d

Security Howto: The Complete Documentation

• This category contains 41 Papers
• The last paper was added on 2007-03-26 (YYYY-MM-DD)

ADSL Bandwidth Management HOWTO

Published on June 08, 2001, by Dan Singletary, The Linux Documentation Project.

This document describes how to configure a linux router to more effectively manage outbound traffic on an ADSL modem. Emphasis is placed on lowering the latency for interactive traffic even when the upstream bandwidth is fully saturated.

Advanced Routing and Traffic Control HOWTO (Linux)

Published on July 20, 2002, by bert hubert, The Linux Documentation Project.

This document hopes to enlighten you on how to do more with Linux 2.2/2.4 routing. Unbeknownst to most users, you already run tools which allow you to do spectacular things. Commands like 'route' and 'ifconfig' are actually very thin wrappers for the very powerful iproute2 infrastructure.

Apache based WebDAV Server with LDAP and SSL

Published on June 29, 2002, by Saqib Ali, The Linux Documentation Project.

This document is an HOWTO on installing a Apache based WebDAV server with LDAP for authentication and SSL encryption.

Apache Compile HOWTO (Linux edition)

Published on June 19, 2002, by Luc de Louw, The Linux Documentation Project.

This document describes howto compile the Apache Webserver with the most important modules like mod_perl, mod_dav, mod_auth_ldap, mod_dynvhost, mod_roaming, mod_jserv, and mod_php.

Apache Overview HOWTO

Published on February 28, 2002, by Daniel Lopez Ridruejo, The Linux Documentation Project.

This document gives you an overview of the Apache webserver and related projects. It provides pointers for further information and implementation details.

Authentication Gateway HOWTO

Published on May 10, 2002, by Nathan Zorn, The Linux Documentation Project.

With wireless networks and public acces areas it is very easy for an unauthorized user to gain access. Unauthorized users can look for a signal and grab connection information from the signal. Unauthorized users can plug their machine into a public terminal and gain access to the network. Security has been put in place such as WEP, but this security can be subverted with tools like AirSnort. One approach to solving these problems is to not rely on the wireless security features , and instead to place an authentication gateway in front of the wireless network or public access area and force users to authenticate against it before using the network. This HOWTO describes how to set up this gateway with Linux.

Bandwidth Limiting HOWTO

Published on November 20, 2001, by Tomasz Chmielewski, The Linux Documentation Project.

This document describes how to set up your Linux server to limit download bandwidth or incoming traffic and how to use your internet link more efficiently.

Bridge + Firewall + DSL Mini-HOWTO

Published on November 09, 2000, by Derek Ney, The Linux Documentation Project.

Configuring a Linux system to act as a firewall and bridge with a DSL network connection.

Bridge+Firewall Mini-HOWTO (Linux)

Published on December 19, 1997, by Peter Breuer, The Linux Documentation Project.

You should look at the original Bridging mini-HOWTO by Chris Cole for a different perspective on this. He is chris@polymer.uakron.edu. The version of his HOWTO that I have based this document on (alternatively, ripped off) is 1.03 dated Aug 23 1996.

Building a Secure RedHat Apache Server HOWTO

Published on June 02, 2001, by Richard Sigle, n.c.

A first hand approach on how to manage a certificate authority (CA), and issue or sign certificates to be used for secure web, secure e-mail, or signing code and other usages.

Chroot-BIND HOWTO

Published on December 01, 2001, by Scott Wunsch, losurs.org.

This document describes installing the BIND 9 nameserver to run in a chroot jail and as a non-root user, to provide added security and minimise the potential effects of a security compromise. Note that this document has been updated for BIND 9; if you still run BIND 8, you want the Chroot-BIND8 HOWTO instead.

Chroot-BIND8 HOWTO

Published on July 01, 2001, by Scott Wunsch, losurs.org.

This document describes installing the BIND 8 nameserver to run in a chroot jail and as a non-root user, to provide added security and minimise the potential effects of a security compromise. This version of the document covers the old but still popular BIND 8; there is another document which provides similar information for BIND 9.

Chrooting daemons and system processes HOW-TO

Published on October 21, 2002, by Jonathan, www.networkdweebs.com.

The command/function chroot is short for 'change root', and is designed to change the filesystem root for the environment it is applied to. This means the initial slash (/) in any path names are made relative to the chrooted path. For example, if a file called: /home/jonz/hello.txt exists on the system, and then I chrooted to /home/jonz, the file would then exist, in my chrooted environment, as: /hello.txt

Cipe+Masquerading mini-HOWTO (Linux)

Published on April 21, 1999, by Anthony Ciaravalo, n.c.

How to setup a VPN using Cipe on a linux masquerading firewall.

DNS HOWTO

Published on December 20, 2001, by Nicolai Langfeldt, langfeldt.net.

HOWTO become a totally small time DNS admin.

DSL HOWTO for Linux

Published on July 21, 2002, by Hal Burgiss, The Linux Documentation Project.

This document examines the DSL family of high speed Internet services now being deployed in various markets worldwide. Information is included on the technology behind DSL as well as subscribing, installing, configuring, and troubleshooting, with an emphasis on how this impacts Linux users.

Encrypted Tunnels using SSH and MindTerm HOWTO

Published on June 13, 2001, by Duane Dunston, The Linux Documentation Project.

This document describes how to use SSH and the Java-b

Ethernet-Howto (Linux)

Published on October 29, 2000, by Paul Gortmaker, The Linux Documentation Project.

This is the Ethernet-Howto, which is a compilation of information about which ethernet devices can be used for Linux, and how to set them up. Note that this Howto is focused on the hardware and low level driver aspect of the ethernet cards, and does not cover the software end of things like ifconfig and route. See the Network Howto for that stuff.

Firewall and Proxy Server HOWTO

Published on February 26, 2000, by Mark Grennan, www.grennan.com.

This document is designed to describe the basics of firewall systems and give you some detail on setting up both a filtering and proxy firewall on a Linux based system. An HTML version of this document is available at http://www.grennan.com/Firewall-HOWTO.html

Firewall Piercing mini-HOWTO

Published on November 24, 2001, by François-René Rideau, The Linux Documentation Project.

Directions for using ppp over ssh, telnet or whatever, so as to do achieve transparent network connection accross a firewall. Applies to friendly VPN construction as well as to piercing unfriendly firewalls.

Firewall+Masquerading+Diald+Dynamic IP-HOWTO

Published on June 14, 1999, by Sandro Poppi, lug-burghausen.

This document describes how to set up firewalling including masquerading using diald and dynamic assigned IP addresses. The first part describes the way in general, the second part makes use of a special designed rc.firewall script. An HTML version of this HOWTO can be found at http://www.lug-burghausen.org/projects/firewall/firewall-masq-diald.html.

FreeBSD Security How-To

Published on 1998, by FreeBSD, FreeBSD Inc.

FreeBSD is a very secure operating system. Since source code is freely available, the OS is constantly going through the review and audit. While FreeBSD comes very secure OOB (Out-Of-Box), there are many features that can make it more secure for those of you who are "paranoid". This How-To will go over some steps which will help you increase overall security of your machine.

Game Server HOWTO

Published on July 09, 2001, by Anders Jensen-Urstad, The Linux Documentation Project.

This document explains how to install, configure and maintain servers for various popular multiplayer games.

IP Masquerade HOWTO (Linux)

Published on November 23, 2001, by David A. Ranch, source: LinuxSecurity.

This document describes how to enable the Linux IP Masquerade feature on a given Linux host. IP Masquerade, called "IPMASQ" or "MASQ" for short, is a form of Network Address Translation (NAT) which allows internally connected computers that do not have one o

IPCHAINS-HOWTO (Linux)

Published on July 04, 2000, by Rusty Russell, The Linux Documentation Project.

This document aims to describe how to obtain, install and configure the enhanced IP firewalling chains software for Linux, and some ideas on how you might use them.

Loadable Kernel Module HOWTO (Linux)

Published on August 18, 2001, by Bryan Henderson, n.c.

This is the HOWTO for Linux loadable kernel modules (LKMs). It explains what they are and how to use and create them. It also includes documentation of parameters and other details of use of some particular modules.

Networking-concepts HOWTO (Linux)

Published on July 29, 2001, by Rusty Russell, n.c.

This document describes what a network (such as the Internet) is, and the very basics of how it works.

Remote X Apps mini-HOWTO

Published on December 08, 2001, by Vincent Zweije, The Linux Documentation Project.

This mini-HOWTO describes how to run remote X applications. That is, how to have an X program display on a different computer than the one it's running on. Or conversely: how to make an X program run on a different computer than the one you're sitting at. The focus of this mini-HOWTO is on security. This mini-HOWTO also contains information on running X applications locally, but with a different user-id, and information on setting up a computer as an X terminal.

Secure Programming for Linux and Unix HOWTO

Published on July 13, 2002, by David A. Wheeler, The Linux Documentation Project.

This book provides a set of design and implementation guidelines for writing secure programs for Linux and Unix systems. Such programs include application programs used as viewers of remote data, web applications (including CGI scripts), network servers, and setuid/setgid programs. Specific guidelines for C, C++, Java, Perl, PHP, Python, TCL, and Ada95 are included.

Securing Debian HOWTO

Published on November 20, 2001, by Alexander Reelsen, debian.org.

This document describes the process of securing and hardening the default Debian installation. It covers some of the common taks to setup a secure network environment using Debian GNU/Linux.

Security HOWTO (Linux)

Published on June 11, 2002, by Kevin Fenzi and Dave Wreski, The Linux Documentation Project.

This document is a general overview of security issues that face the administrator of Linux systems. It covers general security philosophy and a number of specific examples of how to better secure your Linux system from intruders. Also included are pointers to security-related material and programs. Improvements, constructive criticism, additions and corrections are gratefully accepted. Please mail your feedback to both authors, with "Security HOWTO" in the subject.

Security Quick-Start HOWTO for Linux

Published on May 23, 2002, by Hal Burgiss, The Linux Documentation Project.

This document is a an overview of the basic steps required to secure a Linux installation from intrusion. It is intended to be an introduction.

Sentry Firewall CD HOWTO

Published on June 11, 2002, by Stephen A. Zarkos, sentry.net.

This document is designed as an introduction on how the Sentry Firewall CDROM works and how to get started using the system.

Setting Up Your New Domain Mini-HOWTO

Published on December 23, 1999, by Christopher Neufeld, source: LinuxSecurity.

This document outlines the things you will probably have to do when you want to set up a network of computers under your own domain. It covers configuration of network parameters, network services, and security settings.

Snort-Setup for Statistics HOWTO

Published on January 01, 2002, by Sandro Poppi, LUG-Burghausen.

This HOWTO describes how to configure Snort version 1.8.3 to be used in conjunction with the statistical tools ACID (Analysis Console for Intrusion Databases) and SnortSnarf. It also intends to get some internal statistics out of snort, e.g. if there are packets dropped.

SSL Certificates HOWTO

Published on November 18, 2001, by Franck Martin, n.c.

A first hand approach on how to manage a certificate authority (CA), and issue or sign certificates to be used for secure web, secure e-mail, or signing code and other usages.

Transparent Proxy with Linux and Squid mini-HOWTO

Published on December 2001, by Daniel Kiracofe, unxsoft.com.

This document provides information on how to setup a transparent caching HTTP proxy server using only Linux and squid.

User Authentication HOWTO

Published on May 15, 2000, by Peter Hernberg, The Linux Documentation Project.

Explains how user and group information is stored and how users are authenticated on a Linux system (PAM), and how to secure you system's user authentication.

Virus Writing And Detection HOWTO (Linux)

Published on June 23, 2002, by Alexander Bartolich, n.c.

Measurement is the foundation of science. This document describes how to write parasitic file viruses infecting ELF executables on Linux/i386. Though it contains a lot of source code, no actual virus is included.

VPN HOWTO

Published on May 30, 2002, by Matthew D. Wilson, The Linux Documentation Project.

This HOWTO describes how to set up a Virtual Private Network with Linux.

VPN Masquerade HOWTO (Linux)

Published on October 22, 2000, by John D. Hardin, impsec.org.

How to configure a Linux firewall to masquerade IPsec- and PPTP-based Virtual Private Network traffic, allowing you to establish a VPN connection without losing the security and flexibility of your Linux firewall's internet connection and allowing you to make available a VPN server that does not have a registered internet IP address. Brief information on configuring the VPN client and server is also given.