Trixie

From ThisBlueWiki

• http://www.howtoforge.com/apc-php5-apache2-debian-etch
• http://www.mediawiki.org/wiki/User:Robchurch/Performance_tuning
• http://www.nabble.com/MYISAM-or-InnoDB-best-for-Mediawiki--to9950685.html
• http://www.digitalbond.com/index.php/2008/04/25/linux-password-strength-pam_cracklib-and-nessus-compliance-checks/
• http://www.cyberciti.biz/faq/linux-detect-port-scan-attacks/ psad
  • http://www.cipherdyne.org/psad/docs/fwconfig.html (need to do this in arno custom rules)
• http://almosteffortless.com/2009/05/15/stupid-linux-tricks-basic-server-hardening-debian-lenny/
  • http://packages.debian.org/stable/admin/tiger basic audit
  • # aptitude install libapache2-mod-evasive
  • /etc/sysctl.conf:
    • syncookies (make sure net.ipv4.tcp_max_syn_backlog = 1024 is reasonable, grep sysctl -A for this value)
    • Additional settings
• arno-iptables-firewall managed with debconf (dpkg-reconfigure?)
  • /etc/arno-iptables-firewall/firewall.conf
  • invoke-rc.d arno-iptables-firewall start
• http://packages.debian.org/lenny/fail2ban (iptables block for multiple failure attempts)
  • http://www.howtoforge.com/fail2ban_debian_etch
• http://www.postgresql.org/docs/8.3/interactive/client-authentication.html