open bsd questions

[Larry K]

hello... I'm posting for a friend -- thanks

Hello fellow OpenBSD'ers:

Here goes:

What is special about a gateway machine? And if a box is not being setup as a gateway, what is a good typical setting;

I am having big time security problems and I want to setup one OpenBSD machine with multiple nic cards as well as a few other little things. Most of the stuff I understand, but I am definitely not an IP/TCP person.

Can someone suggest a good book on setting up router's, nic cards, etc; with OpenBSD. I have someone writing a firewall script now. (Is this re-read each time inetd starts? WHEN is it read.)

Anything wrong with doing my own termination and restart of inetd mechanically, every few seconds? (As in five seconds.) My idea is to limit the duration of access to an intruder. (This is not all I intend.)

So question #1: Can I terminate and restart inetd many times an hour without adversely the other sub-systems in OpenBSD? What is the best way to accomplish this? -- I know how to start/stop inetd, I want to know what the likely side-effects are. I am willing to accept missed packet's and generally missed messages.

Question #2: Are firewall scripts re-read each time inetd starts? When are such scripts read? I ask because I intend to mechanically rewrite the scripts dynamically, using learning techniques.

Question #3: What is a gateway machine?

Question #4: If I decline the inetd service when I build the system, what is the best way to start (and stop) the services individually?

And last: Are scripts like sshd.conf read at ssh startup? I understand that computing key factors isn't instant. I have a different approach.

 

[horndude]

#1 yes you can, not a standard way of doing things though

#2 firewall scripts are generally read at boot up everything else has initialized, typically found in /etc/rc.d/rc.local--->maybe different location for openbsd

#3 gateway is the machine or router the rest of the LAN accesses the net thru,also usually where a firewall is found

#4 Not sure, you'd have to set up each daemon individually, the ssh.conf scripts are read when inetd starts up

the inetd.conf file is re-read each time inetd is started