[gentoo-user] Secure a gentoo server

2005-02-01 Thread myang
Yesterday, my friend's server got cracked. The cracker planted Rootedoor Trojan on his server and deleted quite some important files from the system. Now he is crazy for finding out other abnormal and recovering everything. I began to worry about my own gentoo box. Basically, I am a layman of li

Re: [gentoo-user] Secure a gentoo server

2005-02-01 Thread Dmitry S. Makovey
On February 1, 2005 08:06 am, myang wrote: > I began to worry about my own gentoo box. Basically, I am a layman > of linux so far. I am running Apache, openssh, postfix and mysql > service here. I don't know a little about system security. Now I'd > like to begin to learn something and do something

Re: [gentoo-user] Secure a gentoo server

2005-02-01 Thread Tamas Sarga
On Tue, 1 Feb 2005, myang wrote: > > Where should I begin from? What should I do to secure my system? > > MF > There is a good doc on gentoo.org: http://www.gentoo.org/doc/en/gentoo-security.xml You should read some docs on iptables.org, they have a good tutorial. And my 0.02$. Do not give she

Re: [gentoo-user] Secure a gentoo server

2005-02-01 Thread Dmitry S. Makovey
On February 1, 2005 09:03 am, Tamas Sarga wrote: > On Tue, 1 Feb 2005, myang wrote: > > Where should I begin from? What should I do to secure my system? > > > > MF > > There is a good doc on gentoo.org: > http://www.gentoo.org/doc/en/gentoo-security.xml > > You should read some docs on iptables.org

Re: [gentoo-user] Secure a gentoo server

2005-02-01 Thread Kevin Philp
If you are looking to secure a home machine, a few things worth doing: USERS Don't let them use root, disable shell access, make yourself a member of the wheel group so only you can use su. INTERNET To protect yourself from snoopers on the internet and assuming you have no services you wish to