LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 10-05-2016, 04:57 AM   #1
Shamu88
LQ Newbie
 
Registered: Oct 2016
Posts: 2

Rep: Reputation: Disabled
How to secure the network using linux


Hi All,

I want to secure my network where i don't want to invest the money on Firewall. How effectively i can secure the network using Linux.
Suggest what i have take the initial steps as i am new to linux.


Regards,
Shamanth
 
Old 10-05-2016, 05:40 AM   #2
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 2,305

Rep: Reputation: 816Reputation: 816Reputation: 816Reputation: 816Reputation: 816Reputation: 816Reputation: 816
You don't mention the size of network you wish to protect, how your external connectivity is delivered, or if you have any requirements such as public facing server/services. For example, many "home" ISP routers have full firewall functionality built in that can be accessed and configured from a web interface. "Business" ISP could be as simple as an NTU with an ethernet port that's pushing everything out or could also have firewall functionality.

So the basics:

1) Pick a distro (I'd recommend CentOS 7 as it's compatible with RedHat 7 and there's LOADS of tutorials available)
2) Start googling for IPTABLES tutorials
3) Implement

From past experience I prefer a physical firewall appliance.
 
Old 10-05-2016, 05:55 AM   #3
Shamu88
LQ Newbie
 
Registered: Oct 2016
Posts: 2

Original Poster
Rep: Reputation: Disabled
Hi Ten Tenths,

I have a 100 users and we have a just ISP connectivity no security is applied and we do have some critical servers which have critical data recently got affected with bit coin ( Ransomware ) attack so without purchasing a firewall cant we secure our network using linux

Regards,
Shamanth
 
Old 10-05-2016, 06:05 AM   #4
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 2,305

Rep: Reputation: 816Reputation: 816Reputation: 816Reputation: 816Reputation: 816Reputation: 816Reputation: 816
Yes, you can totally protect your network with linux and the right hardware (basic server with multiple nics)

However, a basic linux firewall / router on it's own won't protect you against ransomware.

If you want to do that at firewall level you're going to need content examination and filtering and probably SSL inspection too. For THAT, and for a 100+ user company I'd seriously invest in an appliance that CAN do these things. Figure that even if you have to spend $2000 on one then that's $20 per machine. I'm sure your data security is worth more than $20 per machine.
 
Old 10-05-2016, 06:58 AM   #5
wpeckham
Senior Member
 
Registered: Apr 2010
Location: Continental USA
Distribution: Debian, Ubuntu, Fedora, RedHat, DSL, Puppy, CentOS, Knoppix, Mint-DE, Sparky, Vsido, tinycore, Q4OS
Posts: 1,795

Rep: Reputation: 619Reputation: 619Reputation: 619Reputation: 619Reputation: 619Reputation: 619
If you cannot afford an appliance, you can download to image of Astaro Security Appliance and load a machine with it to build your own. If you have a problem finding that download (from SOPHOS I believe) you can check distrowatch.com for firewall distributions: some of those are VERY good.
 
1 members found this post helpful.
Old 10-05-2016, 07:02 PM   #6
jefro
Moderator
 
Registered: Mar 2008
Posts: 15,691

Rep: Reputation: 2263Reputation: 2263Reputation: 2263Reputation: 2263Reputation: 2263Reputation: 2263Reputation: 2263Reputation: 2263Reputation: 2263Reputation: 2263Reputation: 2263
You have a number of ways to secure the network. As noted above you could use a firewall distro like Untangle. You can run it on a dedicated machine as firewall. You can also run it under a virtual machine and have all lan systems access the vm then to wan. I like to keep lan segments discrete and separated from wan segment.

A firewall however doesn't prevent issues. Be sure to learn and use as many best practices as you can.
 
Old 10-06-2016, 12:23 AM   #7
Jjanel
Member
 
Registered: Jun 2016
Distribution: any&all, in VBox; Ol'UnixCLI; NO GUI resources
Posts: 645
Blog Entries: 7

Rep: Reputation: 220Reputation: 220Reputation: 220
I'm *guessing*: you have 100 MS-WinX desktops, and the RansomeWare is *MS-Win* code (maybe arriving in emails, not a network *connection, directly*, which a basic firewall filters).

IF the 100users could run only Linux, [mostly] the MS Ransome code would do nothing!

There's probably Linux applications that can *examine* email contents (spamassassin but I don't know)

Best wishes, in this tough task!
 
Old 10-06-2016, 09:12 AM   #8
malekmustaq
Senior Member
 
Registered: Dec 2008
Location: root
Distribution: Slackware & BSD
Posts: 1,617

Rep: Reputation: 442Reputation: 442Reputation: 442Reputation: 442Reputation: 442
Quote:
Originally Posted by Shamu88 View Post
Hi All,

I want to secure my network where i don't want to invest the money on Firewall. How effectively i can secure the network using Linux.
Suggest what i have take the initial steps as i am new to linux.
Regards,
Shamanth
Quote:
Originally Posted by Shamu88
Hi Ten Tenths,
I have a 100 users and we have a just ISP connectivity no security is applied and we do have some critical servers which have critical data recently got affected with bit coin ( Ransomware ) attack so without purchasing a firewall cant we secure our network using linux
Regards,
Shamanth
Since this is a case in homework the shortest answer is:
Utilize one of your servers to act as proxy server imposing a bottle-neck for easier security management.
Run IPTABLES in every server, it is built-in every linux kernel, you don't have to pay anything for that.
If that does not work...

The shortest way to safety is don't connect you network to the internet.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
can't hop onto secure network in linux mint fanofjesus Linux - Newbie 10 06-28-2016 01:28 PM
Secure network boot, Secure NFS alternative? Lop3 Linux - Security 1 07-21-2015 12:55 PM
LXer: oRouter Linux box offers secure Wi-Fi via Tor network LXer Syndicated Linux News 0 05-07-2014 05:40 AM
Is this a secure way to set up a home network (with network storage) ? phildacey Linux - Security 2 08-24-2006 05:25 AM


All times are GMT -5. The time now is 03:19 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration