Web Hosting Talk







View Full Version : Securing a RaQ 4


pgowder
04-03-2001, 09:38 AM
I'm planning on setting up my website on a RaQ 4 later this week. Do I need to install additional security on the server?? A firewall??

thanks

Phiberop
04-03-2001, 12:32 PM
Update the software on the RaQ if you haven't done so already. I have all of the updates up to March 23 installed except the Recovery Update. I would install Logcheck as well. Other handy tools to have are programs to check for a rootkit, doesn't hurt to run them every now and then. Disable any and all services you do not need. NEVER use Telnet, use SSH instead.

Regards,

Mike

jnestor
04-03-2001, 01:18 PM
I installed SSH on my RaQ and disabled telnet. When I log in to do web based admin however my password is traveling across the net in the clear. I think I can setup SSL and run the admin stuff on the secure connection. Anyone know how to do this? I have no need for a secure server otherwise so I'd probably just use the self-created certificate if that's possible. No biggie if I need to add the cert to my client machine.

pgowder
04-03-2001, 01:52 PM
Where do you get updates?

c0bra
04-03-2001, 04:08 PM
Originally posted by jnestor
I installed SSH on my RaQ and disabled telnet. When I log in to do web based admin however my password is traveling across the net in the clear. I think I can setup SSL and run the admin stuff on the secure connection. Anyone know how to do this?

Yep it's easy. Just select the option to "manage the site" setup as the hostname of your server - as you would any other virtual site. Select SSL settings. Then sign yourself a certificate.

Once completed, you can login to the web-based admin via https://yourhostname.domain.com/admin.

Phiberop
04-03-2001, 05:11 PM
Originally posted by pgowder
Where do you get updates?

http://www.cobalt.com/support/download/

Regards,

Mike

Chicken
04-03-2001, 11:49 PM
For RaQ4: http://www.cobalt.com/support/download/raq4.eng.html

-but I'll mention that running out and installing the latest patch isn't always the best thing do. Best to wait a little bit and see if other users have problems/conflicts with the updates.

Check the mailing list and see if all's well: http://list.cobalt.com/pipermail/cobalt-users before installing. Generally, there's always some brave soul who takes the plunge :)