2/14 I am going to be running RedHat instead of windoze from now on.
Is there a program or a checklist for RedHat that will let me
configure my box to make it as secure as possible against
hackers and net attacks?
\_ no foot longs.
\_ Yeah, turn off everything in inetd.conf, and also turn off
everything that starts up networking daemons. You should
be able to use linuxconf to do this, though I use the
runlist editor in the control panel. --PeterM
\_ And then make sure linuxconf is turned off and firewall/filter
everything you don't specifically need on. Update kernel every
3 days.
\_ I suggest you a better solution: cd to /usr/doc/HOWTO and read
Security-HOWTO document. Security involves much more than just
closing various tcp or udp ports.
\_ Turn off your PC and unplug from the outlet.
\_ install latest stable kernel
configure named.conf to only listen on 127.0.0.1
\_ Why run named at all? On most home machines it's just a
waste of RAM...
configure xdm/Xservers to -nolisten tcp
configure xdm/xdm-config w/ DisplayManager.requestPort: none
that will nearly shut everything off
\_ Most home users can probably turn off inetd entirely and use ssh
for incoming connections. That, combined with keeping an eye on
and installing system updates is probably all most users will need
to do in terms of security. -tom |