Third party security applications

[redpaint]

Are there any similar security packages for FreeBSD?

 

[atomicturtle]

Not really, no

 

[redpaint]

Does that mean that FreeBSD is inherently insecure or just that there aren't enough users of FreeBSD to make it worthwhile to develop security tools?

 

[atomicturtle]

The latter, no OS is at its foundation more or less secure than any of the others. Linux just has a lot of momentum behind it with initiatives like SELinux, Apparmor, and Grsecurity.

 

[PixyPumpkin]

If ASL is installed, is Bastille still necessary or recommendable?

 

[rloaderro]

OSSEC vs Watchdog

Just wondering, since I haven't seen this mentioned anywhere, but how does OSSEC compare against Plesk's Watchdog? I installed OSSEC + WUI but now I am noticing a lot of the features are already covered by watchdog.

- Is it just that OSSEC is much more configurable?
- Can/should the two be used side-by-side for enhanced security - or does OSSEC usurp Watchdog?
- For a basic/small hosting environment is Watchdog enough - or you can never have enough security?

Thanks to anyone who can give me more insight on the above questions!

 

[Brujo]

ossec is a ids and watchdog checks for running services and disk space and if it works rkhunter thats all..

ossec prefent your system for attacks, bruteforce and so on... and if you have configured all the logs and so on you get ride and informations about whats going on on you system... thats much different from watchdog

BRujo

 

[atomicturtle]

I would say the difference between OSSEC and Plesks watchdog (rkhunter 1.2.8) is like the difference between shooting a bullet and throwing one.

 

[Amin Taheri]

If ASL is installed, is Bastille still necessary or recommendable?

ASL and Bastille are not a one or the other kind of thing, I think you should use as many or as few as your comfortable with - but ultimately as many as possible. Bastille helps lock down your system and services, while ASL looks at incoming web requests - so while they do different things both would be advisable if you could.

ossec is a ids and watchdog checks for running services and disk space and if it works rkhunter thats all..

This is pretty close, ossec reports on problems and information that is found in your system logs, asl logs, etc. It will let you know when people are trying stuff. Watchdog in my opinion is nice to have while you are looking for something better, like psmon etc.