what can i use to test my server for flaws

[flacko21]

i not really in security with linux so i wanted to see if someone can help me and give me some info on some software and a lil demo what it does to test my server for holes

[technossomy]

Here's a good resource:
http://www.tldp.org/HOWTO/Security-HOWTO/

Also check with your distribution how to keep your packages up to date. That would be "yum update" in Fedora/RedHat based distributions.

Also check some threads in the Linux Security section for things some gurus don't even know about.

Hope this helps


Tech

[pavlo_7]

i not really in security with linux so i wanted to see if someone can help me and give me some info on some software and a lil demo what it does to test my server for holes

technossomy provided a good source which would help you understand the concepts of Linux security. There is alot of software available out there that you can use to check your system(s) for vulnerabilities. There are also Linux distributions built specifically for this purpose, such as Knoppix-STD. Nessus is the vulnerability assessment tool, also included in knoppix-std, which you can use to check for security holes on your server.

I hope this helps.
Good luck!

[genesus]

check out rootkit progs as well...they will help find breeches...

[technossomy]

And there's one overriding point which is worth mentioning: the majority of distributions allow one to install a Linux server and come with tools to secure the machine. A server distribution will factor itself out of the market if it is not securable through standard menu items.

Hope this helps


Tech

[devendra.meena]

www.dnsreport.com

[jledhead]

if you have internet services open and running you might also look into intrusion detection http://www.cs.tut.fi/~rammer/aide.html

[devendra.meena]

hi,


Try 'Nessus'

[gtmtnbiker98]

I also recommend NMAP for port scanning, this will definitely tell you what ports you have open.

[gtmtnbiker98]

I would recommend Nessus too, if only I was able to get to work myself. Although, I only allowed myself 15-minutes with the product before I moved on to NMAP. Installing and running the service was a snap, interface is another issue. NMAP is worth its weight in gold, if you ask me. Besides, what other application was used on the Matrix?