|
|
Sponsored Content
Top Forums
UNIX for Dummies Questions & Answers
mandrake 8.0 experts...how come it won't accept changes to security settings??
Post 7937 by Andy Hibbins on Wednesday 3rd of October 2001 05:48:57 PM
10-03-2001
Hi,
Looks like there some kind of problem with your Mandrake Control Panel software.
Here are some steps to secure your Linux box:
1 Turn off unwanted services, only use telnet, finger,rsh,portmap,nfs.nis if you have to.
2 add "ALL: ALL" to /etc/hosts.deny and then add the list of tcp wrapper compiled services that you want to allow access to in /etc/hosts.allow.
3 Services that only need to listen for requests on your lan should be configured to bind to the lan nic's ip address, i.e. pop3/imap4, ssh, ftp etc, most services can be configured either via the relevant xinetd config file or the own config file.
4 If you need services to listen on your machine's internet interface turn off the service's banner or falsify it, to make it harder for a hacker.
Also ensure these services are the latest versions, to prevent against any security vulnerablilities.
5 You could also recompile your kernel with the ip personality module, this allows your machine to look like it's running another OS when scanned, i.e. Amiga, Windows 2000, etc, this should confuse any potential hackers.
6 Setup a firewall with a DENY all default policy, only allow required services in and out of the firewall.
7 Don't use the same passwords for internet sites and your system.
If you have any other questions don't hesitate to ask, myself and the other members of unix.com will do our best to help you.
Andy H
Looks like there some kind of problem with your Mandrake Control Panel software.
Here are some steps to secure your Linux box:
1 Turn off unwanted services, only use telnet, finger,rsh,portmap,nfs.nis if you have to.
2 add "ALL: ALL" to /etc/hosts.deny and then add the list of tcp wrapper compiled services that you want to allow access to in /etc/hosts.allow.
3 Services that only need to listen for requests on your lan should be configured to bind to the lan nic's ip address, i.e. pop3/imap4, ssh, ftp etc, most services can be configured either via the relevant xinetd config file or the own config file.
4 If you need services to listen on your machine's internet interface turn off the service's banner or falsify it, to make it harder for a hacker.
Also ensure these services are the latest versions, to prevent against any security vulnerablilities.
5 You could also recompile your kernel with the ip personality module, this allows your machine to look like it's running another OS when scanned, i.e. Amiga, Windows 2000, etc, this should confuse any potential hackers.
6 Setup a firewall with a DENY all default policy, only allow required services in and out of the firewall.
7 Don't use the same passwords for internet sites and your system.
If you have any other questions don't hesitate to ask, myself and the other members of unix.com will do our best to help you.
Andy H
|
|
10 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
I wonder how I shall read the result below, especially 'what'
shown below.
The result was shown when I entered 'w'.
E.g what is TOP? What is gosh ( what does selmgr mean?)?
login@ idle JCPU PCPU what
6:15am 7:04 39 39 TOP
6:34am 6:45 45 45 TOP
6:41am ... (1 Reply)
Discussion started by: Aelgen
1 Replies
2. UNIX for Dummies Questions & Answers
On the following script that I get an error when I try to execute as root:
#./mv_log.sh
bash: /root/util/mv_log.sh: Permission denied
#!/usr/bin
datetag=`date --date='1 day ago' +"%b%d%Y"`
logname=`find /opt/bea/wlserver6.1/config/*/logs/ -iname 'access.log0*' -mtime -1 -print`
mv... (4 Replies)
Discussion started by: darthur
4 Replies
3. UNIX for Dummies Questions & Answers
Edit your /etc/modules.conf file to either remove or comment out the two lines :
alias sound-slot-0 snd-card-intel8x0
above snd-card-intel8x0 snd-pcm-oss
...and replace them with the following line:
alias sound i810_audio
....viola! After saving and rebooting, now I gots da sound!... (0 Replies)
Discussion started by: DownSouthMoe
0 Replies
4. UNIX for Dummies Questions & Answers
I use Unix at work, and thought that I should finally install it on my computer, just as a play around. Plus I am into programming C and various other languages. I have never used Mandrake linux, and to be honest it was just a freebie that I found that I thought I would give a quick try. I have... (3 Replies)
Discussion started by: SiE
3 Replies
5. UNIX for Dummies Questions & Answers
Backup Exec Agent won't start....
Question: Has anyone had any previous experience working with Backup exec for Unix? I'm running SCO Openserver 5.0.5 and Backup Exec agent Version 5.01 Revision 5.032 Basically, these are the commands I'm issueing and here is the output.
# cd etc
# cd... (1 Reply)
Discussion started by: PatMcCoy
1 Replies
6. UNIX Desktop Questions & Answers
I'm trying to set up a school Linux computer and use Samba to link it to Windows NT.
Pentium-133
Hercules 8 meg Stingray 128/3D
I'm not too familiar with SuSE's config tools (more used to Mandrake) and so am having some trouble configuring X. SaX2 just won't start, even when I use "sax2... (1 Reply)
Discussion started by: HumanBeanDip
1 Replies
7. Windows & DOS: Issues & Discussions
It's an online con that is growing fast and stealing tens of millions of dollars.
An e-mail seemingly from a financial institution instructs you to log on to a legitimate-looking Web site. Such “phishing” attacks exploit a universal weakness in online security: passwords.
To read the rest of... (0 Replies)
Discussion started by: ZOverLord
0 Replies
8. UNIX for Advanced & Expert Users
Hello
I'm on Tru64 unix 5.1.a
I'm trying to execute rcp command like this
rcp testfile "user@host.com:/pub/Sales/Sales Reports"
and I'm getting an error message
rcp: ambiguous target
copy works fine if I just put underscore in the destination directory, like Sales_Reports...
... (3 Replies)
Discussion started by: Trusevich
3 Replies
9. Solaris
Hi
I am trying to debug an issue with an automated install I have set-up. So to start I just ran a simple
ok; boot cdrom - install
but when it came to the IP address field it would only take the following format 123.123.123.12 and would not let me enter the last digit
Anybody got any... (9 Replies)
Discussion started by: eeisken
9 Replies
10. Shell Programming and Scripting
I have a text file delimited by commas, with three fields (no " marks).
I want to use awk to create a fourth field which is equal to the line number + field 1 + .txt
I've searched this forum and found the following
nawk -v OFS=';' '{print $0, FNR}' myFile
Which I've amended to change the... (2 Replies)
Discussion started by: b.hamilton
2 Replies
LEARN ABOUT OSF1
services
services(4) Kernel Interfaces Manual services(4) NAME
services - Defines the sockets and protocols used for Internet services SYNOPSIS
/etc/services DESCRIPTION
The /etc/services file associates Internet service names and aliases with the port number and protocol used by the service. Each service is listed in this file on a single line of the form: ServiceName PortNumber/ProtocolName Aliases The fields contain the following information: The official Internet service name. The socket port number used for the service and the transport protocol used for the service. A list of unofficial service names. Items on a line are separated by spaces or tabs. Comments begin with a # (number sign) and continue to the end of the line. EXAMPLES
Entries in the /etc/services file for the inetd internal services might look like this: echo 7/tcp echo 7/udp discard 9/tcp sink null discard 9/udp sink null daytime 13/tcp daytime 13/udp chargen 19/tcp ttytst source chargen 19/tcp ttytst source ftp 21/tcp time 37/tcp timeserver time 37/udp timeserver RELATED INFORMATION
Functions: endservent(3), getservbyname(3), getservbyport(3), getservent(3), setservent(3) The RFC923 specification. delim off services(4)