How to secure an open port in iptables

win32sux · 04-27-2009, 04:35 AM

Quote:

Originally Posted by jefn

Yeah, GridFTP is a secure file transfer protocol which needs a certificate. The service is a little bit secure but I think I need to secure the firewall itself. I think I need how to limit users to only access a specific folder on the firewall.

You didn't answer the chroot question.

Additionally, you are now talking about folders "on the firewall" instead of the GridFTP box.

jefn · 04-28-2009, 03:37 AM

Quote:

Originally Posted by win32sux

You didn't answer the chroot question.

Additionally, you are now talking about folders "on the firewall" instead of the GridFTP box.

GridFTP comes with Grid application called Globus. Globus uses chroot.

I would like to protect both the service and the box. If you do not know about the service, could you please suggest any to protect the box?

thanks,
J

win32sux · 04-28-2009, 05:12 AM

Quote:

Originally Posted by jefn

GridFTP comes with Grid application called Globus. Globus uses chroot.

Great.

Quote:

I would like to protect both the service and the box. If you do not know about the service, could you please suggest any to protect the box?

I gave you one suggestion back in post #4, and unixfool gave you suggestions in posts #6 and #12. To get a glimpse of the vast array of hardening options available to you, maybe stop by unSpawn's Security references thread.

jefn · 04-28-2009, 11:22 PM

Quote:

Originally Posted by win32sux

Great.

I gave you one suggestion back in post #4, and unixfool gave you suggestions in posts #6 and #12. To get a glimpse of the vast array of hardening options available to you, maybe stop by unSpawn's Security references thread.

Thanks mates all for your help