Re: iptables and snort
>----- Original Message -----
>From: Col @ Home
>To: debian-user@lists.debian.org
>Sent: Thursday, March 18, 2004 10:36 PM
>Subject: iptables and snort
>
>
>Hi,
>
>Am trying to set up a firewall on a Debian linux machine using
iptables. New
>to linux, can anybody point me in the direction of
>a good guide to configuring a firewall using iptables?
>
>I also want to get snort and acidlab going. Any help on that would be
>appreciated as well.
v
>I am a bit paranoid about security, are there any programs that can
perform
>security audits?
>
>Thanks!
>C.
You might want to install something like aide or samhain too.
I installed both. Aide checks your system periodically to see what
files
have changed.
While you're at it, you can install chkrootkit and logcheck too.
If find ulogd & ulogd-pcap a worthwhile add on for iptables. It allows
you
to record a certain amount of packets and then you can analyse them.
Benedict
Reply to: