Re: Securing Fedora Core 4

You should take some time and do some reading on SElinux
implementation...I've personally never played with any of the features
but I know that most linux forums are plastered with comments/tips
about it. http://fedora.redhat.com/projects/selinux/

On 9/21/05, AragonX <[email protected]> wrote:
> I am trying develop a method to secure my servers.  I'll list the steps I
> am going to take.  Can you please review and make any additional
> suggestions.  Thank you.
>
> Install & configure Tripwire    http://sourceforge.net/projects/tripwire/
> Install & configure Snort       http://www.snort.org/
> Install & configure Bastille    http://www.bastille-linux.org/
> Install & configure LIDS        http://www.lids.org/
> Install & configure modsecurity http://www.modsecurity.org/
> Install & configure chkrootkit  http://www.chkrootkit.org/
> install dansguardian            http://www.dansguardian.org
> install squid                   http://www.squid-cache.org/
> Install & configure DCC         http://www.dcc-servers.net
> Install & configure Pyzor       http://pyzor.sourceforge.net
> Install & configure Razor       http://razor.sourceforge.net
> install & configure Clamav      http://www.clamav.net
> Install & configure MailScanner http://www.sng.ecs.soton.ac.uk/mailscanner/
> Install & configure Ntop        http://www.ntop.org/
> Install & configure Spamassassin        http://spamassassin.apache.org/
> install root access email command
> create a seprate /tmp partition and mount noexec, nosuid
>
>    Configure Apache
> configure for php safe mode
> configure /internal web directory w/ access from private network only
> configure /external web directory w/ password authentication
>
>    Configure SSH
> respond on alternate port
> only allow me to logon
>
>    Configure Fireall:
> only allow access to ssh from my domains
>
>
>
>