Solved

Security Policy Implementation

Posted on 2006-06-30
1
268 Views
Last Modified: 2013-11-16
hi all, I am doing my project on Security policy implementation, i want to prepare some internet security policy on My windows Operating system with VB.Net and then i want to configure security settings in Linux operating system, In linux System, i want to configure Different Linux security utilities like Linux Firewall, Spamassisssn and Linux Content Filter According to my Configuration files generated from my Window operating System, I want to use XML files to configure all security files, please if you people are having any suggestion please give me urs valuable giudance.
0
Comment
Question by:rahulrai19
1 Comment
 
LVL 38

Accepted Solution

by:
Rich Rumble earned 250 total points
ID: 17019650
So, you'd like to effectivly mirror the settings on the linux box, that you set on the widows box.
It won't be easy... while the XML file will be a good place to keep the settings, as it is a very universal format, gathering the data, and applying it will require two very different methods.

I'm no programmer, but there are already tools that M$ has built in that can query just about anything in the OS.
http://www.xinn.org/wmic.html  http://xinn.org/logonscripting102.html http://xinn.org/misc-scripts/examples102.txt
WMIC has an XML output format, as does the MSBA tool form M$

You'd then have to parse those settings into linux, the firewall rules would have to be read from the XML file, then converted to IPTable rules...
http://xinn.org/iptables-nat.html
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -i eth1 -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -i eth1 -j DROP
-A RH-Firewall-1-INPUT -i eth0 -j ACCEPT

I'm not sure what other settings from the M$ OS you'd want to duplicate to the linux machine...
-rich
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Many companies are looking to get out of the datacenter business and to services like Microsoft Azure to provide Infrastructure as a Service (IaaS) solutions for legacy client server workloads, rather than continuing to make capital investments in h…
These days, all we hear about hacktivists took down so and so websites and retrieved thousands of user’s data. One of the techniques to get unauthorized access to database is by performing SQL injection. This article is quite lengthy which gives bas…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
A short film showing how OnPage and Connectwise integration works.

937 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now