Re: IDS

2004-08-10 Thread Tinus Nijmeijers
On Tue, 2004-08-10 at 23:07, Dan MacNeil wrote: > On Tue, 10 Aug 2004, Tinus Nijmeijers wrote: > > > On Fri, 2004-08-06 at 19:57, Dan MacNeil wrote: > > > > I also want to use something like tripwire to set up file intregity. > > > > > > apt-cache search tripwire > > > apt-cache show aide > >

Re: IDS

2004-08-10 Thread Dan MacNeil
On Tue, 10 Aug 2004, Tinus Nijmeijers wrote: > On Fri, 2004-08-06 at 19:57, Dan MacNeil wrote: > > > I also want to use something like tripwire to set up file intregity. > > > > apt-cache search tripwire > > apt-cache show aide > > > I know, and, as I mentioned, they both seem OLD. I be

Re: IDS

2004-08-10 Thread Chris Wagner
At 06:55 PM 8/9/04 -0600, Nate Duehr wrote: >Tripwire bills itself as a defensive tool, but if tripwire alerts are >going off, it's FAR too late. Better to keep untrusted people out in >the first place. Most people spend the majority of their security >efforts on that first. Yes. Tripwire et

Re: IDS

2004-08-09 Thread Nate Duehr
On Aug 9, 2004, at 4:21 PM, Tinus Nijmeijers wrote: can I assume that no-one here uses a file-integrity checker? Saying that "no one here" uses tools like that is probably a bit reactionary, but I'd say most people here do know that such tools have a very limited application... to tell you it's t

Re: IDS

2004-08-09 Thread Tinus Nijmeijers
On Fri, 2004-08-06 at 19:57, Dan MacNeil wrote: > > I also want to use something like tripwire to set up file intregity. > > apt-cache search tripwire > apt-cache show aide > I know, and, as I mentioned, they both seem OLD. > On Fri, 6 Aug 2004, Tinus Nijmeijers wrote: > > > I'm loo

Re: IDS

2004-08-06 Thread Chris Wagner
The only problem with tripwire is that u have to set up the snapshot file on write protected media to have true security. If somebody hacks ur box they can just reupdate tripwire themselves and u'll be none the wiser. This can be an administrative hassle to update the snapshot and move it to some

Re: IDS

2004-08-06 Thread Dan MacNeil
> I also want to use something like tripwire to set up file intregity. apt-cache search tripwire apt-cache show aide On Fri, 6 Aug 2004, Tinus Nijmeijers wrote: > I'm looking at securing a new server. > > i'll be using iptables to restrict acces and i want to install SNORT to >