sender: "Craig White" date: "Mon, Mar 20, 2006 at 07:50:24AM -0700" <<<EOQ
On Mon, 2006-03-20 at 13:33 +0200, Alexandru E. Ungur wrote:
Hi all,
I appologise in advance if this is a little OT, but I am building a box that will serve as firewall and router for a small 'internet cafe / netcafe' and am using CentOS...
So here it is: What are the best tools to be used for keeping the potential script kiddies from 'harming the Internet' :) ? I specifically want to be able to detect and prevent portscans from LAN to Internet, and any other malware activity the clients might think of.
I am particularily interested in 'the CentOS way'. For example I know there is psd module in patch-o-matic for iptables to be able to do the portscan detection in firewall... but, that doesen't feel like 'CentOS way' (because I have to build a cusom kernel) unless there is some kernel (even 3rd part, unsuported/etc.) that already has this in...
Also I know of the portsentry tool, but the project seems pretty much dead after Cisco bought Psyonic... and again is not on up2date's list...
I intend to use Snort, though I hope that it won't share portsentry's fate and become extinct after Check Point's acquisition of Sourcefire will be completed. No FUD intended on this, optimistic views are always highly welcomed :)
Luckily denyhosts has no plans of selling itself to anyone so that's one project I can safely use :)
So, Open Source portscaner for CentOS... anyone... ? :)
Thank you for your time and help,
why not just use a proxy server like squid?
Thank you for the suggestion. Yep, Squid/Oops + Dansguardian, is very good ideea and I'll probably use it.
However how can that stop a kid to download the latest/coolest 'hacking script' and start doing portscans & co. ? I don't want to limit what they can access via web, but to limit what they can 'do to Internet' from their Windows boxes through the gateway I am setting up. I just don't like to have nobody messing on my FORWARD chains that's all ;)
Thanks again, Alex