Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Have you heard about IPfirewall? One service that should be protected by a firewall is a web server. " You do not need to compile IPFW into the FreeBSD kernel unless you want NAT function enabled. " So it's not very hard to set up a FreeBSD firewall and with this articles user's should have a more secure operating system. . Ipfirewall (ipfw) is a FreeBSD IP packet filter and traffic accounting facility. IPFW is included in the basic FreeBSD install as a separate run time loadable module. The system will dynamically load the kernel module when the rc.conf statement firewall_enable= The link for this article located at cyberciti is no longer available. . Discover the steps to configure a FreeBSD firewall using PF for improved security and effective traffic control.. FreeBSD Firewall Setup, IPFW Configuration, Network Security Solution. . Bill Locke
One of the oldest Unix-like operating systems, FreeBSD, continues its advancement with the sixth release in the FreeBSD-5 series. Its developers have added nothing major, but have made many modifications, fixing a number of problems introduced in previous releases. FreeBSD 5.4 is the best release since 5.1, but it still may not be ready for prime time. . FreeBSD is a complete, multi-platform, Unix-like operating system developed by a large community of developers. As with GNU/Linux, you can make FreeBSD into a server or a desktop operating system. FreeBSD handles software management through two frameworks: the package database, which contains precompiled software packages, and the Ports tree, which contains metadata that allows you to automatically download and compile programs from source code. There are more than 12,000 programs in the Ports tree. Users can install packages easily from the command line, from an ncurses-based utility called sysinstall, or through "distribution sets" designed to install several packages together. The link for this article located at NewsForge is no longer available. . Explore FreeBSD 5.4, a powerful Unix-like OS known for its robust architecture, performance, and an active community that drives its progress and support. FreeBSD, Unix-like, software management, operating system review. . LinuxSecurity.com Team
A new virus that targets Web servers running open-source Apache software hasn't succeeded in making an impact. But it could have a sting in its tail. A program designed to infect vulnerable. . .. A new virus that targets Web servers running open-source Apache software hasn't succeeded in making an impact. But it could have a sting in its tail. A program designed to infect vulnerable computers running the open-source Apache Web server application apparently hasn't made it very far, security experts said on Monday. The Apache worm infects unpatched servers running the FreeBSD operating system, an open-source variant of Unix, and the Apache Web software. Despite initial reports that the worm had spread to some servers, consultants and antivirus experts haven't seen much activity. The link for this article located at ZDNet UK is no longer available. . A recent malware strain is focused on Nginx servers, yet specialists report it has largely failed to inflict notable harm or disruption.. apache virus, open source threats, web server security, freebsd malware. . LinuxSecurity.com Team
Though this article mainly deals with problems inherent to wireless networks, the principals apply equally well to wired networks. Also, though FreeBSD is the OS referenced, this may work equally well with other flavors of BSD . The version of FreeBSD . . . . Though this article mainly deals with problems inherent to wireless networks, the principals apply equally well to wired networks. Also, though FreeBSD is the OS referenced, this may work equally well with other flavors of BSD . The version of FreeBSD used was 4.5-release. I have the good fortune to have access to broadband Internet through an 802.11b wireless ethernet uplink. It is my good fortune because I live in a rural area where no other broadband services are available or are likely to be available any time soon. On the other hand, 802.11b wireless networks are inherently insecure. They can be made more secure using built in security features, such as the 802.11b Wireless Equivalency Protocol (WEP); but even these features are inadequate. Traffic broadcast over these networks is vulnerable to being intercepted by unscrupulous persons for their own nefarious purposes. The link for this article located at BSDToday is no longer available. . Establish a FreeBSD firewall with IPSec for secure wireless connections through these detailed steps to protect your network against vulnerabilities. FreeBSD Firewall, IPSec Configuration, Wireless Security, BSD Network Protection. . Anthony Pell
This document covers the basic steps I took in building a bootable CD containing a live FreeBSD filesystem with a couple of security features enabled and configured. With this CD, it is possible to transform a PC from a mediocre workstation into a VPN Gateway or firewall or both without touching the hard drive. . . .. This document covers the basic steps I took in building a bootable CD containing a live FreeBSD filesystem with a couple of security features enabled and configured. With this CD, it is possible to transform a PC from a mediocre workstation into a VPN Gateway or firewall or both without touching the hard drive. Why would you want to do this? Read on. I was working on building VPN Gateways at various remote locations across the globe. I had already convinced the powers that be in our company that FreeBSD was the way to go and that IPSEC was the standard we should settle on. Did I mention firewall? The challenge I had was that these gateways would be installed at small locations (4 to 10 person offices) without super duper IT professionals and that most of them were across the globe in Germany. The link for this article located at BSDToday is no longer available. . Learn how to create a bootable CD of FreeBSD for secure VPN gateways and firewalls with these essential, straightforward steps to follow. freebsd security, bootable firewall, vpn setup, network security, live filesystem. . Anthony Pell
This article discusses a network setup which might prove useful for people who like to put some extra effort into connecting their machines to the Internet. The goal is to build a secure client and server farm on a single IP address.. . .. This article discusses a network setup which might prove useful for people who like to put some extra effort into connecting their machines to the Internet. The goal is to build a secure client and server farm on a single IP address. Next to the clients and servers, the network contains two other components. The first one is a Network Address Translator (NAT), which makes it possible to connect more than one machine to the Internet using just one IP address. The second one is a Packet Filtering Bridge (PFB) that transparently filters IP traffic from and to the Internet. The link for this article located at daemonnews is no longer available. . This article discusses a network setup which might prove useful for people who like to put some extr. article, discusses, network, setup, which, might, prove, useful, people. . LinuxSecurity.com Team
Anti-virus software for FreeBSD is not a common thought to most FreeBSD administrators. However, if you're like me, most of my networks are Windows 2000/NT on the workstations, and FreeBSD on the servers. This means that the average user can download . . . . Anti-virus software for FreeBSD is not a common thought to most FreeBSD administrators. However, if you're like me, most of my networks are Windows 2000/NT on the workstations, and FreeBSD on the servers. This means that the average user can download all kinds of unhealthy files and contaminate the Windows workstations. I prefer to spend most of my time doing something other than running Norton Antivirus. The solution to this i thought would be anti-virus software that runs under FreeBSD as a centralized anti-virus scanner. Such software can be integrated into the FreeBSD server's Mail Transfer Agent to protect peoples' email accounts, and by using smbfs or Sharity, you can even do a full scan of the Windows computers on your network from remote. This keeps your Windows clients free from the resource crunch that can be caused by installed anti-virus software. The virus scanning software does not degrade the workstation's performance, nor can a knowledgeable user disable it. Concluding that Anti-virus software for FreeBSD is an effective way to protect a network and email, one must determine which Anti-virus software to use. There are not however many to choose from. In my original deployment I used UVSCAN from the FreeBSD ports tree, it uses the scanning engine and virus definitions from McAfee. The link for this article located at BSDatwork is no longer available. . Top-tier antivirus solutions for FreeBSD users to ensure robust email and network safety from potential cyber threats.. FreeBSD Anti-Virus,Centrally Managed Scanning,Email Security Solutions. . LinuxSecurity.com Team
While most Freenix admins are used to the normal concerns of Unix security, there is a higher world of security that has never been touched by Freenixes. The realm of trusted operating systems, long the province only of military and other ultra-secure environments, represents a security level beyond that of all but a few commercial operating systems. . . .. While most Freenix admins are used to the normal concerns of Unix security, there is a higher world of security that has never been touched by Freenixes. The realm of trusted operating systems, long the province only of military and other ultra-secure environments, represents a security level beyond that of all but a few commercial operating systems. Trusted operating systems are not precisely defined, but generally include a number of security enhancements not usually found in Unix. Access control lists (ACLs) allow a file or directorys permissions to be more fine-grained than just owner, group, all. Rather than having just a single root user, limited administration capability can be broken up among a number of administrative accounts ensuring that even an administrator account compromise is non-fatal. The link for this article located at ISPWorld.com is no longer available. . While most Freenix admins are used to the normal concerns of Unix security, there is a higher world . while, freenix, admins, normal, concerns, security, there, higher, world. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.