LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Router & file server security (https://www.linuxquestions.org/questions/linux-security-4/router-and-file-server-security-789939/)

Yakideo 02-18-2010 08:54 AM
Router & file server security
 
Hi,

Having a router and a file server on the same box what security measurements can I take to make it more secure apart from common sense, good firewall rules etc?

Not running deamons as root is good step forward. What about jails like in BSD, does something similar exist for linux, chroot?

irishbitte 02-18-2010 12:09 PM
Well, having a router and file server on one box is really just not a good idea, because by it's very nature, a router is hardwired to be accessible! So you are giving strong functionality to a machine that should not have strong functionality! Would you consider setting up router and file server as VM's on the one box? This would inherently be far more secure..

Yakideo 02-18-2010 12:42 PM
Quote:
Originally Posted by irishbitte (Post 3868389)
Well, having a router and file server on one box is really just not a good idea, because by it's very nature, a router is hardwired to be accessible! So you are giving strong functionality to a machine that should not have strong functionality! Would you consider setting up router and file server as VM's on the one box? This would inherently be far more secure..
Since being a student usually means that one is not made of money I can't afford having two machines running 24/7.

Recently I also have been thinking about Virtualization but I'm unsure how to proceed? Would something like Xen work even if my CPU doesn't support hardware virtualization?

irishbitte 02-18-2010 05:10 PM
Broadly speaking, yes, something like VirtualBox might be simpler to use, all depends how much your machine can take. What kind of spec is it?

Yakideo 02-18-2010 05:17 PM
Quote:
Originally Posted by irishbitte (Post 3868707)
Broadly speaking, yes, something like VirtualBox might be simpler to use, all depends how much your machine can take. What kind of spec is it?
It's an Intel D945GSEJT with an atom cpu @ 1.6Ghz and 1GB of RAM.
It's not a monster but it's sure is power saving. :)

irishbitte 02-18-2010 07:02 PM
Should be able to run VB, I reckon you might need a bit more RAM, but thats not expensive! Best bet is make a plan, maybe install a base operating system, what about using a turnkey linux? Or maybe proxmox? Take a look here: http://pve.proxmox.com/wiki/Download...ed_on_3.2.2010

Yakideo 02-18-2010 07:23 PM
Quote:
Originally Posted by irishbitte (Post 3868801)
Should be able to run VB, I reckon you might need a bit more RAM, but thats not expensive! Best bet is make a plan, maybe install a base operating system, what about using a turnkey linux? Or maybe proxmox? Take a look here: http://pve.proxmox.com/wiki/Download...ed_on_3.2.2010
Proxmox looks nice, I just wonder who fast the boot time would be and how much space it takes cause the main storage on my intel board is a CF card.


All times are GMT -5. The time now is 06:23 PM.