Security

Mag|c · 06-21-2003, 03:43 AM

I have the slack 9.0 distro and i am a newbie.

I want to secure my system and i need help.

Could you help me ?

ThaX

Poetics · 06-21-2003, 03:56 AM

What will the system be used for (server, desktop, toaster-oven, ?), and what types of services do you think you'll need (SSH, FTP, Samba, ?)?

Mag|c · 06-21-2003, 12:54 PM

THE SYSTEM'S USE WILL BE SERVER. I WILL RUN SSH, FTP,HTTP,SQL DATABASE AND PHP.

COULD U HELP ME ?
THANX

KneeLess · 06-21-2003, 08:49 PM

Well there are a few things you should do.

1. Edit the services you don't use out of /etc/rc.d/inet1 and /etc/rc.d/inet2. (There might be one more in /etc, but I forget the name, and I can't check now, on a friend's Mac OS X Laptop *barf*.)

2. Setup a NIDS. I recommend Snort v2.

3. Configure Iptables (or Ipchains). I like using Jay's Iptables Firewall.

4. Get Nmap to scan your ports.

5. Get security updates, patches, and fixes.

Mag|c · 06-28-2003, 08:27 AM

Hi

can you tell me where i can find security patches,updates nad fixes for the slackware 9.0 distro ?

thanx a lot

tobyl · 06-28-2003, 08:54 AM

you could start here:
http://www.slackware.com/security/

also sites like this are helpful:
http://www.linuxsecurity.com/

this very forum contains a section called Security. unSpawn in particular has contributed a great deal, perhaps you would like to check out his sticky post?

Synth218 · 06-28-2003, 09:32 AM

my system is mostly for desktop use but i do alot of work on the interent and alot of programming any suggestions on securing it cause when i was a windoze loser i got viruses like every couple weeks that hasnt happened yet w/ slack

so i wanna keep it up and prevent it from happenieng by secruing my system any suggestions??? and when would u say its the right time for a noob like me to recompile his kernal???

Azmeen · 06-28-2003, 10:33 AM

First off, I'd recommend closing down unneeded services. Files to check and disable unneeded services include /etc/inetd.conf, /etc/rc.d/rc.inet1 and /etc/rc.d/rc.inet2.

After that, set up a good iptables firewall. An excellent example I found is markus1982's nailed down firewall which can be seen here.

You might want to disable a few services/ports which he allowed though. Also do not forget to change the IPTABLES variable definition which should be in /usr/sbin/iptables on slackware.