i couldnt find any typo error. :)

i use an another way to work with chrooted bind.
i edit /var/named/etc/named.conf, also copy some lines (about rndc key) to that file from /etc/named.conf. then put zone files in /var/named/chroot/ directory.

u may want to put some lines in your BIND howto about "rndc connection failed" error. because i generally got that error when i was trying to configure bind on redhat/fedora.

keep up good works.

DHCP has now been completed, so has vsFTPd with documentation for enabling TLS/SSL encryption and controlling user access.

Any testers..?

www.brennan.id.au

Would love to help you test it out... but first, I need to get my network card working...

Squid Proxy Server has been added, detailing access control lists, domain blacklists, and user authentication.

I haven't documented squidguard section, its TODO.

Theres also a little iptables rule that enforces the use of the proxy, which stops users bypassing it.

BU.

it is very good!
may i suggest u to add a section how to block msn messenger or other messengers trou squid ?
i use squidguard too. when i tried to compile it from source, i got some errors about db. i installed squidguard dag rpms.

keep up good works!

I'll add that to the TODO. :D (like SG)

Miles.

Much appreciated
 

I should have some free time over Christmas so I should be able sit down properly and have a look at it:) Sounds like an interesting 'worthwhile' project.

That would be great, Im looking for some serious testers so I can make sure its suitable and easy to understand/implement before it gets submitted.

Appreciate any feedback, should be about 90% done by then too..

Regards,

Miles.

The FTP server howto seems good, but what about considering users who are behind a NAT, such as myself.
For example:
I use ICS with a WinXP host (Direcway -- my isp -- only works on XP)
Direcway is then behind a NAT

I'd want to be able to host an FTP server from my desktop running on a LAN in my room.

That's a somewhat complicated problem that's hard to find answers for, it'd be nice to see a guide that has a how-to. I still haven't found the solution, actually.

Not trying to hijack this thread, so don't reply with answers to this. If anyone wants to, email or message me. Just trying to give more ideas. I'm willing to try your FTP server portion if that were able to be added, though.

I would suggest adding notes about alternative servers to the ones you describe. For example, Postfix and qmail seem to offer higher security than sendmail. Courier is also considered a worthy alternative. djbdns may offer the same advantage over BIND. For Postfix and qmail, at least part of the security advantage is their modularity. For djbdns, at least part of the security advantage is that it operates in a chroot sandbox.

You don't need to offer the same level of installation/configuration details of alternative packages as you do for sendmail, BIND, or whatever else you find alternatives to. For qmail and djbdns, pointers to http://www.lifewithqmail.org/ and http://www.lifewithdjbdns.com/ may suffice (they probably make better pointers than their the programs' home pages).

Perhaps others can offer you additional alternatives to note and pointers to include. There is no particular reason to make a list of alternatives exhaustive. A selective list is probably more helpful than an exhaustive one. But I would recommend that you include enough so that the reader sees that there are alternatives out there and that some of them may offer real and important advantages.

OK, I have finally finished chapter 13 (Apache Web Server), well at least the initial draft.

It covers the following sections:

• Basic Configuration
• Starting the Server
• User Directories (and permissions - skel update)
• Enabling CGI Scripts (also for users)
• Authenticating Users
• Virtual Hosts
• Using SSL Certificates (forcing SSL)
• Webmail Configuration

Now Im sure I'll get some testers :p

http://www.brennan.id.au/13-Apache_Web_Server.html

Miles

Hi

I am a newbie and was looking all around for a such a howto soon I will try it and let you know.

Thanks :Pengy: :scratch:

Ok I've finished the mail server chapter (12).

Well I still need to do spamfiltering.. Its on TODO..

• Basic Configuration
• Starting The Services
• Hardening Sendmail
• Fighting Spam (TODO)
• Antivirus Scanning

http://www.brennan.id.au/12-Sendmail_Server.html

You can get the Clam AntiVirus "clamav" and "clamav-milter" RPMs over here if you need them: http://crash.fce.vutbr.cz/

Miles.

@Mr.Rainbow: that would be great, thanks

I have personally used Butt-Ugly's page and have found it to be absolutely fantastic, very simple to follow and simply works first time round.

Keep up the great work :D

OK, thats now 15 done - System Printing...

• Configuring CUPS
• Adding CUPS Printers
• Installing The Driver File

More of a smallish chapter, but guides you through setting up a CUPS server and making the printers available for your internal workstations.

Also updating printer drivers...

http://www.brennan.id.au/15-System_Printing.html

Thanks mate, Im glad you like it.

Miles