Hardening production servers

[Farid Hajji]

> If you do a "make package" for each port that you install, you can copy of
> using network filesharing (NFS, Samba, etc) to distribute the
> /usr/ports/packages directory.  Create that directory if it doesn't exist,
> and "make package" will save the .tgz there rather than under each
> individual port directory.

Beware of ports that try to detect the CPU while compiling.
mplayer (IIRC) or some CPU intensive ports _may_ detect
a P4 on the compling machine and use it, so the binary
may not work on vanilla i586s. /etc/make.conf is your friend.

-- 
Farid Hajji. http://www.farid-hajji.net/address.html