Topics:

All Pages 8021X HOWTO ACP Modem ACPI HOWTO ADSL Bandwidth Man..ATA RAID HOWTO ATM Linux HOWTO AX25 HOWTO Accessibility Dev ..Accessibility HOWTO Adv Bash Scr HOWTO Adv Routing HOWTO Antares RAID sparc..Apache Compile HOWTO Apache WebDAV LDAP..Assembly HOWTO Astronomy HOWTO Athlon Powersaving..Authentication Gat..Autodir HOWTO Aviation HOWTO Avr Microcontrolle..BRIDGE STP HOWTO BTTV BackspaceDelete Bandwidth Limiting..Bangla HOWTO Bash Prompt HOWTO Battery Powered Belarusian HOWTO Belgian HOWTO Beowulf HOWTO Boca BogoMips Bootdisk HOWTO Bridge C++ dlopen C C++Beautifier HO..C editing with VIM..CDROM HOWTO CDServer HOWTO Cable Modem Caudium HOWTO Clone HOWTO Compaq Remote Insi..Compaq T1500 HOWTO Conexant+Rockwell ..Cryptoloop HOWTO DB2 HOWTO DHCP DSL HOWTO DVD Playback HOWTO Debian Binary Pack..Debian Jigdo Debian and Windows..Disk Encryption HO..Disk on Chip HOWTO DocBook Demystific..DocBook Install DocBook OpenJade S..Ecology HOWTO Emacspeak HOWTO Encourage Women Li..Encrypted Root Fil..Euro Char Support Event HOWTO Fedora Multimedia ..Finnish HOWTO Firewall Piercing Flash Memory HOWTO Font HOWTO Framebuffer HOWTO GCC HOWTO GIS GRASS Glibc Install HOWTO HOWTO HOWTO HOWTO INDEX HP HOWTO Handspring Visor Hard Disk Upgrade Hardware HOWTO HighQuality Apps H..Home Electrical Co..IBM7248 HOWTO IO Perf HOWTO IP Alias IP Masquerade HOWTO IRC Implement Sys Call..Indic Fonts HOWTO Infrared HOWTO IngresII HOWTO Install Strategies Installation HOWTO Installfest HOWTO Intkeyb Italian HOWTO Jabber Server Farm..JavaStation HOWTO Kerberos Infrastru..Kernel HOWTO Kerneld Kodak Digitalcam H..LDAP HOWTO LDP Reviewer HOWTO LILO crash rescue ..LVM HOWTO Leased Line Lego Linksys Blue Box R..Linux+Win95 Linux+Win9x+Grub H..Linux+Windows HOWTO Linux Complete Bac..Linux Crash HOWTO Linux Gamers HOWTO Linux Modem Sharing Linux Promise RAID..Linux i386 Boot Co..LinuxGL QuakeWorld..Lotus DominoR5 MILO HOWTO MMBase Inst HOWTO MP3 CD Burning Mail User HOWTO Majordomo MajorCoo..Man Page Masquerading Simpl..Medicine HOWTO MindTerm SSH HOWTO Mobile IPv6 HOWTO Mock Mainframe Module HOWTO Modules Motorola Surfboard..Mozilla Optimization Multi Distro Dev NCURSES Programmin..NFS HOWTO NFS Root Client mi..NIS HOWTO NetMeeting HOWTO Network boot HOWTO Nvidia OpenGL Conf..OLSR IPv6 HOWTO Online Troubleshoo..Oracle 9i Fedora 3..PA RISC Linux Boot..PCTel MicroModem C..PHP Nuke HOWTO PPP HOWTO Pager PalmOS HOWTO Partition Partition Mass Sto..Partition Mass Sto..Partition Rescue Pine Exchange PortSlave Post Installation ..Postfix Cyrus Web ..Pre Installation C..Print2Win Printing HOWTO Process Accounting Program Library HO..Proxy ARP Subnet Qmail ClamAV HOWTO Qmail VMailMgr Cou..Querying libiptc H..RPM HOWTO Reading List HOWTO RedHat CD HOWTO Reliance HOWTO Remote Bridging Remote Serial Cons..SCSI 2.4 HOWTO SCSI Generic HOWTO SLIP PPP Emulator SRM HOWTO SSL Certificates H..Scanner HOWTO Scientific Computi..Scripting GUI TclTk Secure CVS Pserver Secure Programs HO..Security HOWTO Security Quickstar..Security Quickstar..Serial Laplink HOWTO Serial Programming..Slovak HOWTO Small Memory Smart Card HOWTO Software Proj Mgmt..Software Release P..Sound HOWTO Spam Filtering for..Speech Recognition..SquashFS HOWTO Sybase ASA HOWTO Sybase ASE HOWTO Sybase PHP Apache TCP Keepalive HOWTO Tamil Linux HOWTO TimePrecision HOWTO TimeSys Linux Inst..Token Ring Traffic Control HO..Traffic Control tc..UPS HOWTO Unix Hardware Buye..Unix and Internet ..Upgrade Usenet News HOWTO User Authenticatio..VB6 to Tcl VMS to Linux HOWTO VPN HOWTO Valgrind HOWTO VideoLAN HOWTO Vim HOWTO Virtual Web Webcam HOWTO WikiText HOWTO Windows Newsreader..Wireless Link sys ..Wireless Sync HOWTO XDM Xterm XDMCP HOWTO XFree Local multi ..XFree86 HOWTO XFree86 R200 XFree86 Second Mouse XFree86 Video Timi..XML RPC HOWTO XWindow Overview H..XWindow User HOWTO Xinerama HOWTO Xterminals Html single I810 HOWTO Libdc1394 HOWTO OpenMosix HOWTO Phhttpd HOWTO Ppp ssh Text

Security Quick-Start HOWTO for Red Hat Linux

Hal Burgiss

hal@foobox.net

v. 1.2, 2002-07-21

Revision History
Revision v. 1.2	2002-07-21	Revised by: hb
A few small additions, and fix the usual broken links. .:: zb3.org ::. [Open Source PyTorch] [Ubuntu Modules]
Revision v. 1.1	2002-02-06	Revised by: hb
A few fixes, some additions and many touch-ups from the original. .:: learningapps.org ::. .:: booklog.jp ::. .:: slackcommunity.com ::. .:: podcasts.apple.com ::.
Revision v. 1.0	2001-11-07	Revised by: hb
Initial Release.

This document is a an overview of the basic steps required to secure a Linux installation from intrusion. It is intended to be an introduction. This is a Red Hat specific version of this document.

Table of Contents

1. Introduction

1.1. Why me?
1.2. Notes
1.3. Copyright
1.4. Credits
1.5. Disclaimer
1.6. New Versions and Changelog
1.7. Feedback

2. Foreword

2.1. The Optimum Configuration
2.2. Before We Start

3. Step 1: Which services do we really need?

3.1. System Audit
3.2. The Danger Zone (or r00t m3 pl34s3)
3.3. Stopping Services
3.4. Exceptions
3.5. Summary and Conclusions for Step 1

4. Step 2: Updating

4.1. Summary and Conclusions for Step 2

5. Step 3: Firewalls and Setting Access Policies

5.1. Strategy
5.2. Packet Filters -- Ipchains and Iptables
5.3. Tcpwrappers (libwrap)
5.4. PortSentry
5.5. Proxies
5.6. Individual Applications
5.7. Verifying
5.8. Logging
5.9. Where to Start
5.10. Summary and Conclusions for Step 3

6. Intrusion Detection

6.1. Intrusion Detection Systems (IDS)
6.2. Have I Been Hacked?
6.3. Reclaiming a Compromised System

7. General Tips

8. Appendix

8.1. Servers, Ports, and Packets
8.2. Common Ports
8.3. Netstat Tutorial
8.4. Attacks and Threats
8.5. Links
8.6. Editing Text Files
8.7. nmap
8.8. Sysctl Options
8.9. Secure Alternatives
8.10. Ipchains and Iptables Redux

		Next
		Introduction