Network Security Hacks

Copyright; Credits; About the Author; Contributors; Acknowledgments; Preface; Why Network Security Hacks?; How This Book Is Organized; Conventions Used in This Book; Safari Enabled; Using Code Examples; How to Contact Us; Got a Hack?; Chapter 1: Unix Host Security; 1 Secure Mount Points; 2 Scan for SUID and SGID Programs; 3 Scan for World- and Group-Writable Directories; 4 Create Flexible Permissions Hierarchies with POSIX ACLs; 5 Protect Your Logs from Tampering; 6 Delegate Administrative Roles; 7 Automate Cryptographic Signature Verification; 8 Check for Listening Services; 9 Prevent Services from Binding to an Interface; 10 Restrict Services with Sandboxed Environments; 11 Use proftpd with a MySQL Authentication Source; 12 Prevent Stack-Smashing Attacks; 13 Lock Down Your Kernel with grsecurity; 14 Restrict Applications with grsecurity; 15 Restrict System Calls with systrace; 16 Create systrace Policies Automatically; 17 Control Login Access with PAM; 18 Restrict Users to SCP and SFTP; 19 Use Single-Use Passwords for Authentication; 20 Restrict Shell Environments; 21 Enforce User and Group Resource Limits; 22 Automate System Updates; Chapter 2: Windows Host Security; 23 Check Servers for Applied Patches; 24 Use Group Policy to Configure Automatic Updates; 25 List Open Files and Their Owning Processes; 26 List Running Services and Open Ports; 27 Enable Auditing; 28 Enumerate Automatically Executed Programs; 29 Secure Your Event Logs; 30 Change Your Maximum Log File Sizes; 31 Back Up and Clear the Event Logs; 32 Disable Default Shares; 33 Encrypt Your Temp Folder; 34 Back Up EFS; 35 Clear the Paging File at Shutdown; 36 Check for Passwords That Never Expire; Chapter 3: Privacy and Anonymity; 37 Evade Traffic Analysis; 38 Tunnel SSH Through Tor; 39 Encrypt Your Files Seamlessly; 40 Guard Against Phishing; 41 Use the Web with Fewer Passwords; 42 Encrypt Your Email with Thunderbird; 43 Encrypt Your Email in Mac OS X; Chapter 4: Firewalling; 44 Firewall with Netfilter; 45 Firewall with OpenBSD???s PacketFilter; 46 Protect Your Computer with the Windows Firewall; 47 Close Down Open Ports and Block Protocols; 48 Replace the Windows Firewall; 49 Create an Authenticated Gateway; 50 Keep Your Network Self-Contained; 51 Test Your Firewall; 52 MAC Filter with Netfilter; 53 Block Tor; Chapter 5: Encrypting and Securing Services; 54 Encrypt IMAP and POP with SSL; 55 Use TLS-Enabled SMTP with Sendmail; 56 Use TLS-Enabled SMTP with Qmail; 57 Install Apache with SSL and suEXEC; 58 Secure BIND; 59 Set Up a Minimal and Secure DNS Server; 60 Secure MySQL; 61 Share Files Securely in Unix; Chapter 6: Network Security; 62 Detect ARP Spoofing; 63 Create a Static ARP Table; 64 Protect Against SSH Brute-Force Attacks; 65 Fool Remote Operating System Detection Software; 66 Keep an Inventory of Your Network; 67 Scan Your Network for Vulnerabilities; 68 Keep Server Clocks Synchronized; 69 Create Your Own Certificate Authority; 70 Distribute Your CA to Clients; 71 Back Up and Restore a Certificate Authority with Certificate Services; 72 Detect Ethernet Sniffers Remotely; 73 Help Track Attackers; 74 Scan for Viruses on Your Unix Servers; 75 Track Vulnerabilities; Chapter 7: Wireless Security; 76 Turn Your Commodity Wireless Routers into a Sophisticated Security Platform; 77 Use Fine-Grained Authentication for Your Wireless Network; 78 Deploy a Captive Portal; Chapter 8: Logging; 79 Run a Central Syslog Server; 80 Steer Syslog; 81 Integrate Windows into Your Syslog Infrastructure; 82 Summarize Your Logs Automatically; 83 Monitor Your Logs Automatically; 84 Aggregate Logs from Remote Sites; 85 Log User Activity with Process Accounting; 86 Centrally Monitor the Security Posture of Your Servers; Chapter 9: Monitoring and Trending; 87 Monitor Availability; 88 Graph Trends; 89 Get Real-Time Network Stats; 90 Collect Statistics with Firewall Rules; 91 Sniff the Ether Remotely; Chapter 10: Secure Tunnels; 92 Set Up IPsec Under Linux; 93 Set Up IPsec Under FreeBSD; 94 Set Up IPsec in OpenBSD; 95 Encrypt Traffic Automatically with Openswan; 96 Forward and Encrypt Traffic with SSH; 97 Automate Logins with SSH Client Keys; 98 Use a Squid Proxy over SSH; 99 Use SSH As a SOCKS Proxy; 100 Encrypt and Tunnel Traffic with SSL; 101 Tunnel Connections Inside HTTP; 102 Tunnel with VTun and SSH; 103 Generate VTun Configurations Automatically; 104 Create a Cross-Platform VPN; 105 Tunnel PPP; Chapter 11: Network Intrusion Detection; 106 Detect Intrusions with Snort; 107 Keep Track of Alerts; 108 Monitor Your IDS in Real Time; 109 Manage a Sensor Network; 110 Write Your Own Snort Rules; 111 Prevent and Contain Intrusions with Snort_inline; 112 Automatically Firewall Attackers with SnortSam; 113 Detect Anomalouuuuuus Behavior; 114 Automatically Update Snort???s Rules; 115 Create a Distributed Stealth Sensor Network; 116 Use Snort in High-Performance Environments with Barnyard; 117 Detect and Prevent Web Application Intrusions; 118 Scan Network Traffic for Viruses; 119 Simulate a Network of Vulnerable Hosts; 120 Record Honeypot Activity; Chapter 12: Recovery and Response; 121 Image Mounted Filesystems; 122 Verify File Integrity and Find Compromised Files; 123 Find Compromised Packages; 124 Scan for Rootkits; 125 Find the Owner of a Network; Colophon;