Topic: Safest config for web svr and email

[Dan Smith]

OK, linux neo here needs some advice.  I have a domain that's currently registered with an outside host, handling web-site and email.  I'd like to move these onto my SME server and use a dynamic DNS service since I'm on a cable modem.  I don't want to sacrifice security though.  I'm not using the server for firewall, DNS, NAT, DHCP, or anything else.  I'd just like it to be a Samba, email and web server.

I'm using a linksys switch+router which allows me to forward selected ports to an internal IP address.    This is for a home network, with several other Windows boxes on it, and I don't currently forward any ports off the router.  I'm assuming I'd forward ports for http, SMTP, and POP to the SME server.  If I do so, and don't change the stock settings on the SME server, what security risks am I taking?  What about email virus protection.  Advice?

[Boris]

If you just forward http, https, pop3, and smtp ports to your internal SME server you safe enough. Any additional web applications or scripts you may use on you website may weaken this depends on how secure and updated they are.
Linux box itself is mostly immune to viruses for now. Most of them are target MS windows, but where are AV solutions available to, lets say, scan all incoming and outgoing mail for viruses and spam and this very effective.