Re: [PLUG] what logs to watch?

[Jon Nelson <bigfish@enter.net>]

Just want to mention the obvious....you got iptables/ipchains right?

Logcheck is a good util to watch your logs, and there are others:
www.psionic.com/abacus/logcheck/

Couple of good books:
Maximum Linux Security, and Hacking Exposed (Linux edition)

A basic article on securing your home system:
http://www.linuxnewbie.org/nhf/intel/security/securehome.html

Some other articles are at:
http://taz.cs.wcupa.edu/~quincy/security.html

Here is an article on psad (port scan detector):
http://linuxjournal.com/article.php?sid=4876

On 13/12/01 16:14 -0500, William Shank wrote:
> now that i have a persistent internet connection via cablemodem, what logs
> should i routinely check for security breaches? if someone attempts to
> compromise my box, i'd like to know, so where do i look? any suggestion are
> appreciated.
> 
> thanks,
> chris
> 
> ______________________________________________________________________
> Philadelphia Linux Users Group       -      http://www.phillylinux.org
> Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
> General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug

-- 
*************NOTE NEW NEW ALT. EMAIL!!!!******************

Trooper Jon S. NELSON, Linux Certified Admin. (Sair/GNU)
Pennsylvania State Police
Computer Crimes Unit
Office:  610-344-4471
Page:  866-284-1603 (Toll Free)
Nextel:  610-637-0707 (Private ID 8777)
Alt. email:  jonelson@state.pa.us <------------------------

         __()___
        /  |    \
  _____/___|_____\______
 /  __     (-)      __  \
/__/  \____________/  \__\
   \__/            \__/ 

...it's a police car.

______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug