it possible to run TripWire with ISP_Config ?

Discussion in 'Installation/Configuration' started by aceyzeriat, Aug 23, 2007.

  1. aceyzeriat

    aceyzeriat New Member

    I am planning to install this TripWire IDS on my FC6. Has someone else already tried, is there any problem with that ?

    thanks and regards,
    Arnaud
     
    aceyzeriat, Aug 23, 2007
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    I would not expect any problems on a ISPConfig server, but I did not tested it.
     
    till, Aug 24, 2007
    #2
  3. aceyzeriat

    aceyzeriat New Member

    I spent a little bit of time on the spec ...
    Tripwire will not interfere with system files, seems to make a complete picture of system files at a given time then just trigger reports in case of undue modifications.

    At worst it would trigger an avalanche of alarms and take months to adapt the script to eliminate false positives.

    I will try as soon as I have a few days.


    Would you recommend another IDS which you tried already ?

    To perfprm installation tests I would like to virtualize a second server on the first one,
    any recommendation ?
    (should I open a specific thread on virtualization ?)

    Thanks and regards,
    Arnaud
     
    aceyzeriat, Aug 24, 2007
    #3
  4. falko

    falko Super Moderator ISPConfig Developer

    For testing purposes, I'd use VMware Server, but for production system, I'd use Xen or OpenVZ.
     
    falko, Aug 25, 2007
    #4

Share This Page