[Server-devel] Tightening security for XS-0.5 -- things you can do on XS-0.4

[Martin Langhoff]

If you have a XS-0.4 server with its publc IP address on the internet
or on any other public network, make sure you firewall off *all* the
ports on that interface. You might want to make an exception for SSH
is you connect with ssh to the public address.

This is a rather important security measure. I am tightening some
things around security on 0.5 -- no fw yet, but services bind to the
appropriate interface only.

cheers,


m
-- 
 martin.langhoff at gmail.com
 martin at laptop.org -- School Server Architect
 - ask interesting questions
 - don't get distracted with shiny stuff  - working code first
 - http://wiki.laptop.org/go/User:Martinlanghoff