[techtalk] Re: ipchains

[Laurel Fan]

Excerpts from linuxchix: 18-Mar-100 Re: ipchains by Jeff at thereactor.cleptosc 
> However, it will only tell you the ports, some information about the
> sequence numbers and guess the OS if you tell it to.  It won't actually
> print out any vulnerabilities or try to break through the firewall.

I've found it interesting to experiment with nmap's different scan
types and figure out what my logs/filters pick up. (it's even got a
decent manpage!)

There's also another scanner which tries to get versions of the
running network daemons, and compares it against its vulnerability
database.  I'll see if I can dig up a name or URL...

There's a series of articles about security at kuro5hin.org, might
be worth a look.  Covers a lot of topics, including firewalls.