Webmaster Forums - Webmaster forum for HTML, PHP, ASP, CSS and more - View Single Post

apcbill · 08-18-2006, 07:03 PM

Software firewalls are just as good when implemented correctly. And if you think about it a hardware firewall has software running on it. So it is still a software firewall.

Look into using Netfilter(IPtables) most current distros have the firewall on them and an easy gui if you don't want to learn the command line.

As for detecting intrusions. There are alot of different ways to check. A good way is to setup the Netfilter firewall and then check for incoming and outgoing connections that didn't originate from you.

Snort is also a good tool to use to observe network intrusions. It may be too advanced for someone with limited security or networking knowledge.

You can also use the netstat -an command to look at current connections if you know what you're looking for and you haven't been rootkitted.

If you would like I could look at your sytem for you. But you don't know me. The only thing I can offer as credentials is my CISSP number. It is a professional certification that requires me to not hack/crack where not asked to.

Good luck.

08-18-2006, 07:03 PM	#6 (permalink)
apcbill Junior Member Join Date: Aug 2006 Location: KC Posts: 4	Re: Newbie security problem Software firewalls are just as good when implemented correctly. And if you think about it a hardware firewall has software running on it. So it is still a software firewall. Look into using Netfilter(IPtables) most current distros have the firewall on them and an easy gui if you don't want to learn the command line. As for detecting intrusions. There are alot of different ways to check. A good way is to setup the Netfilter firewall and then check for incoming and outgoing connections that didn't originate from you. Snort is also a good tool to use to observe network intrusions. It may be too advanced for someone with limited security or networking knowledge. You can also use the netstat -an command to look at current connections if you know what you're looking for and you haven't been rootkitted. If you would like I could look at your sytem for you. But you don't know me. The only thing I can offer as credentials is my CISSP number. It is a professional certification that requires me to not hack/crack where not asked to. Good luck.