Security Portal: Hardening Red Hat Linux with Bastille: Securely Installing a Bastion HostMay 01, 2000, 20:26 (0 Talkback[s])
(Other stories by Seán Boran)
"This article presents a concise step-by-step approach to securely installing Red Hat Linux for use in a firewall, DMZ, or other sensitive environment, using Bastille. Linux has progressed rapidly and can be configured to be as secure as, if not more secure than, commercial UNIX."
"The focus in this article is on Red Hat 6.1 on SPARC and Intel. Mandrake 7.0 was also tested on Intel...."
"Keep Things Simple: It is expected that only one or two services will run on a host. Use several machines, rather than trying to run one superserver that does everything. It's easier to isolate applications, harden, troubleshoot and upgrade hw/sw. Be minimalist, only run what is absolutely necessary."