LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 07-24-2001, 03:10 PM   #1
dilberim82
Member
 
Registered: Apr 2001
Location: NY
Distribution: used to be Redhat, now Debian Sarge
Posts: 291

Rep: Reputation: 30
router, name server, web server, ssh, mailserver


Is it a good idea to run all of the above in a one computer? Or should i buy another used computer which will just have router? And if i have a linux box as a router, can i use my other computer as a nameserver, and a webserver (because its going to have an ip like 192.168.0.1)? Which way is more secure?
 
Old 07-25-2001, 03:22 AM   #2
mcleodnine
Senior Member
 
Registered: May 2001
Location: Left Coast - Canada
Distribution: s l a c k w a r e
Posts: 2,731

Rep: Reputation: 45
Logic would dictate that the rule of
Code:
echo "all eggs" > basket.one
is just a bad foundation for a good network.

I've got the hardware, just short in the talent pool (it's just lonely me in the shallow end). I need to place a http server behind a firewall, keep my named servers in a DMZ, and try to get mail to either a 'private' IP or just to a box behind a rugged, sniffing firewall.

I've read as many howto's as I can find, and my setups still fail. I've got five static IP's. I've used two of them for the name servers (I know... I should co-locate a name server.) The last time I attempted it I had a really funky routing problem that looked like it had potential as a totally unpredictable balancing firewall (ie: useless).
 
Old 07-25-2001, 07:09 AM   #3
jharris
Senior Member
 
Registered: May 2001
Location: Bristol, UK
Distribution: Slackware, Fedora, RHES
Posts: 2,243

Rep: Reputation: 46
I think it should be noted that this isn't going to be a business setup as far as I could gather from previous threads - just a home LAN...

cheers

Jamie...
 
Old 07-25-2001, 03:50 PM   #4
dilberim82
Member
 
Registered: Apr 2001
Location: NY
Distribution: used to be Redhat, now Debian Sarge
Posts: 291

Original Poster
Rep: Reputation: 30
Thanks everyone who replied!

I understand both of you but as much as this is home use only, i think it would be a good idea to have as much security as i can... I am no expert on security, neither anything related to it but i think it would be a good practice for me to do them in two different boxes... I dont want to break any eggs. Ok now i've decided to have a linux box router, which services do you suggest for me to run on these? I was thinking of

P200, 3.2 GB, 64 MB = Router and name server
PII 450 10 GB 128 MB = Webserver, mailserver and ssh

Is that good or should i use another combination?
 
Old 07-25-2001, 04:08 PM   #5
mcleodnine
Senior Member
 
Registered: May 2001
Location: Left Coast - Canada
Distribution: s l a c k w a r e
Posts: 2,731

Rep: Reputation: 45
Yep. Config looks good, but sshd on the firewall box would be handy as well. DENY port 22 on the 'public' interface if you don't need to manage it from the outside world.
 
Old 07-25-2001, 04:52 PM   #6
dilberim82
Member
 
Registered: Apr 2001
Location: NY
Distribution: used to be Redhat, now Debian Sarge
Posts: 291

Original Poster
Rep: Reputation: 30
thanks for replying mcleodnine
I do alot of traveling and i have to update the contents of my website (if i ever can get it up and running)... + I am going to be hosting a website for my brother and he does not know anything about linux... I am going to make a user account for him (obviously) and he can change contents from his computer.
 
Old 07-25-2001, 07:03 PM   #7
nabil
Member
 
Registered: Feb 2001
Location: MI, USA
Distribution: Debian Linux 100% GNU
Posts: 210

Rep: Reputation: 31
So What is the problem here!
 
Old 07-25-2001, 07:56 PM   #8
dilberim82
Member
 
Registered: Apr 2001
Location: NY
Distribution: used to be Redhat, now Debian Sarge
Posts: 291

Original Poster
Rep: Reputation: 30
k

Nabil,
I got the dns to work for the first time today . Boy does it feel good . But my bro bought another comp and he wants to use it to surf the net, and i bought another computer to use it as a router . I was just trying to figure out which services to run on which computers and i think the problem is solved.
And i owe a big thank you to you, Jamie, and Jeremy and everyone else who made this place possible for the newbies .
 
Old 07-26-2001, 03:33 AM   #9
nabil
Member
 
Registered: Feb 2001
Location: MI, USA
Distribution: Debian Linux 100% GNU
Posts: 210

Rep: Reputation: 31
Cool,
Good for you.
If you need a very simple solution for a router, then get smooth wall..It is a linux firewall and a router. It is easy you can set it up in less than 10 minutes and have a working router with a firewall built in.
 
Old 07-26-2001, 06:14 AM   #10
raz
Member
 
Registered: Apr 2001
Location: London
Posts: 408

Rep: Reputation: 31
I agree, you have to decide just how important network security is to you.
If your a business then it means money and reputation when something goes wrong, if it's just a home LAN then it's just annoying and time consuming.

My job is to provide security for Banks in London and this is how you would roughly do it. "without going into too much detail"

============
Big Bad internet
============
|
HTTP in
HTTPS in
|
------------------------
Bank's FW
------------------------
DNS,
WEB
VPN tunnel to 2nd FW


------------------------------------- new network --------------

=================
Other trusted bank site
=================
|
VPN/IPSEC/FWZ
|
|
--------------------------
Banks 2nd FW
---------------------------
|
|
|
|
SMTP
VPN tunnels (DMZ)
|
------------------------
Banks 3rd FW
------------------------
|
IDS
VPN tunnel servers (IDZ + stateful inspections)
|
-------------------------
Banks FW
-------------------------
|
PDC's & POP, DNS cached, etc
Corporate internal IP's -------> red lines to transaction servers
Database systems


This is just a rough diagram, but it shows you the topology needed, also you don't put your public access sites anywhere near your private sites.
And you use the Mutilhomed firewall method with passive IDS and stateful packet inspection, using Cisco PIX and FW1 boxes with Rainwall and other Load balancing techniques.

/Raz

Last edited by raz; 07-26-2001 at 06:17 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Router/Web Server/ Printer Server EldinTux Linux - Networking 2 04-11-2005 12:48 PM
setup mailserver/web server/ftp server hariiyer Linux - Networking 1 11-27-2004 01:16 AM
can we configure a Linux server with mail server,file server and web server kumarx Linux - Newbie 5 09-09-2004 06:21 AM
ssh server from behind a router Moses420ca Linux - Newbie 4 07-12-2003 08:57 AM
Red Hat Router/Webserver/Mailserver/File Server SixShooterz Linux - Networking 3 07-11-2003 03:13 PM


All times are GMT -5. The time now is 12:37 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration