Hey there folks,

Yep LINUX Newbie here. As most of us have already experienced, I'm getting a baptism by fire for a server config and of course it has to be secure and efficient and done by three weeks ago if you all catch my drift.

Just wondering if anyone, GURUS or otherwise can create a simple chklist for a server config using the latest Mandrake.

I installed PHP/MYSQL/apache. Had everything running fine, and then attempted to enable security by using a high security setting and the default firewall. On the firewall I allowed access for http and ftp as this will purely be a webserver, and nothing works anymore. I even reset the settings to allow everything to access the internet and still nothing.

Strangely still, it seems as though my apache php and mysql isn't even running - any simple tests out there?

Cheers

hi,

i have a mandrake server (ver 8.2), its running apache mysql php and the rest
basically when i install it i tell it i want it in 'higher' security mode

then when everything has installed i boot the system and run rpm drake and look for all the most upto date security fixes and bug fixes etc

after all that has done and i have fixed apache ( one of the security updates wipes out a php module ^shrug^ just delete the line it complains about (all three of my servers work ) )

depending how you installed the system, i think ( its been ages since i have done a mandy linux reinstall ),
the higher security option tells iptables or ipchains ( depends on what you installed ) will set their chains to deny every thing by default.

look up ipchains and iptables in these forums and on google

ipchains and iptables tell your kernel what to accept and what to deny on the network, it acts as a firewall
ipchains, as far as i can tell, seems like it is being pushed out of general use, and iptables is taking its place


basicaly thats my check list, i am not exactly a guru on linux i am still learning too, but i am starting to pick thing up now.
if you get stuck just ask! and do a search on these fourums and on google first or some times your only reply will be to go and look on google!

happy linuxing ;-)