Jim Phillips wrote:
>
> We are planning on installing direct internet connectivity in the next 30
> days. We will start with email (SMTP) and outbound internet (HTTP) at
> first, but we plan on eventually having inbound internet (we will be hosting
> our website internally - possibly even on an HP3000) and FTP, etc, etc.
>
> Can anyone recommend a good primer on internet security?
http://www.oreilly.com/ is a good starting place.
Be sure to have a router or other device block access except on the
ports and IP addresses you know you will use and validate that incoming
IP addresses do not include your internal addresses. Some level of
intrusion detection should be investigated before allowing more access
incoming.
Keep all systems (including PCs) with Internet access up to date on
security patches and virus checking.
If you use ftp and telnet (inetd) on the 3000 (or any Unix box), be sure
to set up a INETDSEC (/usr/adm/inetd.sec) file with rules that limit access
to only the networks (or IP addresses) that you need. This is good
internal security, too, if there are machines on your network that don't
need access to the 3000.
Richard
>
> Thanks,
>
> Jim Phillips Information Systems Manager
> Email: [log in to unmask] Therm-O-Link, Inc.
> Phone: 330-527-2124 P. O. Box 285
> Fax: 330-527-2123 10513 Freedom Street
> Web: http://www.tolwire.com Garrettsville, OH 44231
>
> * To join/leave the list, search archives, change list settings, *
> * etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
--
Richard L Gambrell, Director of Computing Systems and Networks
Information Technology Division
University of Tennessee at Chattanooga
103 Hunter Hall, Department Code 4454
615 McCallie Ave., Chattanooga, TN 37403-2598
private e-mail: [log in to unmask]
UTC department fax: 423-755-4150
UTC office phone: 423-755-5316
UTC department phone: 423-755-4551
UTC email: [log in to unmask]
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
|
