Re: [gentoo-user] secure webserver based on gentoo?
I never really tested this distribution, but if you are in a hurry, you may try OpenNa (http://www.openna.com). You can choose different type of typical server installation like web, ftp, ... and email server. You may also have a look on http://www.distrowatch.com/ for email server specific distributions. cheers, lgatto On Fri, 2003-12-19 at 18:27, fisch wrote: I want to set up a very secure web/mail-server. Is it possible to set it up with gentoo or should i use an other distribution? bye fisch -- [EMAIL PROTECTED] mailing list
Re: [gentoo-user] secure webserver based on gentoo?
On Fri, 19 Dec 2003 18:27:46 +0100 (CET) fisch [EMAIL PROTECTED] wrote: I want to set up a very secure web/mail-server. Is it possible to set it up with gentoo or should i use an other distribution? Please define very secure. grsecurity ? SElinux ? -- Dennis Freise [EMAIL PROTECTED] GnuPG key fingerprint: 2DE8 CCEF 6E20 11D4 3B27 21EC B0BA 1749 D2C8 38ED Get my public key at : http://www.final-frontier.ath.cx/gpg_public_key.txt pgp0.pgp Description: PGP signature
Re: [gentoo-user] secure webserver based on gentoo?
Gentoo can be made as secure and stable as any other distro. My fantasy is that one of the paid-for linux enterprise versions may setup a little easier than gentoo with a stock arrangement for the mail server rig (which is where you'll spend your time sorting out options), but that's just a fantasy (i.e. I don't really know one way or the other). If you don't know linux security and the apps you'll need to study that, but that's a given whatever the distro. fisch wrote: I want to set up a very secure web/mail-server. Is it possible to set it up with gentoo or should i use an other distribution? bye fisch -- [EMAIL PROTECTED] mailing list
Re: [gentoo-user] secure webserver based on gentoo?
Heitzso wrote: If you don't know linux security and the apps you'll need to study that, but that's a given whatever the distro. Yep. As far i can see, gentoo is a pretty slim distro, not filling up one's harddisk with tons of unwanted or unneeded stuff, so maintaining/hardening gentoo shouldn't be harder than trying the same with some of the other distros. Setting up a production server always requires some basic understandings of system service security. Installing apache means studying it's manual (which is excellent IMHO), as well as contacting other admins and reading articles mailing lists. The more services are opened to the internet, the more security issues. With a fresh gentoo installation, no server is running, not even sshd. Should be pretty secure so far. -- [EMAIL PROTECTED] mailing list
Re: [gentoo-user] secure webserver based on gentoo?
Yes it is possible, but to setup a real secure webserver you need years of experience. If someone claims he can setup a real secure box, but only used linux for a few month he is nothing but a swank. - Original Message - From: fisch [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 19, 2003 6:27 PM Subject: [gentoo-user] secure webserver based on gentoo? I want to set up a very secure web/mail-server. Is it possible to set it up with gentoo or should i use an other distribution? bye fisch -- [EMAIL PROTECTED] http://kampagne.conne-island.de -- [EMAIL PROTECTED] mailing list -- [EMAIL PROTECTED] mailing list
Re: [gentoo-user] secure webserver based on gentoo?
On Friday 19 December 2003 12:27 pm, fisch wrote: I want to set up a very secure web/mail-server. Is it possible to set it up with gentoo or should i use an other distribution? It's not ready yet, but we are building a mail server around Gentoo at: http://www.mailrefinery.org -- The true measure of a man is how he treats someone who can do him absolutely no good. - Samuel Johnson (1709-1784) -- [EMAIL PROTECTED] mailing list
Re: [gentoo-user] secure webserver based on gentoo?
fisch wrote: I want to set up a very secure web/mail-server. Is it possible to set it up with gentoo or should i use an other distribution? I run a production web/mail/mysql server with Gentoo. I have setup a custom firewall. I have run nessus against the box from the box itself and it finds no security vulnerabilities. -- Andrew Gaffney -- [EMAIL PROTECTED] mailing list
