How can I harden my network configuration ?

[Olivier LEGRAND]

Hello everybody,

I just want to know if you have some information to harden my network configuration. And I found no documentations to do that. Can you help me?

Thanks

Regards

[Alan Casey]

What do you mean by Harden?
If this is for Security check out the following papers:

http://www.auscert.org/Information/Auscert_info/papers.html

UNIX Security Checklist is a very comprehensive guide to secure you system over a network.


Alan

[John Bolene]

If this is security, a firewall is good.

You can also delete services such as rlogin, rcp, telnet, ftp.

This will harden it to the point that you can only get in via the console.

[Olivier LEGRAND]

Thank you for your help.

I just want to customise my IP configuration.
I just found a very beautiful document
http://www.cymru.com/~robt/Docs/Articles/ip-stack-tuning.html

Regards

[Darrell Allen]

Hi Olivier,

There are a number of threads in the forums concerning bastion hosts. One is:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x42b8cf38d6bdd5118ff10090279cd0f9,00.html

I'm finding them by going to http://www.google.com/advanced_search

Limit your search to domain itrc.hp.com and search for "bastion"

Darrell

[Craig Rants]

Have you tried using the IPF/9000? Product Number is B9901AA on Application CD #1. Also, harden inetd.conf: http://www.uwsg.indiana.edu/security/inetd.html And use /var/adm/inetd.sec. Those three things right there will go along way to improving you security on the network.

MC,
C