Converted my Server to Gentoo! Server Security

[flipnode]

I have officially converted my FreeBSD system over to gentoo. I think this will be a good thing. System maintence is easier. Well, see how stable this will be. Anyone have any things I should do to make my gentoo system more secure? Also, if I have a hardware firewall... Do I need to run one on the server? It will be a webserver, sshd, ProFTP ,no telnet, no email server, no dhcp, no dns. I might hook samba up to it though.

thanks guys
_________________
I think Gentoo is great!

[hds]

[flipnode]

Okay, seeing how no one knows anything about security. I have a little basic security tip I found.

http://www.linuxplanet.com/linuxplanet/tips/1151/1/

more tips to come!
_________________
I think Gentoo is great!

[Nard`]

Some systems don't use inetd

You might want to investigate a replace for ProFTP, infact a replacement for FTP! maybye sftp? that depends what uses you have for it of course...

http://www.gentoo.org/doc/en/gentoo-security.xml is worth a read. Using public key authentication for sshd is a good thing.

If your reallly paranoid running webserver in a chroot or even uml is an option. reguarly updating is a good idea and you might want to use glsa-check, but that *IS* expiremental.

Securing gentoo is like securing most other *nix systems really. Audit SUID files, remove what you don't need, run anything possible as non-root, log, firewall, etc
_________________
Programming is the process of putting bugs in.
Debugging is the process of attempting to take bugs out, doing an ugly hack, hitting your computer, then claiming insurance.

[flipnode]

Thanks for the info ..
_________________
I think Gentoo is great!