topic Re: linux ips in Operating System - Linux

linux ips

Marco_113 — Thu, 07 Oct 2004 04:30:13 GMT

Hi all,
anyone knows if ther's any IPS (intrusion prevention system) tool for linux system??
Thanks

Re: linux ips

xyko_1 — Thu, 07 Oct 2004 07:47:52 GMT

Hi,

you have a lot of IDS (intrusion detection systems) in Linux.

Please try http://www.snort.org/

Preventios seem to me as firewall and about that you have to learn about iptables and all the implementations thar exist around that.

Try http://www.linuxsecurity.com/

Regards,
Xyko

Re: linux ips

HGN — Thu, 07 Oct 2004 08:45:02 GMT

HI

Here are a few details which maybe useful for you

http://www.lids.org/
http://www.linuxsecurity.com/articles/intrusion_detection_article-9985.html
http://freshmeat.net/projects/lids/

The third URL you can check I think you can download from there . There are also quie a few other products.

Hope this helps

Rgds

Gopi

Re: linux ips

Rick Garland — Thu, 07 Oct 2004 09:02:35 GMT

Other tools of interest can be useful to find those holes. Example, nmap can be run and the output will tell you what is open.

Intrusion Detection works best by not only detecting the leaks but by knowing what leaks are available to take advantage of.

Re: linux ips

Johannes Krackowizer_1 — Fri, 08 Oct 2004 02:48:25 GMT

hi Marco,

i don't know if this helps you, but i think it's very interresting because this tool monitors what will change on the machine it's very usefull to determine what was changed by anyone how try to hack your server.

http://www.tripwire.org/