U of T campus network security

[Jamon Camisso]

Igor Denisov wrote:
> Hi,
> 
> Soon, I'll be a student at U of T and my linux box will be part of the
> U of T network.
> 
> I'm worried about both crackers and the script kiddie haxxorz that
> might lurk there.
> 
> For those of you that have worked/studied/used a computer at U of T,
> are either of those two types present? Are computers broken
> into/messed around with?
> 

None present in my experience. There is a decent perimeter firewall that 
picks up any unusual activity on known problem ports (trojans, p2p, 
etc.). Internally everyone is off busy with file sharing -- no skiddies 
to worry about.

> What would you suggest I do to secure my linux box (currently SUSE 9.3 Pro)?
> Currently, it has little besides a firewall and an virus scanner (BitDefender).
> 
> I've considered repatrtitioning and separating /, /var, /tmp, /usr,
> and /home and chrooting each service running on my box.

That seems a little drastic. Why not install that IDS that I know you've 
been thinking about. Good practice if nothing else... but then, I 
suppose repartitioning would be too ;)
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml