[frgeek-michiana] Re: Security on Indy

On Mon, 19 May 2003 21:25:10 -0500
Tom Brown <tbrown@xxxxxxxxxxxx> wrote:

> Indy is probably fairly open to attacks since there is no firewall, and
> we're relying on the small footprint Debian install.

   There is a fair amount that is open on the box.... 
 
   My number one rule for securing a system. If you DO NOT need the service,
shut it down!

   Number two rule for securing a system.. If you only need to dish out stuff,
setup a read only service!

   Number three rule.... When in doubt, shut the service off! You can always
turn it back on if need be.

   In the case of lpd (port 515) that's really not securable... Either get the
system behind a firewall (on a seperate box) or use cups. My
understanding is that cups is MUCH more secure then lpd.

   Just my two cents worth....

> II will register a domain name this week and transfer our web site shtml to
> Indy. Aolserver 3.x deprecated SSI, but there is a substitute
> (ns_adp_include). So I should be able to rework the html accordingly. I'll
> find out what it takes for Michiana Freenet to redirect to Indy once we're
> ready. 
> Tom

    Sounds exciting....

   Goose


To post to the list send email to <frgeek-michiana@xxxxxxxxxxxxxx>

You may unsubscribe or change your list settings by going to the list website 
at <http://www.freelists.org/webpage/frgeek-michiana>

Other related posts: