Bastion Document

[miracle]

Could someone point me to the latest bastion document. I can't seem find anything but a very one.
Thanks

[Geoff Wild]

In "Managing Systems and Workgroups", under Table Of Contents "Administering a System: Managing System Security " s a section called "HP-UX Bastille "

Also in this doc:

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/5990-8172/5990-8172_top.html&con=/hpux/onlinedocs/5990-8172/00/01/112-con.html&toc=/hpux/onlinedocs/5990-8172/00/01/112-toc.html&searchterms=bastille&queryid=20041022-170431

And here:

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6849AA

Rgds...Geoff

[miracle]

That document only points to 'bastille' not bastion. I remember seeing an updated document on a HP web page that was more up to date than the original Kevin Steves document. Unfortunately that link is no longer.

[Sridhar Bhaskarla]

Hi,

Try this site. This is for 11.0 system.

http://www.securitydocs.com/Operating_System/HP-UX

-Sri

[Geoff Wild]

As far as I know bastile = bastion...

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=110518

http://secinf.net/unix_security/Building_a_Bastion_Host_Using_HPUX_11.html

http://downloads.securityfocus.com/library/bastion11.html

Rgds...Geoff

[Tom Ward_1]

Hello,

The only one I can find on ITRC is last updated 29 Aug 2002. It's document ID USECKBAN00000800.

You'll find it under Maintenance and Support for HP products, search technical knowledge base, change the drop down from keyword to Doc ID and put the above ID in the search field.

I beleive that's a current as it gets.

Regards,
Tom

[Robert Fritz]

While it's certainly true that Bastille incorporated the supportable elements of the Bastion host whitepaper, it left out some of more problematic elements that made the system hard to use and support, and hard in some cases to even predict behavior. Bastille then "instead" does some more global configuration whose results are more predictable, like setting up an IPfilter "block all" firewall, with exceptions specified by the user.

The result is that a system that has been configured with Bastille is still supported.

The Bastion host whitepaper was updated to 11.00 at some point, but I'd talked to the author, and he's not keeping it up to date, nor hosting a site anymore. I believe there are copies one can find on Google, but using the Bastion host whitepaper won't result in a supported system, so tread carefully.