Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
I have just configured Centos 5.5 LocalMailServer with fetchmail and sendmail , Proxy with Squid and FileServer with samba. Now my concern is security.. How can i protect my server with outside attack. Will I need to block some ports or I need special tools or script so no one from outside can attack my machine.
My machine is working on intranet with local ip only.. No web server or static ip exists. Machine is connected with ADSL router to access internet.
If machine is not exposed to external world, your system is not at risk from outsiders but insiders itself. If you are connecting to internet using adsl modem, you can block certain ports at that level.
iptables with tcp wrappers should make your system stronger. Blocking ports is one way to secure your system but you need to also keep watch on the processes running.
But your question is very vague to answer it to the point. Can you elaborate what you want to do with the server? How is it going to be used? Who are going to be the users or clients?
Just to add a point of clarification on the last post and the original question: The server is on local LAN IP only, but connects to the Internet via an ASDL router. If you have any port forwarding in the router then the services on these ports are exposed to attack almost the same degree as if the machine were directly connected. I concur with Linuxlover.chaitanya, please elaborate on your objectives so that we can better advice with regards to security recommendations.
I missed out on the port forwarding part. And if that is done, then server is at risk. OP needs to clarify on that part.
Thanks for valuable suggestions from all of you. I do not have any port forwarding in my ADSL router right now but in later stages I would like to do it also.
If you are planning on have port forwarding for putting your server live, then you need to describe what services are you going to provide your clients. What is going to be the purpose of your server? What do you want to do with it?
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.