[CLUE-Talk] Linux Secuirty (was Hack Attempt)

Jim Intriglia jimintriglia at hotmail.com
Sun Jan 28 14:55:20 MST 2001


Thanks - will have to add this book to my list of reading - ASAP.

-Jim


>From: Brandon N <bneill at yahoo.com>
>Reply-To: clue-talk at clue.denver.co.us
>To: clue-talk at clue.denver.co.us
>Subject: Re: [CLUE-Talk] Linux Secuirty (was Hack Attempt)
>Date: Sat, 27 Jan 2001 12:52:12 -0800 (PST)
>
>There is a very good book discussing PAM, xinetd, tripwire, port
>scanning and several other security issues for Linux called "Linux
>System Security"  It talks specifically about Linux, but most of the
>information is general enough to apply to any Unix OS.
>
>Brandon
>--- Jeremiah Stanley <miah at miah.org> wrote:
> > > 1) What's available for Linux along the same lines as ZoneAlert;
> > and,
> > > 2) With a dialup connection via Earthlink, what are the odds of
> > someone
> > > trying to hack by Linux box?
> >
> > I am currently running tripwire (http://www.tripwire.com/) to watch
> > all my
> > pertinent configuration files and I use ipchains firewalling to turn
> > off
> > all the ports that I don't plan on using on a regular basis. Another
> > good
> > idea is to is xinetd, it allows for extremely granular configuration
> > of
> > access to the different services that you would offer to the
> > world/network.
> >
> > The chances that someone would try and hack your box on a dial up
> > connection are very, very low. You are awarded a dynamic IP address
> > every
> > time you dial up, so unless you stay connected for days you should be
> > very
> > random in that regard. Also, alot of ISP's are making the IP's they
> > give
> > out non addressable (you wouldn't be able to run a web server on it
> > routing wise) so there is that as well.
> >
> > You can check out these links for more info:
> >
> > xinetd:
> > http://www.macsecurity.org/resources/xinetd/tutorial.shtml
> > http://www.synack.net/xinetd/
> >
> > ipchains:
> > http://www.linuxdoc.org/HOWTO/IPCHAINS-HOWTO.html
> >
> > Hope that helps you out.
> >
> > JStanley
> > --
> > Use GnuPG! -- http://www.gnupg.org
> > Get my key at http://www.miah.org/miah.asc
> >
> > _______________________________________________
> > CLUE-Talk mailing list
> > CLUE-Talk at clue.denver.co.us
> > http://clue.denver.co.us/mailman/listinfo/clue-talk
>
>
>__________________________________________________
>Do You Yahoo!?
>Yahoo! Auctions - Buy the things you want at great prices.
>http://auctions.yahoo.com/
>_______________________________________________
>CLUE-Talk mailing list
>CLUE-Talk at clue.denver.co.us
>http://clue.denver.co.us/mailman/listinfo/clue-talk

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com




More information about the clue-talk mailing list