[YLUG] Security problem
chl501 at york.ac.uk
chl501 at york.ac.uk
Fri Apr 6 22:02:20 BST 2007
Hi everyone,
I have a stupid question. Hope someone can give me advice.
The question is - though administrator generally do not worry about
security of Gnu/ Linux system , Gnu/ Linux still might be infected by
Trojan. Therefore, how can I make sure my system is safe? I have setup
iptables. The rule is as A).
Daily activities I use only involve in programming (c/ java), surfing
online (firefox), chatting (gaim/ skype). Seldom I would use root to
install software, except using apt-get.
What action I need to perform (or what software to install/ document I need
to read) in order to make sure the system is not infected?
My system is Debian sarge (testing), kernel 2.6.16, iptables 1.3.5
I appreciate any suggestion.
A.) ========== iptables BEG Chain INPUT (policy DROP) target prot opt
source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all --
0.0.0.0/0 0.0.0.0/0 state RELATED ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state
ESTABLISHED ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 0 ACCEPT icmp --
0.0.0.0/0 0.0.0.0/0 icmp type 3 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp
type 3 code 4 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 4 ACCEPT icmp --
0.0.0.0/0 0.0.0.0/0 icmp type 11 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp
type 12 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 14 ACCEPT icmp --
0.0.0.0/0 0.0.0.0/0 icmp type 16 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp
type 18 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
========== iptables END
More information about the York
mailing list