webmin

perry · 12-18-2003, 09:20 AM

well i went looking for a gui to edit the cron file. i suppose i should learn cron from the grass roots first considering it's only a text file. however, i ended up installing webmin and boy is it ever a huge package. covers the configuration for just about everything and it looks pretty cool.

the question is, is it a security risk to have it running on my system ? or does anyone have any other reservations about having webmin on the system ?

just curious

thanks

- perry

sopiaz57 · 12-18-2003, 09:43 AM

i agree that webmin is cool, but i decided to leave it off my production server. It indeed is a security risk.

win32sux · 12-18-2003, 10:03 AM

i think webmin's AWESOME... i used it a lot... it worked wonderfully for me for the whole while i used it (about a year)...

anytime you run a program that is exposed to the net, you have a certain amount of risk involved...

you can always set webmin to NOT start at boot time and just start it from a secure shell whenever you need it...

that's what i used to do...

Pcghost · 12-18-2003, 11:37 AM

The way I handle webmin is to tie port 10000 requests to a specific ip address in the firewall. The firewall then ignores any port 10000 request that does not originate from my laptop. It's not perfect security but it prevents a random port scan from detecting webmin.

perry · 12-18-2003, 03:51 PM

Quote:

Originally posted by Pcghost
The way I handle webmin is to tie port 10000 requests to a specific ip address in the firewall. The firewall then ignores any port 10000 request that does not originate from my laptop. It's not perfect security but it prevents a random port scan from detecting webmin.

whats the quickest way to do that, use arno ?

or is there a way to do it using the mandrake firewall?

- perry