Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Stay Ahead With Linux Security News

Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found 4 articles for you...
74

FreeBSD Firewall Setup Using IPFW for Enhanced Security

Have you heard about IPfirewall? One service that should be protected by a firewall is a web server. " You do not need to compile IPFW into the FreeBSD kernel unless you want NAT function enabled. " So it's not very hard to set up a FreeBSD firewall and with this articles user's should have a more secure operating system. . Ipfirewall (ipfw) is a FreeBSD IP packet filter and traffic accounting facility. IPFW is included in the basic FreeBSD install as a separate run time loadable module. The system will dynamically load the kernel module when the rc.conf statement firewall_enable= The link for this article located at cyberciti is no longer available. . Discover the steps to configure a FreeBSD firewall using PF for improved security and effective traffic control.. FreeBSD Firewall Setup, IPFW Configuration, Network Security Solution. . Bill Locke

Calendar%202 Jul 05, 2007 User Avatar Bill Locke Network Security
78

Comprehensive Overview of the Features and Enhancements in FreeBSD 5.4

One of the oldest Unix-like operating systems, FreeBSD, continues its advancement with the sixth release in the FreeBSD-5 series. Its developers have added nothing major, but have made many modifications, fixing a number of problems introduced in previous releases. FreeBSD 5.4 is the best release since 5.1, but it still may not be ready for prime time. . FreeBSD is a complete, multi-platform, Unix-like operating system developed by a large community of developers. As with GNU/Linux, you can make FreeBSD into a server or a desktop operating system. FreeBSD handles software management through two frameworks: the package database, which contains precompiled software packages, and the Ports tree, which contains metadata that allows you to automatically download and compile programs from source code. There are more than 12,000 programs in the Ports tree. Users can install packages easily from the command line, from an ncurses-based utility called sysinstall, or through "distribution sets" designed to install several packages together. The link for this article located at NewsForge is no longer available. . Explore FreeBSD 5.4, a powerful Unix-like OS known for its robust architecture, performance, and an active community that drives its progress and support. FreeBSD, Unix-like, software management, operating system review. . LinuxSecurity.com Team

Calendar%202 Jun 01, 2005 User Avatar LinuxSecurity.com Team Vendors/Products
78

FreeBSD Low Impact Worm Threatens Apache Web Server Security

A new virus that targets Web servers running open-source Apache software hasn't succeeded in making an impact. But it could have a sting in its tail. A program designed to infect vulnerable. . .. A new virus that targets Web servers running open-source Apache software hasn't succeeded in making an impact. But it could have a sting in its tail. A program designed to infect vulnerable computers running the open-source Apache Web server application apparently hasn't made it very far, security experts said on Monday. The Apache worm infects unpatched servers running the FreeBSD operating system, an open-source variant of Unix, and the Apache Web software. Despite initial reports that the worm had spread to some servers, consultants and antivirus experts haven't seen much activity. The link for this article located at ZDNet UK is no longer available. . A recent malware strain is focused on Nginx servers, yet specialists report it has largely failed to inflict notable harm or disruption.. apache virus, open source threats, web server security, freebsd malware. . LinuxSecurity.com Team

Calendar%202 Jul 02, 2002 User Avatar LinuxSecurity.com Team Vendors/Products
74

Setting Up FreeBSD Firewall With IPSec For Wireless Security

Though this article mainly deals with problems inherent to wireless networks, the principals apply equally well to wired networks. Also, though FreeBSD is the OS referenced, this may work equally well with other flavors of BSD . The version of FreeBSD . . . . Though this article mainly deals with problems inherent to wireless networks, the principals apply equally well to wired networks. Also, though FreeBSD is the OS referenced, this may work equally well with other flavors of BSD . The version of FreeBSD used was 4.5-release. I have the good fortune to have access to broadband Internet through an 802.11b wireless ethernet uplink. It is my good fortune because I live in a rural area where no other broadband services are available or are likely to be available any time soon. On the other hand, 802.11b wireless networks are inherently insecure. They can be made more secure using built in security features, such as the 802.11b Wireless Equivalency Protocol (WEP); but even these features are inadequate. Traffic broadcast over these networks is vulnerable to being intercepted by unscrupulous persons for their own nefarious purposes. The link for this article located at BSDToday is no longer available. . Establish a FreeBSD firewall with IPSec for secure wireless connections through these detailed steps to protect your network against vulnerabilities. FreeBSD Firewall, IPSec Configuration, Wireless Security, BSD Network Protection. . Anthony Pell

Calendar%202 Apr 25, 2002 User Avatar Anthony Pell Network Security
72

Building A Bootable FreeBSD CD For VPN Gateways And Firewalls

This document covers the basic steps I took in building a bootable CD containing a live FreeBSD filesystem with a couple of security features enabled and configured. With this CD, it is possible to transform a PC from a mediocre workstation into a VPN Gateway or firewall or both without touching the hard drive. . . .. This document covers the basic steps I took in building a bootable CD containing a live FreeBSD filesystem with a couple of security features enabled and configured. With this CD, it is possible to transform a PC from a mediocre workstation into a VPN Gateway or firewall or both without touching the hard drive. Why would you want to do this? Read on. I was working on building VPN Gateways at various remote locations across the globe. I had already convinced the powers that be in our company that FreeBSD was the way to go and that IPSEC was the standard we should settle on. Did I mention firewall? The challenge I had was that these gateways would be installed at small locations (4 to 10 person offices) without super duper IT professionals and that most of them were across the globe in Germany. The link for this article located at BSDToday is no longer available. . Learn how to create a bootable CD of FreeBSD for secure VPN gateways and firewalls with these essential, straightforward steps to follow. freebsd security, bootable firewall, vpn setup, network security, live filesystem. . Anthony Pell

Calendar%202 Mar 06, 2002 User Avatar Anthony Pell Firewalls
77

Build A Secure Network Farm With FreeBSD And OpenBSD Using NAT

This article discusses a network setup which might prove useful for people who like to put some extra effort into connecting their machines to the Internet. The goal is to build a secure client and server farm on a single IP address.. . .. This article discusses a network setup which might prove useful for people who like to put some extra effort into connecting their machines to the Internet. The goal is to build a secure client and server farm on a single IP address. Next to the clients and servers, the network contains two other components. The first one is a Network Address Translator (NAT), which makes it possible to connect more than one machine to the Internet using just one IP address. The second one is a Packet Filtering Bridge (PFB) that transparently filters IP traffic from and to the Internet. The link for this article located at daemonnews is no longer available. . This article discusses a network setup which might prove useful for people who like to put some extr. article, discusses, network, setup, which, might, prove, useful, people. . LinuxSecurity.com Team

Calendar%202 Sep 03, 2001 User Avatar LinuxSecurity.com Team Server Security
77

Integrating Anti-Virus Solutions For FreeBSD Network Security

Anti-virus software for FreeBSD is not a common thought to most FreeBSD administrators. However, if you're like me, most of my networks are Windows 2000/NT on the workstations, and FreeBSD on the servers. This means that the average user can download . . . . Anti-virus software for FreeBSD is not a common thought to most FreeBSD administrators. However, if you're like me, most of my networks are Windows 2000/NT on the workstations, and FreeBSD on the servers. This means that the average user can download all kinds of unhealthy files and contaminate the Windows workstations. I prefer to spend most of my time doing something other than running Norton Antivirus. The solution to this i thought would be anti-virus software that runs under FreeBSD as a centralized anti-virus scanner. Such software can be integrated into the FreeBSD server's Mail Transfer Agent to protect peoples' email accounts, and by using smbfs or Sharity, you can even do a full scan of the Windows computers on your network from remote. This keeps your Windows clients free from the resource crunch that can be caused by installed anti-virus software. The virus scanning software does not degrade the workstation's performance, nor can a knowledgeable user disable it. Concluding that Anti-virus software for FreeBSD is an effective way to protect a network and email, one must determine which Anti-virus software to use. There are not however many to choose from. In my original deployment I used UVSCAN from the FreeBSD ports tree, it uses the scanning engine and virus definitions from McAfee. The link for this article located at BSDatwork is no longer available. . Top-tier antivirus solutions for FreeBSD users to ensure robust email and network safety from potential cyber threats.. FreeBSD Anti-Virus,Centrally Managed Scanning,Email Security Solutions. . LinuxSecurity.com Team

Calendar%202 Aug 28, 2001 User Avatar LinuxSecurity.com Team Server Security
77

Trusted Operating Systems: A Higher Security Standard For FreeBSD

While most Freenix admins are used to the normal concerns of Unix security, there is a higher world of security that has never been touched by Freenixes. The realm of trusted operating systems, long the province only of military and other ultra-secure environments, represents a security level beyond that of all but a few commercial operating systems. . . .. While most Freenix admins are used to the normal concerns of Unix security, there is a higher world of security that has never been touched by Freenixes. The realm of trusted operating systems, long the province only of military and other ultra-secure environments, represents a security level beyond that of all but a few commercial operating systems. Trusted operating systems are not precisely defined, but generally include a number of security enhancements not usually found in Unix. Access control lists (ACLs) allow a file or directorys permissions to be more fine-grained than just owner, group, all. Rather than having just a single root user, limited administration capability can be broken up among a number of administrative accounts ensuring that even an administrator account compromise is non-fatal. The link for this article located at ISPWorld.com is no longer available. . While most Freenix admins are used to the normal concerns of Unix security, there is a higher world . while, freenix, admins, normal, concerns, security, there, higher, world. . LinuxSecurity.com Team

Calendar%202 Oct 03, 2000 User Avatar LinuxSecurity.com Team Server Security
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200