• reveal the holes in your webserver: nikto 1.35
  
• reveal the holes in your webserver: nikto 1.35 ciont
  
• securing you box with bastille
  
• securing your box with bastille cont
  
• securing your box with bastille cont 2
  

• forensic process and tricks
  
• forensic process and tricks cont
  
• forensic analysis of malcode - step by step
  
• advanced web-based honeypot techniques
  
• custom web-based honeypots with ghh
  

• smtp relay honeypot
  
• web exploits - don't be a victim
  
• scripting internet connections under windows
  
• credit card security
  
• cross posted sql injection measures
  

• making your windows pc more private and secure
  
• a quick introduction to tcp session hijacking
  
• the definitive guide to chrooting
  
• the definitive guide to chrooting cont
  
• te definitive guide to chrooting cont 2
  

• computertutorials
  
• computertutorials2
  
• securitytutorials
  
• computertutorials3
  
• computertutorials4
  
• securitytutorials2
  
• securitytutorials3
  
• securitytutorials4
  

 

SECURING YOUR BOX WITH BASTILLE CONT...


Bastille is a hardening tool which is very effective at locking down your system, and all it requires is a few minutes of your time! It is currently available for the major Linux distributions: SUSE, Mandrake (Mandriva releases are still not supported), Fedora Core, Red Hat, Debian, and Gentoo, and it is also available for HP-UX and Mac OS X, as well as the source code which can be compiled on most *nix systems. In this tutorial I shall take you through the steps of installing it and setting it up properly in order to secure your system better than before (this tutorial may not be suitable for you if the computer is not a workstation or for personal use).

* Hit "Next".

* Hit "Next".

* Hit "Next".

* Type in "echo-request" and hit "Next".

* Hit "Next". 

* Hit "Next".

* Press "No" (to keep things simple).

* Hit "Next".

* Hit "Next".

* Hit "Next".

* Press "Yes".

              * Hit "Next".

* Type in your network interfaces ('eth0 ppp0' are the likely ones) and press "Next" - this shouldn't matter if you're running kernel 2.4+

* Hit "Next".

* Hit "Next".

* Press "Yes".

* PSAD is not necessary, but if you're security-conscious you might want to set it up to log any suspicious (possible) crack attempts. I will cover it anyway - so, if you would like to set it up, hit "Yes". Otherwise, choose "No" (in that case, skip to #70).

* Hit "Next".

* Hit "Next".

 

* Press "No".

* Hit "Next". 

* Press "No".

* Leave the default values and hit "Next".

* Type in your email address (to which any security alerts will be reported) and hit "Next".

* Hit "Next".

* Press "Yes".

* Press "No".

* Press "Yes".

* Finally, press "Yes"!

You have finished installing Bastille - an array of daemons have ceased to run, and your system is now less vulnerable.

Original Tutorial by j_k9 for TheTAZZone-TAZForum

Originally posted on March 10th, 2006 here

Do not use, republish, in whole or in part, without the consent of the Author. TheTAZZone policy is that Authors retain the rights to the work they submit and/or post...we do not sell, publish, transmit, or have the right to give permission for such...TheTAZZone merely retains the right to use, retain, and publish submitted work within it's Network.