RE: which distribution to choose
Date: Wed, 8 Dec 2004 13:50:26 -0700 To: firstname.lastname@example.org
> > and Mandrake 10.1 Community Edition available at
> > http://www.mandrakelinux.com/en/ftp.php3#10.1c.
> I would recomend go with the Official version of MandrakeLinux 10.1. Do a
> network install using the mini-iso (8MB) available in any mirror, like this
OR... use BitTorrent and save the ftp bandwidth:
3 Disk ISO:
If you are going to use Mandrake though... perhaps you may want to look
at their "Multi-Network Firewall"
Download (ftp, no BitTorrent link)
> > Additionally, both distributions support both a manual and an automatic
> > update system -- manually with up2date and automatic with the yum daemon
> > for FC3 and either a manual or scripted/CRON'ed urmpi command for Mandrake.
> If you know Debian, yum and urpmi are apt-get-like tools.
Except that in my experience they do not resolve the dependencies nearly
as well. URPMI is better than yum with the fedora legacy project.... but
IMHO apt and swaret (slackware) beat them both hands down...
As someone mentioned earlier... Devil Linux is pretty cool...
Let's say you are running Devil... someone gets in and makes changes...
well no worries... you have a non-writable CD... no changes are
A *good* firewall package
If you are going to go with live-linux distros... have a look at SLAX
http://slax.linux-live.org/ It is Slackware based which basically means
that everything is as simple as possible. This does not mean graphical
management tools galore like some distros... this simply means that
everything works and is simple to setup with minimal editing to a few
The firewall consists of your own "rc.firewall" file in /etc/rc.d/
# Basic script to keep the server secured
## Flush the Tables so changes will be recognized (without duplicates)
## Default policy to drop 'everything'
#iptables -P INPUT DROP
#iptables -P FORWARD DROP
## Allow established connections and programs that use loopback
#iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
#iptables -A INPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -i lo -j ACCEPT
## Allow offered service clients to connect to ethernet interface
#iptables -A INPUT -p tcp --dport 22 -i eth0 -j ACCEPT
#iptables -A INPUT -p tcp --dport 80 -i eth0 -j ACCEPT
#Netbios for Samba
#iptables -A INPUT -p tcp --dport 137:139 -i eth0 -j ACCEPT
#iptables -A INPUT -p udp --dport 137 -i eth0 -j ACCEPT
#iptables -A INPUT -p udp --dport 138 -i eth0 -j ACCEPT
#iptables -A INPUT -p tcp --dport 6969 -i eth0 -j ACCEPT
#iptables -A INPUT -p tcp --dport 60003 -i eth0 -j ACCEPT
#iptables -A INPUT -p tcp --dport 10000 -i eth0 -j ACCEPT
Best of luck...