I would like to secure my server and it seems that IPtables is one of the first steps. Unfortunately editing the rules in a terminal is a bit complicated and dangerous (those who ever did an iptables -F will know what I mean ;) ). Could you recommend any good graphical interfaces for managing my IPtables rules?
I have been playing with package management by adding sources from older Ubuntu releases in order to get older versions of some software (e.g. PHP). Unfortunately at some point I must have overdid it as now every attempt to use apt-get or synaptic ends in an error message being displayed saying that there is no candidate available to install.
I would like to start fresh - remove all the installed packages and added sources. Is there a quick way to do this, or do I need to reinstall the OS?
I have just installed a 10.04 LTS on my development server but the system that I need to run on it (Magento ecommerce) is not compatible with PHP 5.3 which ships with the newest version of Ubuntu. Is there a safe and upgrade-proof way of getting PHP 5.2 installed or will it be easier to use an older version of Ubuntu?
I have a ubuntu development server at work. It is an old rack server that is located somewhere in the company's dungeon, where nobody ever goes. The only way it can work is as a so-called headless server (i.e. with no monitor/keyboard connected and only accepting network connections).
Obviously, if you just need terminal access ssh is more than enough. I, however, would also like to connect to the graphical interface from time to time. At the moment I am using the built in VNC functionality but I am pretty sure this is neither the most efficient nor the most secure way of approaching this issue.
I have done a bit of research on the issue but failed to come to any definite conclusions. I read about trying to forward the X environment over ssh, which would at least solve my security concerns. Can anyone share their experiences in setting this up? Is there any other way that might be worth looking at?
I almost exclusively connect to this server from a Windows machine. I don't know if that might be a problem for some of the methods suggested.