On Tue, Aug 21, 2001 at 01:48:11PM -0700, Brandon High wrote: | On Tue, Aug 21, 2001 at 03:58:57PM -0400, Han Yoo wrote: | > | > Basically, I have the 2.2.19 kernel. | > Is any of the programs that you mentined easy enough to be utilized by a | > Debian novice without going into the heavy-duty configuration? | | 2.2.x uses IP-chains for its packet filter. This will allow you to block | certain ports and provide IP masquerade functions, but won't give you the | alerting provided by ZoneAlarm. You'll need to install an IDS (intrusion | detection system) as well.
ipchains and iptables have a logging facility so you can log packets if you want to. It is still up to you to actually read the logs though. | I can't recommend one offhand, but you may want to ask on debian-security. tripwire is one I've heard mentioned here before. -D