Re: [cobalt-security] FTP Scans

[Mike Vanecek <nospam99@xxxxxxxxxxxx>]

On Sat, 17 Nov 2001 18:46:42 -0600, "Ed Morgan" <excalde@xxxxxxx> wrote:

:>
:>>What?
:>>I would think you would be uncomfortable not running ipchains.
:>>How are you protected from ip spoofing?
:>>Just to mention one comfortable thing about ipchains.
:>
:>My experience with Linux is limited, and if there is one thing I have 
:>learned, editing areas you are not completely sure about is not a wise thing 
:>to do at all. Especially with the Cobalt RAQ, since altering certain parts 
:>of the system voids the warranty.

Of all the things to learn about Linux, learning about your firewall and
portsentry are crucial. Ipchains is not available on the Qube; one uses
ipfilters. Both are similar. I do not remember which one the RAQ has.
However, learning and using the firewall and portsentry tools will be
the best investment you can make to keeping your server from being
hacked and having to spend hours trying to make repairs. Further, by
monitoring the logs provided, you can see exactly from where and when
attempts to hack your system are done (and it is amazing how much
occurs).

Get the Ziegler book, Linux Firewalls. 

You would not leave your garage door always open with golf clubs and
other valuables visible and available for grabbing. Why would you want
to leave your ports unprotected.

Mike.