Comments on: Protecting Against Server Attack http://www.justuber.com/blog/2007/08/16/protecting-against-server-attack/ Dancing with Nerds Mon, 09 Aug 2010 11:35:32 +0000 http://wordpress.org/?v=2.8.4 hourly 1 By: chris http://www.justuber.com/blog/2007/08/16/protecting-against-server-attack/comment-page-1/#comment-426 chris Fri, 17 Aug 2007 12:32:11 +0000 http://www.justuber.com/blog/2007/08/16/protecting-against-server-attack/#comment-426 Would you advocate using Feisty as a server then Kirrus, or would you tend to stay with an LTS edition? Would you advocate using Feisty as a server then Kirrus, or would you tend to stay with an LTS edition?

]]> By: Kirrus http://www.justuber.com/blog/2007/08/16/protecting-against-server-attack/comment-page-1/#comment-425 Kirrus Fri, 17 Aug 2007 12:24:41 +0000 http://www.justuber.com/blog/2007/08/16/protecting-against-server-attack/#comment-425 Firehol, Openvpn, and some blacklist custom-written scripts to blacklist (drop all trafic from) refferal spamers. Firehol: as a rule, our servers are only open to those addresses that they must be. No ssh access to the world, but ssh access on the public ports from our networks for example. OpenVPN: Build an encrypted network. Effectivly, join private networks accross the internet. (At its default, best used per computer, athough you can use route &/or masqurade to link your networks properly with firehol.) The only gotcha with firehol is, it doesn't work out of the box with Feisty. See bug report: https://bugs.launchpad.net/ubuntu/+source/firehol/+bug/78017 Firehol, Openvpn, and some blacklist custom-written scripts to blacklist (drop all trafic from) refferal spamers.

Firehol: as a rule, our servers are only open to those addresses that they must be. No ssh access to the world, but ssh access on the public ports from our networks for example.

OpenVPN: Build an encrypted network. Effectivly, join private networks accross the internet. (At its default, best used per computer, athough you can use route &/or masqurade to link your networks properly with firehol.)

The only gotcha with firehol is, it doesn’t work out of the box with Feisty. See bug report: https://bugs.launchpad.net/ubuntu/+source/firehol/+bug/78017

]]>