Click to See Complete Forum and Search --> : slackware 8 security


bdg1983
11-12-2001, 09:53 AM
Hey.
I`m running slackware 8, and I`m wondering about this:
1. Where can I turn off the telnet,and other ports into my machine apart from ssh? In suse and red hat there was a setup that did that for me.
2. What kind of firewall should I have ? Recommendations please

Etherphyte
11-12-2001, 12:16 PM
Things like ftp and telnet are run through the inetd daemon.

Open up your /etc/inetd.conf file with your favorite text editor, and comment out the lines for the services you don't want running, by adding a # to the beginning of the line. When you are finished, save the file, and send a HUP command to inet. To do this, su to root, and do a ps -x to find out the PID number of inetd. They type kill -HUP <PID number>

-adam
<edit>
Some servers such as apache, are run as their own daemons. check the man pages for those on how to shut them down, on Slack 8 they are most likely in the /etc/rc.d/ directory. Check through there if there are still services running on startup that you don't want :)
</edit>

[ 12 November 2001: Message edited by: Etherphyte ]

bdg1983
11-12-2001, 02:26 PM
TNX!

Stopped it all :)
But firewall .. any recommendations ? I don`t know if slack comes with a built in firwall or not ?

Etherphyte
11-12-2001, 04:04 PM
Hmm, mine eyes seemed to have glazed right over your firewall question. Linux usually comes with a built in firewalling system (Slack 8 does) called ipchains, or iptables in the 2.4 kernel. This is one option, and there are many frontends to help you with this. This (http://www.linuxnewbie.org/nhf/intel/network/ipchains.html) is the NHF on ipchains, and this (http://www.linuxnewbie.org/nhf/intel/network/firewall.html)is the nhf on firewalls. Those should be a good place to start. Also, a search on google for linux firewall will yield many helpful results.
-adam

ph34r
11-12-2001, 04:07 PM
http://muse.linuxmafia.org - look for gShield - very easy to configure firewall script for either ipchains (2.2.x kernel) or iptables (2.4.x kernel).

Dark Ninja
11-12-2001, 04:30 PM
Yeah, IPChains works very nicely. Another configuration program you may want to look into is GuardDog.


Dark Ninja