[lopsa-discuss] Any Sugesstions for 2 GB Server with a Raid 160 Gb ScSi drive setup.

2010-02-01 Thread Harvey Rothenberg
To All, I am looking for some ideas in-order to assist a friend of mine who has a small business that recently has received a seven (7) year old Dell Server that has little to none of this past seven years on this server for wear.  He says that he wishes to use this server as a NAS,  but then s

Re: [lopsa-discuss] Any Sugesstions for 2 GB Server with a Raid 160 Gb ScSi drive setup.

2010-02-01 Thread Luke S Crawford
Harvey Rothenberg writes: > I am looking for some ideas in-order to assist a friend of mine who has a > small business that recently has received a seven (7) year old Dell Server > that has little to none of this past seven years on this server for wear.  He > says that he wishes to use this s

[lopsa-discuss] If you only had 5 minutes to secure a server ...

2010-02-01 Thread Joseph Kern
A group of students at my university will be participating in a round of computer security CTF (Capture the Flag) as the Defenders [1] early next week. Given that they have to keep their servers and services online; what would you do in 5 mins to secure a Linux system? I'm hoping that I can give

Re: [lopsa-discuss] If you only had 5 minutes to secure a server ...

2010-02-01 Thread david
On Mon, 1 Feb 2010, Joseph Kern wrote: > A group of students at my university will be participating in a round > of computer security CTF (Capture the Flag) as the Defenders [1] early > next week. > > Given that they have to keep their servers and services online; what > would you do in 5 mins to

Re: [lopsa-discuss] If you only had 5 minutes to secure a server ...

2010-02-01 Thread Atom Powers
/me agrees with David Lang (must be a first...) More to the point of your question: * shutdown unnecessary services * block unnecessary ports * upgrade/update packages * get a CRC fingerprint for various parts of the system (/etc, /bin, etc.) - and periodically check the running system against i

Re: [lopsa-discuss] If you only had 5 minutes to secure a server ...

2010-02-01 Thread Edward Ned Harvey
> Given that they have to keep their servers and services online; what > would you do in 5 mins to secure a Linux system? I assume this means there's a list of services that must stay online. Right? Just because a service is running doesn't mean it needs to be, right? The first thing I'd do is n

Re: [lopsa-discuss] If you only had 5 minutes to secure a server ...

2010-02-01 Thread Nick Whalen
Edward Ned Harvey wrote: > The second thing I'd do is ... You mentioned LAMP. I presume the "M" > component doesn't need to be available across the LAN, right? Configure > iptables to block it across the LAN. > You can go one better with the 'M' component and just configure it to run on 127.0

Re: [lopsa-discuss] If you only had 5 minutes to secure a server ...

2010-02-01 Thread Matt Simmons
Before the exercise, I would become very familiar with this page: http://support.zenwalk.org/viewforum.php?f=48&sid=3320c271ca1cdb2240993243573a5787 Several of these are possible to do concurrently, which will be important in a team environment. 1a) Log into the console as root and touch /etc/nol