Re: most secure services (DNS, Web, Mail)
djb's dns, but it's a slight pain to install. There is a debian source
package somewhere. Also see http://cr.yp.to/djbdns.html but I don't
recommending installing his package (he dumps all sorts of crap in /etc).
~mark
----- Original Message -----
From: "Shri Shrikumar" <shri@urbyte.com>
To: "Debian User List" <debian-user@lists.debian.org>
Sent: Tuesday, June 18, 2002 10:46 AM
Subject: most secure services (DNS, Web, Mail)
> Hi All,
>
> Ive finally decided to venture and let people see my machine permanently
> connected to the net. This machine is of course running debian. It is
> running testing as of a couple of months or so. I plan to let it go into
> woody and stay there (upgraded to woody so many months ago primarily for
> iptables)
>
> The machine is 200Mhz with 96Mb RAM. It already takes care of my
> personal as well as some work mail(including this list) and apache for
> the webmail stuff and PHPgroupware, so its under a bit of
> load(Masquerade, Exim, IMAP, Procmail, Spamassasin, Apache, PHP etc.)
>
> Im about to buy a domain name and host that on this server. Im a little
> paranoid about letting people access this machine from the world. Due to
> this, I would like to know what the most secure services that I can run
> on this server. I want it to handle dns for this domain as well as the
> web and mail.
>
> I am on ADSL and so have a static ip address and intend to use this ip
> for hosting this domain. Maybe even try some virtual hosting.
>
> What would you guys recommend for this setup. I am using bind just now
> which I hear is a pita for security. Doing a apt-cache search with
> secure dns brings up maradns.
>
> I haven't noticed much security issues with exim on the net. Where would
> the best place be to find information about stopping the server from
> relaying mail for anyone else as well.
>
> Also, how secure is Apache / PHP. I would guess that there wouldn't be
> many issues considering that around 60% of all web servers around the
> world are running Apache last time I checked(albeit a few years ago)
>
> Im really not expecting many hits on this size (dozen a day or so) and
> the email from this site wouldn't be that much either.
>
> I am however, considering upgrading this into a PII with 450MHz and
> 128Mb to 256Mb Memory.
>
> I would really appreciate any advice on this. I dont have a DMZ just now
> and can't really afford one.
>
> Thanks for your time,
>
>
>
> Shri
>
>
>
> --
> To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
>
>
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: