On Wed, 26 Oct 2011, Aaron Burt wrote:

> A chroot jail is a good idea for proftp or vsftp. Consider allowing only
> FTPS for authenticated connections, and only anonymous mode for regular
> FTP. Plain FTP leaks logins and passwords.

Aaron,

   It would be used only occasionally, but I'm thinking anonymous mode would
work because there would be nothing stored permanently there and in a chroot
jail access is limited.

> Short term, you might want to set up CMSMS, Apache and MySQL on a separate
> box or VM, with a new OS install, just for practice and to get up and
> running.

   I run Slackware. I bought a Jetway atom-based system (physically tiny) for
this purpose but have struggled with whare to put it and the time to keep
everything secure. Most likely, once it's up and running I can put away the
second monitor and keyboard and manage it from my main server/workstation.
I'll put Slackware-13.37/64-bit on the drive. Then I'll need to dig back
into the network docs so I can put that box on a separate subnet and still
access it from the other subnet.

Thanks,

Rich
_______________________________________________
PLUG mailing list
[email protected]
http://lists.pdxlinux.org/mailman/listinfo/plug

Reply via email to