Re: [cobalt-users] worm attack

[Revd leonard payne <vicarage@xxxxxxxxxxxxxx>]

on 20/9/01 5:39 PM, Kevin D at kdlists@xxxxxxxxxxxxxxx mumbled something
like:


> 
> I don't think windows is "gradually coming up to speed," I think it is up to
> speed. I think the problem is that most windows admins lack experience, and
> are fooled by the nice looking GUI interface that running a server on the
> net is easy. Thus, they put servers out there with default install options
> that are wide open to attack. Who with any linux security experience would
> put a basic default install of RH linux 7 on the net and expect it to be
> secure? I've seen many an inexperienced admin get their cobalt server hacked
> because they depended on the cute gui interface and didn't have any real
> experience whatsoever.
> 


That's all very well but many of us bought into the RAQ scene because we are
- not -  system admins and because of the 'cute gui'

There has been comment elsewhere about novices using portsentry etc and how
we all need to do a lot more to secure our systems  -without- helping us out
with instructions.

Can anyone give a blow by blow - step by step - idiots (tm) guide to
installation of

a. portsentry
b. logcheck
c. ipchains

and then anything else that the community feels is valid. (I've got a and b)

I will commit to installating on my Raq and take beautiful screen dumps,
make a manual, and post it publicly for all to see

Cheers

Revd Leonard Payne