Submitted by Alaa on Thu, 06/04/2006 - 13:30.

this is not the most secure way to build a webserver, but it is extremly easy and quick and reasonably secure.

and yeah I install X on the server and use vnc occasionally في حاجة؟!!!

installing a mandrake server

  • minimal install
  • if not minimal clean rpm-leaves
  • define sources
  • upgrade
  • install ssh-server ssh-clients
  • install rsync
  • install bash completion
  • install dtach
  • install mc
  • install emacs
  • install drakwizard drakconf
  • install xinetd
  • install shorewall
  • fix hosts.allow
  • make useraccount, add user to adm, wheel, rpm, xgrp, ntools, ctools
  • msec 4
  • override msec
  • set up shorewall
  • make ssh keys
  • fix ssh config
  • switch to ssh-xinetd
  • install drakwizard
  • install tightvnc-server, xauth, xorg-x11-75dpi-fonts, rxvt
  • install pekwm
  • pekwm menu file
  • run vncserver
  • edit ~/.pekwm/menu
  • install mysql
  • copy mysql config file
  • change mysql root password
  • install phpMyAdmin
  • apache wizard
  • install php, php-cli, php-imap, php-apc, php-mysql, php-ldap, php-mbstring, ph p-pear
  • install imagemagick, exif
  • install cvs
  • drakauth
  • ldap wizard
  • intsall postfix, cyrus-sasl,libsasl2-plug-plain, libsasl2-plug-login
  • install and configure postfix
  • install and configure dovecot
  • tweak apache config
  • set apache virtual hosts
  • set http file permissions
  • configure drakbackup
  • install rdate
  • time sync cron job
  • drupal cron job
  • drakxservices
  • rpm-leaves again

perfect :-)

DarKnesS_WolF's picture

but why u run ssh with ssh-xinetd ?


peace


Live Free Or Die Trying...
GPG Key ID:0x6FD809F4

so the sshd process wil

Alaa's picture

so the sshd process wil only run when needed, used to use this setup on VPS with very low RAM and got used to doing it this way.

cheers,
Alaa


husband of the Grand Waragi Master

http://www.manalaa.net

Don't ask about the gorilla

MSameer's picture

Another point: I guess

MSameer's picture

Another point: I guess with the huge amount of brute force attacks we are getting everyday, the overhead of executing an SSHD process via xinetd becomes almost equivalent to running it in the background.


WWW: The place for organized randoms!

that is a very good

Alaa's picture

that is a very good point

cheers,
Alaa


husband of the Grand Waragi Master

http://www.manalaa.net

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.