From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.43) id 1E074P-00004N-TF for garchives@archives.gentoo.org; Wed, 03 Aug 2005 00:25:18 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.4/8.13.4) with SMTP id j730O0F6002974; Wed, 3 Aug 2005 00:24:00 GMT Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.202]) by robin.gentoo.org (8.13.4/8.13.4) with ESMTP id j730JLnm019799 for ; Wed, 3 Aug 2005 00:19:22 GMT Received: by wproxy.gmail.com with SMTP id i1so10286wra for ; Tue, 02 Aug 2005 17:19:46 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=QgmVqxNkvoCFhDyUccmIettF+Rdp9cdyhs8AFTqKX8KymMFN5IolO0uR/wcPxFxFr90Pw55RYWR4XEYcxuDX7CaBcduMNQNY0t9kkK3PBZOROx8n1Hx7UT8zD49tfKK71Y5OY+4TjdIQPIoaiKsCMLooJvsXx3ZetBOQiw1vdjY= Received: by 10.54.14.29 with SMTP id 29mr104394wrn; Tue, 02 Aug 2005 17:19:46 -0700 (PDT) Received: by 10.54.39.56 with HTTP; Tue, 2 Aug 2005 17:19:46 -0700 (PDT) Message-ID: <8f7a9d580508021719f6c5aa9@mail.gmail.com> Date: Wed, 3 Aug 2005 00:19:46 +0000 From: Raphael Melo de Oliveira Bastos Sales To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Testing how secure a server is... In-Reply-To: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Disposition: inline References: <8f7a9d5805080216505f9b4a51@mail.gmail.com> Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by robin.gentoo.org id j730JLnm019799 X-Archives-Salt: 87889c0f-e848-4760-a5e4-9af2df2fc965 X-Archives-Hash: 3166d4fe675e3d16b9cbc8e9b7e0833a Thanks Peter. I'm just finishing visiting the home page of almost every package on the net-analyzer category. If I didn't have such a short dead line, I'd test them all. ;) 2005/8/3, Peter De Zutter : > Hi, > 2 tools nmap and nessus for network/port scanning and others. > For hardering you could use bastille. > Of course all found in portage. > Peter > > > On 8/3/05, Raphael Melo de Oliveira Bastos Sales > wrote: > > > > Hi there, > > > > I was wondering what tools should I use to detect security flaws to > > my server and a few tips on how to use them. What are the most common > > forms of attack and how do I avoid being attacked by one of them? > > > > The services avaliable are only Apache - SSL and SSH. I've > > installed an firewall, iptables and firestarter to control it, and > > blocked all ports except 443 and 8080, where the SSH is listening. > > Apache has PHP installed as a module. > > > > Thanks for the attention, > > > > Raphael. > > > > -- > > gentoo-user@gentoo.org mailing list > > > > > > > > -- > I have plenty of common sense, > I just choose to ignore it. > --- Calvin > -- gentoo-user@gentoo.org mailing list