Recommended Network Services
Web ServersIf your website will only be serving simple content, we recommend a simple yet secure web server such as thttpd. It doesn't even require a configuration file to get up and running, and takes almost no system load. For full-blown sites, especially ones that run PHP scripts, we recommend Apache 2.0. It's the de facto standard for web serving, and is more configurable than any other server on the market. It does take up some system load, however. Complexity also breeds security issues, so we only recommend it for larger sites.
Mail ServicesWhile most UNIX flavors come with Sendmail, we recommend Postfix as the MTA of choice. Not only is it faster and more secure than Sendmail, but it is also much easier to configure and maintain.
FTP ServicesFor security reasons, we can only recommend vsftpd - Very Secure FTP Daemon. It's easy to get up and running, and has a spotless security record. Whatever you setup, please avoid wu-ftpd derived FTP servers, such as wu-ftpd or ProFTPD. Only use these as a last resort "have to have this configuration option" issue, as their security record is quite awful.
Remote AccessWe recommend OpenSSH. Our policy is to turn off all unencrypted remote access daemons, including telnet, rsh, rlogin, and rexec.
|