Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am trying to secure a Linux server but i even also want to know the types of vulnerabilities associated and the attacks that happen and how so that i can completely understand securing a server

share|improve this question
3  
Really depends on what role this Linux server is playing on your network, what applications or services are running on it, whether it's internal or publicly-facing... basically you need to provide more details here. –  gravyface Feb 7 '11 at 15:28
    
This is an incredibly over-broad question. The best answer I can give is to remove all cables and fill all ports with non-conductive epoxy. If you would like to narrow the scope of your question maybe someone can give better advice. –  voretaq7 Feb 7 '11 at 15:42
    
ya i was thinking more of configurations for as of iptables and ssh configurations and some other services such as apache and logs –  jhonny blaze Feb 7 '11 at 16:17
    
Explore the security tag on this site. Tons of great information. –  Steven Monday Feb 8 '11 at 2:32

3 Answers 3

There is no way to fully inform you how to "secure" a system in this format (this website). It's a huge topic, because it requires understanding how your server is to be used, who's using it, what applications are on it, etc...

You can get generic advice like only running essential services, closing ports that are unused or unneeded, auditing your applications, backup regularly, monitor logs (or offload logs to another server), watch for unusual activity, install file monitoring software, keep up to date, etc...but again how these things are implemented and how effective they are in your environment vary.

You need to fully understand security as a layered approach and asking how to secure "a linux server" implies that you are already missing the most important aspect...most security problems come from people. Your users, how it's to be used, your policies, etc. A very secure system is nearly unusable by the people it's intended to serve, and a fully open system is extremely convenient but also "pwned" within minutes. But at least the users are happy.

Subscribe to blogs, keep up to date with vulnerability checks, and if you can narrow down your question and provide more details in a separate question thread I'm sure we can help you a little better. We need more focus in order to offer assistance, really. The topic is too open.

share|improve this answer
    
thanks for the reply i would love to have more inputs on such blogs so that i can be up to date –  jhonny blaze Feb 7 '11 at 16:18

Implementing Network Security in CentOS/RedHat Servers is a great introduction to Linux network security - it isn't a walkthrough - it explains things in depth, and well worth a read.

Despite the title, it doesn't just apply to CentOS/RedHat.

share|improve this answer

How to secure a server in 5 easy steps:

  • Back your stuff up.

  • Don't install/run stuff you don't need.

  • Keep the stuff you do install updated.

  • Watch your stuff constantly to make sure nothing is happening to it.

  • If^H^HWhen something does happen to your stuff, fix it quickly.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.