|
|
Sponsored Content
Top Forums
UNIX for Dummies Questions & Answers
mandrake 8.0 experts...how come it won't accept changes to security settings??
Post 7937 by Andy Hibbins on Wednesday 3rd of October 2001 05:48:57 PM
10-03-2001
Hi,
Looks like there some kind of problem with your Mandrake Control Panel software.
Here are some steps to secure your Linux box:
1 Turn off unwanted services, only use telnet, finger,rsh,portmap,nfs.nis if you have to.
2 add "ALL: ALL" to /etc/hosts.deny and then add the list of tcp wrapper compiled services that you want to allow access to in /etc/hosts.allow.
3 Services that only need to listen for requests on your lan should be configured to bind to the lan nic's ip address, i.e. pop3/imap4, ssh, ftp etc, most services can be configured either via the relevant xinetd config file or the own config file.
4 If you need services to listen on your machine's internet interface turn off the service's banner or falsify it, to make it harder for a hacker.
Also ensure these services are the latest versions, to prevent against any security vulnerablilities.
5 You could also recompile your kernel with the ip personality module, this allows your machine to look like it's running another OS when scanned, i.e. Amiga, Windows 2000, etc, this should confuse any potential hackers.
6 Setup a firewall with a DENY all default policy, only allow required services in and out of the firewall.
7 Don't use the same passwords for internet sites and your system.
If you have any other questions don't hesitate to ask, myself and the other members of unix.com will do our best to help you.
Andy H
Looks like there some kind of problem with your Mandrake Control Panel software.
Here are some steps to secure your Linux box:
1 Turn off unwanted services, only use telnet, finger,rsh,portmap,nfs.nis if you have to.
2 add "ALL: ALL" to /etc/hosts.deny and then add the list of tcp wrapper compiled services that you want to allow access to in /etc/hosts.allow.
3 Services that only need to listen for requests on your lan should be configured to bind to the lan nic's ip address, i.e. pop3/imap4, ssh, ftp etc, most services can be configured either via the relevant xinetd config file or the own config file.
4 If you need services to listen on your machine's internet interface turn off the service's banner or falsify it, to make it harder for a hacker.
Also ensure these services are the latest versions, to prevent against any security vulnerablilities.
5 You could also recompile your kernel with the ip personality module, this allows your machine to look like it's running another OS when scanned, i.e. Amiga, Windows 2000, etc, this should confuse any potential hackers.
6 Setup a firewall with a DENY all default policy, only allow required services in and out of the firewall.
7 Don't use the same passwords for internet sites and your system.
If you have any other questions don't hesitate to ask, myself and the other members of unix.com will do our best to help you.
Andy H
|
|
10 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
I wonder how I shall read the result below, especially 'what'
shown below.
The result was shown when I entered 'w'.
E.g what is TOP? What is gosh ( what does selmgr mean?)?
login@ idle JCPU PCPU what
6:15am 7:04 39 39 TOP
6:34am 6:45 45 45 TOP
6:41am ... (1 Reply)
Discussion started by: Aelgen
1 Replies
2. UNIX for Dummies Questions & Answers
On the following script that I get an error when I try to execute as root:
#./mv_log.sh
bash: /root/util/mv_log.sh: Permission denied
#!/usr/bin
datetag=`date --date='1 day ago' +"%b%d%Y"`
logname=`find /opt/bea/wlserver6.1/config/*/logs/ -iname 'access.log0*' -mtime -1 -print`
mv... (4 Replies)
Discussion started by: darthur
4 Replies
3. UNIX for Dummies Questions & Answers
Edit your /etc/modules.conf file to either remove or comment out the two lines :
alias sound-slot-0 snd-card-intel8x0
above snd-card-intel8x0 snd-pcm-oss
...and replace them with the following line:
alias sound i810_audio
....viola! After saving and rebooting, now I gots da sound!... (0 Replies)
Discussion started by: DownSouthMoe
0 Replies
4. UNIX for Dummies Questions & Answers
I use Unix at work, and thought that I should finally install it on my computer, just as a play around. Plus I am into programming C and various other languages. I have never used Mandrake linux, and to be honest it was just a freebie that I found that I thought I would give a quick try. I have... (3 Replies)
Discussion started by: SiE
3 Replies
5. UNIX for Dummies Questions & Answers
Backup Exec Agent won't start....
Question: Has anyone had any previous experience working with Backup exec for Unix? I'm running SCO Openserver 5.0.5 and Backup Exec agent Version 5.01 Revision 5.032 Basically, these are the commands I'm issueing and here is the output.
# cd etc
# cd... (1 Reply)
Discussion started by: PatMcCoy
1 Replies
6. UNIX Desktop Questions & Answers
I'm trying to set up a school Linux computer and use Samba to link it to Windows NT.
Pentium-133
Hercules 8 meg Stingray 128/3D
I'm not too familiar with SuSE's config tools (more used to Mandrake) and so am having some trouble configuring X. SaX2 just won't start, even when I use "sax2... (1 Reply)
Discussion started by: HumanBeanDip
1 Replies
7. Windows & DOS: Issues & Discussions
It's an online con that is growing fast and stealing tens of millions of dollars.
An e-mail seemingly from a financial institution instructs you to log on to a legitimate-looking Web site. Such “phishing” attacks exploit a universal weakness in online security: passwords.
To read the rest of... (0 Replies)
Discussion started by: ZOverLord
0 Replies
8. UNIX for Advanced & Expert Users
Hello
I'm on Tru64 unix 5.1.a
I'm trying to execute rcp command like this
rcp testfile "user@host.com:/pub/Sales/Sales Reports"
and I'm getting an error message
rcp: ambiguous target
copy works fine if I just put underscore in the destination directory, like Sales_Reports...
... (3 Replies)
Discussion started by: Trusevich
3 Replies
9. Solaris
Hi
I am trying to debug an issue with an automated install I have set-up. So to start I just ran a simple
ok; boot cdrom - install
but when it came to the IP address field it would only take the following format 123.123.123.12 and would not let me enter the last digit
Anybody got any... (9 Replies)
Discussion started by: eeisken
9 Replies
10. Shell Programming and Scripting
I have a text file delimited by commas, with three fields (no " marks).
I want to use awk to create a fourth field which is equal to the line number + field 1 + .txt
I've searched this forum and found the following
nawk -v OFS=';' '{print $0, FNR}' myFile
Which I've amended to change the... (2 Replies)
Discussion started by: b.hamilton
2 Replies
LEARN ABOUT OPENSOLARIS
services
services(4) File Formats services(4) NAME
services - Internet services and aliases SYNOPSIS
/etc/inet/services /etc/services DESCRIPTION
The services file is a local source of information regarding each service available through the Internet. The services file can be used in conjunction with or instead of other services sources, including the NIS maps "services.byname" and the NIS+ table "services." Programs use the getservbyname(3SOCKET) routines to access this information. The services file contains an entry for each service. Each entry has the form: service-name port/protocol aliases service-name This is the official Internet service name. port/protocol This field is composed of the port number and protocol through which the service is provided, for instance, 512/tcp. aliases This is a list of alternate names by which the service might be requested. Fields can be separated by any number of SPACE and/or TAB characters. A number sign (#) indicates the beginning of a comment; any charac- ters that follow the comment character up to the end of the line are not interpreted by routines which search the file. Service names may contain any printable character other than a field delimiter, a NEWLINE, or a comment character. Any changes to a port assignment do not affect the actual port registration of the service. FILES
/etc/nsswitch.conf configuration file for name-service switch SEE ALSO
getservbyname(3SOCKET), inetd.conf(4), nsswitch.conf(4) NOTES
/etc/inet/services is the official SVR4 name of the services file. The symbolic link /etc/services exists for BSD compatibility. SunOS 5.11 12 Oct 2000 services(4)