LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-26-2007, 02:42 PM   #1
RHLinuxGUY
Member
 
Registered: Oct 2003
Distribution: Ubuntu 7.04
Posts: 889
Blog Entries: 1

Rep: Reputation: 30
Would not having a domain name be insecure?


Would it? I was told that bots search numbers to find insecure sites on the web to attack. I don't want this happening to my web server, since I'm still an apache/php newbie.

If so, how would it be, and why?

And one last question: I know you can easily get the IP to a domain name by simply using ping,(or maybe even `whois`) but I don't know if there is a good reason NOT to give my IP to others, to try something out at my web server/site.

Thanks in advance!
 
Old 01-26-2007, 02:48 PM   #2
b0uncer
LQ Guru
 
Registered: Aug 2003
Distribution: CentOS, OS X
Posts: 5,131

Rep: Reputation: Disabled
Since ip address is fairly easy to get from a domain name (there is probably more programs that can do it than I can count), I don't that has anything to do with being secure. After all a domain name is just a set of letters that are "aliased" to an ip address so it's easier for a user to type linuxquestions.org to their browsers -- and rememer -- than always type an ip address. People usually like to use names instead of long series of numbers. And one aspect of domain names is what the name tells to a person: if one wants to find information about, say, Linux, the person is more probable to try out http://www.linux.org (or .org or .com or something), than just guess something like http://83.38.72.27. I really doubt if it has got anything to do with security, having or not having a domain name, since if somebody would like to write a bot that searched specific kind of machines from the web, it would create no problems getting the ip address from the domainname -- and after all, ip address is just an address of a machine on the net, it doesn't reveal any information about the machine being secure or not.
 
Old 01-26-2007, 05:44 PM   #3
RHLinuxGUY
Member
 
Registered: Oct 2003
Distribution: Ubuntu 7.04
Posts: 889

Original Poster
Blog Entries: 1

Rep: Reputation: 30
Thanks b0uncer, I was just making sure if there was anything I sould be aware before giving out my IP address. Since I have not paid for a domain yet.
 
Old 01-26-2007, 11:01 PM   #4
chort
Senior Member
 
Registered: Jul 2003
Location: Silicon Valley, USA
Distribution: OpenBSD 4.6, OS X 10.6.2, CentOS 4 & 5
Posts: 3,660

Rep: Reputation: 76
There's nothing insecure about having, or not having a domain name. Bots will find you if you are connected to the Internet in any way.

What you need to be worried about is your PHP code. PHP exploits were 43% of the security vulnerabilities last year, most of it from very basic mistakes in handling input in PHP pages. Do your home work on secure PHP coding practices or you will surely regret it.
 
Old 01-27-2007, 12:53 AM   #5
RHLinuxGUY
Member
 
Registered: Oct 2003
Distribution: Ubuntu 7.04
Posts: 889

Original Poster
Blog Entries: 1

Rep: Reputation: 30
Will do. :X Thanks again!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
NFS insecure? Micro420 Linux - Security 8 12-15-2006 01:56 AM
xlock insecure... Synesthesia Linux - General 5 02-05-2006 12:36 AM
Telnet is insecure but ... Q*Bert Linux - Security 2 03-29-2003 01:21 PM
/etc/exports: insecure meshcurrent Linux - Security 2 03-16-2003 04:01 AM
Netscape6.2 insecure? LabRad Linux - General 2 04-15-2002 12:42 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:22 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration