How to secure a HP-UX11i Server.

[Declan Mc Kay]

Hi, Is there any quick guide to securing a Server running UX11i? Disabling telnet, ftp etc is fine, but how do I disbale direct root access and inforce a/c logon first then allow su to root etc. Also, is there a file to restrict (by IP-Address)clients which are allowed to access my Web-Server. Appreciate any security information/documentation guidelines which may be available. Thanks in advance.

[Donald Kok]

Hi,

you can find a lot in this forums. You might start witk looking for 'bastion'. Which is a script to secure your system. I think it is a HP-product at the moment.

Greetzz
Donald

[Chris Vail]

I've attached a document that supplies quick-and-dirty things to do to a server to secure it. These will slow down or thwart most attacks. However, like the other poster, I recommend the bastion product, which does many of the things I outline in my document.

However, security is NOT something you can do once and forget. It has to be something that is maintained frequently, if you're serious about your data. Sooner or later, just about every possible system will be attacked in one manner or another, and the only way to deal with this is to always stay one step ahead of the latest threats.

Good Luck
Chris

[Balaji N]

1. this is a linux and not a hp unix forum. u will receive faster and better responses if u post in the hp forum.

2. there is a white paper regarding building a bastion host.
http://www.hp.com/products1/unix/operating/infolibrary/whitepapers/building_a_bastion_host.pdf


3. for host based access restriction use tcp_wrappers or /var/adm/inetd.sec file.


hth
-balaji