Debian server mess

[dewdropsue]

Hi. I recently landed a job as a systems admin at a small company. When I started, I was told there were two Linux boxes that were a web server and an ftp server. The two boxes run an older version of Debian. Once I started going throught the network configuations, it became clear that the ftp server was not secure at all. It also is somehow connected to the web server and another, older database server that runs Windows NT 4.0. The three computers are so intertwined that if one goes away, the other two lose functionality. The person who set these up was a "hacker" for lack of a better word and I have no clue how to go about finding out what is what and what goes where. I have very little formal Linux training. Can anyone help?

[lpcustom]

How did you land a job as a systems admin???

[gtmtnbiker98]

It sounds to me that the Web server is linking to the FTP server and possibly gaining authentication via the NT box or perhaps even, a database. Research the documentation if there is any and if not, you should probably start over - making it more secure.

If you cannot figure out how the services are related then how can you confirm that the setup is not secure? Just curious.

[dewdropsue]

Thanks for the help. I know its not secure. I've been finding tons of encrypted files, I have no documentation and the three pcs are attached in ways they shouldn't be. I'm building a new stand alone ftp server but wanted to separate the three pcs so that I didn't lose functionality from all three when I take the ftp server down. As it stands now I will probably have to redo all three.