LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Security Week: September 15th, 2014
Linux Security Week: September 8th, 2014
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Configure Web/DNS/Mail Securely in 5 Minutes with EnGarde Print E-mail
User Rating:      How can I rate this item?
Features Web, DNS, and Mail are the building block services of the Internet. In this article, I show how to setup a Web, DNS, and Mail server with a few clicks of the mouse using EnGarde Secure Linux.

Introduction

Each time management mandates a new project, it must immediately be followed up with hours of research to determine the best course of action. Important projects can often be pushed aside or delayed because those tasked with implementation find themselves in a position of not fully understanding the technology. A fundamental lack of understanding leads to configuration errors and security vulnerabilities. When EnGarde Secure Linux is used, management can have assurance that systems are setup in the most efficient and secure manner. Staff can then concentrate on core competencies that accelerate business, rather than specialized skills such as server configuration.

The free community version of EnGarde Secure Linux is available at http://www.engardelinux.org. After downloading the ISO, it must be burned to a CD then installed on a dedicated machine. The installation process is remarkably simple and can be accomplished in about 15 minutes. For corporate users, I recommend using EnGarde Secure Professional. Users receive source and binary CD-Roms, an annual subscription to the Guardian Digital Secure Network, installation and configuration support, 60 days of phone/email support, a printed configuration manual, and a quick start reference guide.

ImageAfter EnGarde is installed, simple administration tasks such as setting up users, system access controls, and a backup schedule should be set. EnGarde servers are managed remotely using a browser through a SSL connection. Access to the Web interface can be restricted to specific IP addresses if necessary. In addition to Web, DNS, and Mail configuration, the Guardian Digital WebTool provides screens to assist with FTP, SSH, User management, IP access controls, Tripwire, Auditing reports, and many other typical server features.

Step 1: DNS

In the DNS management section, click 'Create a New Master Zone.'

Image

The zone type should be set to forward, then basic information such as the domain name and a contact email address should be added. It is also a good idea to create a reverse entry, although not necessary. When finished entering in the information, click create. After the zone is created, click the new domain link at the bottom of the page. From this page domain addresses and the default mail server can be set.

Image

A default record needs to be created, then one should create a record for 'www' and any other host names you would like to include. Creating the default MX record is almost identical to the screen above.

Step 2: Web

To begin setting up a Web site, click 'Create a Virtual Host.'

Image

Enter in the server IP address, administrator email, server name, webmaster username, and group. Click create. After the new Web domain is created, click on the new link to configure options such as alternate virtual server names (www), default directory index files, and error handling. EnGarde enables administrators to easily set custom URLs for standard errors. For example, it can be set so that the default 404 page is set to http://www.domainname.com/404.html.

Step 3: Mail

In the mail module inside system management, click 'Define New Virtual Domain.'

Image

Perhaps the easiest (if it can get any easier) module to setup is email. Simply add the new domain name, and assign email addresses for that domain to specific users on the system. A single user (for example: bdthomas) can have multiple aliases. For the mail server to work properly, make sure that the MX record is set correctly in DNS section.

Conclusion

Image

Three major Internet services in less than 5 minutes! Configuring a server securely doesn't have to be difficult or time consuming. EnGarde Secure Linux provides these services as well as many other such as sophisticated and secure remote administration capabilities, host & network intrusion detection, network gateway firewall configuration menus, and an extensive auditing and management system. Also, EnGarde Secure Linux is 100% open source and engineered for security from the ground up. As shown is this paper, Web, DNS, and Mail services can be setup in minutes without expert knowledge. The EnGarde Secure Linux Community Edition is available for free.

Stop wasting time! Get secure! Download Engarde!

Only registered users can write comments.
Please login or register.

Powered by AkoComment!

 
< Prev   Next >
    
Partner

 

Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
Middle-School Dropout Codes Clever Chat Program That Foils NSA Spying
FreeBSD Patches DoS Vulnerability
Rogue cell towers discovered in Washington, D.C.
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2014 Guardian Digital, Inc. All rights reserved.