PDA

View Full Version : [ubuntu] security issues............................................ .......



ettercap
July 3rd, 2008, 05:50 AM
hello every 1
i use windows xp on my pc at home and daily i get around 3-4
port-scanning attempts ......
my anti virus detects and blocks it.......

now i have ubuntu in my laptop ..........
as far as i know there are hardly any viruses for linux...
how do i make my linux laptop secure.....
are there any 3rd party tools available please help......

i even found this link helpful....

http://www.builderau.com.au/program/linux/soa/10-things-you-should-do-to-a-new-Linux-PC-before-exposing-it-to-the-Internet/0,339028299,339274586,00.htm

lisati
July 3rd, 2008, 05:57 AM
Have a look here: http://ubuntuforums.org/forumdisplay.php?f=338, in particular here: http://ubuntuforums.org/showthread.php?t=765421

spike_strip
July 3rd, 2008, 08:08 PM
Ubuntu is a very safe OS—as are most Linux/UNIX systems, it is M$ that is un-secure.

There is nothing to worry about!

I have been using Linux/UNIX for about six years now.

Once; I received an e-mail with an attachment that I did not know...clicked on the attachment, and one day later I was reinstalling my Linux system, after a complete system crash. I believe I received a worm in that e-mail... can not prove it, and people will argue that what I have described is not even possible.

HermanAB
July 3rd, 2008, 09:23 PM
Stop fretting and enjoy your nice Ubuntu system.

In general you can click away on anything and everything with wild abandon.

ettercap
July 5th, 2008, 02:17 PM
sorry if this sounds a bit rude....
but
u guys say that it is impossible/verydifficult to crack a box running ubuntu/linux...............

kevdog
July 5th, 2008, 02:26 PM
crack a box is something else -- that would imply authentication problems, buffer overflows, faults in listening daemons. You are not immune to that.

brian_p
July 5th, 2008, 02:54 PM
sorry if this sounds a bit rude....
but
u guys say that it is impossible/verydifficult to crack a box running ubuntu/linux...............

In your first post you said you wanted a secure Ubuntu box. You'll get it by keeping your software up to date. Sounds too simple, doesn't it? But essentially that's all you need to do.

hyper_ch
July 5th, 2008, 07:54 PM
maybe adding that if you install servers you should also take precautions on securing those...

Canis familiaris
July 5th, 2008, 07:57 PM
You are quite secure. Only do not type any command blindly, say if someone posted in a forum. You should have some little idea about it.

brian_p
July 5th, 2008, 09:21 PM
maybe adding that if you install servers you should also take precautions on securing those...

Well, sticking with the default configuration is safe but reading the docs and understanding the changes you make is a must if you want to alter them. Having cups accept printing from the internet could lead to 10,000 copies of the firestarter manual being dumped on your network - and we wouldn't want that, would we?

And I'd still say keep the server software up to date.

ettercap
July 14th, 2008, 04:04 AM
people............i asked how do i detect portscanning attempts ???????????????????

aysiu
July 14th, 2008, 04:36 AM
people............i asked how do i detect portscanning attempts ??????????????????? And it was already answered. Have a look at the second link in this reply, specifically the Firewall section:
Have a look here: http://ubuntuforums.org/forumdisplay.php?f=338, in particular here: http://ubuntuforums.org/showthread.php?t=765421

azr
July 14th, 2008, 12:16 PM
If you have more time to play around i would also suggest using gaurddog - which has the policy anything not allowed is forbidden. This very conservative policy might ease your fears; especially when it stops you doing safe things you normally do, before you've configured it properly.

Though i have a question:
Is this not overkill for a home pc?

kevdog
July 14th, 2008, 12:34 PM
If you need to detect portscans, then you need probably to at least set up a firewall that logs such activity. You could then peruse the logs, or write a small shell script to fish out the activity you want to look at.