A reminder to system administrators

Dear system administrators: - install on the supported servers the necessary updates to the operating system, especially security updates; - use firewall and network connection monitors; - check system logs and processes frequently. If your system is still hacked then: - report to the support service of your local network; - if possible, determine the methods of hacking and the presence in the system of "trojans" and "backdoors"; - reinstall the system completely and apply to it all known security patches for the moment. The following are links to relevant resources for various operating systems: FreeBSD: The FreeBSD Security: http://www.freebsd.org/security/ The FreeBSD Security Ports: http://www.freebsd.org/ports/security/security.html The FreeBSD Security Officer: security-officer@FreeBSD.org The FreeBSD Security Patches: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/ OpenBSD: OpenBSD Security: http://www.openbsd.org/security/security.html OpenBSD Errata and Patches: http://www.openbsd.org/errata.html OpenBSD Security Contact: deraadt@openbsd.org NetBSD: NetBSD Security and Patches: http://www.netbsd.org/Security/ NetBSD Security Contact: security-alert@netbsd.org Linux: Linux Administrator's Security Guide: http://www.securityportal.com/lasg/ Linux iInternational Kernel Security Pathes: http://www.kerneli.org/ Linux Kernel: http://www.kernel.org/ Linux Security Audit Project: http://lsap.org/ Linux Security Central: http://www.babel.com.au/del/linux-security.shtml Linux kernel patch from the Openwall Project: http://www.openwall.com/linux/ Linux Bussines Center/Security: http://www.stti-usa.com/security/security.htm Linux Security: http://www.linuxsecurity.com/ Linux Security Home Page: http://stjohnchico.org/~jtmurphy/ Pathches: Debian Security Patches: http://www.debian.org/security/ SuSe Security: http://www.suse.com/en/support/security/index.html SuSe Updates, BugFix, Patches: http://www.suse.com/us/support/download/updates/index.html RedHat Security: http://www.redhat.com/support/errata/ Mandrake Security: http://www.linux-mandrake.com/ru/security.php3 Mandrake Security Patches: http://www.linux-mandrake.com/ru/fupdates.php3 Bastille Unix Security: http://www.linux-mandrake.com/bus/ Slackware Security MailList Archive: http://www.slackware.com/lists/archive/ Sun/Solaris: Sun Security: http://www.sun.com/security/ Sun Security Downloads: http://www.sun.com/security/downloads.html Sun Security Team: http://sunsolve.sun.com/pub-cgi/show.pl?target=security/sec Sun Last Security Bulletin: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/200&type=0&nav=sec.sbl&ttl=sec.sbl Sun Security Bulletin Archive: http://sunsolve.sun.com/pub-cgi/secBulletin.pl Sun Patches Finder/Reccomended Cluster/Report View: http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access Sun Patches FTP-Archive: ftp://sunsolve.sun.com/pub/patches/ Sun Security Contact: security-alert@sun.com Solaris Security FAQ: http://www.sunworld.com/common/security-faq.html HP/HP-UX: HP Patches: http://europe-support2.external.hp.com/common/bin/doc.pl HP Docs: http://docs.hp.com/index.html HP Internet Security Solutions: http://docs.hp.com/hpux/internet/index.html HP Software and Security: http://software.hp.com/ HP Forum, see "security": http://forums.itrc.hp.com/cm/ Compaq/Dec/Tru64Unix/DG-UX: Compaq Sys_Check: http://tru64unix.compaq.com/sys_check/sys_check.html DG-UX Patches: http://ftp1.support.compaq.com/public/Digital_UNIX/ IBM: IBM Download Security/Patches: http://www3.software.ibm.com/download/ IBM Security: http://www.ibm.com/services/e-business/security/security.html IBM Support and choose your Platform: http://www-1.ibm.com/servers/support/ Security analyze, forums, tools SITEs: CERT Advisory: http://www.cert.org/ SANS Consultation Service Inc: http://www.sans.org/ IIS Internet Security Systems: http://www.iss.net/ SecurityFocus: http://www.securityfocus.com/ SecurityPortal: http://www.securityportal.com/ Intrusion detection and prevention software: Nessus - http://www.nessus.org/ NMAP - http://www.insecure.org/nmap/index.html SAINT - http://www.wwdsi.com/saint/ Network Monitoring: EtheReal - http://www.ethereal.com/ Free Firewall: IPFilter - http://coombs.anu.edu.au/~avalon/ip-filter.html SSH & OpenSSH: Secure Shell - http://www.ssh.com/ OpenSSH - http://www.openssh.com/ Anti-Spam Resources: Mail-Abuse - http://www.mail-abuse.com/ ORBS[Anti Open Relay Project] - http://www.orbs.org/ Андрей Лаврентьев, lavr@jinr.ru