Good, Free IDS anyone? - Page 2
Page 2 of 2 FirstFirst 12
Results 11 to 15 of 15

Thread: Good, Free IDS anyone?

  1. #11
    Junior Member
    Join Date
    Aug 2001
    Posts
    4

    OpenBSD

    Mainly,

    there is (depending on whose word you take) only one remote hole in the default install in the last six years. No other OS has under gone the line by line code audit that Open has, Theo D. and the others on the project do great work and have amazing results. If you want it free and you want it safe, OpenBSD is the answer. If you want to pay and you wan tit safe, STOP from WangFed is the answer, but I don't think those are sold to just anyone.
    visit openbsd.org to get a better idea....



    loadc

  2. #12
    Member
    Join Date
    Jul 2001
    Posts
    62
    For network intrusion detection I would recommend snort www.snort.org but for host based intrusion detection tripwire is my recommendation. That should come loaded on your linux box but make sure that you take the time to configure it and run it. It will let you know what files have been added/modified/deleted since the database was created. This will come in helpful if you are successfully hacked and need to know what was done.

    dAggressor

    Oh yeah I almost forgot, I haven't set this one up yet, but am trying to do it in my spare (yeah right) time. The site is located at http://www.lids.org/ it seems to be pretty good, but like I said I haven't used it yet.
    dAggressor

    It\'s a long life, until you die

  3. #13
    Junior Member
    Join Date
    Aug 2001
    Posts
    4

    host based

    Well,

    for host based, tripwire is a good start, but there are some safeguards I'd put in to make sure it's set, like a non-rewriteable media for the checksums, etc. Otherwise, for host based, I'd look at some of the Network police blotter articles in login; by Ranum. You can find his site at:
    pubweb.nfr.com/~mjr, and follow the "conference speaker" link.


    thanks,


    loadc

  4. #14
    Junior Member
    Join Date
    Jul 2002
    Posts
    7
    I know good scanner, and EXTREMELY fast !!!
    Angry IP Scanner 2.05
    Someone gave it to me so I'm not sure where to find it, I'll search it if you whish
    Living in my world is like falling from a building : \"till now I\'m still alive, till now I\'m still alive, till now I\'m still alive, till now I\'m still alive, till now I\'m still alive, till now I\'m still al.... \"

  5. #15
    Senior Member
    Join Date
    Oct 2001
    Posts
    186
    Maybe portsentry would be a good choice for ids on a linux server.
    Ben Franklin said it best. \"They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.\"

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •