Solved

Security Policy Implementation

Posted on 2006-06-30
1
271 Views
Last Modified: 2013-11-16
hi all, I am doing my project on Security policy implementation, i want to prepare some internet security policy on My windows Operating system with VB.Net and then i want to configure security settings in Linux operating system, In linux System, i want to configure Different Linux security utilities like Linux Firewall, Spamassisssn and Linux Content Filter According to my Configuration files generated from my Window operating System, I want to use XML files to configure all security files, please if you people are having any suggestion please give me urs valuable giudance.
0
Comment
Question by:rahulrai19
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 38

Accepted Solution

by:
Rich Rumble earned 250 total points
ID: 17019650
So, you'd like to effectivly mirror the settings on the linux box, that you set on the widows box.
It won't be easy... while the XML file will be a good place to keep the settings, as it is a very universal format, gathering the data, and applying it will require two very different methods.

I'm no programmer, but there are already tools that M$ has built in that can query just about anything in the OS.
http://www.xinn.org/wmic.html  http://xinn.org/logonscripting102.html http://xinn.org/misc-scripts/examples102.txt
WMIC has an XML output format, as does the MSBA tool form M$

You'd then have to parse those settings into linux, the firewall rules would have to be read from the XML file, then converted to IPTable rules...
http://xinn.org/iptables-nat.html
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -i eth1 -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -i eth1 -j DROP
-A RH-Firewall-1-INPUT -i eth0 -j ACCEPT

I'm not sure what other settings from the M$ OS you'd want to duplicate to the linux machine...
-rich
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

February 24, 2017 — On February 23, Travis Ormandy, a vulnerability researcher at Google, reported on Twitter (https://twitter.com/taviso/status/834900838837411840) that massive stores of data have been leaked by CloudFlare, a company that provide…
There's a lot of hype surrounding blockchain technology. Here's how it works and some of the novel ways it' s now being used - including for data protection.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question