Planning to have the Cluster on the Internet

[Faizer Jameel]

Hi Gurus
We are planning to have our two node MSCG cluster on the internet. Please advise me on the security measures that need to be taken from the OS side [HPUX11.11] and from the cluster side. Security level is going to be medium at the begining.
Thanks in advance
Faizer

[steven Burgess_2]

Hello

You probably need to do some reading to fully understand exactly what your doing and why

HPUX- Bastille

http://docs.hp.com/en/5990-8153/ch08s04.html

HTH

Steve

[Steven E. Protter]

I have a HP-9000 server on the public Internet.

There have been tens of thousands of attempts to compromise it this year.

All have failed. Several have been inventive enough to lead to my next paragraph.

I recommend before you put valuable machines and hardware on the Internet you security focus be re-classified tp PARANOID.

Example.

Disable for good r- protocols in inet.conf. disable telnet and ftp and any other protocol that uses clear text authentication.

IF the boxes don't need sendmail, then remove the binaries and disable the daemon.

SEP