[Devel-panorama] Re: Re: Angel's server

[Guillermo S. Romero / Familia Romero]

Someone at GNU changed the mailing list settings without saying
anything. Argh!

address@hidden (2000-09-15 at 0102.38 +0200):

Your return address is funny. :]

> > I also think an irc server would be nice, if we want to try that. We
> > can also use other networks, like irc.gimp.org one (lot of GNU things
> > there, all Gimp and GNOME channels are there).
>  Well, we could talk about this a little more. I dont know how to setup an
> IRC server, and I would like to know about security issues before...

Me either. But there is always a first time.

> > FTP for incoming patches / examples / images, so people can put things
> > somewhere and easy.
>  In other words, if any of us want to make a file available to the rest in a
> moment, whatever the file size, this would be a good thing.

Public upload FTP should never allow downloading without human review.
You get scans daily, I get stupid guys trying to use my Univ machine
as a piracy FTP (which they can not cos /pub/incoming sets all files
to 000 mode, but they try).

FTP only for incoming files from people that do not have an account,
nothing more. For user transfers, we should use scp and sftp (one
comes with ssh, the other uses ssh).

> > It will also serve as firewall, so maybe it will have some paranoid
> > settings, at least as much as we can put without losing fuctions. 
> And I must say I am getting very paranoid, after some attempts at breaking
> my system, so security is an important issue.

I guess we will have to close lots of ports. I have a doc from
rootprompt about that, IIRC.

GSR