How secure am I?

[jme]

Well Im not really a Linux security guru, but I think that I am pretty safe here

*prepers self for big shock*

Im running SmoothWall as a router and firewall with all but port 80 closed to the big-bad-world which forwards to my DMZ.

So, should I be able to sleep safely at night still? What are the best precautions that you can take??

Cheers,
Jamie

[jme]

wow - first post in the forum too!

:w00t: :w00t: :w00t:

[kungfuramone9]

jme, have you tried any of the online port scans? http://www.grc.com has a good one called shields up which is brutally pejorative in assessing your security (it thinks mine is flawed because I allow basic ICMP [pings] and because I have port 22 open for SSH.)

Since you advertise your website on linuxfoo, you could always have a couple of us ne'er-do-wells try to hack your system, too! :mrgreen: We know what your IP address is! Nooooo!

[Mr_Sfstk8d]

D4m you 127.0.0.1!!! Why will you not leave me alone!?!?! Must call M$ tech support on this one. **Reaches for wallet** :evil:

[Jessta]

best precautions == unplug internet connection and put computers in volt.

Any of your software can have vunerabilities in it.
Not just network software.

[jro]

I usually run nmap on myself after a new install just to see what is open. Most new installs were pretty secure, relatively.

[dkeav]

shorewall should be enough for more kiddies, your only real hole to worry about from your description is well your hole, you need to lock down your DMZ as much as possible to keep it from being a weak link to your network, here are a few tips

1) run a stable/secure version of your OS and keep it as up to date as you can
2) chroot jail your DMZ services on that machine so that if it IS comprimised nothing is gained by the woodbe attacker