Nigel's Network Security & Monitoring page

My favorite firewall - SmoothWall

• | SmoothWall (Corporate) | SmoothWall (GPL) | SmoothWall's Sources |
• Smoothwall Community Forums

Other Firewall's I am testing

• Astaro Security Linux
• IpCop.

Security News

• | SecurityFocus | Net Security |

VPN - Virtual Private Network

• Openswan | strongSwan |
• FreeS/WAN - Offical Site | FreeS/WAN.ca |
• RPMS for FreeS/WAN.
• X.509 Certificate Support for the FreeS/WAN.
• Nate Carlson's guide to configuring Windows 2000/XP to talk to FreeS/WAN.
• VPM-Labs

Linux iptables & other advanced networking

• Homepage of the netfilter/iptables project.
• Guide to IP Layer Network Administration with Linux.
• Linux Advanced Routing & Traffic Control.
• Rusty's Remarkably Unreliable Guides to Linux Networking & Firewalls.
• Oskar Andreasson - IPTables Tutorial.
• Adrian Pascalau's GIPTables firewall.

Network Intrusion Detection

• Snort - [mirror]- a lightweight network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks.
• Snort for Win32.

Packet Sniffers

• Ethereal is a free network protocol analyzer for Unix and Windows.
• Sniffing (network wiretap, sniffer) FAQ.
• Analyzer, WinDump, WinPcap (with source) for Windows 95/98/NT/2000

Other Network Utilities

• NMAP - The Network Mapper, Stealth Port Scanner For Network Security Auditing.
• NetCat - reads and writes data across network connections, using TCP or UDP protocol.
• TCPdump - tool for network monitoring and data acquisition.
• Ntop - Displays a summary of network usage by machines on your network in a format reminicent of the unix top utility.
• ngrep - network grep.
• The Top 50 Security Tools.
• Trinux is a ramdisk-based Linux distribution that boots from a single floppy disk, loads it packages from an HTTP/FTP server, a FAT/EXT2/NTFS filesystem, or additional floppies and contains precompiled versions of popular Open Source network security tools for port scanning, packet sniffing, vulnerability scanning, sniffer detection, packet construction, active/passive OS fingerprinting, network monitoring, session hijacking, intrusion detection, and more. Trinux also provides support for Perl, PHP, and Python scripting languages. Download Trinux from here.

Network Security

• Dave Dittrich home - Senior Security Engineer & Consultant, University of Washington's Computing & Communications Client Services Group. Dealing primarily with security incident response and system security.
• Project HoneyNet - To learn the tools, tactics, and motives of the blackhat community, and share those lessons learned.
• Lance Spitzner (an active member of the Honeynet Project) has some good technical papers.
• Cisco Tech Notes on Strategies to Protect Against Distributed Denial of Service (DDoS) Attacks.

FireWall Vendors (Commercial Products)

• CheckPoint - FireWall-1.
• Symantec Enterprise Security Solutions - Axent's Raptor.
• Tiny Software - WinRoute Pro.

Useful Info

• IANA's list of Port Numbers

Network management

• Mutiny - The plug-and-ping network monitoring solution.
• RiverSoft - Providing IP Network Management.
• HP's OpenView.

Network Graphing

• MRTG - The Multi Router Traffic Grapher.
• MRTG Companion Sites.
• RRDtool - Reimplementation of MRTGs graphing and logging features, magnitudes faster and more flexible.
• NT version of RRDtool.
• Cricket is a high performance, extremely flexible system for monitoring trends in time-series data. Cricket was expressly developed to help network managers visualize and understand the traffic on their networks.

SNMP

• Garth Williams's SNMP4tPC - SNMP for the Public Community - a great SNMP Support Site for Windows 95/98/NT/2000, NetWare and MRTG
• UCD-SNMP.
• SNMP support for Perl 5.
• Monitoring Windows 2000 with SNMP

Most recently modified: