[CLUE-Talk] Linux Secuirty (was Hack Attempt)

[Brandon N]

There is a very good book discussing PAM, xinetd, tripwire, port
scanning and several other security issues for Linux called "Linux
System Security"  It talks specifically about Linux, but most of the
information is general enough to apply to any Unix OS.

Brandon
--- Jeremiah Stanley <miah at miah.org> wrote:
> > 1) What's available for Linux along the same lines as ZoneAlert;
> and,
> > 2) With a dialup connection via Earthlink, what are the odds of
> someone 
> > trying to hack by Linux box?
> 
> I am currently running tripwire (http://www.tripwire.com/) to watch
> all my
> pertinent configuration files and I use ipchains firewalling to turn
> off
> all the ports that I don't plan on using on a regular basis. Another
> good
> idea is to is xinetd, it allows for extremely granular configuration
> of
> access to the different services that you would offer to the
> world/network.
> 
> The chances that someone would try and hack your box on a dial up
> connection are very, very low. You are awarded a dynamic IP address
> every
> time you dial up, so unless you stay connected for days you should be
> very
> random in that regard. Also, alot of ISP's are making the IP's they
> give
> out non addressable (you wouldn't be able to run a web server on it
> routing wise) so there is that as well.
> 
> You can check out these links for more info:
> 
> xinetd:
> http://www.macsecurity.org/resources/xinetd/tutorial.shtml
> http://www.synack.net/xinetd/
> 
> ipchains:
> http://www.linuxdoc.org/HOWTO/IPCHAINS-HOWTO.html
> 
> Hope that helps you out.
> 
> JStanley
> -- 
> Use GnuPG! -- http://www.gnupg.org
> Get my key at http://www.miah.org/miah.asc
> 
> _______________________________________________
> CLUE-Talk mailing list
> CLUE-Talk at clue.denver.co.us
> http://clue.denver.co.us/mailman/listinfo/clue-talk


__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - Buy the things you want at great prices. 
http://auctions.yahoo.com/