Comments on: Hardening a Linux server in 10 minutes http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/ We only do fun stuff. Fri, 10 Oct 2008 21:44:23 +0000 http://wordpress.org/?v=2.6 By: Blue Net Support » Blog Archive » Hardening a Linux Server in 10 Minutes http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/#comment-408376 Blue Net Support » Blog Archive » Hardening a Linux Server in 10 Minutes Tue, 08 Jan 2008 14:50:21 +0000 http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/#comment-408376 <p>[...] Mar  1 16:14:18 CET 2006 (as copied from : http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/ ) Did you know that a freshly installed Linux server can be hardened in less than 10 minutes? Heres [...]</p> [...] Mar  1 16:14:18 CET 2006 (as copied from : http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/ ) Did you know that a freshly installed Linux server can be hardened in less than 10 minutes? Heres [...]

]]> By: random reader http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/#comment-342520 random reader Thu, 04 Oct 2007 10:36:47 +0000 http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/#comment-342520 <p>For god sakes, stop abusing the term "hardening" in such a vague context. Stopping and starting services has nothing to do with the term.</p> <p>And for god sakes, learn to configure a firewall by its fundamental principle: first drop everything, then allow.</p> For god sakes, stop abusing the term “hardening” in such a vague context. Stopping and starting services has nothing to do with the term.

And for god sakes, learn to configure a firewall by its fundamental principle: first drop everything, then allow.

]]> By: gmiga http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/#comment-4721 gmiga Tue, 21 Mar 2006 12:26:16 +0000 http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/#comment-4721 <p>Hi,</p> <p>-xinetd is having nice features to restrict acces such as no_access or access_time. -PAM is nice to increase security, http://www.hccfl.edu/pollock/AUnix2/PAM-Help.htm -SELinux is also nice , http://www.nsa.gov/selinux/info/faq.cfm . It take 8 -12 % global performances decrease on some busy servers. -Tcp wrappers are great , your daemon must call libwrap. -iptables , imo more for a general firewall. Going to do some case by case on each server with iptables is well ... a question of tastes.</p> <p>Regards</p> <p>Guillaume.</p> Hi,

-xinetd is having nice features to restrict acces such as no_access or access_time. -PAM is nice to increase security, http://www.hccfl.edu/pollock/AUnix2/PAM-Help.htm -SELinux is also nice , http://www.nsa.gov/selinux/info/faq.cfm . It take 8 -12 % global performances decrease on some busy servers. -Tcp wrappers are great , your daemon must call libwrap. -iptables , imo more for a general firewall. Going to do some case by case on each server with iptables is well … a question of tastes.

Regards

Guillaume.

]]> By: Olivaw http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/#comment-4525 Olivaw Sat, 04 Mar 2006 09:55:31 +0000 http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/#comment-4525 <p>For mysql, just configure it to only bind to 127.0.0.1. It will be as secure and simpler, no need for iptables in this case.</p> <p>(see bind-address directive in my.cnf)</p> For mysql, just configure it to only bind to 127.0.0.1. It will be as secure and simpler, no need for iptables in this case.

(see bind-address directive in my.cnf)

]]> By: TechnoPrimitive » Blog Archive » Hardening a Linux server in 10 minutes » The R Zone http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/#comment-4504 TechnoPrimitive » Blog Archive » Hardening a Linux server in 10 minutes » The R Zone Wed, 01 Mar 2006 19:22:38 +0000 http://rudd-o.com/archives/2006/02/27/hardening-a-linux-server-in-10-minutes/#comment-4504 <p>[...] Hardening a Linux server in 10 minutes » The R Zone [...]</p> [...] Hardening a Linux server in 10 minutes » The R Zone [...]

]]>