Linked by Thom Holwerda on Sun 30th Jul 2006 15:36 UTC, submitted by falko
Ubuntu, Kubuntu, Xubuntu This article shows how to install a LAMP system with Ubuntu 6.06 LTS from the perspective of an absolute newbie. It was written with hopes of aiding other Linux newbies on the steps necessary to create such a basic Linux, Apache2, MySQL5 and PHP5 system with FTP.
Thread beginning with comment 147634
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE: Newbies
by jjmckay on Sun 30th Jul 2006 18:14 UTC in reply to "Newbies"
jjmckay
Member since:
2005-11-11

Well with freedom comes responsibility, right? I'm a firm believer in having the freedom to make mistakes in life. Yes if someone who has never worked with Apache exposed on the public Internet sets this up, they are likely an easy target for hackers. Ths guide makes no warning of this and in that regard it is a total and complete failure and should be removed from howtoforge.com

Also the article is incorrect in saying that you can update DNS to forward traffic to a different port. DNS doesn't specify anything about ports, only ip address and host names.

Reply Parent Bookmark Score: 4

RE[2]: Newbies
by SEJeff on Mon 31st Jul 2006 03:47 in reply to "RE: Newbies"
SEJeff Member since:
2005-11-05

Have you ever heard of iptables? You can redirect ports with iptables agnostic of the service. (from memory), something similar to this might work:

/sbin/iptables -t nat -A PREROUTING -i eth0 -p udp --dport 53 -j REDIRECT --to-port 153

That would redirect udp port 53 (DNS) to port 153.

Reply Parent Bookmark Score: 1

RE[2]: Newbies
by Mediv on Mon 31st Jul 2006 08:01 in reply to "RE: Newbies"
Mediv Member since:
2006-05-10

"DNS doesn't specify anything about ports, only ip address and host names."

Yes it does, but... only with SRV type requests. These requests ask the IP address and the associated port for a given service. For instance, "tell me the SIP proxy address and its port for the given domain".

However, and it is where you are right, this type of request is not used to access web servers, where it is just a classical name resolution, and not a "service resolution".

Reply Parent Bookmark Score: 2