Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Tom Carroll on July 30, 2001, 06:34:12 PM

Title: Tripwire
Post by: Tom Carroll on July 30, 2001, 06:34:12 PM

I have installed tripwire on my essg and have found that ip-change is run weekly by crontab and makes quite a few changes on the system.

Is the ip-change weekly job necessary for my system if I'm on a fixed IP?

Seeing these waringings from Tripwire for the first time made my stomach turn upside down, until I realized it was the ip-change job that was doing it. :)

Thanks!

Tom

Title: Re: Tripwire
Post by: aniston on July 30, 2001, 06:58:14 PM

hello Tom,

just a general and curious question, how exactly did you analyze the logs of the tripwire program and can the logs be sent via e-mail to the admin of the system.

thanks in advance,
aniston

Title: Re: Tripwire
Post by: Tom Carroll on July 30, 2001, 07:06:58 PM

I set up Tripwire to run each evening with a command line 'tripwire --check' and you can configure to e-mail a copy of the security report to anyone.

When you run tripwire with the --check option it will run an integrity check of the files as outlined in your tw.pol file.

Eventhough essg is the BEST, I wanted to add another layer of security to my server. :)

Tom

Title: Re: Tripwire
Post by: Chris Smith on November 26, 2001, 05:37:30 AM

Tom,

Have you had continued success? Are you able to use Tripwire with SME V5?

Thanks,
Chris