Marshal
Premium
join:2003-11-01
Montreal
| Dedicated Linux Server
I'm building a linux box, that will be hosted in a datacenter, here in Montreal.
I have a few concern that i want to ask to get opinions.
That box will be doing webhosting, dns, mail.
I have 4 ipadress. Is it worth to have webhosting listening on 1 ip only, dns on its ip and mail too ?
Will it improve the security side, that people wont know what else is running on this ip ?
Thanks
Frank
--
Vidéotron - Download @ 10 mbits - Upload @ 900 kbits
My home Network |
|
stefaanE
Premium
join:2002-07-10
Luxembourg
 ·Redwood Virtual
| said by Marshal  :I have 4 ipadress. Is it worth to have webhosting listening on 1 ip only, dns on its ip and mail too ? Will it improve the security side, that people wont know what else is running on this ip ? It will not do anything for security to have a separate IP address per service. Scanning four addresses isn't any more difficult than scanning one, and because it's only a single machine, when it's compromised you don't really care through which IP address it happened.
You could get some real security by using User Mode Linux, and configuring a virtual machine for each service. That way, you'd limit the extent of the damage, and restoring the compromised UML machine is a lot easier than re-installing the whole machine.
Reserve one of the IP addresses for the host OS (the real McCoy), and limit access to SSH from your workstation (or configure a VPN). Use the other addresses for one or more UML machines, and you'll have a pretty secure setup.
If you're not committed to Linux, Solaris 10 Zones are easier to set up and give the same type of separation of functions.
Take care,
Stefaan
--
"Technically, Windows is an 'operating system,' which means that it supplies your computer with the basic commands that it needs to suddenly, with no warning whatsoever, stop operating." -Dave Barry |
|
Marshal
Premium
join:2003-11-01
Montreal
| I know linux, its just that its the 1st time i build a machine who will be in a datacenter 
For Virtual machine, do you have a link or some good references on how do do it ?
Thanks
--
Vidéotron - Download @ 10 mbits - Upload @ 900 kbits
My home Network |
|
John2g
Qui Tacet Consentit
Premium
join:2001-08-10
England | reply to Marshal
You might get more help here: »All Things Unix |
|
stefaanE
Premium
join:2002-07-10
Luxembourg
·Redwood Virtual
| reply to Marshal
It's basically a Linux kernel running as a user process. It's pretty nifty, and it works really well. Check out:
»user-mode-linux.sourceforge.net/
and
»usermodelinux.org/
Take care,
Stefaan
--
"Technically, Windows is an 'operating system,' which means that it supplies your computer with the basic commands that it needs to suddenly, with no warning whatsoever, stop operating." -Dave Barry |
|
