topic Re: ipfilter in Operating System - HP-UX

ipfilter

BenCheer.com — Tue, 22 Aug 2006 04:37:07 GMT

My company using hpux v11i v2, if i've build up a apache http, and use ipf as firewall.
Port 80, 443
I try to check ipf log which pass through those ports, and check apache log whether it contains executable command ....././passwd, ././chmod , etc.

My question is what i am checking is enough or not?

Thanks a lot

Re: ipfilter

Peter Godron — Tue, 22 Aug 2006 04:55:01 GMT

Hi,
seems you are checking all the correct files, but what are you trying to prevent/detect.

Re: ipfilter

BenCheer.com — Tue, 22 Aug 2006 05:19:32 GMT

Hi ,
My supervisor want me to prevent hacking from internet.

Re: ipfilter

Steven E. Protter — Tue, 22 Aug 2006 06:54:32 GMT

Shalom,

Go with an ipfilter configuration that first rejects allpass through, and then accepts only 80 and 443.

This will limit traffic to your machine to those two ports alone.

This alone is not enough to prevent hacking but it will limit their options. Its still possible to exploit web server flaws and gain access to the box.

SEP

Re: ipfilter

BenCheer.com — Wed, 23 Aug 2006 00:36:08 GMT

if i try put a firewall(such as checkpoint) in front of unix then put the web server (unix) within DMZ, is it much more better?

thx

Re: ipfilter

Robert Fritz — Tue, 05 Sep 2006 14:28:11 GMT

I'd also suggest going through your http.conf file and removing any module support you don't need, and the functionality you don't use. Also, you may consider using HP-UX Bastille to harden your system further.

-R

Re: ipfilter

BenCheer.com — Wed, 06 Sep 2006 18:07:20 GMT

Thanks