https://dataprd.com/tags/shorewall/ Recent content in Shorewall on Dataprd.Com Hugo en-us Fri, 14 Mar 2014 13:40:59 +0000 https://dataprd.com/posts/setting-up-a-firewall-to-secure-hadoop-clusters-network-with-shorewall/ Fri, 14 Mar 2014 13:40:59 +0000 https://dataprd.com/posts/setting-up-a-firewall-to-secure-hadoop-clusters-network-with-shorewall/ <p><a href="http://shorewall.net/">Shorewall</a> is a tool to configure Linux inbuilt IPTables in an easy and understandable way. Assume we have a basic setup: <em>Lan | Firewall with Proxy server | Internet</em> <img src="https://dataprd.com/images/uploads/2014/08/Shorewall_Proxy.png" alt="Network_Config"> A secure setup is to:</p> <ul> <li>ACCEPT HTTP(80) and HTTPS(443) from LAN to NET</li> <li>ACCEPT special services ports from specific LAN to NET (like e-banking)</li> <li>ACCEPT only the needed FW services from LAN to FW - SSH(22) and MAIL(25,443,993,&hellip;) to FW (if mail server is on FW)</li> <li>ACCEPT only the needed FW services from NET to FW - SSH(22) with IP restriction (and SSH key) and MAIL(25,443,993,&hellip;) to FW (if mail server is on FW) <ul> <li>SSH port can be changed</li> </ul> </li> <li>LOC to LOC connections are not possible to be governed by FW, therefore all allowed</li> <li>REJECT any incoming connection (other than above) to LAN or FW</li> </ul> <p>Shorewall configuration - with some additional examples on the syntax and rules:</p> https://dataprd.com/posts/secure-environment-for-communication/ Thu, 13 Mar 2014 13:11:16 +0000 https://dataprd.com/posts/secure-environment-for-communication/ <p>Data governance procedures include the management of communication assets (e-mail, instant messaging, phone calls), which are considered as business secrets. While small enterprises should make calculations on using the cloud as the price benefit might be worth the negative impact on data management and ownership, a medium/large sized company is suggested to use own solutions with own security and data backup policies. Hereby - <em>in brief</em> - I present an <em>exemplary cost-effective,</em> secure setup for small to medium enterprises own infrastructure based on encrypted communication and messaging storage with data security and backup in mind. <em>This is a high-level overview: data governance practices, backup policies, disaster recovery, update procedures, security testing, physical security, etc. are to be defined</em>. <img src="https://dataprd.com/images/uploads/2014/08/MidSecure.png" alt="Middle sized company secure network"> Linux based servers: CentOS or Ubuntu Office 1: ~100-200 users</p>