Re: networking question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2003-10-20 at 07:13, Felipe Leon wrote:
> Group:
> At home I have two computers with RH9 connected to a router (dhcp 
> server) which connects to the internet through a dsl modem. In order to 
> facilitate internal networking among the two computers, on installation 
> I set both eth0 as trusted devices. Is that save?

No.  You've effectively allowed anyone (that bypasses your "router")
unfettered access to the services running on these systems.  I hope
you're patched.

>  the router has a built 
> in firewall which I configured to deny all external requests. How can I 
> test the security (portscanning I guess) of the network? 

nmap.  nessus.

> Is it save to 
> trust completely the router for firewall purposes?

No single device is a silver bullet for network security.  Proper
security exists through a layered approach undergoing continual audit
and analysis.

> which software do you 
> recomend to keep a close control of what is going on in the network?

Snort.

> and 
> finally which is the recomended (easier and most secure) way for file 
> sharing between these two computers or any other in the internal 
> network? I have tried NFS but have had lots of problems to set it up and 
> still doesn't work properly i.e. computers hanging, superslow data 
> transfer and so on.

NFS is good for *nix hosts.  Samba is good for Windows/*nix mixed
environments.  It's very likely you have misconfigured your NFS, as it
sounds like you spend very little time reading manuals.  I'd like to
suggest you invest some time in the following documentation:

http://www.tldp.org/LDP/nag2/index.html
http://www.tldp.org/LDP/sag/index.html
http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/custom-guide/
http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/security-guide/
http://www.oreilly.com/catalog/tcp3/

> Thanks a lot for your help.

HTH.

-- 
Jason Dixon, RHCE
DixonGroup Consulting
http://www.dixongroup.net


-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux