Case Studies Request for Firewall / Content Filter / Mail

This is a discussion on Case Studies Request for Firewall / Content Filter / Mail within the Linux Security forums, part of the System Security and Security Related category; lm2k <lm2k@privatexpto.net> writes: > Hi there > > I've user Linux in the past, but ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 10-20-2003
Harry George
 
Posts: n/a
Default Re: Case Studies Request for Firewall / Content Filter / Mail

lm2k <lm2k@privatexpto.net> writes:

> Hi there
>
> I've user Linux in the past, but I dont use it for about 1 year.
>
> back then I started on Linux in order to test alternatives for
> firewalls.
>
> Unfortunally, because I'm kinda newbie on linux world, I never got the
> change to go very deep on it, so at some point I just gave up.
>
> But now I'm in the process of making a decision...
>
> Either I go with Windows 2003 Server + ISA server + Exhange Server...
> or Linux (redhat, mandrake, suse, etc) + Firewall and content server +
> Qmail or SendMail.
>
> Now.. u guys of course will recomend me the Linux option.
>
> So what I need is u guys to give me your ideias about witch is the
> best linux distro for this, and what server software to implement. I
> need one that requires low administration, that allows me to filter
> content of sites and protocols, monitor web traffinc and give me
> reports, and prevents outside atacks. Plus to this I need to implement
> a mail server for multiple domains.
>
> I'm mutch more experienced on microsoft solutions, but for this box I
> would prefer to use a Linux machine for the reasons already mentioned.
>
> Things said, give-me your advice if possible.
>
> best regards
>
>


What you are asking for could be as simple as installing a distro with
its defaults, or as complex as to require consulting support for
several weeks. As a newbie, you either have to take the time to learn
or have to pay someone else to think for you.

1. You need to be clear just what services you want to run, and have a
good feel for the loads and performance needed.

2. You need to set up a lab environment with the necessary hardware
and software. E.g., if you need to talk to Oracle or to a Windows
Exchange client, then put those in the lab. Then get a decent PC
to run the Linux (after it works you can worry about sizing). Then
start learning and installing. Build a regression test suite
(which can be manual scripts if you can figure out how to automate
them) and use it when you change configurations. Document your
experiments. Only after it runs properly should you plan the
implementaiton to production phase.

3. If you have budget, you can purchase server-oriented distros, e.g,:
http://www.redhat.com/software/rhel/
http://www.suse.com/us/business/products/server/sles/
With that, you should also purchase consulting support for your initial
configuration.

4. Assuming you have "1" and "2" but very little budget, you have to
do some learning. Each service typically has a world of config and
tuning insights which are usually documented in O'Rielly books, in
linuxdoc howtos/guides, and in newsgroups and emaillist archives.
At a minimum, get O'Rielly "Linux in a Nutshell", and "Running
Linux", and browse http://tldp.org/

4.1. For email MTA, many distros now come with postfix. I'd recommend
that over sendmail and even over qmail if you don't have a
specific reason to pick one. Hook it up to mailman email list
server. If you need to service MS Exchange email, that is a
whole different ballgame, and certainly not a newbie task.

4.2. The web server would be apache, but you have to choose 1.3.x or
2.x series. My impression is that add-on modules are beginning to be
available for 2.x, so try that direction first. You should use the
openssl feature; the other plugins are your choice.

4.3. Definitely set up for ssh (and not rlogin or telnet). Do not
setup ftp service.

4.4. If needed, setup SAMBA for file sharing and for printing. Use
CUPS for the print server.

--
harry.g.george@boeing.com
6-6M31 Knowledge Management
Phone: (425) 342-5601
Reply With Quote
  #2 (permalink)  
Old 10-20-2003
lm2k
 
Posts: n/a
Default Case Studies Request for Firewall / Content Filter / Mail

Hi there

I've user Linux in the past, but I dont use it for about 1 year.

back then I started on Linux in order to test alternatives for
firewalls.

Unfortunally, because I'm kinda newbie on linux world, I never got the
change to go very deep on it, so at some point I just gave up.

But now I'm in the process of making a decision...

Either I go with Windows 2003 Server + ISA server + Exhange Server...
or Linux (redhat, mandrake, suse, etc) + Firewall and content server +
Qmail or SendMail.

Now.. u guys of course will recomend me the Linux option.

So what I need is u guys to give me your ideias about witch is the
best linux distro for this, and what server software to implement. I
need one that requires low administration, that allows me to filter
content of sites and protocols, monitor web traffinc and give me
reports, and prevents outside atacks. Plus to this I need to implement
a mail server for multiple domains.

I'm mutch more experienced on microsoft solutions, but for this box I
would prefer to use a Linux machine for the reasons already mentioned.

Things said, give-me your advice if possible.

best regards


Reply With Quote
  #3 (permalink)  
Old 10-21-2003
test
 
Posts: n/a
Default Re: Case Studies Request for Firewall / Content Filter / Mail

looks u need a service provider
"lm2k" <lm2k@privatexpto.net> ???
news:87t7pv8c1gv2g6jcac79sfliqphhdpvh7e@4ax.com ???...
> Hi there
>
> I've user Linux in the past, but I dont use it for about 1 year.
>
> back then I started on Linux in order to test alternatives for
> firewalls.
>
> Unfortunally, because I'm kinda newbie on linux world, I never got the
> change to go very deep on it, so at some point I just gave up.
>
> But now I'm in the process of making a decision...
>
> Either I go with Windows 2003 Server + ISA server + Exhange Server...
> or Linux (redhat, mandrake, suse, etc) + Firewall and content server +
> Qmail or SendMail.
>
> Now.. u guys of course will recomend me the Linux option.
>
> So what I need is u guys to give me your ideias about witch is the
> best linux distro for this, and what server software to implement. I
> need one that requires low administration, that allows me to filter
> content of sites and protocols, monitor web traffinc and give me
> reports, and prevents outside atacks. Plus to this I need to implement
> a mail server for multiple domains.
>
> I'm mutch more experienced on microsoft solutions, but for this box I
> would prefer to use a Linux machine for the reasons already mentioned.
>
> Things said, give-me your advice if possible.
>
> best regards
>
>



~ Let us linux ~


-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----== Over 100,000 Newsgroups - 19 Different Servers! =-----
Reply With Quote
  #4 (permalink)  
Old 10-21-2003
lm2k
 
Posts: n/a
Default Re: Case Studies Request for Firewall / Content Filter / Mail

I dont want a srevice provider. I have one already.

I want to be my own service provider.


Reply With Quote
  #5 (permalink)  
Old 10-22-2003
itbiz
 
Posts: n/a
Default Re: Case Studies Request for Firewall / Content Filter / Mail

then ask your provider la.

My opionion is:

For dist:
use Redhat if you need user friendly,
use Mandrake or Debian if you are advanced user

For MTA:
Qmail for security, postfix as alternative and flexibility (if you need
programming for some reason),
use sendmail if you don't care much about security. But it's commonly
used

DNS:
djbdns

FTP:
proftpd

Firewall:
iptables + firewall builder

Content Filter:
previously, i use RAV as antivirus and filtering, but it's acquired by
M$.

Encryption:
bonelabs to encrypt/sign outgoing mail with a cert only

Antispam:
RAV again, it support regular expression and white/black list. But I am
looking for other alternative =(
as it halt service.

Don't know proxy much, maybe squid is popular

notes: shutdown telnet, and activate ssh

Wish you have fun!


"lm2k" <lm2k@privatexpto.net> ???
news:j7lapvgk2h7s48mreujbbfm9gv79ods2h3@4ax.com ???...
> I dont want a srevice provider. I have one already.
>
> I want to be my own service provider.
>
>



~ Let us linux ~


-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----== Over 100,000 Newsgroups - 19 Different Servers! =-----
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 01:12 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0