Re: intrusion detection

[David Bernier <david250@videotron.ca>]

Douglas A. Tutty wrote:
> On Tue, Oct 28, 2008 at 03:37:05PM +0000, Sam Kuper wrote:
>   
> > 2008/10/28 David Bernier <david250@videotron.ca>
> >     
> > > I'd like to know about ideas for security, including for example
> > > intrusion-detection systems.
> > >
> > >       
> > I recently read Linux Firewalls <http://www.nostarch.com/firewalls_mr.htm> ,
> > and can recommend it. I'm sure there are lots of other good books on the
> > topic too.
> >
> >     
>
> Read the document provided by the harden-doc package.  
>
> Read the document provided by the shorewall-doc package.
>
> Your own box cannot monitor itself (there was just a thread on this).
> If you want intrusion-detection, get an old box as a detector/monitor.
>
> Doug.
>
>
>   
Thanks for all the replies. I've installed the latest version of OSSEC. 
That was easy.
I used a "local" type. I'll have to learn a bit about hardening the system.

David