From: Adam Flinton 

Frank Haber wrote:
> The full-opsys flashes have mentioned a couple of security holes.  I've never
> heard of an exploit aimed at these gutted-Linux boxes specifically.  (And
> they're all over the place now - storage gizmos, NATboxen).
>
> Mine are behind a constantly varying selection of SOHO minirouters, often
> without SPI or special hardening, as I check out equipment.

I like to use the truely thick routers with port forwarding only & then
slowly move towards "dmz'ing" a box.

>  They're never
> nekkid on the net.  OTOH, a SNAP! by default has open Apple and Sun shares,
as
> well as NETBIOS-NETBEUI and -TCP. There's a wide open FTP server and kind of
> web server.  WAN admin is obviously turned off.
>
> Knock wood.  My IP changes only when I swap routers.
>

Get outside dns'ing & get ip mobility.

]Adam

--- BBBS/NT v4.01 Flag-5