Mailinglist Archive: opensuse-security (359 mails)

< Previous Next >
Re: [suse-security] Network structure and security
  • From: "Philippe Vogel" <filiaap@xxxxxxxxxx>
  • Date: Fri, 11 Jul 2003 18:03:09 +0200
  • Message-id: <005e01c347c5$ec103380$52ef5b86@xxxxxxxxxxxxxxxxxx>
I forgot to post some stuff in the last mail:

The firewall depends on the securitiy the machine has from internal.

So you have to build a secure distribution, like debian or gentoo linux or
manipulate SuSE linux that it is secure (minial installation +secumod
+compardment +security level setup +services you need).

If time is money here are some firewall solutions that you can install in
~1/2 hour:

SuSEfirewall on CD

transtec firewall hardware

Astaro Security linux / Mailserver, firewall, proxy, virus protected
content, each module costs a bit :-(

The last one I tested and I was impressed of the features
(intrusiondetection, live logview, portscan checks, proxy, webconfiguration,
rulesets ...).
The config can be copied to a disk.
If your server gets intruded you format the disk, reinstall it and copy your
configuration back.
The webinterface is very intuitive and userfriendly, but you must have
knownledge of iptables and rulesets.


< Previous Next >
Follow Ups