Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Linux
[Top] [All Lists]

Re: Securing Fedora Core 4

Subject: Re: Securing Fedora Core 4
Date: Fri, 23 Sep 2005 08:18:28 -1000
A good idea is patching the kernel with grsecurity (http://www.grsecurity.net/)

Just my 2 cent.


AragonX a écrit :

I am trying develop a method to secure my servers.  I'll list the steps I
am going to take.  Can you please review and make any additional
suggestions.  Thank you.

Install & configure Tripwire        http://sourceforge.net/projects/tripwire/
Install & configure Snort   http://www.snort.org/
Install & configure Bastille        http://www.bastille-linux.org/
Install & configure LIDS    http://www.lids.org/
Install & configure modsecurity     http://www.modsecurity.org/
Install & configure chkrootkit      http://www.chkrootkit.org/
install dansguardian            http://www.dansguardian.org
install squid                   http://www.squid-cache.org/
Install & configure DCC             http://www.dcc-servers.net
Install & configure Pyzor   http://pyzor.sourceforge.net
Install & configure Razor   http://razor.sourceforge.net
install & configure Clamav  http://www.clamav.net
Install & configure MailScanner     http://www.sng.ecs.soton.ac.uk/mailscanner/
Install & configure Ntop    http://www.ntop.org/
Install & configure Spamassassin    http://spamassassin.apache.org/
install root access email command
create a seprate /tmp partition and mount noexec, nosuid

  Configure Apache
configure for php safe mode
configure /internal web directory w/ access from private network only
configure /external web directory w/ password authentication

  Configure SSH
respond on alternate port
only allow me to logon

  Configure Fireall:
only allow access to ssh from my domains







<Prev in Thread] Current Thread [Next in Thread>