• 2.4.26 (SMP) with most SCSI Controller and Network Drivers build-in.
• ow2 (openwall)
• built with mppe/mppc support

IPSEC is Internet Protocol SECurity. It uses strong cryptography to provide both authentication and encryption services. Authentication ensures that packets are from the right sender and have not been altered in transit. Encryption prevents unauthorised reading of packet contents.

These services allow you to build secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the IPSEC gateway machine and decrypted by the gateway at the other end. The result is Virtual Private Network or VPN. This is a network which is effectively private even though it includes machines at several different sites connected by the insecure Internet.

The IPSEC protocols were developed by the IETF (Internet Engineering Task Force) and will be required as part of IP Version Six, the next generation. They are also being widely implemented for IP V4. In particular, nearly all vendors of any type of firewall or security software have IPSEC support either shipping or in development. There are also several open source IPSEC projects. Several companies are co-operating in the Secure Wide Area Network (S/WAN) project to ensure that products will interoperate. There is also a VPN Consortium fostering cooperation among companies in this area.

Includes:
X.509 1.5.2, NAT Traversal 0.6b patches

Freeswan is NOT included in this Release.. i've used openswan (www.openswan.org) instead for testing!

The Open Source Network Intrusion Detection System

The Open Source Network Intrusion Detection System

The Open Source Network Intrusion Detection System

The Open Source Network Intrusion Detection System

Uploads your IDS Logfiles to a central database on the web (securityfocus). For further analysis and to be compared against all ids reports worldwide.
ATTENTION:: THIS SOFTWARE IS NOT UNDER A GPL LIKE LICENSE !! READ THE LICENSE AGREEMENT WHICH COMES WITH THE CD !!

Statistic reports are oriented to user and bandwidth control, this
is not a pure cache statistics generator.

php-syslog-ng is a frontend for viewing syslog-ng messages logged to MySQL in realtime. It features customized searches based on device, time, date, priority, and message. The changes in this release are as follows: This release fixed a minor bug using limit GET requests within a PHP header function (it corrects the division by zero error message).
Attention:
I've modified php-syslog a bit (added a few more query options).. so ask me first, in case you're having a problem with phpsyslog !

MIDAS Features:
• Fully centralized Configuration. Minimal Client configuration required.
• The ability to assign any check to any client or multiple clients.
• Clients ability to fail over to multiple servers.
• Support a wide range of checks built in : TCP/UDP port, SNMP OID's, CPU, RAM, Logs, MD5 file check, Processes and External applications (Ie plugins).
• Built in RRD graphing support. The ability to graph almost anything that a check returns (Ie SNMP, CPU, Logs, MD5, etc).
• Fully support Netsaint/Nagios plugins.
• Fully Support Big Brother Clients.
• Optimized Snort NIDS Support. MIDAS does not rely on the built in DB support of Snort. Instead it uses the raw output of the application, stores packet information localy and only sends to the server the specific packet information when an alert occurs. This greatly reduces the overhead of using Snort.

Linux-HA heartbeat package. This package monitors hosts and informs the cluster when one of them dies. It includes Horms's code from "fake" below for IP address takeover. It currently works for 2-node clusters and supports multiple interfaces per node. It supports serial and UDP broadcast/multicast heartbeats.

Webmin is a web-based interface for system administration for Unix. Using any browser that supports tables and forms (and Java for the File Manager module), you can setup user accounts, Apache, DNS, file sharing and so on.

Additional Modules included:

• dansguardian webmin module 0.5.10-pr2
• amavisd webmin module
  

Privoxy is a web proxy with advanced filtering capabilities for protecting privacy, filtering web page content, managing cookies, controlling access, and removing ads, banners, pop-ups and other obnoxious Internet junk. Privoxy has a very flexible configuration and can be customized to suit individual needs and tastes. Privoxy has application for both stand-alone systems and multi-user networks.

DansGuardian is an award winning web content filtering proxy(1) for Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris that uses Squid(2) to do all the fetching. It filters using multiple methods. These methods include URL and domain filtering, content phrase filtering, PICS filtering, MIME filtering, file extension filtering, POST limiting.
The content phrase filtering will check for pages that contain profanities and phrases often associated with pornography and other undesirable content. The POST filtering allows you to block or limit web upload. The URL and domain filtering is able to handle huge lists and is significantly faster than squidGuard.

DeleGate is a multi-purpose application level gateway, or a proxy server which runs on multiple platforms (Unix, Windows, MacOS X and OS/2). DeleGate mediates communication of various protocols (HTTP, FTP, NNTP, SMTP, POP, Telnet, SOCKS, etc.), applying cache and conversion for mediated data, controlling access from clients and routing toward servers. It translates protocols between clients and servers, applying SSL(TLS) to arbitrary protocols, merging several servers into a single server view with aliasing and filtering. Born as a tiny proxy for Gopher in March 1994, it has steadily grown into a general purpose proxy server. Besides beeing a proxy, DeleGate can be used as a simple origin server for some protocols (HTTP, FTP and NNTP).

SS5 is a socks server that implements the SOCKS v4 and v5 protocol. As a proxy server, SS5 authenticates, profiles and processes network requests for clients. It establishes connections to application hosts for client applications. When the client attempts to access the network, the client connects to the SS5 daemon instead of the application host.

Includes:
- openldap profiling
- pam authentication
- Server balance features

Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with DHCP-allocated addresses to appear in the DNS with names configured either in each host or in a central configuration file. Dnsmasq supports static and dynamic DHCP leases and BOOTP for network booting of diskless machines.

* a Domain Name System server (named)
* a Domain Name System resolver library
* tools for verifying the proper operation of the DNS server

The BIND DNS Server is used on the vast majority of name serving machines on the Internet, providing a robust and stable architecture on top of which an organization's naming architecture can be built. The resolver library included in the BIND distribution provides the standard APIs for translation between domain names and Internet addresses and is intended to be linked with applications requiring name service.

syslog-ng, as the name shows, is a syslogd replacement, but with new functionality for the new generation. The original syslogd allows messages only to be sorted based on priority/facility pairs; syslog-ng adds the possibility to filter based on message contents using regular expressions. The new configuration scheme is intuitive and powerful. Forwarding logs over TCP and remembering all forwarding hops makes it ideal for firewalled environments.