1. Introduction
1.1. Why me?
Who should be reading this document and why should the average Linux user care about security? Those new
to Linux, or unfamiliar with the inherent security issues of connecting a Linux system to large networks like
Internet should be reading. "Security" is a broad subject with many facets, and is covered in much more depth
in other documents, books, and on various sites on the Web. This document is intended to be an introduction
to the most basic concepts as they relate to Red Hat Linux, and as a starting point only.
Iptables Weekly Log Summary from Jul 15 04:24:13 to Jul 22 04:06:00
Blocked Connection Attempts:
Rejected tcp packets by destination port
port count
111 19
53 12
21 9
515 9
27374 8
443 6
1080 2
1138 1
Rejected udp packets by destination port
port count
137 34
22 1
The above is real, live data from a one week period for my home LAN. Much of the above would seem to be
specifically targeted at Linux systems. Many of the targeted "destination" ports are used by well known
Linux and Unix services, and all may be installed, and possibly even running, on your system.
The focus here will be on threats that are shared by all Linux users, whether a dual boot home user, or large
commercial site. And we will take a few, relatively quick and easy steps that will make a typical home
Desktop system or small office system running Red Hat Linux reasonably safe from the majority of outside
threats. For those responsible for Linux systems in a larger or more complex environment, you'd be well
advised to read this, and then follow up with additional reading suitable to your particular situation. Actually,
this is probably good advice for everybody.
We will assume the reader knows little about Linux, networking, TCP/IP, and the finer points of running a
server Operating System like Linux. We will also assume, for the sake of this document, that all local users
are "trusted" users, and won't address physical or local network security issues in any detail. Again, if this is
1. Introduction 1
Commenti su questo manuale