Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am looking at setting up a host that users can host services from. These are specific types of games and will require the user to log in. I'm bouncing between either bsd oor Debian to host, but I have a few questions. First, I want to know if my solutions so far are viable: I am going to use limits (or login classes on bsd) to place resource limits on ram and cpu, as well as quota to place quota limits on disk space that can be used, both hard and soft limits. I also plan to set up an imap server so that each user can have email and pull their system notifications down to their phone or whatever they want. I also plan on locking them in their home directory to a point; I will set their perms on their directory to 770 and the home directory will be set to 000 so that they can not read or chdir to it. I will also set up a wheel group (if I go the linux route) so that users can not su or sudo at all. So, here are my questions: First, is there a way (with linux or bsd) to prevent users binding to ports other than those assigned? I'd like to give each user a port and let them use that, but prevent them from using anything else. Second, how might I handle outbound traffic inspection? If I get notified that someone is abusing the service by say, connecting to someone else's servers over and over and spamming (DOS, essentially), how would I track that down? Finally, are there any other considerations that I might need to look at? Any other tips and ideas would be welcome. Thanks,

share|improve this question

closed as not a real question by Wesley, Zoredache, Michael Hampton, HopelessN00b, EEAA Dec 15 '12 at 0:34

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

Welcome to ServerFault and we're glad to have you here. Your question runs afoul of a few points in the FAQ. Mainly that all questions need to be tightly scoped to a specific problem that can be answered with a single objective statement or series of troubleshooting steps. Your question is too expansive for ServerFault and will likely be closed shortly by a panel of community members. Stick around and enjoy the site, but take a look at our FAQ. – Wesley Dec 14 '12 at 23:50

You are looking at essentially developing your own control panel and management system for a specialized application stack. This is not something that can be answered all at once, but can only be answered through many months of your hard work to make it happen.

All of your goals sounds reasonable with standard toolsets that exist in mainstream OSs and their variants. You will need to split your question into tightly scoped areas of influence in order to get a valuable, objective answer from ServerFault.

Any other tips and ideas would be welcome.

Consider pre-existing game and webhosting control panels to do most of what you're planning on doing. Consider control panel frameworks like OpenPanel. Don't re-invent the wheel.

share|improve this answer
Awesome, thanks. I'll take a look at those. My main concern then is in terms of security, what can I do better? Also, what sorts of mechenisms exist for traffic inspection? If a user were to file an abuse report, I need a way to track and verify it. – talanis Dec 14 '12 at 23:52
@talanis Traffic inspection would be done by a stateful firewall or UTM appliance set in front of your hosting infrastructure. I use pfSense, but YMMV. As for abuse reports I think they have to be open and not require a user account to file. You should look into a hosting management tool like HostBill (What I use for my own hosting company), WHMCS, UberSmith, and others. They can track users, usage, charging, overages, averages, etc. and etc. – Wesley Dec 14 '12 at 23:59
thanks, appreciate the info. I'm new to the whole thing, but I want to get going somewhere. – talanis Dec 15 '12 at 0:07

Not the answer you're looking for? Browse other questions tagged or ask your own question.