[oclug]Phew. up again
rod at giffinscientific.com
Mon Nov 4 20:35:29 EST 2002
I tell you someting, using Mandrake 9.0 as a secure server was beginning to
look like a serious mistake, but this morning I fixed the problem inside of 5
The problem I was having with Mandrake is not the software or its
configuration, it's in my assumption that the phrase "Suitable for a server
connected to the internet" meant the same thing to everyone.
That is the description of msec (mandrake-secure) security level 4, which I
chose during the installation. I can tell you one thing, if that level is
suitable for a server connected to the internet, then people using security 5
have serious personality defects.
Security level 2 or 3 (Standard or high) in conjunction with installing the
Shorewall firewall and the wizardrake rpm to give your system the
configuration files required for server operation out of the box is probably
enough security. You can also edit the perm.level file in /usr/share/msec/
to customize your security level. That is a much more reasonable security
configuration for a server connected to the internet if you want to actually
use it as a server.
More information about the OCLUG