|
|
EC2+Jabber+Proxy
Hello everyone!
I'm posting here to ask several questions bout Amazon EC2 and Linux on it. I'm from Russia and further events, like elections in March, can be quite dangerous to average Internet user in the way of blocking sites. Like in China or Kazahstan.
That's why, I'd like to have my own proxy server in the external cloud. Which problems I can face messing up with it? Is the solution for 27$/month okay for such configuration?
More than that: I'd like to have my jabber-server with ICQ<->Jabber and GTalk<->Jabber transport. Where are pitfalls here? Can you give me any mans/instructions/guides?
Thank you.
Vlad
|
|
0
|
|
|
|
Reply
|
slp.vld (4)
|
2/29/2012 11:53:51 AM |
|
Vladislav Slepukhin wrote:
> Hello everyone!
>
> I'm posting here to ask several questions bout Amazon EC2 and Linux on it. I'm from Russia and further events, like elections in March, can be quite dangerous to average Internet user in the way of blocking sites. Like in China or Kazahstan.
>
> That's why, I'd like to have my own proxy server in the external cloud. Which problems I can face messing up with it? Is the solution for 27$/month okay for such configuration?
>
I have something like that (in the UK) - a linux virtual server with a
little RAM and a little disk - and enormous shared CPU and bandwidth.
So far it has been (for the money) more than I dared hope for. RAM is
getting tight at 384 Mbytes - sometimes it goes a tad swappy..
> More than that: I'd like to have my jabber-server with ICQ<->Jabber and GTalk<->Jabber transport. Where are pitfalls here? Can you give me any mans/instructions/guides?
>
I'll pass on that, beyond the obvious point that the SECOND thing you do
after you have a basic remote install up and running, is to firewall
EVERTYHING except yourself and your own SSH or whatever, out.
START with absolute security - and look at something like Rsync to not
only back the machine up elsewhere, but also send you a message of WHAT
HAS CHANGED. In case something you didn't change yourself has been
changed by someone else.
Do NOT leave an unfirewalled machine on the internet anymore than you
would leave a wallet full of money on a train.. I had probing attacks
within hours.
Make security the absolute bedrock of everything you do. Assume that if
some script exists to hack or DOS a server, someone somewhere will find
it and use it on YOU.
Otherwise if you get blacklisted, it's a waste of all that effort?
> Thank you.
>
> Vlad
|
|
0
|
|
|
|
Reply
|
tnp (2273)
|
2/29/2012 2:33:57 PM
|
|
> START with absolute security - and look at something like Rsync to not
> only back the machine up elsewhere, but also send you a message of WHAT
> HAS CHANGED. In case something you didn't change yourself has been
> changed by someone else.
>
>
> Do NOT leave an unfirewalled machine on the internet anymore than you
> would leave a wallet full of money on a train.. I had probing attacks
> within hours.
I got it. So: install OS, then close all possible backdoors and start configuring. Such way?
But I have another question: I'd like to have any guides to install my own jabber server WITH (most important) name resolve (ka2m instead of 59394923@somedomain). Where can I find'em?
|
|
0
|
|
|
|
Reply
|
slp.vld (4)
|
2/29/2012 4:48:28 PM
|
|
Vladislav Slepukhin wrote:
>> START with absolute security - and look at something like Rsync to not
>> only back the machine up elsewhere, but also send you a message of WHAT
>> HAS CHANGED. In case something you didn't change yourself has been
>> changed by someone else.
>>
>>
>> Do NOT leave an unfirewalled machine on the internet anymore than you
>> would leave a wallet full of money on a train.. I had probing attacks
>> within hours.
> I got it. So: install OS, then close all possible backdoors and start configuring. Such way?
>
Yes.
> But I have another question: I'd like to have any guides to install my own jabber server WITH (most important) name resolve (ka2m instead of 59394923@somedomain).
Where can I find'em?
I dont even know what jabber is.
You can do anything you like LOCALLY as far as name resolution goes by
using the /etc/hosts table or running (and using) your pwn DNS server
(bind9)and faking domains on it.
|
|
0
|
|
|
|
Reply
|
tnp (2273)
|
2/29/2012 5:12:04 PM
|
|
> I dont even know what jabber is.
Maybe you know what XMPP is?
|
|
0
|
|
|
|
Reply
|
slp.vld (4)
|
2/29/2012 6:54:07 PM
|
|
Vladislav Slepukhin <slp.vld@gmail.com> wrote:
> But I have another question: I'd like to have any guides to install
> my own jabber server WITH (most important) name resolve (ka2m instead
> of 59394923@somedomain). Where can I find'em?
Have you looked at jabber.org? Last time I was there, it had some HOWTOs
and listed a bunch of server software. The one written in Erlang was
good when I tried it several years ago.
Regarding name resolving, doesn't this happen as part of XMPP
anyway? I've only ever seen issues of silly names with entities such as
chat.facebook.com, and those tend to disappear once the client (pidgin,
in my case) has had a message from the remote.
Sorry not to be more useful, but it's been a long while since I ran my
own server.
Chris
|
|
0
|
|
|
|
Reply
|
chris-usenet (1112)
|
2/29/2012 8:14:32 PM
|
|
Thanks.
I'd look for it at jabber.org:)
Vlad
|
|
0
|
|
|
|
Reply
|
slp.vld (4)
|
3/1/2012 6:00:22 AM
|
|
|
6 Replies
42 Views
(page loaded in 0.192 seconds)
Similiar Articles:7/6/2012 6:50:11 AM
|
|
|
|
|
|
|
|
|