XINETD ACLs

Post #59,919 by gdaustin 10/28/02 3:53:34 PM Reply	XINETD ACLs I assume you're talking about those config files in the xinetd.d directory. Been there, done that. I assume tcpwrappers are hosts.allow and hosts.deny. And finally, I'm using ipchains instead of iptables. I assume they are similar, but you can do more with iptables? Finally, if I'm going to upgrade the kernel to 2.4.14-16, will RH 7.3 do this for me? If so, maybe I'll upgrade to 7.3 instead of 8.0 (like I had originally planned). Someone I'm working on a home project with wants me to upgrade to the latest Apache, PHP, Python, and something called "Stackless Python" he's real excited about. I'm going to do the Apache to plug security holes. Glen Austin
Post #59,928 by folkert 10/28/02 5:09:18 PM Reply	7.3 is what you need then... Make sure you update all the packages... available on the errata... Tis a good stable package... It comes with 2.4.18... Use IPTABLES... there is MUCH MUCH more you can do IPTABLES vs. IPCHAINS... `[link\|mailto:curley95@attbi.com\|greg] - Grand-Master Artist in IT [link\|http://www.iwethey.org/ed_curry/\|REMEMBER ED CURRY!!!] Your friendly Homeland Security Officer reminds: Hold Thumbprint to Screen for 5 seconds, we'll take the imprint, or Just continue to type on your keyboard, and we'll just sample your DNA.`
Post #60,118 by gdaustin 10/29/02 9:09:06 PM Reply	Suse 8.1? A friend of mine was suggesting that I switch to Suse 8.1, instead of RedHat 7.2 or RedHat 8.0. Also, I'm now discovering that there are apparent alliances between major corporations and different variants of Linux. IBM Oracle Sun all with different variants, which doesn't bode well for Linux unification (or even maintaining a common code base). Glen Our "corporate ladder" is a stepstool.
Post #60,294 by folkert 10/30/02 5:26:52 PM Reply	Get thee to an... internet browser and just goto [link\|http://www.fwbuilder.org/\|http://www.fwbuilder.org/]... make sure the prereqs are there... and use it... Don't care what distro you use... as long as IPTABLES is used... rather than IPCHAINS SuSE is fine, there are inherent differences in it vs. RedHat... or Mandrake... or Debian... So what you use is upto you... You can get nearly anything to work on any distro and many have precompiled binaries for them. It really does not matter what distro you use except that you use the one you like and fits what you need done. There is just ONE official Kernel for Linux... that does not mean that every other included piece of software MUST be the same... Why have PERL then... or PyThon or Tk or Ruby or what have you... It is not a matter of of Software running on your version of Linux... unlike trying to get an AIX package to run on Solaris... it is just a matter of getting the pre-reqs to run it... SO... use the one you want... but want to use it also... `[link\|mailto:curley95@attbi.com\|greg] - Grand-Master Artist in IT [link\|http://www.iwethey.org/ed_curry/\|REMEMBER ED CURRY!!!] Your friendly Homeland Security Officer reminds: Hold Thumbprint to Screen for 5 seconds, we'll take the imprint, or Just continue to type on your keyboard, and we'll just sample your DNA.`

Welcome to IWETHEY!