How to: Secure My Network in Linux - Page 4

Find the HOWTO or step-by-step guide that you need right here.

Discover How To Secure My Network HOWTOs

How to add two-factor authentication to SSH

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

SSH offers a highly secure channel for remote administration of servers. However, if you face an audit for regulatory or business requirements, such as Visa/Mastercard PCI, you need to be aware of some potential authentication related short-comings that may cause headaches in an audit. For example: * There is no way to control which users have public key authorization * There is no way to enforce passphrase complexity (or even be sure that one is being used) * There is no way to expire a public key

Inverse Mapping Via Scapy [ Packet Crafting With Padding]

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This method is quiet useful for inverse mapping the targets for host alive checks.The point will be proved through the scapy via packet crafting.In this we will discuss about inverse mapping with or without padding to compare the results.We know with some tools the response like host unreachable or no response with tool like hping.Lets play with scapy a bit:

Opensource Bandwidth,Network and Servers Monitoring tools with Tutorials

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This is very good tutorials for bandwidth monitoring,network monitoring and servers monitoring tools with clear step by step installation guides this includes Nagios, MRTG, RTG, Netmrg, Darkstat, monit, munin, mon, oreon, Saidar, Cacti, Bigsister, ibmonitor, zabbix. This resource is very useful for Users and Administrators to monitor their networks, bandwidth, and servers.

How Did That Happen? Linux Security Exploits

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The purpose of this book is to provide ways to make it difficult to break in initially as well as to detect the evidence of the attack quickly. But you must not use this book, or any other books, as your only resource of information for this purpose.

802.1X Port-Based Authentication HOWTO

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This document describes the software and procedures to set up and use IEEE 802.1X Port-Based Network Access Control using Xsupplicant as Supplicant with FreeRADIUS as a back-end Authentication Server.

IptablesWeb

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

IptablesWeb is a free software (under GPL licence): it makes possible to inspect iptables logs by using a web browser. It's a plugin-based multilanguage software written in PHP using 3 free php classes.

Denial of Service Attacks

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This document provides a general overview of attacks in which the primary goal of the attack is to deny the victim(s) access to a particular resource.

OpenVPN

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

OpenVPN is a full-featured SSL VPN solution which can accomodate a wide range of configurations, including road warrior access, home/office/campus telecommuting, WiFi security, secure branch office linking, and enterprise-scale remote access solution