Apparently the Admin here didn't read my 2 threads properly so I would like to repost. I am a new Linux user, and the treatment of moving and deleting my questions has so far left me with a bad taste in my mouth but I am going to try again.

The question I posted here and maybe i wasn't clear, was what do you do for security? Is there an Internet Suite of sorts for Linux like ZoneAlarm for Windows? The question I also posted was, I did not choose a distribution if that matters, or if there is a distribution that is more safely built with more security features.

The question I posted in the distribution forum, was what distribution should a new user like myself choose, and the only feature I am worried about is security.

Related but completely different questions.

Thanks in advance.

Have a look at bastille.

http://www.bastille-linux.org/

It's the sysadmin that matters, not so much the distro. Apart from that, start with something that is built to make your goal easier; check out SeLinux:

http://www.nsa.gov/selinux/

http://selinux.sourceforge.net/

There's nothing like ZoneAlarm on Linux, nor is it really needed since apps don't run themselves covertly. I'm glad there isn't- ZoneAlarm totally locked up my machine once, (way) back in my Windoze days.

THANK YOU SO MUCH, great help. Like I said I was new so I havent a clue.

Take a look at any of the better known distributions that have large user bases. Add one of the firewall frontends/packages that get mentioned around here such as:

IpCop - http://www.ipcop.org
Smoothwall - http://www.smoothwall.org

My guess is if you are a new user looking at getting started and familiar with ZoneAlarm that Bastille and Selinux links aren't going to help you all that much to get started.

Both IPCop and Smoothwall are dedicated firewall distributions--all they do is act as firewalls. The OP is asking for a host-based intrusion prevention & detection. Instructions for using SELinux and Bastille are absolutely steps in the right direction. Telling them to wipe their OS and install a distro that is just a firewall and nothing else isn't very helpful.

No the OP isn't looking for intrusion detection and he has made it clear that he hasn't even chosen a distribution yet. So he's looking for a distribution and on top of it he mentions ZoneAlarm which is basically an entry level firewall. Telling someone who hasn't even chosen a distribution yet to look at bastille and Selinux is way off base So yes a good distro would be a good starting place and any good distro does much more then being a firewall. And to compound that by correcting me with answers that make it clear that you didn't even read the OP is way out of line. The original poster is a new linux user looking for a distro and an easy to use firewall. Sending a new user to look into bastille and selinux is complete overkill and likely to confuse them.

ZoneAlarm is not a network firewall, it's a host firewall. The equivilant for Linux would not be a hardware/stand-alone firewall machine, it would be a host-based firewall/IPS. If OP had asked "can I run my own firewall, like a Linksys?" then it would be appropriate to suggest IPCop/Smoothwall/Astaro/etc.

Edit: BTW javaroast you seem to be very confused about the difference between something like firestarter (iptables GUI) and a dedicated firewall distribution of Linux. Your post suggests "one of the firewall frontends/packages", but then you reference links to dedicated firewall distros. They aren't the same thing.

You are right there, because I write my own iptables scripts. You still seem to be confused about the OP goals though, and seem to want to take an unfriendly tone in your response. Nevertheless your are still sending him down the wrong path with bastille and I think you understand that.

Quoted from www.bastille-linux.org:
I think it is very appropriate.