I decided to dive head first into Linux awhile ago. I've been using Slackware for 4-5 months now, and I'm wondering what you guys think of my security...
Here is a list of all the protections I have against intrusion.
- Slackware 9.1 'swaret'd to current
- Very secure root password (10 characters including captials, lowers, numbers, and special characters)
- Very good firewall that uses iptables and only has 2 ports open, with spyware and PeerProtect IP blocking (
Jay's Iptables Firewall with
PeerProtect module)
- IDS system running as daemon checking every 2 hours (
Samhain)
-
Nessus scan reports nothing (portscan + vulnerability check)
- F-Prot with QT F-Prot interface (just in case
)
And I run this script i wrote every other day or so:
/usr/sbin/upsys:
Quote:
#!/bin/sh
ntpdate time.nist.gov
PeerProtect.pl
firewall-spy-update.pl
/etc/init.d/fw-jay restart
rkhunter -c --skip-keypress
swaret --update
swaret --upgrade -a --verbose
|
Does this sound pretty good? Anything else I should get?