BUILDING SECURE SERVERS WITH LINUX
WHY ALL THE ANALOGIES TO "PHYSICAL" CRIME? SCRIPT KIDDIES CHAPTER 2 DESIGNING PERIMETER NETWORKS: 2 1 SOME TERMINOLOGY CHAPTER 3 HARDENING LINUX: 3 1 OS HARDENING PRINCIPLES DIVISION OF LABOR BETWEEN SERVERS SHOULD I ALWAYS UPDATE? WHY NOT TRUST RED HAT? CHECKING PACKAGE VERSIONS DELEGATING ROOT S AUTHORITY IPTABLES FOR THE LAZY WHERE SHOULD I INSTALL PORT SCANNERS AND SECURITY SCANNERS? CHAPTER 4 SECURE REMOTE ADMINISTRATION: 4 1 WHY IT S TIME TO RETIRE CLEAR-TEXT ADMIN TOOLS CRYPTOGRAPHIC TERMS SSH AND PERIMETER SECURITY WHAT ARE PORTS AND WHY FORWARD THEM? CHAPTER 5 TUNNELING: 5 1 STUNNEL AND OPENSSL: CONCEPTS WHAT ARE "TCPWRAPPERS-STYLE ACCESS CONTROLS," AND HOW DO YOU USE THEM? CHAPTER 6 SECURING DOMAIN NAME SERVICES (DNS): 6 1 DNS BASICS CHAPTER 7 SECURING INTERNET EMAIL: 7 1 BACKGROUND: MTA AND SMTP SECURITY A DISCLAIMER SENDMAIL VERSIONS ON DEBIAN WHERE DOES ACCESS FIT IN TO SMTP AUTH AND STARTTLS? CHAPTER 8 SECURING WEB SERVICES: 8 1 WEB SERVER SECURITY CHAPTER 9 SECURING FILE SERVICES: 9 1 FTP SECURITY A BRIEF WORD ABOUT FTP SERVER PACKAGES WHICH COMMANDS CAN PROFTPD LIMIT? WHAT ABOUT NFS AND SAMBA? WHAT ABOUT RECURSION? CHAPTER 10 SYSTEM LOG MANAGEMENT AND MONITORING: WHAT ABOUT KLOGD? STEALTH LOGGING JUST WHAT DO WE MEAN BY "ROTATE?" SHOULD WE LET PERL DOWNLOAD AND INSTALL ITS OWN MODULES? CHAPTER 11 SIMPLE INTRUSION DETECTION TECHNIQUES: 11 1 PRINCIPLES OF INTRUSION DETECTION SYSTEMS WHAT ABOUT FALSE NEGATIVES? LONG-FORM COMMANDS VERSUS SHORT-FORM WHICH FILES AND DIRECTORIES SHOULD I MONITOR? A TIP FROM RON FORRESTER IDS, FORENSIC TOOL, OR BOTH? WHAT ARE ADVANCED FEATURES? WHERE SHOULD NIDS PROBES GO? APPENDIX A TWO COMPLETE IPTABLES STARTUP SCRIPTS