Mailinglist Archive: opensuse (466 mails)
|< Previous||Next >|
Re: [SLE] Protection from intruders
- From: LinuxAdvocate@xxxxxxxxx (George Toft)
- Date: Wed, 28 Jul 1999 05:20:43 -1000
- Message-id: <9907280526240P.02293@hawaii>
On Tue, 27 Jul 1999, Georges-Henry Portefait wrote:
> I'm linked to the internet trough a cable modem ( motorola cyber surf)
> what I would like to know is:
> Can I protect myself against potetial intruders ??
See http://gtoft.dynip.com/security - this is the bare minimum.
> What is my level of exposure.
Huge - they have all the time they need to attack.
> I have a single machine which is my workstation at the end of this
> install, I never work as root except when needed root has a complex
> passsword remote login is forbidden for root , "." is not in the root
> password that s all for now.
I'm a full believer in the concept of a bastion host. That is a machine that
is heavily fortified to protect the machines on the inside. Set up an old 486
as a router/firewall and put your workstation on a LAN inside the firewall.
That gives the attackers twice the number of computers to attack, and gives you
the opportunity to receive a mail warning if the firewall is compromised. My
firewall runs a cron job to check the integrity of key files (passwd, group,
shadow) once a minute, and if they change, I get e-mail.
> the ISP is supposed to protect my comms between him and I.
My ISP protects all comms, too - so an attacker has all the privacy they need
to break in. Been there twice.
> I m looking for any kind of advices.
They are out to get you.
> GH Portefait
> "Computers are like air conditioners - they stop working properly when
> you open Windows"
> -----BEGIN GEEK CODE BLOCK-----
> Version: 3.1
> GCS/CC d-@ s+:- C++(++++)UL++>++++ P++>++++ L++>+++ E-W+(++) N++ !o K- w
> !O M(++) V? !PS !PE y+ PGP+++ t+ 5? X R* tv b+ DI? D+ G+++ e+++ h+ r y?
> ------END GEEK CODE BLOCK------
> To unsubscribe, e-mail: suse-linux-e-unsubscribe@xxxxxxxx
> For additional commands, e-mail: suse-linux-e-help@xxxxxxxx
George Toft http://gtoft.dynip.com
Hawaii Pacific University MSIS Graduate Student
"Investigating the Relationship Between the Total Cost of
Ownership, Organization Size, Industry, Workgroup Size,
And the Perception of Value for Workgroup Servers."
|< Previous||Next >|