This page lists some of the changes I make to a vanilla install of FreeBSD for security hardening. Some changes to increase network performance or make things a bit more sane are also included. It only covers basic changes that a sysadmin can make to a running system.

It could also be considered a commentary piece on the state of security in FreeBSD’s development ecosystem, highlighting their strong resistance to change and unwillingness to replace old cruft with modern alternatives.