Server questions

[The_Laginator]

Good afternoon everyone,

 

My question is, If i would use an old computer as a server-type-thing, for making servers for games, or for a TS3 server, and if I would expose the addresses to random strangers, would I be at risk? I would have nothing else on the server. Would I need to have to take extra security measures? Or odes it not matter?

 

Thanks in advance!

 

-The_Laginator

[Sn4tchBandicoot]

Of course you are at risk and need to take measures. Any entry point on your networks to the internet is another way that a threat can be introduced to the rest of your network.

[kevink817]

Use your router's port forwarding features to forward only the specific ports required for users to connect to the server. Ensure the server stays up to date, and ensure it also has a local firewall that only allows inbound connections on the server ports and ports required for remote administration (SSH/RDP), and outbound connections as required for updates (Usually TCP/80, TCP/443, and TCP/UDP/53).

 

Anytime you connect a PC/Server to the internet, regardless if it's public facing or not, you assume a certain amount of risk. By keeping your system up to date, and correctly configuring the security tools you have available, you can minimize that risk.

 

EDIT: You should also limit Remote Administration to your own PC's IP address, or at least the subnet of your local home network (in the case you are using DHCP.)

[The_Laginator]

Of course you are at risk and need to take measures. Any entry point on your networks to the internet is another way that a threat can be introduced to the rest of your network.

What is I only give the adress to close friends and family?

[The_Laginator]

Use your router's port forwarding features to forward only the specific ports required for users to connect to the server. Ensure the server stays up to date, and ensure it also has a local firewall that only allows inbound connections on the server ports and ports required for remote administration (SSH/RDP), and outbound connections as required for updates (Usually TCP/80, TCP/443, and TCP/UDP/53).

 

Anytime you connect a PC/Server to the internet, regardless if it's public facing or not, you assume a certain amount of risk. By keeping your system up to date, and correctly configuring the security tools you have available, you can minimize that risk.

 

EDIT: You should also limit Remote Administration to your own PC's IP address, or at least the subnet of your local home network (in the case you are using DHCP.)

What operating system should I use for the server? And what tools should I use?

 

[kevink817]

What operating system should I use for the server? And what tools should I use?

 

The operating system needed depends on what kinds of services you are going to run (ex. some services are only written for windows, some and written with versions that can be run on linux or mac OS X, or all of the above). Windows would be easier to configure, if thats what you're already familiar with, and has a built-in firewall 'Windows Firewall' that can be configured to lock down the server. Linux distros tend to be more secure, but you will need to see if they come with a built-in firewall or if you will need to install one seperately.

 

I currently run a Teamspeak 3 server on a FreeBSD virtual machine that has been isolated from the rest of my network except for remote management (SSH) from my desktop PC, and it has been working pretty well. A windows virtual machine and Teamspeak 3 service would have been MUCH easier to configure, however.

[Sn4tchBandicoot]

The first thing you're going to want to make sure is that you are able to use the services you want on your provider or current providers internet package. Most ISP's block pretty well all the ports on all residential packages, thus requiring you to upgrade to a business account, others have it stated in the TOS that you are not allowed to run anything for services on the account as it congests the network too much and can't handle it.

No matter what OS you run or who you give the info to, you will always run the risk of an attack, it's no different than your desktop, it's out there just waiting, unless you are taking steps to prevent it (IP cloaking etc) then you'll always be vulnerable.

[MG2R]

a TS3 server,

If you want a simple solution for TS3, just connect to teamspeak.ltt-unofficial.com

That's a public TS3 hosted by @looney and used by lots of LTT members. There are plenty of rooms so you can still be in private with your friends if wanted/needed.

 

They might even be able to help you out with game servers, but don't quote me on that