Homeserver security

Tii · l33t Joined: 02 Jan 2004 Posts: 733

I would like to put up server on my desktop machine but I'm a bit worried about security. How difficult is it to make the box pretty secure (or at least minimize the damage if something happens)? What kind of steps would that require (I can look up the details myself but I'd like a general idea)? I'm thinking about apache (with php and maybe mysql), ssh and maybe some email stuff. If I set up a server on my box but block all the ports (with shorewall) will that be safe (I would like to have some time to set everything up)?

edit: And what are the most important logs I need to keep an eye on?

befortin · Apprentice Joined: 10 Feb 2004 Posts: 193

The first step to secure a system is to do backups of all your important data.

The second one is to always keep your system up to date.

Then, you could take a look at the following URLs :
http://www.linuxsecurity.com/docs/colsfaq.html
http://www.linuxsecurity.com/resources/documentation-1.html
http://www.openna.com/documentations/articles/php/index.php

Good luck

dvc5 · Posted: Fri Apr 30, 2004 4:18 pm Post subject:

This guide shows you how to accomplish all of your goals and much more. I highly suggest you carefully read through it if you want to properly lock down your linux box.
_________________
#define NULL rand() /*heh heh heh */

Green Is Good

Tii · l33t Joined: 02 Jan 2004 Posts: 733

Thanks for the links! They seem very good. I'll have to take a closer look at them soon. I have a spare 10 gig harddrive that I occasionally use for testing purposes. Maybe I could somehow use it for backups. What are the most important things to backup so that I can make my gentoo box back to the way it was without loosing anything (/home for sure and I think /etc, what else)?

dvc5 · Posted: Fri Apr 30, 2004 4:25 pm Post subject:

Probably /root and /boot as well to save your working kernel images.
_________________
#define NULL rand() /*heh heh heh */

Green Is Good

befortin · Apprentice Joined: 10 Feb 2004 Posts: 193

And please, never do that backup on your 10 GB by connecting it to the same box, or anyone with logging as root will be able to delete your backup, and if there's a problem with your power supply, it's likely that both disks will crash (it happens more often than you think!!). Make sure that the disk that contains your backup is in a very secure place/computer.

Maybe that you should backup the "world" file as well, as it contains all the software that you have emerged. I think that this file is located in /var/edb/cache/world. You could also backup you /var/http/* if you're running Apache.

Tii · l33t Joined: 02 Jan 2004 Posts: 733

befortin · Apprentice Joined: 10 Feb 2004 Posts: 193

Otherwise, if you have some money, you could buy a cheap DVD burner...