PaulDotCom mailing list archives

home firewall/server


From: bradmcmahon at gmail.com (Bradley McMahon)
Date: Thu, 9 Jul 2009 09:14:37 -0400

I would say first try to ping your outside IP address, if it responds then
you have an issue. Next do a port scan and find what ports are open, if any
are that you didn't make yourself then you have a problem.
-Brad



On Thu, Jul 9, 2009 at 3:35 AM, Bert Van Kets <mailing at vankets.com> wrote:

Thanks Brad,
I'll check them out before pulling out my Lenny disk.

How do I test if my system is locked down enough? Any guides on that?

Bert

Bradley McMahon wrote:
ah going the iptables route I see.

here are two walk throughs the will get you started.

http://www.howtoforge.com/linux_iptables_sarge
http://www.howtoforge.com/custom_iptables_firewall

good luck

-Brad



On Wed, Jul 8, 2009 at 10:54 AM, Bert Van Kets <mailing at vankets.com
<mailto:mailing at vankets.com>> wrote:

    Those "Ready to configure" project do look good. They are a good
    plan-B. :-D

    As I want to learn as much as possible from this installation I'd
love
    to set up the system from scratch.
    I was thinking of using a minimal Debian 5 and install services
    gradually using a new IP subnet.

    How does one test a setup like that to see if it's secure?
    I have two public DHCPed IP addresses available on my cable modem.


    Jack Daniel wrote:
    > The wisdom of combining jewels and perimeter security aside- look
at
    > the SME Server project. It is one of the easiest and fastest
    > multipurpose server packages to build and maintain. It can be set
up
    > as a firewall and server, or standalone server. It can be
    managed from
    > the web interface alone, or you can get under the hood when you
    > want/need more control.
    >
    > Jack
    >
    >
    > On 7/8/09, Bert Van Kets <mailing at vankets.com
    <mailto:mailing at vankets.com>> wrote:
    >
    >> Hi guys,
    >>
    >> I'm a newbie when it come to setting up a server with enterprise
    >> services. I have been using Linux for several years now and have a
    >> MythTV box running. I have four PCs running and there's no
    Windows in
    >> this house. :-D
    >>
    >> I was playing with the idea of setting up a multi purpose
    server (file
    >> sharing, print server, proxy, DNS, ...). The terms
    multi-purpose and
    >> security do not go hand in hand, but that is a trade off I have
    to take
    >> because I can not afford to run a full rack.
    >>
    >> The main question is: Can I use the one machine as a firewall,
    using
    >> multiple network cards on different subnets, and at the same
    time run
    >> Squid, SMTP, DNS, DHCPD, CUPS, etc.. on it?
    >> What is the take of the experts on a situation like this? Keep
    in mind
    >> this is a home situation with a limited budget.
    >>
    >> Thanks.
    >>
    >> Bert
    >> _______________________________________________
    >> Pauldotcom mailing list
    >> Pauldotcom at mail.pauldotcom.com
    <mailto:Pauldotcom at mail.pauldotcom.com>
    >> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
    >> Main Web Site: http://pauldotcom.com
    >>
    >>
    >
    >

    _______________________________________________
    Pauldotcom mailing list
    Pauldotcom at mail.pauldotcom.com <mailto:
Pauldotcom at mail.pauldotcom.com>
    http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
    Main Web Site: http://pauldotcom.com


------------------------------------------------------------------------

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090709/1b933b0b/attachment.htm 


Current thread: