Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Linux
[Top] [All Lists]

RE: which distribution to choose

Subject: RE: which distribution to choose
Date: Wed, 8 Dec 2004 13:50:26 -0700
and Mandrake 10.1 Community Edition available at
http://www.mandrakelinux.com/en/ftp.php3#10.1c.  

I would recomend go with the Official version of MandrakeLinux 10.1. Do a 
network install using the mini-iso (8MB) available in any mirror, like this 
one:

ftp://ftp.proxad.net/pub/Distributions_Linux/Mandrake/official/10.1/i586/install/images/boot.iso

OR... use BitTorrent and save the ftp bandwidth:
Mini-ISO:
http://www.mandrakelinux.com/en/torrent/Mandrakelinux-10.1-Official-Mini.torrent
3 Disk ISO:
http://www.mandrakelinux.com/en/torrent/Mandrakelinux-10.1-Official-Download.torrent
DVD ISO:
http://www.mandrakelinux.com/en/torrent/Mandrakelinux-10.1-Official-Download-DVD.torrent

If you are going to use Mandrake though... perhaps you may want to look
at their "Multi-Network Firewall"
Product Page:
http://www.mandrakesoft.com/products/mnf
Download (ftp, no BitTorrent link)
http://www.mandrakelinux.com/en/ftp.php3#security

Additionally, both distributions support both a manual and an automatic
update system -- manually with up2date and automatic with the yum daemon
for FC3 and either a manual or scripted/CRON'ed urmpi command for Mandrake.

If you know Debian, yum and urpmi are apt-get-like tools.

Except that in my experience they do not resolve the dependencies nearly
as well. URPMI is better than yum with the fedora legacy project.... but
IMHO apt and swaret (slackware) beat them both hands down...

As someone mentioned earlier... Devil Linux is pretty cool...
Let's say you are running Devil... someone gets in and makes changes...
well no worries... you have a non-writable CD... no changes are
permanent...
http://www.devil-linux.org/home/index.php

A *good* firewall package

If you are going to go with live-linux distros... have a look at SLAX
http://slax.linux-live.org/ It is Slackware based which basically means
that everything is as simple as possible. This does not mean graphical
management tools galore like some distros... this simply means that
everything works and is simple to setup with minimal editing to a few
text files.

The firewall consists of your own "rc.firewall" file in /etc/rc.d/

Basic Example:
#!/bin/bash
# Basic script to keep the server secured

## Flush the Tables so changes will be recognized (without duplicates)
#iptables -F

## Default policy to drop 'everything'
#iptables -P INPUT DROP
#iptables -P FORWARD DROP

## Allow established connections and programs that use loopback
#iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
#iptables -A INPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -i lo -j ACCEPT

## Allow offered service clients to connect to ethernet interface

#Secure Shell
#iptables -A INPUT -p tcp --dport 22 -i eth0 -j ACCEPT

#HTTP
#iptables -A INPUT -p tcp --dport 80 -i eth0 -j ACCEPT

#Netbios for Samba
#iptables -A INPUT -p tcp --dport 137:139 -i eth0 -j ACCEPT
#iptables -A INPUT -p udp --dport 137 -i eth0 -j ACCEPT
#iptables -A INPUT -p udp --dport 138 -i eth0 -j ACCEPT

#BitTorrent Ports
#iptables -A INPUT -p tcp --dport 6969 -i eth0 -j ACCEPT
#iptables -A INPUT -p tcp --dport 60003 -i eth0 -j ACCEPT

#Webmin
#iptables -A INPUT -p tcp --dport 10000 -i eth0 -j ACCEPT
#end script

Best of luck...

<Prev in Thread] Current Thread [Next in Thread>