Linux Tutorials on the topic “security”
-
How To Add WiKID Two-Factor Authentication To The Astaro Security Gateway
Author: nowen • Tags: security • Comments: 0How To Add WiKID Two-Factor Authentication To The Astaro Security Gateway Astaro is a very popular Linux-based "all-in-one" security appliance offering spam filtering, malware protection, firewall, VPN, etc. The WiKID Strong Authentication Server is a dual-source two-factor authentication system. PINs are encrypted on a software token and sent to the WiKID server. If the PIN is correct, the encryption valid and the account active, a one-time password is generated, encrypted and returned to the user's token where it is decrypted and presented for use with a network-based services. This document will show how to add WiKID two-factor authentication to the Astaro Security Gateway version 7 using Radius.
-
Protect Your Files With TrueCrypt 5.1a On Debian Etch (GNOME)
Author: o.meyer • Tags: debian, desktop, security • Comments: 7Protect Your Files With TrueCrypt 5.1a On Debian Etch (GNOME) This document describes how to set up TrueCrypt 5.1a on Debian Etch (GNOME). Taken from the TrueCrypt page: "TrueCrypt is a software system for establishing and maintaining an on-the-fly-encrypted volume (data storage device). On-the-fly encryption means that data are automatically encrypted or decrypted right before they are loaded or saved, without any user intervention. No data stored on an encrypted volume can be read (decrypted) without using the correct password/keyfile(s) or correct encryption keys. Entire file system is encrypted (e.g., file names, folder names, contents of every file, free space, meta data, etc)."
-
The Perfect Linux Firewall Part I -- IPCop
Author: evolutionaryit • Tags: security • Comments: 50The Perfect Linux Firewall Part I -- IPCop ::What is IPCopThe IPCop project is a GNU/Linux GPL project that offers an exceptional feature packed stand alone firewall to the internet community. Its comprehensive web interface, well documented administration guides, and its involved and helpful user/administrative mailing lists make users of any technical capacity feel at home. It goes far beyond a simple ipchains / netfilter implementation available in most Linux distributions and even the firewall feature sets of commercial competitors. Firewalls have had to undergo a tremendous metamorphosis as a result of evolving threats. IPCop is exemplary in offering such a range of default features and even further a large set of optional plug-ins which can provide further functionality. Some of IPCops impressive base install features include: secure https web administration GUI, DHCP Server, Proxying (Squid), DNS Proxying, Dynamic DNS, Time Server, Traffic Shaping, Traffic/Systems/Firewall/IDS graphing, Intrusion Detection (Snort), ISDN/ADSL device support and VPN (IPSec/PPTP) functionality. As if these base features were not an astounding enough there are dozens of add-ons which can further expand the functionality of your IPCop from Web Filtering to Anti virus scanning.
-
-
How To Install mod_security/mod_security2 On SuSE Linux Enterprise Server 10 (SLES10)
Author: Elconas • Tags: apache, security, suse • Comments: 0How To Install mod_security/mod_security2 On SuSE Linux Enterprise Server 10 (SLES10) The Apache module mod_security is a very powerful security module. Combined with predefined rules, you can close many security wholes on your server, opened by bad written php or perl apps. Unfortunately mod_security is not part of the SLES10 distribution. To install mod_security to have to install some 3rd party modules. This guide helps you to install mod_security on SLES10 in a reproducable way (RPM). It also helps you to remove the module, by building RPM packages you can easily uninstall.
-
Setting Up An Iptables Firewall On Ubuntu With Firehol
Author: PhilBieber • Tags: security, ubuntu • Comments: 1Setting Up An Iptables Firewall On Ubuntu With Firehol Everybody, who tried to configure an iptables firewall knows, that it can be quite a PITA. firehol is a tool that helps us to configure iptables according to our needs. In this How-To, I will discribe how to set up an iptables firewal using firehol that only allows SSH and ICMP (the protocol responsible for ping and traceroute). Also, only incoming connections are filtered, and outgoing connections are allowed.
-
Protect Your Files With TrueCrypt 5 On Fedora 8
Author: o.meyer • Tags: desktop, fedora, security • Comments: 3Protect Your Files With TrueCrypt 5 On Fedora 8 This document describes how to set up TrueCrypt 5 on Fedora 8. Taken from the TrueCrypt page: "TrueCrypt is a software system for establishing and maintaining an on-the-fly-encrypted volume (data storage device). On-the-fly encryption means that data are automatically encrypted or decrypted right before they are loaded or saved, without any user intervention. No data stored on an encrypted volume can be read (decrypted) without using the correct password/keyfile(s) or correct encryption keys. Entire file system is encrypted (e.g., file names, folder names, contents of every file, free space, meta data, etc)."
-
How to add two-factor authentication to Google Apps for your Domain using open source software
Author: nowen • Tags: centos, email, fedora, security • Comments: 2How to add two-factor authentication to Google Apps for your Domain using open source software Everybody loves GMail. With Google Apps for you Domain, you can use GMail with your own domain, allowing organizations to outsource their email - and the requisite anti-spam filtering to Google. Webmail is very convenient, but for frequent travellers and those who use public wifi, it can be quite dangerous. Logging in from a kiosk or shared computer is a sure way to get your username and password stolen by a keystroke logger. Using a public WiFi system can lead to a man-in-the-middle attack. In this document we will take advantage of two open source projects to add two-factor authentication to Google Apps. The first is Gheimdall, a a TurboGears project for Google Apps SSO service. Gheimdall supports PAM and LDAP authentication natively. It also includes sample code to add new authentication methods, which made it very easy to add two-factor authentication from WiKID. WiKID is a dual-source two-factor authentication solution that uses public key cryptography to strongly authenticate users.
-
How To Set Up SSH With Public-Key Authentication On Debian Etch
Author: Daneey • Tags: security, debian • Comments: 8How To Set Up SSH With Public-Key Authentication On Debian Etch This mini-howto explains how to set up an SSH server on Debian Etch with public-key authorization (and optionally with disabled password logins). SSH is a great tool to control Linux-based computers remotely. It's safe and secure.
-
How to Secure VSFTP with SSL and Two-factor Authentication
Author: nowen • Tags: ftp, security • Comments: 0How to Secure VSFTP with SSL and Two-factor AuthenticationRecently, there was a report from Finjan that administrator credentials for over 9,000 FTP servers were for sale. Then, F-Secure noted an increase in FTP-based attacks. Many companies and organization still use FTP extensively. If you're running an FTP server and you think you're admin credentials might be one of those 9,000, you should consider implementing two-factor authentication for SSH, which will then also give you two-factor authentication for SCP. This document shows how to configure the popular and secure VSFTP to use SSL for encryption and WiKID for two-factor authentication for your FTP users.
-
Virus Protection With avast! Linux Home Edition On Ubuntu Gutsy Gibbon
Author: Falko Timme • Tags: security, ubuntu, desktop • Comments: 13Virus Protection With avast! Linux Home Edition On Ubuntu Gutsy Gibbon This tutorial shows how you can install and use avast! Linux Home Edition on an Ubuntu Gutsy Gibbon desktop. Although there aren't many Linux viruses out there, this can be useful if you often exchange files with Windows users - it can help you to not pass on any Windows viruses (that don't do any harm to Linux systems) to Windows users. avast! Linux Home Edition is free for private and non-commercial use.
