LITTLEBLACKDOG.COM

Stray Dog Joined: 28 Nov 2004 Posts: 3

I just did a freeBDS install and the following are activated in the sysinstall menu and I was just wondering if I can disable them?

AMD Flags
TCP Extensions
Startup Dirs
Named Flags
NIS Domain name
Quotas

I am running a web server (personal): mySQL, apache and PHP.

Brad

Posted: Mon Nov 29, 2004 12:41 am Post subject:

Welcome to the forums, darb! or is it brad?

To answer your question:

AMD is the Automatic Mount feature. If you have NFS mounts you want to use regularly, you might want this. AMD Flags adds usefulness to AMD by setting default options. You wouldn't need either if you haven't got NFS mounts.

TCP Extensions enables RFC1323 and 1644 -defined extensions to TCP, which should speed up connections on a workstation, is not recommended on a server.

Startup dirs is useful, and modern, and you should keep it. Startup dirs is the rc.d that live in /usr/local/etc/rc.d ... very useful.

If you are not running a nameserver you probably don't need named flags (you aren't running named, right?) and NIS Domain Name is only if you are running NIS (old yp). Are you?

Quotas are useful in keeping you from running the system out of disk space. If you are running a server this is an excellent idea.

Hope it helps.

Stray Dog Joined: 28 Nov 2004 Posts: 3

EdisonRex wrote:

... (you aren't running named, right?) ... NIS Domain Name is only if you are running NIS (old yp). Are you?

Hope it helps.

No, just a webserver, apache2, php and mySQL.

That was great, I would have has to search for days to find all that information. Thanks.

In your article "How To Install a Secure BSD System - Part 1" , an excellent resource I might add, you mention:

Quote:

tcp_drop_synfin=”YES”

Tip: This option would break RFC compliance. Do not use this on a web server.

I was planning on running a "personal" webserver on a no-ip domain, so this wouldn't be an issue, would it? RFC is that some sort of standard.

Brad

Posted: Tue Nov 30, 2004 3:35 am Post subject:

RFCs (Requests for Comment) are the procedures by which standards get defined for all things the IETF has sway over.

If you are serving pages to the Internet at large, this is a concern. If not, then it is less of a concern.