Turning off Network Services

[agape234]

1. What files do I need to edit to lockdown my server? I need to shutdown the ability to login/telnet in with the root account among others.

I would prefer to edit the files rather than use SAM, just for the experience.


A reference url for securing my box from potential hackers would be a groove. Or if I must, I can purchase a book if one is recommended.

2. What command is the best way to show what TCP and other services are running?

Thanks so much.

 

[biker1]

agape234,

The "netstat" and "ps" commands should help you accomplish your task.

A few links for your review:

http://www-uxsup.csx.cam.ac.uk/security/

This one was written for Linux, but has good information:

http://www.linuxsecurity.com/docs/LDP/Security-Quickstart-HOWTO/index.html

Hope these help!

Biker
Systems/Network Administrator
LiveFire Labs - Hands-On Technical e-Learning

http://www.LiveFireLabs.com

 

[biker1]

One more...

http://equinox.comnet.unr.edu/homepage/unixweb/security/checklist.html

Biker
Systems/Network Administrator
LiveFire Labs - Hands-On Technical e-Learning

http://www.LiveFireLabs.com

 

[patel]

Create a file called /etc/securetty with console word in it.
Now root can not login straight. you first have to login as user then you can do su - to become root.

Patel