Linux

29.2    Basic Protection of Network Services

The previous section has shown how you can quickly get an overview of the running network services. The next step is to secure the services as much as possible:

• You should uninstall all network services (programs like Apache, Samba, etc.) that you do not need. Uninstalled programs do not run and therefore cannot pose a threat.

• For the required network services, it’s often sufficient to restrict their access to certain clients, such as from the local network. It is, for instance, rarely necessary for a print server to offer its services on the internet!

  For Apache, Samba, MySQL, and numerous other “big” services, the protection must be done in the respective configuration file. Fortunately, there ...