FTP server behind NAT gateway
by Philippe Leledy

The FTP protocol has strange peculiarities that make working behind a firewall somewhat difficult if not quite impossible. This document explains the problem and solutions for both client and server behind a gateway doing NAT. AFAIK, it's the first time a solution is proposed for the server. Details of this solution are given for OpenBSD. Read More

A network setup with FreeBSD and OpenBSD
by Jan Sipke van der Veen

This article discusses a network setup which might prove useful for people who like to put some extra effort into connecting their machines to the internet. The goal is to build a secure client and server farm on a single IP address. Read More

Jail Internals
by Evan Sarmiento

On most UNIX systems, root has omnipotent power. This promotes insecurity. If an attacker were to gain root on a system, he would have every function at his fingertips. This article focuses on the internals (source code) of Jail and Jail NG. Jail is becoming the new security model. People are running potentially vulnerable servers such as Apache, BIND and Sendmail within jails, so that if an attacker gains root within the jail, it is only an annoyance, and not a devastation. Read More

Book Review: FreeBSD an Open Source OS for your PC
by Linh Pham

Linh Pham gives us a review of the popular new book, FreeBSD: An Open-Source Operating System For Your Personal Computer by Annelise Anderson. A book written for those who have had little or no exposure to FreeBSD/UNIX but would like to try their hand at something other than Windows. Read More

Blueprints: OpenBSD Loadable Kernel Modules
by Peter Werner

Loadable kernel modules allow the system administrator to dynamically add and remove functionality from a running system. This ability also helps software developers to develop new parts of the kernel without constantly rebooting to test their changes. A caveat of loadable modules is the security risk they present. They open a wide range of possibilities to a malicious superuser and can be very hard to detect. Read More

Hey! Mister Answer Man
by Todd Whitesel

Dragging your feet back to school edition: We've got a good mixture of answers and questions this time around, class, so open your laptops to a new document and let's get started, shall we? Read More

Daemon's Advocate
by Wes Peters

Happy Birthday, again! This is now the third anniversary issue of Daemon News. I usually begin each of these columns by editing a previous one; in this case, I began with my second anniversary column. I see we made a lot of changes last year. The pace slowed somewhat this year, as Daemon News has become more mature. We've developed a stable core of columnists, a good supply of articles, and even managed to get a few recurring authors to do small series of articles for us. The attention added by Mac OS X has probably helped a bit, too. Read More