diff options
Diffstat (limited to 'zarb-ml/mageia-sysadm/2010-November/000546.html')
| -rw-r--r-- | zarb-ml/mageia-sysadm/2010-November/000546.html | 107 |
1 files changed, 107 insertions, 0 deletions
diff --git a/zarb-ml/mageia-sysadm/2010-November/000546.html b/zarb-ml/mageia-sysadm/2010-November/000546.html new file mode 100644 index 000000000..434ff0bc5 --- /dev/null +++ b/zarb-ml/mageia-sysadm/2010-November/000546.html @@ -0,0 +1,107 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-sysadm] Installing firewall + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Installing%20firewall&In-Reply-To=%3C20101116064319.GB17499%40maude.comedia.it%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="000540.html"> + <LINK REL="Next" HREF="000498.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-sysadm] Installing firewall</H1> + <B>Luca Berra</B> + <A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Installing%20firewall&In-Reply-To=%3C20101116064319.GB17499%40maude.comedia.it%3E" + TITLE="[Mageia-sysadm] Installing firewall">bluca at vodka.it + </A><BR> + <I>Tue Nov 16 07:43:19 CET 2010</I> + <P><UL> + <LI>Previous message: <A HREF="000540.html">[Mageia-sysadm] Installing firewall +</A></li> + <LI>Next message: <A HREF="000498.html">[Mageia-sysadm] [241] Add a module to construct files from fragments. +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#546">[ date ]</a> + <a href="thread.html#546">[ thread ]</a> + <a href="subject.html#546">[ subject ]</a> + <a href="author.html#546">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>On Mon, Nov 15, 2010 at 08:23:11PM +0100, Olivier Thauvin wrote: +><i>I don't want to say NFS is wonderfull, but being able launch "rpm -Uvh +</I>><i>libfoo*.rpm" saved my life so many time I really think having the tree +</I>><i>provided by NFS would be an advantage (even ro). +</I> +nfs and automounter are an evil plan from sun to drive system +administrator insane :) + +that said there is nothing better than that for sharing resources, and +if thet are correctly configured they work flawlessly. + +><i>About the firewall part, why not simply allowing everything from ours IP +</I>><i>(the 4 or 5 servers we have) ? +</I>><i>I don't imagine this would be more risky than having php on our +</I>><i>server... +</I> +i have a similar setup, where my frontend mail/web servers are hosted in +a dc, in order to secure communication between those i just did: + +/etc/ipsec.conf +spdadd X.Y.W.1 X.Y.W.2 any -P in ipsec + esp/transport//require + ah/transport//require; + +spdadd X.Y.W.1 X.Y.W.2 any -P in ipsec + esp/transport//require + ah/transport//require; + +/etc/racoon/psk +X.Y.W.1 this_very_secret_string_you_no_guess +X.Y.W.2 this_very_secret_string_you_no_guess + +/etc/shorewall/zones +loc ipsec mode=transport + +/etc/shorewall/policy +fw loc ACCEPT +loc fw ACCEPT +net loc NONE +loc net NONE + + +now i am sure that each host cannot be spoofed or intercepted. + +L. + +-- +Luca Berra -- <A HREF="https://www.mageia.org/mailman/listinfo/mageia-sysadm">bluca at vodka.it</A> +</PRE> + + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="000540.html">[Mageia-sysadm] Installing firewall +</A></li> + <LI>Next message: <A HREF="000498.html">[Mageia-sysadm] [241] Add a module to construct files from fragments. +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#546">[ date ]</a> + <a href="thread.html#546">[ thread ]</a> + <a href="subject.html#546">[ subject ]</a> + <a href="author.html#546">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm +mailing list</a><br> +</body></html> |