It's hard to believe that such a 'safe' operating system should need...

Discussion in 'Computer Support' started by Chris Gunn, Jan 7, 2006.

  1. Chris Gunn

    Chris Gunn Guest

    ALL THIS:

    SUSE Linux 10.0
    Security
    SUSE Linux 10.0 includes the latest packages to secure your system and your
    home networks. Our complete security tools protect you from viruses, spam
    and even intruder attacks.

    SUSE Firewall
    The integrated SUSE Firewall protects your system from network intruders. It
    installs and activates automatically, ensuring that your system is always
    secure. It also uses Network Address Translation (NAT) for masquerading and
    port-forwarding security techniques.

    AntiVir
    AntiVir is the virus protection for your standalone computer, peer-to-peer
    networks or your individual workstations in the network. It checks, on the
    fly, every data operation and allows manual searches for scanning individual
    files or mapped drives. It also provides on-access scanning of file shares
    by all standard virus scanners.

    SpamAssassin
    SpamAssassin is an intelligent e-mail filter that identifies spam. It uses a
    diverse range of tests to identify unsolicited bulk e-mail; these tests are
    applied to e-mail headers and content to classify e-mail using advanced
    statistical methods. In addition, SpamAssassin has a modular architecture
    that allows other technologies to be quickly wielded against spam and is
    designed for easy integration into virtually any e-mail system.

    Novell AppArmor
    Novell AppArmor, powered by Immunix, is an effective and easy-to-use Linux
    application security system that protects your Linux operating system and
    applications from the effects of attacks, viruses and malicious
    applications. AppArmor is not a firewall or a virus-detection application;
    it is a complete intrusion-prevention system. The special version of
    AppArmor included in SUSE Linux 10.0 provides a valuable preview of AppArmor
    features.

    How on earth can the shameless linux loonies keep a straight face when they
    say none of the above is need and Windows users lie and make things up.

    linuxfux are a disgrace to the honesty and integrity man is known for.
    linuxfux are the leper scabs of the planet earth.
     
    Chris Gunn, Jan 7, 2006
    #1
    1. Advertisements

  2. Chris Gunn

    philo Guest


    the anti-virus is to check *windows* machines on the network
     
    philo, Jan 7, 2006
    #2
    1. Advertisements

  3. Chris Gunn

    kegwasher Guest

    The reason we need SpamAssassin is to clean up after all the crap spewed out
    from zombied windows machines.
     
    kegwasher, Jan 7, 2006
    #3
  4. Chris Gunn

    Rob Hughes Guest

    This is for protection against all the windows zombie machines that got
    pwned because the owner actually believed someone would send them an email
    with "I love you" (or whatever the flavor this week is) in the title.
    Beyond that, think "internet connection sharing". It is, after all, common
    to share a broadband connection between several computers now.
    Not too many linux viruses out there, but handy for finding all the infected
    windows machines on the network. It's also useful for the clueless ones
    that think running as root all the time is a good idea.
    Definitely for filtering spam from pwned windows boxes. I mean, I already
    have all the mutual funds, stocks, viagra, low interest mortgages, etc.,
    that I'll ever need. And a short review of any security site will show that
    many of the trojan writers are now working for various criminal gangs,
    selling access to networks of windows zombies running on broadband
    connections for use in spam, DDoS, etc.
    Again, all systems on the net get attacked. It's nice to know when you're
    being attacked. IPS is a newish technology for stopping attacks at the
    network level, before they have a chance to do any damage. Windows users
    should be especially excited about this, but it's also useful for
    preventing attacks against linux/unix boxes admin'ed by lazy administrators
    that don't keep up with patches.
    Where does it say any of this is required? It's included for those that want
    it. Linux and BSD are the only two OSes I'll allow to connect directly to
    the net without a firewall. I also don't use any anti-virus scanners in "on
    access" mode on any of my linux boxes. I do use one to scan files I get
    that look funky, and when it doesn't trigger, I forward it to the vendor.

    <snip brainless insult>
     
    Rob Hughes, Jan 7, 2006
    #4
  5. Chris Gunn

    Sandman Guest

    This is a really good advocacy argument for a Windows user - the number of
    malware protection software titles there are available for a OS determines how
    "safe" it is. The more titles, the less safe it is.

    Right?

    Oh wait, that's really lousy Windows advocacy, when I think about it. :)
     
    Sandman, Jan 7, 2006
    #5
  6. __/ [Rob Hughes] on Saturday 07 January 2006 13:46 \__

    It is also useful for preventing brute-force attacks which attempt to exploit
    poor password choices on sensitive ports.


    There is a certain expectancy among formar Windows users that AV software
    should be a necessity. Some morons actually pay for AV applications for Palm
    O/S. If you tell the prospective customer that no virus checker or
    protection is in tact, it would seem adverse to logic, at least to them. It
    can become a deterrent.


    SpamAssassin is no protection from O/S-specific attacks. It is also unrelated
    to vulnerabilities. Spam usually comes from infected Windows machines, which
    give brute-force to the mass mailer.


    I should have read the OP's final words before replying to this. I now regret
    this.
     
    Roy Schestowitz, Jan 7, 2006
    #6
  7. Chris Gunn

    Au79 Guest

    Typical Microsoft rant.
     
    Au79, Jan 7, 2006
    #7
  8. Nothing to do with Microsoft, it's the linuxfux like you that are the
    problem.
     
    Reverend Bradford Blackfield-Beddlespear, Jan 7, 2006
    #8
  9. Chris Gunn

    chrisv Guest

    *plonk*
     
    chrisv, Jan 9, 2006
    #9
  10. In comp.os.linux.advocacy, Chris Gunn
    <-up-tormented-hunchback.org>
    wrote
    Not sure if that's strictly necessary or not. Of course
    it's probably an encapsulation of iptables anyway.
    Hmm...wanna bet that's looking for *Windows* viruses?
    Not strictly necessary, though dealing with email isn't
    exactly exciting when half of it's adverts and the other
    half strange-looking base64-encoded crap. (Mailx, of
    course, is so brain-dead it displays them as text...but
    that's its charm. :) )
    Not sure about this one. Presumably, it includes as a
    minimum an md5sum checker for important binaries.
    You're right. We should all go back to Windows XP which,
    sans firewall, might get infected within 2 minutes
    of connection. (10080 minutes per week, 5500 probes
    on port 445 per week. Unknown how many of those probes
    actually have a clue behind them. Were I to bother I could
    probably submit those logs to the relevant authorities who
    could try cross-correlating them with ISP DHCP connection
    logs to identify the subscribers with infected machines.
    But that would be a lot of work.)
     
    The Ghost In The Machine, Jan 9, 2006
    #10
  11. IMO,a lot of this AV/firewall shit from Novell is just placebo software
    to inspire confidence for people coming from insecure operating systems.
     
    George Ellison (undercover), Jan 9, 2006
    #11
  12. IMO,a lot of this AV/firewall shit from Novell is just placebo software
    to inspire confidence for people coming from insecure operating systems.
     
    George Ellison (undercover), Jan 9, 2006
    #12
  13. IMO,a lot of this AV/firewall shit from Novell is just placebo software
    to inspire confidence for people coming from insecure operating systems.
     
    George Ellison (undercover), Jan 9, 2006
    #13
  14. Chris Gunn

    JEDIDIAH Guest

    The firewall has been a part of the Linux kernel for over 10 years.

    The rest is just a matter of being vigilant. Sure, you could get
    away with being completely oblivious to the fact that half of China is
    trying to break into your ssh server. Although you really shouldn't.
     
    JEDIDIAH, Jan 9, 2006
    #14
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.