VNC Server and Security In Mandrake 10.1

[Socialoutcast]

Ok guys I know this may be a bit open ended of a question BUT I need to knw for work. Ok my boss is looking to get rid of windows in the office YAY. Anyway he wants me to do all the security and still beable to remote into the server and work on it. So #1 What programs in Mandrake10.1 can I use for security in keeping the Intranet and internet seperate. #2 Is VNC the best way to go for remote from home repairs? Or is there a better way like telnet or something. I'm not a complete noob to linux but I am to Mandrake and thats what he wants to go with. Not a huge comany like 10 people. But it's part of a branch of hotel companys that needs water tight security. Any and all info on this issue will be great thanx.

[jeremy1701]

#1 What programs in Mandrake10.1 can I use for security in keeping the Intranet and internet seperate.

I guess I don't really know what you're asking here. Mandrake comes with Shorewall for a firewall. It's very secure and should work well for your needs. If your going to have one box connected to the net and the rest sharing it's internet connection, you can use shorewall to do that too. The ICS wizard in Mandrake will setup a proxy server by default (Squid), but you can easily change that if you want.

#2 Is VNC the best way to go for remote from home repairs? Or is there a better way like telnet or something.

VNC is not the most secure way to go. You can do it, but the proper way is to ssh in, start the vncserver, connect remotely, do what you have to do, disconnect, kill the vncserver and then ssh out. That way, you only have one ssh server running, as apposed to a vnc server, which is inherently less secure. For sure, do not use telnet. That's the least secure.

You might also want to consider that as an admin, almost anything you're going to want to do remotely can be done via tha command line, so sshing should be enough. You won't even need a vnc.

Good luck!
Jeremy

[Flatline]

And besides, if you're SSHing from another *nix box, you can run whatever app you want from the command line and the app will show up on your desktop. Being able to run

mcc

remotely and having the Mandrake Control Center pop up on your desktop is pretty handy.

[Socialoutcast]

Ok so how hard is it to set up ssh? THis I am a noob too. Never really heard of it.

[Muser]

Using OpenSSH is pretty easy. Just install and run. I didn't have to configure it at all.