Mike Hicks wrote:
> 
> Heather Wagamon <hwagamon at andersonww.com> wrote:
> >
> > I've been thinking that I want to set up a personal Linux web/email
> > server at home so I can learn linux easier and become more comfortable
> > with it.  I was wondering... what's the best linux/unix to use?  I was
> > thinking "Red Hat" since that's what we use here.
> 
> Well, I'll just suggest that you make sure you're running a new
> distribution.  The Honeynet Project discovered that, on average, it takes
> about 72 hours for a default-install RedHat 6.2 box to get broken into.
> Of course, I understand that stock Win98 with file sharing enabled is
> pretty much just as bad..
> 
> If this doesn't show the great importance security (and not leaving
> everything turned on after an initial install), I don't know what does..
> 
> http://www.counterpane.com/crypto-gram-0106.html
> 
> --
>  _  _  _  _ _  ___    _ _  _  ___ _ _  __   #define END.ARMS.CONTROL
> / \/ \(_)| ' // ._\  / - \(_)/ ./| ' /(__   /* Silo overflow */
> \_||_/|_||_|_\\___/  \_-_/|_|\__\|_|_\ __)
> [ Mike Hicks | http://umn.edu/~hick0088/ | mailto:hick0088 at tc.umn.edu ]
> 
>   ------------------------------------------------------------------------
>    Part 1.2Type: application/pgp-signature


I know with my old box, SuSE, I had mapped Apache to the outside IP and
never had 
a problem. But I mapped FTP and Telnet outside for an IP Masquerading
project a 
friend of mine was working on for the U and had the Ramen worm trying to
get in 
after about two hours!! Since then I have gone back to Slackware, mostly
to get 
more under-the-hood experience ( YAST was good and bad because it DIFY).
If you are
just doing it as a learning project, I wouldn't even worry about routing
it to the 
outside world. Create a bunch of phony accounts on your home network and
tear into
it.