Author: admin

  • ARPing – Ping using Address Resolution Protocol(ARP)

    ARPing is an utility that can be used to ping using ARP requests instead of using ICMP as used in standard Ping utility.

    Because it involves ARP, arping is limited to the local network to which the server or the interface (if more than one interface) is connected to. ARPing can be quite useful to

    • Check if an IP Address is already in use before assigning to another device
    • Duplicate address detection
    • Update neighbors ARP cache

    (more…)

  • Configure Cisco Port Security on Switches and Router interface

    Cisco Port Security is a features that can help secure access to the physical network. Any Network admins nightmare is an unauthorised device or a PC connecting to the network. This could be as simple as an innocent guest plugging his PC into a floor port hoping to get an internet connection or a malicious intruder connecting to the network trying to gain access to confidential information.

    Consequences could as bad as

    • Virus, Spyware or malware infection from a PC unprotected PC
    • A malicious hacker or an intruder gaining access to the network
    • A malicous attacker launching a Denial of Service attack using MAC Address flooding

    Cisco IOS has the port-security feature which can be used to restrict the MAC-Address of the devices that connects to each of the physical switchports.

    (more…)

  • Arpwatch – Monitor ARP activity and detect ARP Spoofing

    ArpWatch is an opensource tool that monitors ethernet or FDDI network activity in the network and maintains a database of IP Address to MAC address mappings. Arpwatch notify via email if there is a change. Arpwacth is most commonly used to detect ARP Spoofing security issues in the network. Arpwatch can run on most of the Linux distributions,UNIX and Sun Solaris.

    (more…)

  • Firewall Builder – Multiplatform Firewall Configuration Manager

    Firewall Builder is an Opensource multi-vendor Firewall Configuration and Management GUI tool. It uses a set of policy compilers for the different firewalls supported. If you are a Network administrator supporting multiple sites and multiple firewall devices then you would know what difference a central Firewall Manager can make to the day to day task. A Netscreen Security Manager for Junipers or the admin tool for checkpoints is an example, despite these being expensive commercial options from the very own vendors. Firewall Builder on the other hand a hetrogenous, vendor neutral configuration and management tool with support to more than one single platform and an easy design allowing expanding support more platforms.

    Firewall Builder uses object-oriented approach, it helps administrator maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder can generate configuration file for any supported target firewall platform from the same policy created in its GUI. This provides for both consistent policy management solution for heterogeneous environments and possible migration path.

    (more…)

  • Vuurmuur – OpenSource Firewall Manager for Linux IPTables

    Vuurmuur is an Opensource Firewall Manager based on iptables in Linux. Vuurmuur works with both Linux Kernel 2.4 and Linux Kernel 2.6

    Vuurmuur has a simple and easy interface with a nice GUI support for simple to complex configurations. Vuurmuur allows remote administration through SSH or through the system console.

    (more…)

  • ClarkConnect – OpenSource Firewall Intrusion Prevention networking and collabration suite

    ClarkConnect is an all-in-one Opensource networking suite from Point Clark Networks. It is a full blown security suite on one front with Stateful firewall protection, Intrusion Detection and prevention, Maile Gateway with Antivirus, Anti-spam and Anti-phishing support, proxy & web content filtering, peer to peer connection filtering for web protection while is also a networking suite with IPSec and PPTP support, bandwdith and system monitoring and a server with web-server, Database server support, file & print sharing, mail server, system and mail backup. All built on a cut down redhat linux with a good web interface.

    (more…)

  • redWall Firewall – Opensource Linux Firewall using an old PC

    redWall Firewall is a free opensource firewall based on Gentoo linux distribution with Linux Kernel 2.6. redWall firewall runs from a bootable CD-ROM while the configs are saved on a USB Memory stick, Floppy drive or on the Hard Drive. Newer version has support to install the firewall on the Hard Disk. The redWall firewall has a good web interface.

    Reporting on the firewall is based on a MySQL database (except for squid) and so presents the advantage of using the firewall also as a Management console or a logging console so multiple firewalls in the network can report back to the management station or do the logging onto the redWall firewall for better presentation and broader visibility of the whole network security.

    (more…)