Re: [cobalt-users] Fw: RaQ security

[David Thurman <dthurman@xxxxxxxxxxxxxxxxxxxx>]

on 4-2-02 4:26 PM, John Sweet at john@xxxxxxxxxxxxxxx was reported to have
made a statement that said this:

> 
> 
> 
> Hi All,
> 
> So I am finally up and running with my own little old raq and will be plann
> domain migrations in the next few days. But before all that comes security .
> . .
> 
> I have installed all the pkg updates on the cobalt site and disabled telnet
> in favour of  SSH from pkgmaster.
> 
> Now what - some sort of trip wire / file check summer type thing and a
> firewall (IPchains) - while I am not *totally* clueless I could do with some
> pointers to how-to docs for this sort of stuff or even a few practical tips
> would be great.
> 
> regards
> 
> john sweet
> 
One thing I haven't seen mentioned a lot is setting up dedicated IP's in the
hosts.allow and deny files. We do this also to ensure that any exploits from
SSH are blocked with at least another security feature, plus all the other
things a person should do.
--
Thank you,
David E Thurman
The Web Presence Group
309.676.5688
dthurman@xxxxxxxxxxxxxxxxxxxx
http://www.webpresencegroup.net