nixCraft

Hi all,

In last week our new linux server facing some problems performance is down We have 2 GB RAM and XEON class CPU with fast SCSI hard drive. Server is with VSNL.

Is this because of some hacking attempt and if so how can we find out and prevent it? How can we optimize it further?

Please suggest some guidelines

check your logs... /var/log/secure.. for OS hardening go through http://www.bastille-linux.org/#get this link... and install bastille-linux rpm... this is good tool, i am using it on our prod servers.. check it..
Have you configured TCP Wrappers and IPTables??

http://www.thaicert.nectec.or.th/eve...ementation.pdf

it will also help you.

Configure iptables and other stuff as mentioned by ashish.

Setup statfull firewall using iptables closed all ports and only open required one

Thanks ashish and monk for all info.

I have alredy tried iptables and it is difficult to use it and help or good info on net? I need to fix this ASAP. Basically I’m developer and not admin person. So any GUI tool out for iptables or security system?