Forfatterarkiv: mike

Automatic sumarize your logs

Wade through that haystack of logs to find the proverbial needle. If you’re logging almost every piece of information you can from all services and hosts on your network, no doubt you’re drowning in a sea of information. One way … Læs resten

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Steer syslog

Make syslog work harder, and spend less time looking through huge log files. The default syslog installation on many distributions doesn’t do a very good job of filtering classes of information into separate files. If you see a jumble of … Læs resten

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Run central syslog

Keep your logs safe from attackers by storing them remotely. Once an intruder has gained entry into one of your systems, how are you to know when or if this has happened? By checking your logs, of course. What if … Læs resten

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

SFS Secure Filesharing on unix

Use SFS to help secure your remote filesystems. If you are using Unix systems and sharing files on your network, you are most likely using NFS. However, there are a lot of security problems, not only with individual implementations, but … Læs resten

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Securing MySQL

Basic steps you can take to harden your MySQL installation. MySQL (http://www.mysql.com), one of the most popular open source database systems available today, is often used in conjunction with both the Apache web server and the PHP scripting language to … Læs resten

Udgivet i Knowledge Base, Old Base | Skriv en kommentar

Chrooting named

Lock down your BIND setup to help contain potential security problems. Due to BIND’s not-so-illustrious track record with regard to security, you’ll probably want to spend some time hardening your setup if you want to continue using it. One way … Læs resten

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Apache security – ssl, suexec

Help secure your web applications with mod_ssl and suEXEC. Web server security is a very important issue these days, especially since people are always finding new and creative ways to put the Web to use. If you’re using any sort … Læs resten

Udgivet i Apache, Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

OS Fingerprint protection

Keep outsiders on a need-to-know basis regarding your operating systems. When performing network reconnaissance, one very valuable piece of information for would-be attackers is the operating system running on each system discovered in their scans. From an attacker’s point of … Læs resten

Udgivet i Knowledge Base, Linux, Networking, Old Base | Skriv en kommentar

Installing nessus

# lynx -source http://install.nessus.org | sh ——————————————————————————– NESSUS INSTALLATION SCRIPT ——————————————————————————– This script will retrieve the latest version of Nessus via CVS, and will compile and install it on your system. To run this script, you must know the root … Læs resten

Udgivet i Knowledge Base, Linux, Old Base, Security | Skriv en kommentar

Set UP TLS-enabled SMTP (encryption)

Protect your users’ in-transit email from eavesdroppers. If you have set up encrypted POP and IMAP services [Hack #47], your users’ incoming email is protected from others once it reaches your servers, but what about their outgoing email? You can … Læs resten

Udgivet i Knowledge Base, Kryptering, Old Base | Skriv en kommentar