橡C16.PDF

Size: px

Start display at page:

Download "橡C16.PDF"

さやなしろみず
5 years ago
Views:

1 Linux (Linux Business Initiative ( ) ) InternetWeek 98 ( ) Internet Week Motoharu Kubo, Japan Network Information Center

2 Linux Q&A

3 Linux( ) BP Software Design UNIX PC UNIX Linux OS 10 Linux OS OS OS OS Linux Business Initiative Linux Linux web 30

4 Linux Linux Linux ( ) ( ) Red Hat TurboLinux Slackware Debian Caldera Linux Slackware Red Hat Debian Red Hat ( ) RedHat 5.2 Red Hat Red Hat /etc Slackware /usr/local/etc Red Hat RPM OK Red Hat

5 RPM Red Hat RPM OK Red Hat Red Hat PC (AT ) (Red Hat 5.2 ) Server (Custom ) PC X X Red Hat SCSI X : CD-ROM FTP updates 4.2 Red Hat 5.2(5.1 ) Server Work

6 Station Server Custom Server NT Server rpm -i X X FTP (Red Hat ) updates (RPM ) sendmail X X

7 ps ax /etc/inetd.conf /etc/hosts.allow 4.2 pwconv5 5.x pwconv telnet Red Hat ps TCP wrapper

8 . WWW WWW UNIX. Linux UNIX UNIX

9 NT OS NT WWW CGI Mac co.jp! CERT Advisory JPNIC NIC DNS JP

10 telnet pop well-known DNS bind bind ps ps ls? telnet FTP POP IMAP FTP FTP WWW HTTP

11 telnet FTP Windows POP IMAP POP IMAP telnet?? : : : WWW WWW TCP/IP Socket??? WWW CGI?

12 ? telnet ( telnet ) SSH telnet 90 telnet POP WWW CGI CGI?

13 JPCERT Linux tcp wrapper Tripwire swatch Linux IP Linux TCP wrapper Tripwire swatch ( )

14 telnet FTP UNIX /etc/passwd /etc/shadow

15 CGI Red Hat /etc/passwd /etc/passwd root:xf4xqo72tyxgy:0:0:root:/root:/bin/bash root: /etc/shadow pwconv5 (4.2) pwconv (5.x) Linux /etc/passwd /etc/shadow shadow root Linux Red Hat PAM Red Hat 4.2 pwconv5( 5 ) Red Hat 5.x pwconv

16 PAM Qualcomm qpopper PAM ( ) ( ) telnet telnet popper APOP telnet telnet r-cmd telnet UNIX telnet telnet rlogin rcp

17 telnet telnet r-cmd root /etc/passwd root su root root root X root (OTP) ( ) OPIE S/Key opie-2.22 logdaemon-5.6 RPM ( ) RPM

18 Secure Shell (SSH) ssh RPM FTP SSH Secure SHell telnet r-cmd rcp RPM OTP v.s. SSH OTP SSH rlogin rsh rcp OTP SSH telnet OTP DHCP IP SSH

19 r-cmd telnet rlogin rsh rcp r-cmd SSH r-cmd r s scp OTP SSH OTP SSH Linux telnet SSH OTP inetd telnet ftp pop imap finger /etc/inetd.conf inetd Linux ps sendmail WWW httpd pop telnet inetd telnet inetd inetd inetd.conf /etc/inetd.conf 1 1 # / tcp wrapper /etc/inetd.conf

20 imap imap #imap stream tcp nowait root /usr/sbin/tcpd imapd stream tcp nowait root /usr/sbin/tcpd imapd inetd SIGHUP inetd.conf telnet pop # inetd.conf TCP wrapper imap imap # imap intetd.conf inetd SIGHUP TCP wrapper (tcpd) /usr/sbin/tcpd /etc/hosts.allow /etc/hosts.deny 2 /etc/hosts.allow man 5 hosts_access TCP wrapper inetd.conf TCP wrapper inetd imap imap inetd TCP wrapper /usr/sbin/tcpd tcpd IP imap tcpd imapd TCP wrapper TCP wrapper tcpd tcpd /etc/hosts.allow /etc/hosts.deny deny allow

21 /etc/hosts.allow ALL: ALL: ALLOW inetd.conf ( / ) ALL: / : ALLOW ALL: ALL: DENY ALL telnet ftp pop / ALLOW ALL:ALL: DENY IP IP

22 ALL: ALL: spawn (/usr/sbin/safe_finger /bin/mail -s "%d-%h" root) &: DENY DENY ALL:ALL DENY finger root telnet popper ALL: / : ALLOW in.ftpd: ALL: ALLOW popper: : ALLOW ALL: ALL: DENY /usr/sbin ftp ftpd in.ftpd ftp popper popper popd popper ( ) popper "ALL: ALL: DENY" popper in.telnetd telnet telnet telnet

23 Phf (WWW ) phf /etc/passwd /var/log/httpd/access_log... "GET/cgi-bin/phf? CERT JPCERT Advisories Phf WWW Apache WWW Phf httpd access_log access_log 400 OK httpd WWW CGI CGI WWW CGI WWW CGI

24 ( ) DNS (named) (sendmail) WWW (httpd) inetd DNS named sendmail Red Hat Slackware /etc/rc.d/rc3.d/ S( ) S80sendmail ( ) "S" "K" /etc/rc.d/rc3.d/ rc3 X xdm S S Start S10 sendmail S K Kill

25 S K _ s /etc/rc.d/rc3.d/ [start stop] Windows Linux sendmail S80sendmail stop 5.2 start stop restart sendmail Red Hat 5.2 Red Hat 4.2 Red Hat 4.2 IP 5.2 Red Hat 5.x

26 tftp finger sunrpc 69/udp 79/tcp 111/tcp,111/udp netbios /tcp snmp exec login shell 161/udp 512/udp 513/tcp t14/tcp telnet imap telnet Linux IP ipfwadm Red Hat 4.2 Linux IP ipfwadm

27 telnet imap telnet DNS NAT/IP IP OCN 16 IP IP IP

28 streamworks UDP IP

29 20

30 /var/log/messages FAIL INVALID /var/log/secure refuse warning last /var/log/maillog /var/log/httpd/access_log WWW " 40" "phf" /var/log/messages FAIL INVALID grep ftp grep /var/log/secure messages refuse warning last last maillog to from to from cc "we do not relay"

31 syslog WWW access_log grep " 40" phf swatch /FAILED/ /INVALID/ mail=admin mail=admin Tripwire swatch /var/log/messages FAILED INVALID perl admin perl perl perl perl M 64M 128M

32 grep /etc/ /bin/ /sbin/ Tripwire Tripwire ( ) /etc/ ( ) /etc/ ( ) ( ) Red Hat /etc/ /etc/ /etc/ /etc/ /var/

34 CERT (1988 ) CERT Advisories CERT Advisories FTP CERT Advisories (ftp://info.cert.org/pub/cert_advisories/) CERT Bulletins (ftp://info.cert.org/pub/cert_bulletins/) CERT Advisories ( ) CERT Bulletins ( ) CERT 1988 CERT Advisories CERT Advisories ftp (IPA) ( (IPA) Linux

35 IPA Excel word (JPCERT/CC) CERT JPCERT/CC JPCERT linux-security-jp Linux CERT Advisories linux-security-jp Windows Linux 7,800 JPCERT CERT Advisories CERT COAST Red Hat FTP ftp://ftp.redhat.com/ FTP

36 CERT Advisories Red Hat FTP Advisories Red Hat URL

37 phf telnet pop3 bind telnet pop bind imap phf mscan telnet pop readme JP telnet Linux bind Linux Linux Linux named root named Linux named root

38 named named DNS DoS OS DoS Denial of Service OS SYN TCP syn SYN SYN SPAM ( ) /etc/mail/ip_allow /etc/mail/relay_allow (5.2) SPAM SPAM

39 sendmail WIDE sendmail Red Hat 5.2 sendmail /etc/mail/ ip_allow relay_allow /etc/mail/ip_allow /etc/mail/relay_allow mydomain.co.jp sendmail "Software Design"

40 PC PC Linux PC Linux PC I O Linux DBMS RDB Linux DB2 Linux

41 VB Delphi Notes Linux Wnn6 dp-note Java Linux IBM sendmail MTA sendmail MTA Cobalt Cube (Q&A)

42 IDG Linux Red Hat Q A Windows-NT UNIX Linux NT UNIX NT Microsoft ( ) Microsoft UNIX Linux UNIX Linux NT UNIX

43 SI Linux Web Linux DOC DOC

44 Linux Case Linux SE

45 9. Q&A : ISP WWW telnet : TCP wrapper telnet SSH Windows TeraTerm SSH SSH telnet : BOF Solaris FreeBSD Linux Linux : Solaris FreeBSD Linux FreeBSD Linux Solaris FreeBSD Linux UNIX Linux FreeBSD Linux

46 OS : TCP/IP TCP wrapper LAN PC TTY :? : : PPP TTY PPP PAP CHAP Radius NTT :

47 : : SSH NT Linux : SSH Data Fellows SSH SSH OK SSH SSH F-Secure : Linux Solaris DiskSuite RAID Linux RAID UPS APC Linux

48 : RAID Linux RAID3 5 RAID WWW OS UPS APC APC Linux UPS Linux UPS RAID UPS : Solaris FreeBSD Linux AT 24 NT Ultra5 Solaris Linux PC UNIX? : PC PC UNIX

49 OS

UCE DOS ( )

Linux Linux (JLA) UCE DOS ( ) Linux Linux Linux? OS Intel PC Sparc PowerPC.. PC note Linux Linux : : ? update Trinux (?) X X canna,wnn,.. (2) svgalib,fb,gtk,qt... NFS,RPC,NIS portmapper(/sbin/portmap)

橡C16.PDF

橡C16.PDF