<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
<br><br>> From: chris@tylers.info<br>> To: fedora-list@redhat.com<br>> Date: Tue, 10 Nov 2009 19:53:34 -0500<br>> Subject: Re: new install, Firewall, anti-virus?<br>> <br>> On Wed, 2009-11-11 at 00:15 +0000, Jim Douglas wrote:<br>> > I just trashed Windows 7 and installed FC11 but before I connect to<br>> > the internet how best could I protect the machine?<br>> > <br>> > Is the firewall up and running by default effective? It's a home<br>> > machine but I plan on adding a web server.<br>> > <br>> > What is the best anti-virus?<br>> > <br>> > (Bye, bye windows!)<br>> > <br>> > Thanks,<br>> > Jim<br>> <br>> Hi Jim,<br>> <br>> You should definitely use the built-in firewall along with SELinux.<br>> There are several firewall tools available withing Fedora; they pretty<br>> much all use iptables to do the actual filtering, and vary only in the<br>> complexity of the rulesets which they create.<br>> <br>> As far as anti-virus solutions go, you will find very few on Linux, and<br>> most of those are for scanning Windows viruses (e.g., if acting as a<br>> fileserver or mailserver to Windows computers). It's not that Linux<br>> viruses have never been created, it's just that we patch the<br>> vulnerability that the virus attacks rather than spend energy writing<br>> and circulating virus signatures and so forth. For best protection, keep<br>> your system up-to-date using the built-in tools (if you're using this as<br>> a desktop system, you'll get a notification when updates are available,<br>> which will be frequently; if you're using this as a server and not<br>> logging in very often, you should consider enabling automatic updates).<br>> <br>> A couple of other things:<br>> - Disable remote root access -- "PermitRootLogin No"<br>> in /etc/ssh/sshd_config<br>> <br>> - Ensure that your passwords are not easy to guess -- there are a number<br>> of slow brute-force attacks active out there.<br>> <br>> - If running a webserver, you may need to set some SELinux booleans to<br>> enable particular web applications (assuming you're serving more than<br>> sta> <br>> A couple of other things:<br>> - Disable remote root access -- "PermitRootLogin No"<br>> in /etc/ssh/sshd_configtic web pages). Do this carefully, and don't enable more access than<br>> necessary. This will prevent an exploited web script from doing things<br>> that it should not. To be extra safe/paranoid, run the webserver in a<br>> virtual machine (which has the side effect of making it easier to move<br>> to another system, e.g., put it on a laptop temporarily when you upgrade<br>> your main machine or replace hardware).<br>> <br>> --<br>> Chris<br>> <br>> -- <br>> fedora-list mailing list<br>> fedora-list@redhat.com<br>> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list<br>> Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines<br><br><br>how can I open with kwrite as root and edit the file?<br><br>> <br>> A couple of other things:<br>> - Disable remote root access -- "PermitRootLogin No"<br>> in /etc/ssh/sshd_config<br><br>Thanks,<br>Jim<br> <br /><hr />Bing brings you maps, menus, and reviews organized in one place. <a href='http://www.bing.com/search?q=restaurants&form=MFESRP&publ=WLHMTAG&crea=TEXT_MFESRP_Local_MapsMenu_Resturants_1x1' target='_new'>Try it now.</a></body>
</html>