Månedsarkiv: juli 2004

Securing MySQL

Udgivet den juli 10, 2004 af mike

Basic steps you can take to harden your MySQL installation. MySQL (http://www.mysql.com), one of the most popular open source database systems available today, is often used in conjunction with both the Apache web server and the PHP scripting language to … Læs resten →

Udgivet i Knowledge Base, Old Base | Skriv en kommentar

Chrooting named

Udgivet den juli 10, 2004 af mike

Lock down your BIND setup to help contain potential security problems. Due to BIND’s not-so-illustrious track record with regard to security, you’ll probably want to spend some time hardening your setup if you want to continue using it. One way … Læs resten →

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Apache security – ssl, suexec

Udgivet den juli 10, 2004 af mike

Help secure your web applications with mod_ssl and suEXEC. Web server security is a very important issue these days, especially since people are always finding new and creative ways to put the Web to use. If you’re using any sort … Læs resten →

Udgivet i Apache, Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

OS Fingerprint protection

Udgivet den juli 10, 2004 af mike

Keep outsiders on a need-to-know basis regarding your operating systems. When performing network reconnaissance, one very valuable piece of information for would-be attackers is the operating system running on each system discovered in their scans. From an attacker’s point of … Læs resten →

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Installing nessus

Udgivet den juli 10, 2004 af mike

# lynx -source http://install.nessus.org | sh ——————————————————————————– NESSUS INSTALLATION SCRIPT ——————————————————————————– This script will retrieve the latest version of Nessus via CVS, and will compile and install it on your system. To run this script, you must know the root … Læs resten →

Udgivet i Knowledge Base, Linux, Old Base, Security | Skriv en kommentar

Set UP TLS-enabled SMTP (encryption)

Udgivet den juli 10, 2004 af mike

Protect your users’ in-transit email from eavesdroppers. If you have set up encrypted POP and IMAP services [Hack #47], your users’ incoming email is protected from others once it reaches your servers, but what about their outgoing email? You can … Læs resten →

Udgivet i Knowledge Base, Kryptering, Old Base | Skriv en kommentar

Encrypt IMAP and POP with SSL

Udgivet den juli 10, 2004 af mike

Keep your email safe from prying eyes while also protecting your POP and IMAP passwords. Having your email available on an IMAP server is invaluable when you have to access your email from multiple locations. Unlike POP, IMAP stores all … Læs resten →

Udgivet i Knowledge Base, Old Base | Skriv en kommentar

Distribute your CA to clients

Udgivet den juli 10, 2004 af mike

Be sure all of your clients trust your new Certificate Authority. Once you have created a Certificate Authority (CA) [Hack #45], any certificates that are signed by your CA will be trusted by any program that trusts your CA. To … Læs resten →

Udgivet i Knowledge Base, Kryptering, Networking, Old Base, Security | Skriv en kommentar

Create your own certificate authority

Udgivet den juli 10, 2004 af mike

Sign your own certificates to use in securing your network. SSL certificates are usually thought of as being used for secure communications over the HTTP protocol. However, they are also useful in providing both a means for authentication and a … Læs resten →

Udgivet i Knowledge Base, Kryptering, Old Base | Skriv en kommentar

Fool Remote operating system detection software on linux with iptables

Udgivet den juli 10, 2004 af mike

Evade remote OS detection attempts by disguising your TCP/IP stack. Another method to thwart operating system detection attempts is to modify the behavior of your system’s TCP/IP stack and make it emulate the behavior of another operating system. This may … Læs resten →

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar