Security Tools – chkrootkit

What is chkrootkit? It’s a program to check your system for signs of a rootkit. And what is rootkit? Rootkit is a program or combination of programs which is used for someone to create a back-door into your system and act as a root privileges. There are 5 output messages for chkrootkit. INFECTED not infected [...]

Read Full Post »

NmapFE – nmap front end

What is NmapFE? It is a graphical front end for nmap security scanner. Because the limited help available from the nmapfe help menu, better you read from nmap manual page first. NmapFE was originally written by Zach Smith (key@aye.net). It’s now maintained by Fyodor (fyodor@insecure.org). The newest version of nmap can be obtained from www.insecure.org/nmap/. [...]

Read Full Post »

Setup firewall with iptables in Ubuntu (Part 4)

Creating and installing firewall scripts I assume that you’ve already familiar with runlevels process. If you still don’t know about runlevels, you can go my tutorial about ‘Runlevels in Ubuntu‘ first. If you are ready then let’s start a practice with creating our iptables script.   There 4 steps for you to follow. Create your [...]

Read Full Post »

Setup firewall with iptables in Ubuntu (Part 3)

Masquerading (Many to One NAT) NAT = Network Address Translation Mean that all traffics from your networks behind the firewall will be appear on the internet as if as it is only originated form a single ip address. The masquerade IP address always defaults to the IP address of the firewall’s main interface. It will [...]

Read Full Post »

Setup firewall with iptables in Ubuntu (Part 2)

Samples of iptables’ rules.   # Accept TCP packets for routing from eth0 (any IP) and destined for IP 192.168.1.58 # that is reachable via eth1. # -A : Append rule to end of a chain # FORWARD : Filters packets to server accessible by another NIC on the firewall # -s : Source IP [...]

Read Full Post »

Setup firewall with IPTABLES in Ubuntu (part 1)

Playing with iptables in Ubuntu Terminal I’ve been trying to figure out how to explain the iptables in a easy way. I’ve read so many articles about iptables but none of it mention to run iptables chain rules through command lines in Ubuntu console terminal. I know the reason, because chain rules will be temporary. [...]

Read Full Post »

Need proctection for your Ubuntu?

There are a lot of choices you can use to protect your system. Just use standard installation command to install it. For example, you if want to install Lokkit, just use apt-get install command. Make sure you have the ‘universe‘ componet enabled in your repository. taufanlubis@zyrex:~$ sudo apt-get install lokkit Security tools for Ubuntu: shorewall [...]

Read Full Post »

Basic Operating System Defense in Ubuntu

Linux Operating System has a number of built-in protection mechanism. You can activate it by modifying the system kernel parameters in the /proc filesystem via the /etc/sysctl.conf file. taufanlubis@zyrex:/etc$ sudo gedit sysctl.conf Just, remove the ‘#’ to activate the parameters   Content of sysctl.conf: # # /etc/sysctl.conf – Configuration file for setting system variables # [...]

Read Full Post »