securing your linux box yourself, or using a specialty distro?

Colossis · 12-05-2003, 01:36 PM

I have been wondering if there's any difference between using one of those specialty distros like IPCop, SmoothWall, etc for creating a firewall/router/proxy box or using something like Slackware or Debian and hardening it yourself?

Is it just a matter of ease-of-use? Or do the specialty distros have specialty apps (or even a custom kernel?) that you can't get if you're using Slack or Debian?

I'm looking into creating your regular standalone firewall/router/proxy box for a home network.

TIA,
Drew

ugob · 12-05-2003, 01:44 PM

I suggest Clarkconnect.

What you get:

Web configuration

Good firewall scripts already there

Many optional programs

Very easy to setup.

Based on redhat 9.

If you install it, see http://ccfaq.valar.co.uk

Mine has been running for 120 days now

.

To answer your question, these specialty distro give you something that you could do on another distro. There is no magic there. However, you can save a lot of time by using it, and you can still learn by looking at how it works.

markus1982 · 12-06-2003, 07:50 AM

I suggest you take a look at OpenBSD which is secure by default. You can however harden any distribution; I've been hardening RedHat and Debian systems - honestly I personally prefer hardening Debian systems.

For a firewall, etc I suggest OpenBSD though. More information may be found at www.openbsd.org

markus1982 · 12-06-2003, 07:51 AM

Additionally: you may take a look at my website for hardening a linux system: www.linux-corner.net - it is as of yet just the initial start of hardening, but as time allows it will grow :-)

Colossis · 12-06-2003, 05:06 PM

Thanks for the responses!

I think I going to have to get some test boxes out and try a couple distros...

Thanks guys