webmin! thoughts on operations and SECURITY!!

[RabeaticSquirrel]

I'm still fairly new to Linux, so something like this that makes it so easy to manage my system is a F***ING DREAM! But, what about the security side of the house? Is it secure? What are the known vunerabilities? I'm trying to get SSL installed but I'm having some probs. Just trying to see what general consensus is?

 

[ineedsleep]

Although webmin would be good for you to start (I started with it) - you should eventually begin logging in using SSH and editing in VI.

If you can get SSL working on it - use webmin in SSL mode and it's pretty decent. However - you'll have to keep in mind that it uses a basic http authentication so it can be vulnerable to brute force attacks. Another thing to note is you should not use the default port. When installing webmin - you can change the port it listens on.... change it to something that is not being used by anything else (21, 443, 80, etc...) Something like 2398 - you get the idea.

When I first began remote adminstering my linux server - I loved webmin - swore by it and continue to use it. I have begun editing in VI but there is still something that I choose to do in webmin.

Hope this helps!