RE: [cobalt-users] Security Programs

[Rodolfo Paiz <rpaiz@xxxxxxxxxxxxxx>]

> For Trojans, try Chkrootkit:
> http://www.chkrootkit.org

OK, stupid question here... are we totally sure it's safe to run this
thing? I've shied away from it out of sheer blind paranoia.

> Other firewall/real time packet checking thingies:
> Snort: http://www.snort.org
> TripWire: http://www.tripwire.com

I have the *vague belief* (not sure, not even confident) that TripWire
does not check packets, but rather takes a snapshot picture of your
system in a virgin state, and can let you know when (and which) files
are changed. Thus the idea of TripWire, where you lay a wire and people
trip over it, setting off your alarms.

Haven't installed it yet, though. I'm waiting until I set up my new
server in a couple of months.

--
Rodolfo J. Paiz
rpaiz@xxxxxxxxxxxxxx <mailto:rpaiz@xxxxxxxxxxxxxx>