Google has rolled out a service that alerts administrators when the sites on their networks contain links used in phishing attacks.. The Phishing URL notifications are being added to the Safe Browsing Alerts for Network Administrators, which Google rolled out in September. It sends email to admins of autonomous systems when malicious content is found on their systems. The link for this article located at The Register UK is no longer available. . Malware detection notifications strengthen Safe Browsing for IT managers, boosting their protection against malware threats.. Phishing URL Alerts, Network Protection, Admin Alerts, Safe Browsing Services. . LinuxSecurity.com Team
Practically all UNIX-based servers run a SSH server to allow remote administration across the Internet. From time to time, you might notice a large number of failed login attempts. Often, these are brute-force attacks against your SSH server In this hack, we. Change the default port Configure your SSH daemon to listen on a non-standard port. SSH servers have no trouble doing this. Just make sure you configure your firewalls to allow connections to the new port. For instance, to have your SSH daemon to accept connections on port 2222, edit the sshd_config file and modify the value of Port to 2222 and restart the SSH daemon. The link for this article located at Security-Hacks is no longer available. The link for this article located at Security-Hacks is no longer available. . Discover methods to secure your SSH server against brute-force assaults by modifying default port configurations and improving overall security measures.. SSH Security, Brute-Force Defense, Secure Remote Access, Server Hardening. . Bill Locke
Longtime Linux admins know that SSH, the "Secure Shell" protocol, is one of the most handy and potentially critical utilities in their software toolbox. Using multiple terminal emulators in an X Windows environment on a workstation, or via the Screen utility, a sysadmin for Linux or other Unix-based OS servers can manage several systems simultaneously with ease. Network administration shell or Perl scripts can make use of SSH to perform automated tasks on multiple servers at once simply and securely. Network shell utilities like RSH have been around longer than SSH, of course. But SSH adds strong encryption and data compression to its functionality and most modern SSH implementations also provide SFTP and SCP in the same convenient package, for secure file transfers over the network. . The link for this article located at Builder AU is no longer available. . Uncover effective methods for implementing OpenSSH in securing and managing Linux networks with efficiency and safety.. OpenSSH, Network Administration, Security Protocols, Automation. . LinuxSecurity.com Team
"Packet-Filtering Concepts," covers the background ideas and concepts behind a packet-filtering firewall. Each built-in rule chain has its own default policy. Each rule can apply not only to an individual chain, but also to a specific network interface, message protocol type (such as TCP, UDP, or ICMP), and service port or ICMP message type number. Individual acceptance, denial, and rejection rules are defined for the INPUT chain and the OUTPUT chain, as well as for the FORWARD chain, which you'll learn about at the end of this chapter and in Chapter 6, "Packet Forwarding." The next chapter pulls those ideas together to demonstrate how to build a simple, single-system, custom-designed firewall for your site. . The link for this article located at IT Business Net is no longer available. . Discover the principles of packet filtering and how to create a tailored firewall using iptables in a Linux environment.. iptables, packet filtering, firewall security, network management. . Benjamin D. Thomas
Would you like to have a Linux-based router capable of doing tasks such as stateful firewall inspection, virtual private networking, and traffic shaping, in addition to packet routing? Tired of having to do administration from the command line but want to be able to administer your box from a Windows-based client PC? MikroTik's RouterOS may what you need. You can boot RouterOS via diskette, CD, or over the network via PXE or Etherboot-enabled network interface card. You can find a full list of RouterOS technical specifications at the homepage. . I installed the 13MB ISO CD image RouterOS v2.9.23 on a old Compaq Proliant 400 (450MHz, 128MB RAM, 20GB hard disk). The software's minimum configuration is a 100MHz Pentium, 64MB RAM, and 64MB storage. When I booted the PC, I found a list of available packages for RouterOS, including the packages to use DHCP and PPTP servers, Web proxy, and much more. You can select individual packages, all available packages, or the minimum required packages. To see the full range of what RouterOS was capable of, I selected all. After a last warning about the data on the disk being erased, the software is installed. The link for this article located at Linux.com is no longer available. . I revived an old Compaq Proliant 400 by installing RouterOS v2.9.23, a rewarding journey of setup that deepened my networking knowledge and skills. RouterOS Installation, MikroTik Router Features, Linux Firewall Applications. . Brittany Day
Today almost every organization employs firewalls for enhanced security. Firewalls can be set up in such a way that Internet Control Message Protocol (ICMP) requests are blocked, which means that traditional pings do not work. Setting a firewall to block ICMP requests is based on the theory that if a would-be hacker cannot "see" the target, he may not attack the host. . This makes system and network administration more difficult. A failed ping is no longer a valid test -- the user may have enabled a firewall that is blocking the ping, but the host may still be up. Before a network administrator can accurately determine if a host is down, the user needs to turn off all firewall applications -- or at least turn off any rules blocking ICMP -- which is probably asking too much of the average user. If traditional ICMP-based pings are no longer reliable unless you know in advance that there is no firewall blocking ICMP echo requests, what other options exist? One option is an Address Resolution Protocol (ARP) based ping using the arping utility. To know why ARP pings are virtually guaranteed to work while ICMP pings may not, one should understand the importance of ARP in networking. ARP is used by hosts on a network to resolve IP addresses into Media Access Control (MAC) addresses, which can be interpreted as a network interface's unique serial number. Hosts on an Ethernet network use MAC addresses rather than IP addresses to communicate. The link for this article located at Linux.com is no longer available. . Explore the role of firewalls in the realm of system and network administration, particularly in their ability to restrict ping operations and provide alternatives to ARP.. Firewall Configuration, Network Administration, ICMP Alternatives. . Brittany Day
You're putting out system management fires, with five SSH sessions open on your desktop. The mail server needs a restart after that kernel patch, so you su to root and type reboot. Just as the connection closes, your brain catches up with your fingertips. The mail server's still up -- the system you rebooted was the firewall at the site 200 miles away. The firewall on which 50 users rely. The firewall that refuses to reboot without a cold reset. What do you do? . . .. You're putting out system management fires, with five SSH sessions open on your desktop. The mail server needs a restart after that kernel patch, so you su to root and type reboot. Just as the connection closes, your brain catches up with your fingertips. The mail server's still up -- the system you rebooted was the firewall at the site 200 miles away. The firewall on which 50 users rely. The firewall that refuses to reboot without a cold reset. What do you do? The link for this article located at Newsforge is no longer available. . You're putting out system management fires, with five SSH sessions open on your desktop. The mail se. you're, putting, system, management, fires, sessions, desktop. . Anthony Pell
The drastic drop in the cost of WLAN (wireless LAN) gear, along with the great extent to which 802.11b networking is now being built into notebook and handheld computers, virtually guarantees that wireless networking will secure a spot on your agenda . . . . The drastic drop in the cost of WLAN (wireless LAN) gear, along with the great extent to which 802.11b networking is now being built into notebook and handheld computers, virtually guarantees that wireless networking will secure a spot on your agenda whether you've placed it there or not. IT administrators would do well, then, to head off a wireless groundswell by taking the lead in deploying these networks and doing so with the sort of attention to security that end users often can't afford to pay. In the past year, there's been some encouraging movement toward more secure wireless networking standards. However, as security standards for these networks mature, so, too, will the tactics of those who would crack them. Wireless networks are fundamentally less secure than wired ones. Nearly every business, however, is already plugged in to perhaps the least secure network of all the Internet. By regarding WLANs with the same suspicion they do the Internet, companies can unwire themselves with relatively high confidence. The link for this article located at eWeek is no longer available. . As wireless LANs expand and standards advance, robust security is vital. Here are effective strategies to strengthen your wireless network security.. Wireless Security, WLAN Security, IT Administration, Network Management, Secure Networking. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.