Koozali.org: home of the SME Server
Contribs.org Forums => General Discussion => Topic started by: alext on November 07, 2007, 11:02:48 PM
-
Not sure if this is the right forum for this question, sorry if it's not.
I have a new client who only wants a mail server and needs to access the mail via webmail (HORDE front end).
However, he insists that access is via Open VPN only, (i.e. no PPTP).
He also wants http access and all unused ports, (including port 80) to be closed and port 443 to be changed to some other number.
He wants security on the server to be ultra tight and has requested "tools to fight off any DDOS attacks"
I have build a standard SME 7.2 server but I am unsure how to proceed.
Does anybody have any ideas or advice please.
Cheers,
Alex
-
Some suggestions/stuff to read:
- Configure as Private server and gateway (http://wiki.contribs.org/SME_Server:Documentation:Administration_Manual:Chapter5#Option_2:_Private_server_and_gateway)
- Firewall info (http://wiki.contribs.org/Firewall)
- OpenVPN (http://sme.firewall-services.com/spip.php?rubrique3) contrib
- Possibly interesting: snort (http://www.vanhees.cc) contrib
- Changing standard ports (would not be needed in private-server mode i think): info (http://wiki.contribs.org/DB_Variables_Configuration), change SSH port in detail (http://wiki.contribs.org/SSH_Port) and SSH Public-Private Keys (http://wiki.contribs.org/SSH_Public-Private_Keys)
HTH.