Programming Tutorials Browser Tutorials Articles Struts Tutorials Hibernate Tutorials

Search: 

  Tutorial: Community-Submitted Article: Hardening the Solaris 9 OS and NcFTP for an FTP Bastion Host

A BigAdmin reader writes about the build, configuration, and subsequent hardening of UNIX servers that constitute a secured FTP solution.

Tutorial Details:

This document provides details of the build, configuration, and subsequent hardening of the UNIX servers that constitute a secured FTP solution. The article describes the steps for building each server component, as well as the process of ensuring that the systems remain as secure as possible during each phase of configuration, including promotion to production.

The hardware used is a Sun Fire V120 server running the Solaris 9 OS and using NcFTP as the FTP application. NcFTP is available from NcFTP Software. You may download the Solaris Security Toolkit software from Sun Microsystems.



Building FTP Bastion Host
The server should be built on a completely separate test network and should not be promoted to the live network or placed within the DMZ until build and configuration have been completed.


The FTP Bastion server is jumpstarted using the end user package cluster (SUNWCuser) for the Solaris OS 9.
Remove packages that are not required for configuration of system (see Appendix A).
Boot disk is mirrored using Sun Solstice DiskSuite (SDS)/Logical Volume Manager (LVM).
Install FTP server (ncftpd-2.7.3).
Install FTP client (ncftp-3.1.6).
Install Security Tool Kit (4.0.0).
Remove packages that are not required for operation of system.


 

Read Tutorial at: Click here to view the tutorial

Rate Tutorial:
Community-Submitted Article: Hardening the Solaris 9 OS and NcFTP for an FTP Bastion Host

View Tutorial:
Community-Submitted Article: Hardening the Solaris 9 OS and NcFTP for an FTP Bastion Host

Related Tutorials:

Displaying 1 - 50 of about 640 Related Tutorials.

Open Source projects
.NET client and server applications on Linux, Solaris, Mac OS X, Windows... an active and enthusiastic contributing community and is positioned to become... bug finding tool had analyzed the community-built operating system Free BSD
 
Mac OS X Open Source
Mac OS X Open Source Mac OS X Open Source Mac os X wikipedia Mac OS X was a radical departure from previous Macintosh... and the Finder shell. Mac OS X included a number of features intended to make
 
Open Source FTP
Open Source FTP Open Source FTP Open source FTP..., open FTP client that hooks into Firefox: fireFTP. It sounds OK. In fact, after..., free, open source FTP client for Windows, you should hie thee over to FileZilla
 
Java FTP Library
Java FTP Library  Java FTP Library ...; The Java Ftp Library Let's imagine a situation... a remote computer running an FTP server. We also want to filter downloads
 
Java Get Host Name
Java Get Host Name Java Get Host Name...;  In this Example you will learn how to get host name in Java. Go through the below given code to understand how it works and gets the host name
 
Get Local Host Name
Get Local Host Name Get Local Host Name... in understanding a code how to 'Get Local Host Name'. For this we have a class name... of the Inet addresses bound to this network interface. 4)get Host Name( ) 
 
Host Assured - Find Assured Web Hosting
Host Assured,Assured Hosting Host Assured - Find...; Here I will help you find the reliable host, which assures (Assured Host... Web Hosting by using our Host Database and easy search interface. For hosting
 
Difficult Interview Questions Page -9
Difficult Interview Questions Page -9 Difficult Interview Questions Page -9                    
 
Java Interview Questions - Page 9
Java Interview Questions,interview questions java Java Interview Questions - Page 9                  
 
Common Interview Questions Page - 9
Common Interview Questions Page - 9 Common Interview Questions Page - 9                     
 
Nexenta OS Alpha 3 has been released
Nexenta OS Alpha 3 has been released Nexenta OS Alpha 3 has been released This release contains 3,596 packages... (thanks to OpenSolaris Storage Community!) 3. OpenSolaris build #34, non-DEBUG
 
Buy Peanut 9.6 Linux in India from us. Peanut 9.6 distribution is available in India.
9.6 Linux CD It is a Linux OS (operating system), especially made... Setup For Your HTTP, Ftp Servers. Telnetd.   Editing Made Easy....   GCombust CD-R/W, G-FTP Client, GTK Find, G-Timer, GTV, 
 
E-Commerce Web Hosting
-commerce hosting, web host providers provides the tools for to handle online.... Here are the important things should keep in mind before selecting and host..., so choose the web host providing 99.99% network    Email: You
 
Tutorial - Sun Java System Application Server Platform Edition
server platform 9 Sun Java System Application Server... Application Server Platform version 9 for the deployment and testing of our... by it. The Sun Java System Application Server Platform Edition 9 is the latest
 
getHeaderNames() Method Of The Request Object
; In this section, you will learn how to get the header name of the host server
 
EasyEclipse for Ruby and Rails
;    There are currently 9 comments for this distribution
 
Java get Version
and the OS version. We are providing you an example which will obtain the java version installed on the system and the OS version by using the System.getProperty.... System.getProperty("os.version")- This will return the OS version. Understand
 
How To Manage Your Username And Password The Easy And Secure Way
; Jerry Yu Have been an Internet user for more than 9 years, I have... to save a second copy of your password file. Tip #9 - Store your backups
 
Open Source Text Editor
programmer's text editor with over 9 years of development behind it. To download... an active development community numbering in the hundreds, and runs on Windows 95 and NT
 
Puakma Vortex
to use a particular OS because the development toolset won't run on the platform of your choice. Not so with Vortex: Windows, OS X, Linux, Solaris, HP-UX, AIX... the change and it's live on the server. No ANT, no FTP, no complex deployment
 
Damn Small Linux 2.3 RC2 has been released now
a USB pen drive 3. Boot from within a host operating system (that's right... a method we call "frugal install" 5. Transform into a Debian OS... a personal tool/toy. But over time Damn Small Linux grew into a community project
 
Damn Small Linux 2.3 RC1 has been released now
a USB pen drive 3. Boot from within a host operating system (that's right... a method we call "frugal install" 5. Transform into a Debian OS... a personal tool/toy. But over time Damn Small Linux grew into a community project
 
Compiling Objective C
program on windows and Max OS x machine. Compiling Objective C program
 
The Distribution Release of VLOS 1.2.1
Vidalinux Desktop OS) have released an updated version of their user-friendly... to the dock in OS X. o VLOS 1.2.1 includes enhance automounting support for USB
 
Java Get IP Address
host. An IP address is either a 32-bit or 128-bit unsigned number used by the internet protocol. To store the host name resolutions, the class InetAddress is used. The method getLocalHost() returns the local host and the method
 
Database books Page12
to prepare for and run an installation on a Windows NT, Windows 2000, Solaris, AIX
 
ReadIPAddress
for the given host name. Using this object we can get IP address using method.... If the user enters the host name by keyboard then IP address of local machine... is the Output of this program: C:\rose>java ReadIPAddress Enter the host
 
VoIP Palm
that allows free VoIP between its users, from a Palm OS handheld to another. Some...;      Palm OS VoIP Application Articulation is a new VoIP application for the Palm OS from Hampton Software. It is compatible
 
FreeBSD 6.1-RC1 has been released now
. ftp://ftp8.FreeBSD.org/pub/FreeBSD/ (ftp) 9. ftp://ftp9.FreeBSD.org/pub/FreeBSD... the branch tag to use is RELENG_6_1.  Problem reports can be submitted... The official sources for FreeBSD are available via anonymous FTP from a worldwide set
 
Managed Web Hosting
web hosting where host will assist in the upkeep of your server. Managed Web... host will help you in managing your server.. While more expensive, it will save you... support. C I Host C I Host is a Managed Web page hosting and colocation solutions
 
Dedicated Servers
over the server. The server is dedicated to the customer and customer can host... unlimited accounts and host multiple web sites.     
 
Lunar Linux 1.6.0 has been released
, NPTL threads, udev, and more 2.6-kernel related improvements to the Linux OS..., NPTL threads, udev, and more 2.6-kernel related improvements to the Linux OS
 
Buy Xandros 2.01 OCE in India from us.Xandros 2.01 OCE is available in India at cheapest rate.
Desktop OS Open Circulation Edition (OCE) is a limited version of Xandros Desktop OS... "open source" Linux OS Distribution.    
 
DSL-N 0.1 Alpha is available
(LiveCD) 2. Boot from a USB pen drive 3. Boot from within a host operating system... Flash drive via a method we call "frugal install" 5. Transform into a Debian OS... into a community project with hundreds of development hours put into refinements including
 
We are providing Linux CD's for free.
source Unix-like OS. The code for Linux is freely available to everyone under GNU... governs the distribution of any "open source" Linux OS Distribution. We
 
VectorLinux 5.1 Live RC1 is available
that we know are up to date: ftp://ftp.nluug.nl/pub/os/Linux/distr... America ftp://metalab.unc.edu/pub/linux/distributions/vectorlinux/ ftp...://www.researchphenixcity.com/ Hungary ftp://ftp.kando.hu/pub/CDROM-Images/vectorlinux/ Austria
 
Apache Maven plugins
; Plugins are used to interact with a host application to provide
 
Reading Request Information
variables like Remote address, Remote host, Content type etc. In some cases...;#800000">Remote host:</font></b></td>
 
Database books Page15
; System administration Guide supplement for sun OS Release 4.x 
 
Threads
call yield() to temporarily give it up. Older systems: Windows 3.1, Mac OS... because fewer switches. Solaris "green threads". Pre-emptive OS allocates time slice to a thread. At the end of the time slice, or when
 
The Simply MEPIS 3.4-3 RC3 has been released
reported by the test community. Look for it in the testing subdirectory... community. Look for it in the testing subdirectory at the MEPIS Subscriber's... Computer function no longer offers the option of choosing which OS to restart
 
Why Virtual Dedicated Hosting?
access to OS, dedicated server resources, host multiple domains.  ...,Host Why Virtual Dedicated Hosting... to host your small websites and make the web presence. But there are many
 
Open Source Community
1,600 patents associated with the Solaris OS far eclipses any other vendor's..., announced Monday, as well as on the Sun Solaris 9 Operating Environment... Open Source Community Open Source Community
 
Debian GNU/Linux 3.1 Updated (r2) now
to it. About the Debian GNU/Linux Debian is a free operating system (OS) for your...), but most of the basic OS tools come from the GNU project; hence the name GNU/Linux. Debian GNU/Linux provides more than a pure OS: it comes with over 15490
 
Debian GNU/Linux 3.1 Updated (r2) now
to it. About the Debian GNU/Linux Debian is a free operating system (OS) for your...), but most of the basic OS tools come from the GNU project; hence the name GNU/Linux. Debian GNU/Linux provides more than a pure OS: it comes with over 15490
 
Operating System Information
operation system. In this example we are getting the OS name, its version and architecture of OS. We are using getProperty(String key)  to get the property of the OS. To get OS name we have key value os.name,to get version
 
BeleniX 0.4.2 has been released now
Packaging tools (as in Solaris) so commands like pkgadd and pkgrm work. 9. ... OpenMotif to be more compatible with Solaris motif; included libusb and libusbugen... (as in Solaris) so commands like 'pkgadd' and 'pkgrm' work; included a modified 'pkg-get
 

:150 MB of Space, Your Own Sub-Domain, Direct FTP, Personal Guestbook, Personal.../ Host Department's free web hosting service is serving over 500,000 personal.... What you can get:150 MB of space, Direct FTP, Your own sub-domain
 
Free Web Hosting
Sub-Domain, Direct FTP, Personal Guestbook, Personal Message board, Form Mail So...;    http://free.hostdepartment.com/ Host Department's free web... of space, Direct FTP, Your own sub-domain, Personal guestbook, Personal message
 
Free Web Hosting
Sub-Domain, Direct FTP, Personal Guestbook, Personal Message board, Form Mail So...;    http://free.hostdepartment.com/ Host Department's free web... of space, Direct FTP, Your own sub-domain, Personal guestbook, Personal message
 
Site navigation
 

 

Send your comments, Suggestions or Queries regarding this site at roseindia_net@yahoo.com.

Copyright © 2006. All rights reserved.