Do not use on any
shared computer
August 29, 2008 03:49pm pdt

Over 40 Experts attended the first Annual Core Conference! Take a look at what happened throughout the week...

2008 Core Conference

 

Welcome! If you have any general questions about Experts Exchange, feel free to ask me.

 
Time Tested Linux Network Security Solutions: 151 - 175 of 181
 
How do you apply file and or share permissions to a linux share against a windows active directory security group. We just deployed a Fedora 8 box at work with several shares and I would li...
How can I develop my own command-line commands?
Hi, I updated the blacklists on dansguardian yesterday, and when i went to restart dansguardian it failed to start. After brief search of the problem i decided a reinstallation of dansguardi...
Hello, What's the security risk if the output of  'echo $PATH' like this .:/bin:/usr/bin:/sbin:/usr/X11R6/bin:/usr/src Thanks for your explain
[kayve@kv_bsd ~]$ uname -a FreeBSD kv_bsd 6.3-STABLE FreeBSD 6.3-STABLE #0: Wed May  7 19:40:55 PDT 2008     root@kv_bsd:/usr/obj/usr/src/sys/GENERIC  i386 [kayve@kv_bsd ~]$ pkg_info | grep...
I have Centos5.0 installed.It has 3 Nic interface. eth0 (192.168.2.4) Wan Accessing Internet from Getaway ADSL Modem (192.168.2.1) eth1(192.168.1.1) Local Area network and eth2 (10.10.10.1)...
Hey Gang, Im using fwbuilder 2.1.19 to configure iptables on Linux ES 4.5 (Intel). I have everything working EXCEPT I cannot seem to use fwbuilder to allow a machine in by MAC address...
...even though the internal lan ip range is specified and the snort rule is to only log external_net accesses to that port.   any ideas as to why this is happening?  it's generating 50-100M...
Hi, I manage to install new pgp rpm into Linux box version 6.5. I encrypt a file with receipent user id and sent the encrypted file together with my public key. The receipient can dec...
Hi,    What's the exact difference between su and sudo? What if the hacker gets the account password of a user who has sudo privilege? After getting the sudo access, the hacker can use ...
Hi! I want to play around a little with SSL and sign my certificates myself. I found out that you can do this with Microsoft Certificate Server on Windows, is there a free program for doing th...
Hi, This is a question related to "TCP: Treason uncloaked!:"  at http://www.experts-exchange.com/Security/Linux_Security/Q_20788430.html#10461075 I have a warning :TCP: Treason uncloa...
I am preparing to upgrade our Linux firewall/cache. I have decided to continue to use the most excellent Squid for caching. I have also decided to try and use squidGuard as the standard re...
I'm running a RedHat ES mail server (Postfix, Amavis, ClamAV), which has been barraged lately by the Zafi worm.   Messages arrive from "you@yourname.com" and one of three (so far) IP number...
To all, I would like to try to hack our dev servers (they are a replication of our producution servers).  We have implemented several new layers of security including a Cisco Pix 501 firewa...
I installed openprotect with MailScanner and SpamAssassin on a linux box (sentinix) with Sendmail.  I downloaded sendmail first (8.13) and got it up and running.  After that I ran the openprot...
This question is concerning an Intel server running Redhat 9 and Plesk. When Redhat was installed, the default "medium" firewall option was taken. Now that plesk has been installed (to...
I am using pam_radius_auth on my ssh server, so that each time when I ssh to that server, it'll go to our radius server to do the authentication.  It works fine if my own username exists both ...
im trying to capture traffic on a webserver at my house tcpdump -i2 -vvvX -s 1514 -w capture not tcp port 5900 So far it works. I specified not tcp port 5900 because I didnt want it capt...
Hi - well if you've read the header you'll know I've had one of our Linux servers hacked by someone called "Mironov" and it's possibly due to the exploit in PROFTPD. There are files in the /tm...
I have done this before, but I believe it was back in RH 7.3, and as I remember it, it was straight forward and I had no issues. I am now using RHEL 3.0. I am having problems getting SSH to le...
#!/usr/bin/perl $SHELL="/bin/bash -i"; if (@ARGV < 1) { exit(1); } $LISTEN_PORT=$ARGV[0]; use Socket; $protocol=getprotobyname('tcp'); socket(S,&PF_INET,&SOCK_STREAM,$protocol) || die "C...
Hi, I'm using RHEL3 and wish to convert it into SQUID PROXY box. On top of that, the box will also be a gateway for all clients to access the POP3 (110) and SMTP (25) directly from the net....
I have a Fedora core 4 box and I want to lock a user account if someone tries an brute force on the password.  I want to also be able to unlock the account after a set period of time.  Is this...
Hi, I am trying to setup two or more ssl certificates for a machine. I have just one IP I have two name based Virtual hosts. I have two separate SSL certificates. I tried to assign each...