Full security tests

[Superman3332001]

Hi there everyone.

I was wondering if anyone knew of any full security testing sites like Pitstop that I could use to test my security under my linux using Mozillia firefox or (a different one if it causes conflict with fiorefox)

Thanks in advance from this linux newbie,

Hope that all the posting I do is ok. :hsh:

[Ken_ver_1_5]

you took the question right out of my head.
my reason is I made so many changes to get things working I may have made
a security hole you could drive a truck threw.

[Lsv]

http://www.insecure.org/nmap/

mailing lists of many security sites and links to them :
http://seclists.org/

[Superman3332001]

you took the question right out of my head.
my reason is I made so many changes to get things working I may have made
a security hole you could drive a truck threw.

I know what you mean I really would like to keep everything closed as best as I can and like I would with windows I keep my updates to date as best as i can but I need to know if my firewall is up and running and antivirus is installed ok and everything else.

[frostyone]

Housecall JAVA has an on-line virus scan and also has hackercheck to detect open ports.( I think hackercheck is included with virus scan,, but is also available seperately)
Operating systems supported include:
Linux
http://uk.trendmicro-europe.com/index_consumer.php

[Superman3332001]

http://www.insecure.org/nmap/

mailing lists of many security sites and links to them :
http://seclists.org/
Thanks I hope this will help me understand more what I need to do. :-D

[Ken_ver_1_5]

I know what you mean I really would like to keep everything closed as best as I can and like I would with windows I keep my updates to date as best as i can but I need to know if my firewall is up and running and antivirus is installed ok and everything else.

yes I agree it is important to know if you firewall is working and you
have a working anti virus installed. but there is more to it. just like
windows you need to know if a proses needs tweaking or you have
accidentally changed a setting that would open up your system to hackers.
the program I was thinking of would run from the system and be less
concerned with firewall but internal settings. the links given are good
I will have to look into them to see if they provide what I am looking
for.

keep up the good questions Superman3332001 we are all learning.

[Superman3332001]

yes I agree it is important to know if you firewall is working and you
have a working anti virus installed. but there is more to it. just like
windows you need to know if a proses needs tweaking or you have
accidentally changed a setting that would open up your system to hackers.
the program I was thinking of would run from the system and be less
concerned with firewall but internal settings. the links given are good
I will have to look into them to see if they provide what I am looking
for.

keep up the good questions Superman3332001 we are all learning.

I noticed that there were quite a few links to the software to d/l but nothing to actually see wheter it is working or not. So i though maybe it could help me and some one else. The one I found really good to testing my system was nmap. I got that install fairly easy and when I ran it it told me what ports were open and which were closed and you could do a couple of different tests to test the different ways they try to access your machine. thanks Ken_ver_1_5for your support it is much appricated.

[Matrix]

this might be what you are looking for.

http://www.bastille-linux.org/

[Ken_ver_1_5]

this might be what you are looking for.

http://www.bastille-linux.org/

looks good with a quick read.
it would be great if it did nothing at all but report problems
still need to read more lil tired so I'll catch the rest later.

[Matrix]

well to add to your read... :d

newsforge did an interview with project leader Jay Beale. here it is.

http://software.newsforge.com/article.pl?sid=05/04/19/1256244&from=rss

[Ken_ver_1_5]

this might be what you are looking for.

http://www.bastille-linux.org/

just an update I got the bastille installed and I ran it to see
how it works seems to be theral(sp) enough.

[Matrix]

yes it is pretty thorough. i really like that it educates while hardening.

from the description used in synaptic...

If run in the (recommended) Interactive mode, Bastille
educates the administrator during the hardening process:
in each step of the process, extensive descriptions are
given of what security issues are involved. Each step is
optional. If run in the quicker Automated mode, Bastille
hardens the system according the profile chosen.

[stan94]

scan for open ports with these

https://www.grc.com/x/ne.dll?bh0bkyd2

http://scan.sygate.com/

browser security check

http://bcheck.scanit.be/bcheck/