3. TODO Tue Jan 9 13:14:15 EST 2001

• How to test each service section added! (including maybe strace: (mkdir /tmp/strace; mv .../in.ftpd .../in.ftpd.binary, create a two line shell script named in.ftpd with: #!/bin/sh and 'strace -o /tmp/strace/ftpd.out .../in.ftpd.binary' --- I've described strace wrappers and reading strace output in past LG articles; search for some hints))
• More on security of all the services we install (clear text password, DoS by overflowing partition in mail and ftp, http access configs etc), including maybe the very basic ipchains setup (ipchains as safer alternative to tcp wrappers)
• Add info on POP3 and ftp tunneling via ssh (just for fun) or refer to other HOWTOs
• Add troubleshooting subsections to various sections
• Add SSL-enabled Apache install and basic configuration
• Add news server setup - who needs it?
• User accounting setup (acc, acua)
• Description of mail-only users (playing with proxyarp and restricting their access only to the local machine)

3.1 New versions of this document

New versions of this document can be found at

http://www.chuvakin.org/ispdoc

3.2 Feedback

All comments, error reports, additional information (very much appreciated!!!) and criticism of all sorts should be directed to: anton@chuvakin.org

http://www.chuvakin.org/

My PGP key is located at http://www.chuvakin.org/pgpkey

Please direct spelling error comments to your friendly local spell checker.

If you plan to ask for help, see support section first.

3.3 Standard disclaimer

No liability for the contents of this document can be accepted. Use the concepts, examples and other content at your own risk. Additionally, this is an early version, with many possibilities for inaccuracies and errors.

One of many possible setups will be described. In the Linux world, there is usually a number of ways in which to accomplish things.

As far as I know, only programs that under certain terms may be used or evaluated for personal purposes will be described. Most of the programs will be available complete with source under GNU-like terms.

3.4 Support

This is ridiculous, right? Who may ask for support after seeing such a comprehensive doc ;-) ?

Anyhow, if you are curious about some particular aspect of this setup or some of my writing is unclear, just drop me an email and I might answer it (at least, be assured that I will read it).

Now, if you require a phone, hand-holding style support or my work on your system, I might be able to provide it on certain terms (if I have time and your case seems interesting enough ;-) )

3.5 Copyright information

This document is copyrighted (c) 2000,2001 Anton Chuvakin and distributed under the following terms:

• Linux HOWTO documents may be reproduced and distributed in whole or in part, in any medium physical or electronic, as long as this copyright notice is retained on all copies. Commercial redistribution is allowed and encouraged; however, the author would like to be notified of any such distributions.
• All translations, derivative works, or aggregate works incorporating any Linux HOWTO documents must be covered under this copyright notice. That is, you may not produce a derivative work from a HOWTO and impose additional restrictions on its distribution. Exceptions to these rules may be granted under certain conditions; please contact the Linux HOWTO coordinator at the address given below.
• If you have questions, please contact Greg Hankins, the Linux HOWTO coordinator, at