If you're using RedHat, for the most part, yes. The main hole is sendmail, which you should disable. I think you can use chkconfig to disable it, something like "chkconfig --remove sendmail" or something. Is Linux going to be your main gateway machine? If so, you should install IP masquerading, then you won't have to worry. ("What me, worry?") > From: Mark Reimers <http://www.100X.com/~mreimers> > Date: Tue, 31 Oct 2000 17:31:57 -0500 > > Content-type: text/html ; charset = "iso-8859-1" > > ---Executing: html-to-ascii > Robert, I would like to start running day-long unattended http > sessions between my machine at home and a couple of servers. This is to > download massive amounts of data. My ZoneAlarm of course won't protect > me; probably I'll need a linux box. How would you configure linux to > allow only data from a few sites but block all TCP requests from > elsewhere? Would hosts.allowed be enough? > > Mark Reimers > > Staff Mathematician > > 100X Ventures > > 880 Winter St., suite 300, > > Waltham, Ma 02451 > > 781-529-1062 > > >