[Sussex] Security and Network Problems [WAS: FTP - Fedora core 3]

[Jon Fautley]

Brendan Whelan wrote:
> Thanks for the further responses. The system will be within the NHS behind a
> Firewall but I would prefer to at least setup some fairly basic protection.

Ugh - you really do want a firewall on that then - especially if it's on 
the NHS WAN.

> Using the GUI interface, I have set the firewall to allow HTTP, FTP and SMTP
> through eth0 and eth1. Is there anything else which I should set?

SSH for remote access, if you need it. If there's nothing else you need, 
then don't worry about it :)

> As an aside, all communication to/from the Dell server on eth1.   eth0
> appears to start correctly but cannot be used for communications with other
> systems! Has any one any suggestions?

Does it have an IP address configured? is it connected to the network?

The easiest thing to do is send us a copy of ifconfig -a and route -n to 
ensure the settings are correctly configured.

Rgds,

J

> 
> 
> ----- Original Message -----
> From: "Jon Fautley" <jfautley at redhat.com>
> To: "LUG email list for the Sussex Counties" <sussex at mailman.lug.org.uk>
> Sent: Thursday, August 11, 2005 9:16 AM
> Subject: Re: [Sussex] FTP - Fedora core 3
> 
> 
> 
>>Ronan Chilvers wrote:
>>
>>
>>>Great again!!  However, I don't think firewalling is really necessary
>>>if its a trusted internal system, ie: not internet facing.  Good idea to
>>>setup an anonymous FTP area maybe to restrict where FTPers can go, but a
>>>firewall sounds a bit like overkill, really.
>>
>>That is totally and utterly dependant upon the environment in which the
>>system is installed.
>>
>>Just because it's sitting on the corporate LAN, doesn't mean it's a
>>'trusted' environment.
>>
>>Jon
>>--
>>Jon Fautley <jfautley at redhat.com>     direct: +44 1483 739615
>>  Presales Technical Consultant        office: +44 1483 300169
>>  Red Hat UK                           mobile: +44 7841 558683
>>  10 Alan Turing Road, Surrey Research Park, Guildford GU2 7YF
>>
>>
>>_______________________________________________
>>Sussex mailing list
>>Sussex at mailman.lug.org.uk
>>Sussex LUG Website: http://www.sussex.lug.org.uk/
>>http://mailman.lug.org.uk/mailman/listinfo/sussex
>>
>>
> 
> 
> 
> 
> _______________________________________________
> Sussex mailing list
> Sussex at mailman.lug.org.uk
> Sussex LUG Website: http://www.sussex.lug.org.uk/
> http://mailman.lug.org.uk/mailman/listinfo/sussex


-- 
Jon Fautley <jfautley at redhat.com>     direct: +44 1483 739615
  Presales Technical Consultant        office: +44 1483 300169
  Red Hat UK                           mobile: +44 7841 558683
  10 Alan Turing Road, Surrey Research Park, Guildford GU2 7YF