[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: securing server



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Jean-Paul Lacquement wrote/schrieb @ 07.05.2008 13:03:

|>  Besides that, what applications you plan to run?
|
| This server will only run proftpd, ssh, apache, nagios(via http),
samba and cups

*Oh*. IMHO you should consider whom you will serve, too.

If it is a limited group you can probably even change apache to listen
on different ports and tell your users to add :<port> to their urls.

If it should only serve you, you can probably even use portknocking to
start apache, limit access from several IPs or call your box to start
services. OTOH I see no reason to use just sshd if you will be the only
user it should serve.

If it should offer services for $WORLD, you can't.

BTW: If you think of offering services for $WORLD, I see absolutely no
~     reason to use cups or samba on such an exposed box. As you
~     mentioned those, I suppose you wouldn't offer public services.

YMMV.

- --
bye maik
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)
Comment: Signature of Maik Holtkamp

iD8DBQFIIb6Sz3bq6aadmI8RAtOGAKDtMiU81qAk2N4+lIu4UEi+wymM2wCfXWNR
7khzXzpr1UioXrqfzk/OyEw=
=Epcw
-----END PGP SIGNATURE-----

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature


Reply to: