[oclug]Phew. up again

[Rod Giffin]

I tell you someting, using Mandrake 9.0 as a secure server was beginning to 
look like a serious mistake, but this morning I fixed the problem inside of 5 
minutes.

The problem I was having with Mandrake is not the software or its 
configuration, it's in my assumption that the phrase "Suitable for a server 
connected to the internet" meant the same thing to everyone.  

That is the description of msec (mandrake-secure) security level 4, which I 
chose during the installation.  I can tell you one thing, if that level is 
suitable for a server connected to the internet, then people using security 5 
have serious personality defects.

Security level 2 or 3 (Standard or high) in conjunction with installing the 
Shorewall firewall and the wizardrake rpm to give your system the 
configuration files required for server operation out of the box is probably 
enough security.  You can also edit the perm.level file in /usr/share/msec/ 
to customize your security level.  That is a much more reasonable security 
configuration for a server connected to the internet if you want to actually 
use it as a server.

Rod.