Re: How to configure dynamic DNS client?

[Michael Austin <maustin firstdbasource com>]

Mark Champion wrote:
> 
> It's true that my entire network is available to the internet.  However, I
> have disabled the world in /etc/hosts.deny and only allow my specific hosts
> in /etc/hosts.allow and sendmail.  Similarly, I set up Samba to be very
> particular as well.  I've checked this out and I think it's all doing what I
> want.  On my PCs, I have file sharing completely turned off.  Also, I
> install all of the RH7.2 using up2date.  I also check my security with the
> tools at www.dslreports.com.
> 
> I know this isn't the most secure environment, but anyone who hacks their
> way in will be very disappointed with the contents of my computer.  Nothing
> of interest to anyone.
> 
> As I stated in the beginning, I'm really operating at the periphery of my
> knowledge here.  I'd love to set things up as you suggest, but I'm not smart
> enough to configure it let along administrate it.  With my current
> configuration, the Linux computer can go down without taking the other PCs
> with it.  With the more secure arrangement, all PCs would be disconnected if
> my Linux computer goes down.
> 
> Am I being foolish here?


If keeping your network up AND secure, replace/add a router (in order of
my preference --Linksys, SMC Barricade or Netgear) that will do all of
the PPPoE and firewall for you.

You asked if you are being foolish. Well the answer is that there is
more to being hacked than just accessing files on your systems.  They
can be used as servers to hack other systems.  Since you are on DSL
"always on", you could be a prime target as the launching point of a
Denial of Service (DoS) attack.  What do you think?

A router (real or SOHO) will give you some of the firewall protection
that is needed as well as taking that connection keep-alive load off of
your systems.  


> 
> mchampion bigfoot com
> 
> ----- Original Message -----
> From: "Michael Austin" <maustin firstdbasource com>
> To: <redhat-install-list redhat com>
> Sent: Saturday, March 30, 2002 12:33 PM
> Subject: Re: How to configure dynamic DNS client?
> 
> > The way you describe it, your entire network is available to internet
> > including any file sharing you are doing. Is this a business and is this
> > what you want?  I really don't think so.
> >
> > You should consider reconfiguring your entire network .. something like
> > this:
> >
> > ====<DSL>===[DSL MODEM]---->[RH eth0]
> >                             [RH eth1]--->[10/100 switch]
> >                                          /     |    \
> >                                         /      |     \
> >                                      [PC1]   [PC2]  [PC3]
> > Obviously Verizon allows you to pull more than one IP address but
> > because of the frequent disconnects you will always have problems.
> >
> >
> >
> > Mark Champion wrote:
> > >
> > > A complete description...
> > >
> > > I have four PCs in my network.  Three are Win98 and one is RH7.2 Linux.
> I
> > > have DSL from Verizon.  My DSL modem connects to a 10/100Mb switch which
> > > feeds each of the four PCs.  There are no configuration options for the
> > > switch.  There is no router involved.  Each PC gets a unique IP address
> via
> > > DHCP.
> > >
> > > Each PC has a name and an entry at www.dyndns.org.  On my Linux system,
> I've
> > > tried to configure everything (sendmail, Samba, etc.) by name rather
> than IP
> > > address.  I use short names rather than the completely qualified domain
> name
> > > (i.e. "mypc" rather than "mypc.homeip.net").  In addition, I have an
> entry
> > > for each PC in my /etc/hosts table with both the short name and the
> fully
> > > qualified name.  I'm not sure all this is necessary, but everything
> works as
> > > long as my IP addresses don't change.
> > >
> > > One kind person sent me an rpm version of ddclient.  I have installed it
> and
> > > tried to configure it.  Now, ddclient can determine the IP address
> > > correctly, but it doesn't update my entry at www.dyndns.org.  It also
> > > doesn't update the entry in the /etc/hosts table.  I think I must not
> have
> > > it configured correctly.
> > >
> > > Thanks for any suggestions!
> > >
> > > mchampion bigfoot com
> > >
> > > ----- Original Message -----
> > > From: "Michael Austin" <maustin firstdbasource com>
> > > To: <redhat-install-list redhat com>
> > > Sent: Saturday, March 30, 2002 10:47 AM
> > > Subject: Re: How to configure dynamic DNS client?
> > >
> > > > First, give us a complete description of your connection, and PC's in
> > > > your network etc...  You may have some things set up incorrectly.
> > > > (modems, routers, hubs, NIC cards, connection software etc...)
> > >
> > > _______________________________________________
> > > Redhat-install-list mailing list
> > > Redhat-install-list redhat com
> > > https://listman.redhat.com/mailman/listinfo/redhat-install-list
> >
> > --
> > Regards,
> >
> > Michael Austin            Registered Linux User #261163
> > First DBA Source, Inc.    http://www.firstdbasource.com
> > Sr. Consultant
> >
> >
> >
> > _______________________________________________
> > Redhat-install-list mailing list
> > Redhat-install-list redhat com
> > https://listman.redhat.com/mailman/listinfo/redhat-install-list
> 
> _______________________________________________
> Redhat-install-list mailing list
> Redhat-install-list redhat com
> https://listman.redhat.com/mailman/listinfo/redhat-install-list