This is a discussion on Case Studies Request for Firewall / Content Filter / Mail within the Linux Security forums, part of the System Security and Security Related category; lm2k <lm2k@privatexpto.net> writes: > Hi there > > I've user Linux in the past, but ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
lm2k <lm2k@privatexpto.net> writes:
> Hi there > > I've user Linux in the past, but I dont use it for about 1 year. > > back then I started on Linux in order to test alternatives for > firewalls. > > Unfortunally, because I'm kinda newbie on linux world, I never got the > change to go very deep on it, so at some point I just gave up. > > But now I'm in the process of making a decision... > > Either I go with Windows 2003 Server + ISA server + Exhange Server... > or Linux (redhat, mandrake, suse, etc) + Firewall and content server + > Qmail or SendMail. > > Now.. u guys of course will recomend me the Linux option. > > So what I need is u guys to give me your ideias about witch is the > best linux distro for this, and what server software to implement. I > need one that requires low administration, that allows me to filter > content of sites and protocols, monitor web traffinc and give me > reports, and prevents outside atacks. Plus to this I need to implement > a mail server for multiple domains. > > I'm mutch more experienced on microsoft solutions, but for this box I > would prefer to use a Linux machine for the reasons already mentioned. > > Things said, give-me your advice if possible. > > best regards > > What you are asking for could be as simple as installing a distro with its defaults, or as complex as to require consulting support for several weeks. As a newbie, you either have to take the time to learn or have to pay someone else to think for you. 1. You need to be clear just what services you want to run, and have a good feel for the loads and performance needed. 2. You need to set up a lab environment with the necessary hardware and software. E.g., if you need to talk to Oracle or to a Windows Exchange client, then put those in the lab. Then get a decent PC to run the Linux (after it works you can worry about sizing). Then start learning and installing. Build a regression test suite (which can be manual scripts if you can figure out how to automate them) and use it when you change configurations. Document your experiments. Only after it runs properly should you plan the implementaiton to production phase. 3. If you have budget, you can purchase server-oriented distros, e.g,: http://www.redhat.com/software/rhel/ http://www.suse.com/us/business/products/server/sles/ With that, you should also purchase consulting support for your initial configuration. 4. Assuming you have "1" and "2" but very little budget, you have to do some learning. Each service typically has a world of config and tuning insights which are usually documented in O'Rielly books, in linuxdoc howtos/guides, and in newsgroups and emaillist archives. At a minimum, get O'Rielly "Linux in a Nutshell", and "Running Linux", and browse http://tldp.org/ 4.1. For email MTA, many distros now come with postfix. I'd recommend that over sendmail and even over qmail if you don't have a specific reason to pick one. Hook it up to mailman email list server. If you need to service MS Exchange email, that is a whole different ballgame, and certainly not a newbie task. 4.2. The web server would be apache, but you have to choose 1.3.x or 2.x series. My impression is that add-on modules are beginning to be available for 2.x, so try that direction first. You should use the openssl feature; the other plugins are your choice. 4.3. Definitely set up for ssh (and not rlogin or telnet). Do not setup ftp service. 4.4. If needed, setup SAMBA for file sharing and for printing. Use CUPS for the print server. -- harry.g.george@boeing.com 6-6M31 Knowledge Management Phone: (425) 342-5601 |
|
|||
|
Hi there
I've user Linux in the past, but I dont use it for about 1 year. back then I started on Linux in order to test alternatives for firewalls. Unfortunally, because I'm kinda newbie on linux world, I never got the change to go very deep on it, so at some point I just gave up. But now I'm in the process of making a decision... Either I go with Windows 2003 Server + ISA server + Exhange Server... or Linux (redhat, mandrake, suse, etc) + Firewall and content server + Qmail or SendMail. Now.. u guys of course will recomend me the Linux option. So what I need is u guys to give me your ideias about witch is the best linux distro for this, and what server software to implement. I need one that requires low administration, that allows me to filter content of sites and protocols, monitor web traffinc and give me reports, and prevents outside atacks. Plus to this I need to implement a mail server for multiple domains. I'm mutch more experienced on microsoft solutions, but for this box I would prefer to use a Linux machine for the reasons already mentioned. Things said, give-me your advice if possible. best regards |
|
|||
|
looks u need a service provider
"lm2k" <lm2k@privatexpto.net> ??? news:87t7pv8c1gv2g6jcac79sfliqphhdpvh7e@4ax.com ???... > Hi there > > I've user Linux in the past, but I dont use it for about 1 year. > > back then I started on Linux in order to test alternatives for > firewalls. > > Unfortunally, because I'm kinda newbie on linux world, I never got the > change to go very deep on it, so at some point I just gave up. > > But now I'm in the process of making a decision... > > Either I go with Windows 2003 Server + ISA server + Exhange Server... > or Linux (redhat, mandrake, suse, etc) + Firewall and content server + > Qmail or SendMail. > > Now.. u guys of course will recomend me the Linux option. > > So what I need is u guys to give me your ideias about witch is the > best linux distro for this, and what server software to implement. I > need one that requires low administration, that allows me to filter > content of sites and protocols, monitor web traffinc and give me > reports, and prevents outside atacks. Plus to this I need to implement > a mail server for multiple domains. > > I'm mutch more experienced on microsoft solutions, but for this box I > would prefer to use a Linux machine for the reasons already mentioned. > > Things said, give-me your advice if possible. > > best regards > > ~ Let us linux ~ -----= Posted via Newsfeeds.Com, Uncensored Usenet News =----- http://www.newsfeeds.com - The #1 Newsgroup Service in the World! -----== Over 100,000 Newsgroups - 19 Different Servers! =----- |
|
|||
|
then ask your provider la.
My opionion is: For dist: use Redhat if you need user friendly, use Mandrake or Debian if you are advanced user For MTA: Qmail for security, postfix as alternative and flexibility (if you need programming for some reason), use sendmail if you don't care much about security. But it's commonly used DNS: djbdns FTP: proftpd Firewall: iptables + firewall builder Content Filter: previously, i use RAV as antivirus and filtering, but it's acquired by M$. Encryption: bonelabs to encrypt/sign outgoing mail with a cert only Antispam: RAV again, it support regular expression and white/black list. But I am looking for other alternative =( as it halt service. Don't know proxy much, maybe squid is popular notes: shutdown telnet, and activate ssh Wish you have fun! "lm2k" <lm2k@privatexpto.net> ??? news:j7lapvgk2h7s48mreujbbfm9gv79ods2h3@4ax.com ???... > I dont want a srevice provider. I have one already. > > I want to be my own service provider. > > ~ Let us linux ~ -----= Posted via Newsfeeds.Com, Uncensored Usenet News =----- http://www.newsfeeds.com - The #1 Newsgroup Service in the World! -----== Over 100,000 Newsgroups - 19 Different Servers! =----- |