[RDD] RD Security

2015-09-16 Thread Tom Van Gorkom
I m new to Rivendell and linux but now have master and slave servers set up with 5 clients in the studio all on CentOS 6.7 with RD ver 2.10.3-1 on 64 bit quad core AMD/ASUS machines. I put them on an internal sub network with static IPs and constant internet access to allow several functions for

Re: [RDD] RD Security

2015-09-16 Thread Rob Landry
On Wed, 16 Sep 2015, Tom Van Gorkom wrote: I have security questions at the moment: -How is the best, and not too complicated way to protect ourselves from outside attacks? (assuming a strong root password, what should be off and on in the system and what else should I do?) Rivendell

Re: [RDD] RD Security

2015-09-16 Thread Lorne Tyndale
I agree that Rivendell should be on a private network. The one thing I'd add - you could set up a single machine that can see both networks - the Rivendell network and the outside world - for the purpose of running RDCatch and allowing it to download content from the 'net, providing RSS feeds,

Re: [RDD] RD Security

2015-09-16 Thread John Anderson
A whole lot will depend on who and what you're protecting from... is it necessary for staff, jocks, and other folks to be able to access the individual rivendell machines, or is it just a few folks, engineering access, or what.. A great firewall is necessary...I wouldn't put individual outside