Linux Help

Linux Help

[Kev]

Hi,

I'm new to Linux, so i'm paling to install a gateway, with the following,

1. Firewall
2. DNS
3. DHCP
4. SMTP (relay only)
5. Email Virus Scaning
6. Gray Listing (email)
7. NAT
8 Web Cashing
9. Web Based Configuration tool for all above.

can any one tell me the best Linux version to use, (RedHat, Debian, etc)
and the software i can use, like DNS = BIND, some thing simple to use...

the Box will be a P2 with 256MB ram but if i can get it to work on a P1
166Mhz that would be great....

thanks
Kev

------- 
Web Hosting at cheep price, stating at $1 per moth with your own domain, .COM, .NET, .LK, .ORG etc..
PHP, CGI, Perl, MySQL, Cpanel 9, POP3, POP3s, SMTP, IMAP, FTP,
http://www.orbitsl.net

Re: Linux Help

[Art Wildman]

Kev wrote:
> I'm new to Linux, so i'm paling to install a gateway, with the following,
> 
> 1. Firewall
> 2. DNS
> 3. DHCP
> 4. SMTP (relay only)
> 5. Email Virus Scaning
> 6. Gray Listing (email)
> 7. NAT
> 8 Web Cashing
> 9. Web Based Configuration tool for all above.
> 
> can any one tell me the best Linux version to use, (RedHat, Debian, etc)
> and the software i can use, like DNS = BIND, some thing simple to use...
> 
> the Box will be a P2 with 256MB ram but if i can get it to work on a P1
> 166Mhz that would be great....

You'll get 10 different answers to the distro question. I suggest you 
research the individual documentation and packages you need & decide 
which is best supported for you application. I have found the major 
distros to have the best documentation, and have used RedHat/Fedora for 
many years. Debian, Suse, Mandrake, and Gentoo have their stong points 
as well. As long as you disable Xwindows, you should be able to setup a 
minimal mail-server on that hardware, debian may be your best bet for this.

Here are some links to get your started...

Shorewall, IPCop, IPtables Firewall Scripts
http://shorewall.sourceforge.net/
http://www.ipcop.org/cgi-bin/twiki/view/IPCop/WebHome
http://www.linuxguruz.org/iptables/
http://www.liniac.upenn.edu/sysadmin/security/iptables.html

DNS - The Name Service HOWTO
http://www.cryptnet.net/fdp/admin/nameservice.html
http://www.rscott.org/dns/
http://bind8nt.meiway.com/itsaDNSmess.cfm

RH9 Customization Guide: Dynamic Host Configuration Protocol (DHCP)
<http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/custom-guide/s1-dhcp-configuring-server.html>

Postfix
http://www.postfix.org/
http://www.postfix.org/STANDARD_CONFIGURATION_README.html#intranet
LJ: Using Postfix for Secure SMTP Gateways
http://www.linuxjournal.com/article.php?sid=4241

Linux-sec.net: Mail/AntiSpam
http://www.linux-sec.net/Mail/AntiSpam/

Configuring a mail server with 
Postfix-Procmail-Fetchmail-SpamAssassin-ClamAV-Courier IMAP
http://www.jennings.homelinux.net/mailserver_config.html

Squid & Squidguard
http://www.tldp.org/HOWTO/TransparentProxy-4.html
http://www.unixreview.com/documents/s=8989/sam0402c/

AntiVirus
http://www.clamav.net
http://www.amavis.org
http://drivel.com/clamassassin
http://sourceforge.net/projects/klamav/

Webmin
http://www.webmin.com/webmin/

http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/
http://www.tldp.org/HOWTO/HOWTO-INDEX/howtos.html

--
Art Wildman/ITO - art.wildman@noaa.gov
National Weather Service Office (WFO-JAX)
http://www.srh.noaa.gov/jax
"The contents of this message are mine personally, and
do not reflect any position of the Government, NOAA or NWS."

Re[2]: Linux Help

[Kev]

wow thanks for the links.... they are really help full.............


On Mon, 19 Jul 2004 15:46:14 -0400
"Art Wildman" <Art.Wildman@noaa.gov> wrote:

> Kev wrote:
> > I'm new to Linux, so i'm paling to install a gateway, with the following,
> > 
> > 1. Firewall
> > 2. DNS
> > 3. DHCP
> > 4. SMTP (relay only)
> > 5. Email Virus Scaning
> > 6. Gray Listing (email)
> > 7. NAT
> > 8 Web Cashing
> > 9. Web Based Configuration tool for all above.
> > 
> > can any one tell me the best Linux version to use, (RedHat, Debian, etc)
> > and the software i can use, like DNS = BIND, some thing simple to use...
> > 
> > the Box will be a P2 with 256MB ram but if i can get it to work on a P1
> > 166Mhz that would be great....
> 
> You'll get 10 different answers to the distro question. I suggest you 
> research the individual documentation and packages you need & decide 
> which is best supported for you application. I have found the major 
> distros to have the best documentation, and have used RedHat/Fedora for 
> many years. Debian, Suse, Mandrake, and Gentoo have their stong points 
> as well. As long as you disable Xwindows, you should be able to setup a 
> minimal mail-server on that hardware, debian may be your best bet for this.
> 
> Here are some links to get your started...
> 
> Shorewall, IPCop, IPtables Firewall Scripts
> http://shorewall.sourceforge.net/
> http://www.ipcop.org/cgi-bin/twiki/view/IPCop/WebHome
> http://www.linuxguruz.org/iptables/
> http://www.liniac.upenn.edu/sysadmin/security/iptables.html
> 
> DNS - The Name Service HOWTO
> http://www.cryptnet.net/fdp/admin/nameservice.html
> http://www.rscott.org/dns/
> http://bind8nt.meiway.com/itsaDNSmess.cfm
> 
> RH9 Customization Guide: Dynamic Host Configuration Protocol (DHCP)
> <http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/custom-guide/s1-dhcp-configuring-server.html>
> 
> Postfix
> http://www.postfix.org/
> http://www.postfix.org/STANDARD_CONFIGURATION_README.html#intranet
> LJ: Using Postfix for Secure SMTP Gateways
> http://www.linuxjournal.com/article.php?sid=4241
> 
> Linux-sec.net: Mail/AntiSpam
> http://www.linux-sec.net/Mail/AntiSpam/
> 
> Configuring a mail server with 
> Postfix-Procmail-Fetchmail-SpamAssassin-ClamAV-Courier IMAP
> http://www.jennings.homelinux.net/mailserver_config.html
> 
> Squid & Squidguard
> http://www.tldp.org/HOWTO/TransparentProxy-4.html
> http://www.unixreview.com/documents/s=8989/sam0402c/
> 
> AntiVirus
> http://www.clamav.net
> http://www.amavis.org
> http://drivel.com/clamassassin
> http://sourceforge.net/projects/klamav/
> 
> Webmin
> http://www.webmin.com/webmin/
> 
> http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/
> http://www.tldp.org/HOWTO/HOWTO-INDEX/howtos.html
> 
> --
> Art Wildman/ITO - art.wildman@noaa.gov
> National Weather Service Office (WFO-JAX)
> http://www.srh.noaa.gov/jax
> "The contents of this message are mine personally, and
> do not reflect any position of the Government, NOAA or NWS."
> 

------- 
Web Hosting at cheep price, stating at $1 per moth with your own domain, .COM, .NET, .LK, .ORG etc..
PHP, CGI, Perl, MySQL, Cpanel 9, POP3, POP3s, SMTP, IMAP, FTP,
http://www.orbitsl.net

Re: Linux Help

[Skylar Thompson]

[-- Attachment #1: Type: text/plain, Size: 3171 bytes --]

On Mon, Jul 19, 2004 at 10:50:07PM +0600, Kev wrote:
> Hi,
> 
> I'm new to Linux, so i'm paling to install a gateway, with the following,
> 
> 1. Firewall

On Linux, your choices are pretty limited: ipchains or iptables. On a new
installation, I can see of no reason not to go with iptables.

> 2. DNS

Without more information, I'd say BIND 9 (http://www.isc.org/sw/bind/).
It's stable, secure, and full of nice features.

> 3. DHCP

Again, without more information, the obvious choice is ISC-DHCP 3
(http://www.isc.org/sw/dhcp/).

> 4. SMTP (relay only)

Here you've got lots of options. I personally maintain Sendmail
(http://www.sendmail.org) on a variety of platforms (OS/2, Red Hat Linux,
Debian GNU/Linux, Solaris, FreeBSD, and NetBSD) and find it to be full of
features, but a real PITA when it comes to debugging. Since all you want to
do is relay, and for reasons I'll explain in the next point, I'm going to
recommend Exim (http://www.exim.org).

> 5. Email Virus Scaning

If all you are doing is virus scanning, I'd suggest using ClamAV
(http://www.clamav.net). To avoid needing to use a milter (I can't recall
whether Exim supports milters), I'd highly recommend MailScanner
(http://wwww.mailscanner.info). It uses a two-queue solution that obviates
the need for milters, and in my experience increases mail throughput by as
much as 10x compared to milters. It can be easily setup to call a spam
filter such as SpamAssassin (http://www.spamassassin.org) and a virus
scanner such as ClamAV (http://www.clamav.net).

> 6. Gray Listing (email)

SpamAssassin or MailScanner can do this.

> 7. NAT

This is done with iptables.

> 8 Web Cashing

Squid (http://www.squid-cache.org) is the best one I've used. I use it on a
NetBSD box in front of a cable connection to do transparent proxying, and
it works marvelously.

> 9. Web Based Configuration tool for all above.

Definitely Webmin (http://www.webmin.com).
 
> can any one tell me the best Linux version to use, (RedHat, Debian, etc)
> and the software i can use, like DNS = BIND, some thing simple to use...
 

While I've been a devout Red Hat user for years, I've been shying away from
Red Hat on new installs because they've been moving away from personal
users and concentrating almost exclusively on the commercial customers.
Fedora isn't (and wasn't intended to be) as well-polished as Red Hat 9, so
I'd go with Debian. It has a large user and developer base, so it's not
going south any time soon.

> the Box will be a P2 with 256MB ram but if i can get it to work on a P1
> 166Mhz that would be great....

Especially for mail filtering, you're going to want as much CPU power and
RAM as you can throw at it. Go SMP if you can. You might even want to run
that P1 for DHCP, DNS routing if you can, so that those services don't get
slowed down significantly if you suddenly get a huge spike in mail traffic.
Web caching benefits from having as much RAM and hard drive space as
possible, but CPU power isn't as much of a concern for it.

-- 
-- Skylar Thompson (skylar@cs.earlham.edu)
-- http://www.cs.earlham.edu/~skylar/

[-- Attachment #2: Type: application/pgp-signature, Size: 187 bytes --]

Re[2]: Linux Help

[Kev]

now i'm going with Debian

if i install minum installation of debian and i can install other things by downloading them (Sendmail, Squid etc) ?



On Mon, 19 Jul 2004 21:59:02 -0500
Skylar Thompson <skylar@cs.earlham.edu> wrote:

> On Mon, Jul 19, 2004 at 10:50:07PM +0600, Kev wrote:
> > Hi,
> > 
> > I'm new to Linux, so i'm paling to install a gateway, with the following,
> > 
> > 1. Firewall
> 
> On Linux, your choices are pretty limited: ipchains or iptables. On a new
> installation, I can see of no reason not to go with iptables.
> 
> > 2. DNS
> 
> Without more information, I'd say BIND 9 (http://www.isc.org/sw/bind/).
> It's stable, secure, and full of nice features.
> 
> > 3. DHCP
> 
> Again, without more information, the obvious choice is ISC-DHCP 3
> (http://www.isc.org/sw/dhcp/).
> 
> > 4. SMTP (relay only)
> 
> Here you've got lots of options. I personally maintain Sendmail
> (http://www.sendmail.org) on a variety of platforms (OS/2, Red Hat Linux,
> Debian GNU/Linux, Solaris, FreeBSD, and NetBSD) and find it to be full of
> features, but a real PITA when it comes to debugging. Since all you want to
> do is relay, and for reasons I'll explain in the next point, I'm going to
> recommend Exim (http://www.exim.org).
> 
> > 5. Email Virus Scaning
> 
> If all you are doing is virus scanning, I'd suggest using ClamAV
> (http://www.clamav.net). To avoid needing to use a milter (I can't recall
> whether Exim supports milters), I'd highly recommend MailScanner
> (http://wwww.mailscanner.info). It uses a two-queue solution that obviates
> the need for milters, and in my experience increases mail throughput by as
> much as 10x compared to milters. It can be easily setup to call a spam
> filter such as SpamAssassin (http://www.spamassassin.org) and a virus
> scanner such as ClamAV (http://www.clamav.net).
> 
> > 6. Gray Listing (email)
> 
> SpamAssassin or MailScanner can do this.
> 
> > 7. NAT
> 
> This is done with iptables.
> 
> > 8 Web Cashing
> 
> Squid (http://www.squid-cache.org) is the best one I've used. I use it on a
> NetBSD box in front of a cable connection to do transparent proxying, and
> it works marvelously.
> 
> > 9. Web Based Configuration tool for all above.
> 
> Definitely Webmin (http://www.webmin.com).
>  
> > can any one tell me the best Linux version to use, (RedHat, Debian, etc)
> > and the software i can use, like DNS = BIND, some thing simple to use...
>  
> 
> While I've been a devout Red Hat user for years, I've been shying away from
> Red Hat on new installs because they've been moving away from personal
> users and concentrating almost exclusively on the commercial customers.
> Fedora isn't (and wasn't intended to be) as well-polished as Red Hat 9, so
> I'd go with Debian. It has a large user and developer base, so it's not
> going south any time soon.
> 
> > the Box will be a P2 with 256MB ram but if i can get it to work on a P1
> > 166Mhz that would be great....
> 
> Especially for mail filtering, you're going to want as much CPU power and
> RAM as you can throw at it. Go SMP if you can. You might even want to run
> that P1 for DHCP, DNS routing if you can, so that those services don't get
> slowed down significantly if you suddenly get a huge spike in mail traffic.
> Web caching benefits from having as much RAM and hard drive space as
> possible, but CPU power isn't as much of a concern for it.
> 
> -- 
> -- Skylar Thompson (skylar@cs.earlham.edu)
> -- http://www.cs.earlham.edu/~skylar/

------- 
Web Hosting at cheep price, stating at $1 per moth with your own domain, .COM, .NET, .LK, .ORG etc..
PHP, CGI, Perl, MySQL, Cpanel 9, POP3, POP3s, SMTP, IMAP, FTP,
http://www.orbitsl.net

Re: Linux Help

[Skylar Thompson]

[-- Attachment #1: Type: text/plain, Size: 776 bytes --]

On Tue, Jul 20, 2004 at 09:27:04AM +0600, Kev wrote:
> now i'm going with Debian
> 
> if i install minum installation of debian and i can install other things by downloading them (Sendmail, Squid etc) ?

apt-get is probably one of the coolest features of Debian. It will download
any packages you need, along with all their dependencies. The days of
hunting for huge dependency trees of RPMs are over. Do an "apt-cache search
<string>" to figure what the package name is called, and then do "apt-get
install <package-name>" to install it. A lot of the configuration is
automated through dialogs, so almost everything should be pretty easy. Let
me know if you need any help.

-- 
-- Skylar Thompson (skylar@cs.earlham.edu)
-- http://www.cs.earlham.edu/~skylar/

[-- Attachment #2: Type: application/pgp-signature, Size: 187 bytes --]

Re[2]: Linux Help

[Kev]

thanks a lot,

i got it on a p1 133mhz but having some prob on the PC it cant detect my 10GB HDD :(



On Mon, 19 Jul 2004 23:23:25 -0500
Skylar Thompson <skylar@cs.earlham.edu> wrote:

> On Tue, Jul 20, 2004 at 09:27:04AM +0600, Kev wrote:
> > now i'm going with Debian
> > 
> > if i install minum installation of debian and i can install other things by downloading them (Sendmail, Squid etc) ?
> 
> apt-get is probably one of the coolest features of Debian. It will download
> any packages you need, along with all their dependencies. The days of
> hunting for huge dependency trees of RPMs are over. Do an "apt-cache search
> <string>" to figure what the package name is called, and then do "apt-get
> install <package-name>" to install it. A lot of the configuration is
> automated through dialogs, so almost everything should be pretty easy. Let
> me know if you need any help.
> 
> -- 
> -- Skylar Thompson (skylar@cs.earlham.edu)
> -- http://www.cs.earlham.edu/~skylar/

------- 
Web Hosting at cheep price, stating at $1 per moth with your own domain, .COM, .NET, .LK, .ORG etc..
PHP, CGI, Perl, MySQL, Cpanel 9, POP3, POP3s, SMTP, IMAP, FTP,
http://www.orbitsl.net

Linux help on show strucuture of share lib.

[Dayong Gu]

Hi, experts:

Is there any command or uility we can use to show the exact structure of a
share lib on Linux?

I want to know the exact location(offset) of functions ,symbols etc in share
lib, and also in
Linux executable.

I know on AIX we can use a cmd like "dump" to do this thing.

Thanks !
Cheers,
Dayong