Secure Server, firewall howto

[ehcpdeveloper]

Question: Do you have a basic tutorial on how to secure a server after you install EHCP? Does EHCP auto install a IP tables/Firewall? What ports need to be open for EHCP to function? (if I install a IP Tables firewall)

Answer:
Such tutorial does not exist, up to now. We may use/extend this document/forum topic to discuss/clarify such secure install..

ehcp does not include, and doesn't install any security related software, as of ver 0.28,
Later versions may include this.
This does not mean that, you cannot install firewall. You may definitely install firewall, just after ehcp install.
We may consider installing a firewall in later versions, but this is a separete, a bit dangerous task..
Because users may block themselves..

if you install firewall youself, you need to keep open following ports (i wrote description too):
20-21 : ftp
25: smtp-mail
53: dns
80: Web
110: mail-pop3
143: mail-imap

you may disable individual ports, if you dont want to run imap for example, you dont need 143

if you have other questions, please ask here..

Restored from old drupal forum, for user uid:1 username:ehcpdeveloper
You may reset your password to access your new account here.

[newfield]

Use Bastille.

It is an easy firewall to set up.
apt-get install bastille

And the configfile /etc/Bastilla/bastille-firewall.cfg is easy to adjust.

Maby the interfaces should be changed and whitch ports that should be opened.

Restored from old drupal forum, for user uid:1 username:ehcpdeveloper
You may reset your password to access your new account here.