Honeynet Rate Limiting White Paper

John sent in this link to the FreeBSD Toolkit from Linux Central.

There are some good iptables resources at the LinuxGuruz site.

Packet Filtering
John sent in the following links:
Linux Firewall Tools
RedHat Reference Guide For iptables
Linux 2.4 NAT HOWTO

Here is the netfilter site.

vsFTP: Very Secure FTP Server
Engarde Linux vsFTP Howto
vsFTP Packages

djbdns
Daniel J. Bernstein is a professor of mathmatics and computer science at Univerity of Illinois at Chicago. Security is one of his sticking points. He makes a great dns server package called djbdns. Here is an article from one user of djbdns. Here is a domain for djbdns users.

Freesco is a free linux-based replacement for Cisco routers.

Wireless
Here is a good page for 802.11 on Linux information.

Publicfile is a very secure web/ftp server. Defcon uses it for their web server which, as you might imagine, gets it's share of attacks and probes. Publicfile is a project of Daniel J. Bernstein, the author of qmail and djbdns. His web site is at cr.yp.to. DjB is a professor in the Department of Mathematics, Statistics, and Computer Science at the University of Illinois at Chicago. His information on cryptography is quite good.

Apache Worm
A new variant of the Apache worm allows remote control of the system. This worm exploits a mod_ssl bug and can be identified by doing a ps -ax | grep bugtraq (it has the name .bugtraq). The worm acts as a remote 'agent' and can be instructed to execute a UDP flood, TCP Flood, DNS Flood and other goodies including command execution on infected system. The source code is found in /tmp/.bugtraq.c.

Statscout is a FreeBSD based network analyzer on a single boot floppy. Turn any unused PC into an analyzer in minutes.

Red Hat 7.3 Guide to NFS

A decent web page on NFS.

socklist shows a list of ports with bound processes:

[root@silinux root]# socklist
type port inode uid pid fd name
tcp 22 1201 0 781 3 sshd
tcp 22 15011 0 13920 4 sshd

Bastille Linux is a set of scripts for securing Linux.

Kerberos

Kerberos is one of the available methods for centralization of authentication. The primary goal of kerberos is end-to-end password encryption in order to avoid sending plain-text passwords over the wire.

The Red Hat 7.3 manual for Kerberos.

The Kerberos web site at MIT.

The Kerberos information page at Carnegie-Mellon University.

Here is a paper on the ext3 filesystem.