Secure Zope
This How-to applies to:
Plone 3.0.x, Plone 2.5.x, Plone 2.1.x, Plone 2.0.x
This How-to is intended for:
Server Administrators
Some methods of installing Zope leave it vulnerable to abuse. This page on the WebLion wiki tells how to close the holes.
In particular, the article tells how to make Zope and ZEO listen only on local sockets, prevent untrusted local users from connecting directly to Zope and ZEO, and keep spammers from spewing garbage all over your site.