Home web server

[Daniel Armstrong]

On Mon, May 10, 2010 at 2:53 PM, Tyler Aviss <tjaviss-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org> wrote:
> On Mon, May 10, 2010 at 11:42 AM, Daniel Armstrong <daniel-r35aSzp7v8jQT0dZR+AlfA at public.gmane.org> wrote:
>> Hi all... Anybody hosting their own web server from home?
>
> Do you need a .com?
> Are you using a fixed IP with TS? If not, go to dyndns.org, and
> install the daemon to update the DNS via your IP.
> For my home box I just a "myname.homeip.net" domain, which works fine.
> My actual server-out-in-the-world has a .COM, but for a test box you
> don't really need it?

Hi Tyler... I am going to be using my own *.com and I have a static IP
from Teksavvy.

>
>> 2/ For a home server... has experience proved it pays to put the
>> server on a separate subnet vs basic forwarding of port 80? I found a
>> good tutorial for creating another VLAN in Tomato:
>>
>> http://www.seiichiro0185.org/doku.php/blog:creating_a_seperate_guest_network_with_tomato
>>
>> Any thoughts on the matter would be appreciated.
>
> If you're not very experienced with running a server yet, it may be an
> idea to physically separate it from the rest of the network (VLAN it
> or put it on the outside of the router) so if something goes wrong it
> won't do "bad things" on your home network. Port forwarding can be
> annoying if you find you want to use an alternate port for something.
>
> Also, switch SSH to a port other than 22. You'll get less sniffing
> attacks. Add IP's you commonly want access from (home network, work
> IP) to /etc/hosts.allow, and then install the "denyhosts" package to
> auto-block those that are attempting to jack your box.
>

Yes... I am definitely leaning towards the VLAN option. Good point
about the SSH. I already use a non-standard port on my Linksys to
reach SSH running on my desktop box. I will check out the denyhosts
package. Thanks!
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists