Securing file server

[ntuple]

Hello all,

I'm using a 10.04 box as a headless file server and want to make it easily accessible on the network and inaccessible from the Net. Excepting occasional times for system updates or remote access through KRDC or ssh, would like to keep this box invisible and untouchable from the Net.

Would appreciate suggestions on how I can do this.

thx

[oshunluvr]

Re: Securing file server

First of all, set your ssh port to something other than 22. Edit /etc/ssh/sshd.config to do this.

Then, limit access to only your local network. To do this, start by editing /etc/hosts.deny to look like:

http-rman: ALL EXCEPT LOCAL

portmap: ALL
lockd: ALL
mountd: ALL
rquotad: ALL
statd: ALL

Then edit /etc/hosts.allow to look like:

portmap: 192.168.1.
lockd: 192.168.1.
rquotad: 192.168.1.
mountd: 192.168.1.
statd: 192.168.1.

This is a good start...