full-disclosure - Application level firewall

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: Andriy.Bilous at sabre-merlin.de (Andriy Bilous)
Subject: Application level firewall

iptables does it. read through man iptables carefully.

Andriy Bilous 
-system administration- 
CCNA, CCNP Certified
dcs DILLON COMMUNICATION SYSTEMS GmbH & Co. KG 
Weidestra?e 122 b 
D-22083 Hamburg 
phone +49 40 27 83 82 184 
fax   +49 40 27 83 82 999 
mailto:andriy.bilous@...re-merlin.de
http://www.sabre-merlin.de


> -----Original Message-----
> From: Jason Freidman [mailto:jason.full-disclosure@...pnski.com]
> Sent: Friday, October 17, 2003 2:02 PM
> To: Full-Disclosure@...ts.netsys.com
> Subject: [Full-Disclosure] Application level firewall
> 
> 
> Is there any sort of application level firewall for linux?  Something
> like Zone alarm where you can trust an application?  I think that
> openBSD has something that allows you to choose which system calls a
> program can run.
> 
> The idea would be to restrict a bind call and connect call 
> using kernel
> modules unless the program is in a config file.  It would 
> make it easier
> (i would think) to lockdown a computer for outgoing 
> connections as well
> as add a new layer of security.
> 
> -- 
> Jason Freidman <jason.full-disclosure@...pnski.com>
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>