Chris Murphy wrote:
> There is a machine that hosts a web site that needs to be communicated
> with remotely from an NT machine. The programs that are used on the NT
> machine are netscape (therefore POP3), ftp and a terminal type program
> called Zoc, which seemed to do a better job than telnet.
I will assume the remote machine is running linux
>
>
> The question is what is the best (most painless) way of making this
> setup secure?
first of all, remove telnetd if it is not used
close all the ports not being used by daemons. Sounds like the
only ports you need open are for ftp http and what ever Zoc runs on.
Install ipchains and block off the traffic you do not wish, you may even
stop responses to ping to really be invisable.
Read up on hosts.allow and hosts.deny, hosts.deny should read
ALL: ALL and hosts.allow should have the services available
only to hosts you wish.
Be sure you have the latest upgrades/patches
This is just a start, vigilance
>
>
> Is this sort of thing bread and butter when you have a securefest?
yes, HIGHLY recommended
Kevin
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
