[unclug] IDS for RedHat AS
Jeff Bollinger
jeff01 at email.unc.edu
Wed Jun 16 15:57:40 EDT 2004
James Jordan wrote:
> Thanks for all the suggestions I received for my last problem of the
> unstable (and quite *EVIL*) server. It has since been migrated to new
> rack-mounted equipment, with upgraded RH EL AS software, and then burned
> in effigy. On a more positive note, now that I'm finally operating on
> the new Enterprise version of RedHat, I've noticed that tripwire is no
> longer installed by default, and also doesn't look like it's still a
> maintained project. So my question for all you experts out there: What
> IDS (Intrusion Detection System)are you using to secure your shiny new
> Enterprise Linux networks? Thanks!
>
IPTables + Portsentry + Logwatch
Jeff
--
Jeff Bollinger, CISSP
University of North Carolina
IT Security Analyst
105 Abernethy Hall
mailto: jeff @unc dot edu
More information about the unclug
mailing list