PDA

View Full Version : Security immediately after install.


charlie13
22nd July 2005, 05:11 AM
So I am installing Fedora on a box w/ cable modem, and I'm a little concerned about security.
Will the install process pick up on the cable modem and leave itself open? Or will I only have to worry about security after I manually tell Fedora that I have a cable modem?
Does anyone know a good 'primer' page on how to set up your system so that security is not an issue? I haven't found a very good beginners page on the subject. Since I'm going to be dual booting, I can forego connectivity if I must, but it would be nice to not have to, and not have to worry about it.
Any help is greatly appreciated. Thanks.

w5set
22nd July 2005, 05:23 AM
Is the modem usb or cat5/6 ?
security is handled before bringing the network up with IPTables--basic default is fairly good enough for starters.
Install FC and have a go before worring much about security issues, unless you are running a server--etc.
There has been a ton of "Security" cussed/discussed on this forum--read a lot.

bytesniper
22nd July 2005, 05:29 AM

if you are running a router between your computer and your cable modem then i would say that you are probably ok as long as you dont have any ports forwarded. if your cable modem is connected directly to your computer without the router then i would definitely say to setup iptables, or firestarter (http://www.fs-security.com) as much easier alternative to iptables. it is available from fedora extras (yum install firestarter).

either way iptables/firestarter would be a good thing to have. you can never do too much to secure a system :)

mkoljack
22nd July 2005, 06:53 AM
As mentioned before this, I also would suggest successfully getting the system installed. The default iptables config will be adequate if you are a basic home/small office user.

If you need more, once you are in, you can fire up firefox and post back here!

Omega Blue
22nd July 2005, 07:29 AM
The built-in firewall (iptables) is definitely good enough. If you are worried block all the ports now, you can enable them later.