openbsd@ajd.net.au on 2008-12-22 01:26 www.ajd.net.au

Don't edit /etc/rc.conf - edit /etc/rc.conf.local
By Dean (63.225.246.63) on 2008-12-22 04:23

Great article, in addition what I would like to see is a port of the DShield client, which would increase the exposure even more.
Comments
1. By Anonymous Coward (128.171.90.200) on 2008-12-23 19:07
  
  You know what you have to do.
By Srikant (122.169.127.46) on 2008-12-22 06:39

Try HAVP instead of squidclamav. I got better performance with it. It is in the ports now.

Latest Articles

Tue, Sep 10
- 05:39 Game of Trees 0.103 released (0)
Sun, Aug 25
- 09:13 rpki-client 9.2 released (0)
Sat, Aug 24
- 11:46 No unmodified files remain from original import of OpenBSD (0)
Wed, Aug 14
- 20:39 Game of Trees 0.102 released! (0)
- 05:31 The BSDCan 2024 Playlist is now complete (0)
Thu, Aug 08
- 09:26 OpenBSD -current moves to 7.6-beta (1)
Mon, Jul 29
- 12:27 Possible future vmm(4)/vmd(8) on arm64 (1)
Sat, Jul 27
- 11:05 UDP parallel input committed to -current (0)
Wed, Jul 24
- 05:28 Incoming: UDP parallel input (1)

Credits

Copyright © 2004-2008 Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to April 2nd 2004 as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]