Linux Intrusion Detection
#1
21 Apr 2009 @ 15:44
funky01
Send private message to this user
Newbie
I have Ubuntu 8.04 Hardy Herson. I would like to secure my OS with a good Intrusion Detection Application with a good GUI and alerts you when someone tries to break in and gain access. I did an apt-cache search intrusion and found a lot of choices. I am inquiring for some good thoughts and intelligent suggestions. Thank you.
#2
22 Apr 2009 @ 2:53
varnull
Suspended account
why?.. who are you scared of??
just a secure password will do.. but then again if you knew anything about security then it's doubtful you would run ubuntu.. because it has security flaws.
ask on the ubuntu forums and see what they suggest.. because anything us server runners here will tell you will be about 50,000 times too hardline secure to be used as a normal desktop machine.
people.. especially script kiddies just don't bother with linux machines.. they are secure by design unlike the "always administrator" windoze soft targets. (apart from the ubuntu problems which may or may not have been solved.. at last look they hadn't)
read up.. I don't bother "securing" this always on desktop machine any more than a hardware firewall run in a home made router and the usual iptables restrictions.. and a proper hosts file.
simple answer.. unless you are running a webserver it's not worth the bother.
just a secure password will do.. but then again if you knew anything about security then it's doubtful you would run ubuntu.. because it has security flaws.
ask on the ubuntu forums and see what they suggest.. because anything us server runners here will tell you will be about 50,000 times too hardline secure to be used as a normal desktop machine.
people.. especially script kiddies just don't bother with linux machines.. they are secure by design unlike the "always administrator" windoze soft targets. (apart from the ubuntu problems which may or may not have been solved.. at last look they hadn't)
read up.. I don't bother "securing" this always on desktop machine any more than a hardware firewall run in a home made router and the usual iptables restrictions.. and a proper hosts file.
simple answer.. unless you are running a webserver it's not worth the bother.
This message has been edited since its posting. Latest edit was made on 22 Apr 2009 @ 2:54
Share this
