[olug] Building a web server for both security and performance in 2011

[Trent Melcher]

With all the script kiddies out there today, I can't see a reason not to run
IPtables and Selinux on your webservers today.  Also there are a few good
sites out there on how to harden your TCPIP stack that work really well for
making your webservers more resistant to denial of service and SYN Flood
attacks. 

I have used some of the recommendations on this site in the past
http://www.cromwell-intl.com/security/security-stack-hardening.html  not
sure how much of the information is still relevant today.


Trent

 

-----Original Message-----
From: olug-bounces at olug.org [mailto:olug-bounces at olug.org] On Behalf Of T.
J. Brumfield
Sent: Tuesday, August 30, 2011 4:51 PM
To: Omaha Linux User Group
Subject: [olug] Building a web server for both security and performance in
2011

I've tried to keep up on best practices over the years, but I'm always
wondering if there are tips and tricks out there that I'm not aware of,
especially when it comes to securing a web server.

If you were putting together a standard for a web Linux server today, what
would you recommend?

-- T. J. Brumfield
_______________________________________________
OLUG mailing list
OLUG at olug.org
https://lists.olug.org/mailman/listinfo/olug