topic Re: How to secure a HP-UX11i Server. in Operating System - Linux

How to secure a HP-UX11i Server.

Declan Mc Kay — Mon, 14 Apr 2003 13:10:31 GMT

Hi, Is there any quick guide to securing a Server running UX11i? Disabling telnet, ftp etc is fine, but how do I disbale direct root access and inforce a/c logon first then allow su to root etc. Also, is there a file to restrict (by IP-Address)clients which are allowed to access my Web-Server. Appreciate any security information/documentation guidelines which may be available. Thanks in advance.

Re: How to secure a HP-UX11i Server.

Donald Kok — Mon, 14 Apr 2003 14:14:54 GMT

Hi,

you can find a lot in this forums. You might start witk looking for 'bastion'. Which is a script to secure your system. I think it is a HP-product at the moment.

Greetzz
Donald

Re: How to secure a HP-UX11i Server.

Chris Vail — Mon, 14 Apr 2003 15:33:50 GMT

I've attached a document that supplies quick-and-dirty things to do to a server to secure it. These will slow down or thwart most attacks. However, like the other poster, I recommend the bastion product, which does many of the things I outline in my document.

However, security is NOT something you can do once and forget. It has to be something that is maintained frequently, if you're serious about your data. Sooner or later, just about every possible system will be attacked in one manner or another, and the only way to deal with this is to always stay one step ahead of the latest threats.

Good Luck
Chris

Re: How to secure a HP-UX11i Server.

Balaji N — Tue, 15 Apr 2003 09:10:13 GMT

1. this is a linux and not a hp unix forum. u will receive faster and better responses if u post in the hp forum.

2. there is a white paper regarding building a bastion host.
http://www.hp.com/products1/unix/operating/infolibrary/whitepapers/building_a_bastion_host.pdf

3. for host based access restriction use tcp_wrappers or /var/adm/inetd.sec file.

hth
-balaji