Securing Fedora Core 4

From: AragonX (aragonx_at_dcsnow.com)
Date: 09/21/05

  • Next message: Michael Hallager: "Re: Securing Fedora Core 4" 
    Date: Wed, 21 Sep 2005 09:28:54 -0400 (EDT)
To: focus-linux@securityfocus.com

    I am trying develop a method to secure my servers. I'll list the steps I
    am going to take. Can you please review and make any additional
    suggestions. Thank you.

    Install & configure Tripwire http://sourceforge.net/projects/tripwire/
    Install & configure Snort http://www.snort.org/
    Install & configure Bastille http://www.bastille-linux.org/
    Install & configure LIDS http://www.lids.org/
    Install & configure modsecurity http://www.modsecurity.org/
    Install & configure chkrootkit http://www.chkrootkit.org/
    install dansguardian http://www.dansguardian.org
    install squid http://www.squid-cache.org/
    Install & configure DCC http://www.dcc-servers.net
    Install & configure Pyzor http://pyzor.sourceforge.net
    Install & configure Razor http://razor.sourceforge.net
    install & configure Clamav http://www.clamav.net
    Install & configure MailScanner http://www.sng.ecs.soton.ac.uk/mailscanner/
    Install & configure Ntop http://www.ntop.org/
    Install & configure Spamassassin http://spamassassin.apache.org/
    install root access email command
    create a seprate /tmp partition and mount noexec, nosuid

       Configure Apache
    configure for php safe mode
    configure /internal web directory w/ access from private network only
    configure /external web directory w/ password authentication

       Configure SSH
    respond on alternate port
    only allow me to logon

       Configure Fireall:
    only allow access to ssh from my domains

  • Next message: Michael Hallager: "Re: Securing Fedora Core 4"