Linux Security

This is a discussion on Linux Security within the Tech Board forums, part of the Community Boards category; you didnt have to reinstall from a bad kernel. you could of just used a live cd and chroot your ...

  1. #31
    Registered User
    Join Date
    Jul 2002
    Posts
    913
    you didnt have to reinstall from a bad kernel.

    you could of just used a live cd and chroot your hard drive. then you could use your src or the cdroms to recompile.

    i had to do that a couple of times when i was fighting with gentoo. no real safe-mode in linux(single user doesnt count!!!).

  2. #32
    Registered User
    Join Date
    Mar 2003
    Posts
    102
    This was a while ago.. but I rembemer that it was messed up bad enough.. and I didnt have a recover CD.

    Hell with sourcemage I messed up rebuiling my entire system and lost bin-utils and tar and gz and bzip and a lot of other commands a lot of people use for basic file system navagaition.. Ive recovered in less then a day. The bad kernel was also a long time ago when I was new to linux.

  3. #33
    Comment your source code! Lynux-Penguin's Avatar
    Join Date
    Apr 2002
    Posts
    533
    To Secure Linux (by Lynux Penguin):

    Modify as you see fit.

    First: Get a router. This is a MUST. You may even buy another computer to act as a router but get a router! Then, when on Linux learn ipchains/iptables etc. Reject just about every port until you want to present something.

    Then go read a book called:
    Linux Administrator's Security Guide
    By Kurt Seifried

    Then download this and be happy that the LDP exists ^_^

    Securing-Optimizing-Linux-The-Ultimate-Solution-v2.0.pdf

    That should suffice ^_^

    -LP
    Asking the right question is sometimes more important than knowing the answer.
    Please read the FAQ
    C Reference Card (A MUST!)
    Pointers and Memory
    The Essentials
    CString lib

  4. #34
    RoD
    RoD is offline
    Redundantly Redundant RoD's Avatar
    Join Date
    Sep 2002
    Location
    Missouri
    Posts
    6,331
    I hate routers i wont use the things, i do have a hub however. What do you mean by using another pc as a router? Bear in mind this computer will run hl server and other things for lan parties...

    thnx for the link..

  5. #35
    Registered User
    Join Date
    Jul 2002
    Posts
    913
    a hub wont do much, atleast make it a switch.


    a seperate pc for a router is a good way to go. a cisco router will cost a way to much alonf with some of the cheaper knockoffs. the pc(which could be a 386 anything with 4MB ram..) would be the gateway.

    the gateway would get the internet connection on the first nic and then think. it would look at a rule set to see what it should do. if it passes it would go threw the second nic to your hub/switch to teh rest of your network..

    i used to have one, but its dead(compaq prolena 66mghz, 24MB ram, 512MB hdd)...


    i wonder how bad it would be a for a lan party. since its not a proxy it cant be that bad. do you mean people on your wan or lan? its couldnt slow down your lan.

  6. #36
    RoD
    RoD is offline
    Redundantly Redundant RoD's Avatar
    Join Date
    Sep 2002
    Location
    Missouri
    Posts
    6,331
    i dont see how that pc to the lan would be any different then my pc since its firewalled, ie net--my pc---network.

    People dont access the net thru my lan only my pc the only thing comps that arne me can do is get to public files.

    Heres wat i want, my pc connects to the net and is firewalled. My pc is hooked into my local lan of maybe two pcs thru a hub. My pc can access the files on these pc's at will, but i want NO internet to get to those computers....i have heard of something called a dead box? wats that?

    Also, how can i make sure people can only access what i say on linux, ie the game im hosting and some folder named public?
    Last edited by RoD; 07-21-2003 at 01:07 PM.

  7. #37
    Registered User
    Join Date
    Jul 2002
    Posts
    913
    your router would be a dedicated firewall/router on a unix, beats norton.

    plus then you can atleast hope that if some one gets in their only screw around with the computer you dont care about(the router). its a lonf shot but its something. plus you wouldnt have to have a firewall on every pc, something that can be annoying for games.

    its kind of kool if your into this kind of stuff. or you could get something like the hotbrick, pricey but it sounds pretty kool.

    <edit>
    any one ever use the hotbrick?

  8. #38
    Registered User
    Join Date
    Oct 2002
    Posts
    385
    Why the heck would anyone spend $700 on a firewall for your home when you can buy a $70 DSL/Cable NAT router with a 4 or 5 port switch? That hotbrick would be extreme overkill for a home LAN. Who the heck needs 2 WAN ports for redundancy, VPN support, IDS, and stateful inspection at home?

    What you want would be extremely easy ROD. Just be sure you don't setup ip masquerading on the Linux box and you don't have to worry about the LAN PCs accessing the Internet. You need to firewall your PC to restrict the incoming traffic on your Internet interface but let out outgoing traffic on it so you can surf the web and stuff alright. You also can set the firewall to allow all traffic on the LAN interface so you or the LAN PCs don't have a problem talking with each other.
    Last edited by damonbrinkley; 07-21-2003 at 01:49 PM.
    Wandering aimlessly through C.....

    http://dbrink.phpwebhosting.com

  9. #39
    RoD
    RoD is offline
    Redundantly Redundant RoD's Avatar
    Join Date
    Sep 2002
    Location
    Missouri
    Posts
    6,331
    Well i have dialup so a cable/dsl wouldnt help me : )

    I run zone alarm pro 4.0 on my pc setup to only allow traffic out with a few exceptions, and tightly monitored. So as long as i dont setup that on the linux box it will never try and access the net? Also i can setup ZA to monitor a network but im afraid that will mess with lan parties, which at them i only want the one folder showing to ANY pc (they'd all be windows) except my pc, and full access to ports that games like HL host on.

  10. #40
    Registered User
    Join Date
    Jul 2002
    Posts
    913
    Why the heck would anyone spend $700 on a firewall for your home when you can buy a $70 DSL/Cable NAT router with a 4 or 5 port switch?
    yes it is overkill, but every one has to admit its kool. thats they only reason i mentioned it. most of the dsl routers arnt the greatest so something else is need.

    isnt ip masquerading needed for the nat?

    are you playing the game only at your house or house and internet?

  11. #41
    Registered User
    Join Date
    Oct 2002
    Posts
    385
    Setup Samba to just share that one folder you want the users to have access to and that's all you need to do.

    You can set iptables to accept all traffic for certain ports on whichever interface is your LAN interface.
    Wandering aimlessly through C.....

    http://dbrink.phpwebhosting.com

  12. #42
    Registered User
    Join Date
    Oct 2002
    Posts
    385
    Originally posted by mart_man00
    yes it is overkill, but every one has to admit its kool. thats they only reason i mentioned it. most of the dsl routers arnt the greatest so something else is need.

    isnt ip masquerading needed for the nat?

    are you playing the game only at your house or house and internet?
    My Cable/DSL router has been working perfectly for about 2 years now.

    ip masquerading is nat but he doesn't want the LAN machines accessing the Internet so he doesn't have to worry about it.
    Wandering aimlessly through C.....

    http://dbrink.phpwebhosting.com

  13. #43
    Registered User
    Join Date
    Jul 2002
    Posts
    913
    My Cable/DSL router has been working perfectly for about 2 years now.
    do you run a firewall on your pcs? does the router have that kind of extras? i never really played with mine, maybe it was more over kill than i thought.

  14. #44
    Registered User
    Join Date
    Oct 2002
    Posts
    385
    Originally posted by mart_man00
    do you run a firewall on your pcs? does the router have that kind of extras? i never really played with mine, maybe it was more over kill than i thought.
    Nope, no firewall on my PCs. My Cable router just performs NAT for my two PCs on my LAN.
    Wandering aimlessly through C.....

    http://dbrink.phpwebhosting.com

  15. #45
    RoD
    RoD is offline
    Redundantly Redundant RoD's Avatar
    Join Date
    Sep 2002
    Location
    Missouri
    Posts
    6,331
    I only play the games within the lan...whats samba? Seeing as how i dont know the ports for each game people will bring can i set it up to allow people to connect to any open port running a server? IE a half life dedicated server will auto open a port then the HL client looks for it, can i jus tell linux to let the games open the port? Internally of course because my windows pc isnt letting the net past to the network.

Page 3 of 5 FirstFirst 12345 LastLast
Popular pages Recent additions subscribe to a feed

Similar Threads

  1. Wireless Network Linux & C Testbed
    By james457 in forum Networking/Device Communication
    Replies: 3
    Last Post: 06-11-2009, 12:03 PM
  2. Linux Security Modules Programming
    By vugluskr in forum Linux Programming
    Replies: 1
    Last Post: 02-17-2009, 11:10 AM
  3. Linux Security Article by NSA
    By xddxogm3 in forum Tech Board
    Replies: 4
    Last Post: 01-31-2005, 09:31 AM
  4. installing linux for the first time
    By Micko in forum Tech Board
    Replies: 9
    Last Post: 12-06-2004, 05:15 AM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21