Verified Uploader

Some basic linux pondering...

1 view    1 comment    posted:    
If you are running a Linux box and connect to the net through it, then there is every chance of someone else using or misusing the services running on your system. If someone gets to know your IP, then it does give the attacker an opportunity to be able to use the services or daemons running on various ports of your system for malicious purposes. Thus it has become very important to ensure that you define an access list which controls who all can have access to what services on your system and who all should be blocked or denied access to any of the services on your system. This is where TCP Wrappers and iptables become heroes..

So What Exactly are TCP Wrappers and iptables ?

TCP Wrapper is a host-based networking ACL system, used to filter network access to Internet Protocol servers on Unix based Operating Systems.
Well, basically they act as efficient tools which allow us to define a set of rules called the access control rules. These access control rules control or define which hosts or machines are allowed to access and use the services running on the local machine(where the TCP Wrappers are installed and configured) and which hosts or machines are denied access to these services. So they infact are somewhat (well, quite remotely) something like Firewalls. They check to see who has requested the connection and if the connection request or in amongst the deny list, then he is not allowed to open a connection.

iptables is a user-space application program that allows a system administrator to configure the tables provided by the Linux kernel firewall (implemented as different Netfilter modules) and the chains and rules it stores. i.e iptables are implemented in Kernel space for Linux, working in internet layers, you can extend it's functionality to application layer by using different Modules.Different kernel modules and programs are currently used for different protocols; iptables applies to IPv4, ip6tables to IPv6, arptables to ARP, and ebtables to Ethernet frames.

iptables is also commonly used to inclusively refer to the kernel-level components. It's more like a typical firewall.

For those with Ubuntu based Linux ,iptables is a installed by default.( this is for 8 and later versions)

Besides controlling the access to various services on your system, TCP wrappers also allow you to log and know who is using what service at what time and even for what purpose. The best thing about TCP Wrappers is that they can also be used to set booby traps to catch noobs.

So what should you choose ?? Which is better ?
Well it's often better to use both, for extra layers of security .

TCP wrappers allow you to do things like "allow all connections from *", which you can't do via IPtables.

So a WISE rule-set would be something like:
*Deny all via iptables,
*Allow particular subnet for particular port via iptables, *Allow particular domain to particular service via TCP Wrappers.

With newer version of linux (mainly all those v3.18 and above) have some better security options. Leading ones like Ubuntu and Redhat are giving some preloaded ones too.

All those who are programmers, know that linux is best in terms of security.
Well the latest trends...Windows 10 SP1 will allow you to run Linux on your PC. So that means wider possibilities and better security.rock

Actually to be honest ,the only thing "Linux" that's installed by default is the Windows Subsystem for Linux (WSL).You have to install Ubuntu and the Bash shell .Once installed, you'll be running a user-space version of Ubuntu 14.04 on top of WSL.

Besides being able to run Bash shell commands, you can run Bash scripts, Bash shell tools such as sed, awk, and grep. You can also run tools apt, ssh, rsync, find, grep, awk, sed, sort, xargs, md5sum, gpg, curl, wget, apache, mysql, python, perl, ruby, php, gcc, tar, vim, emacs, diff, patch,etc. directly on Windows. This is a very full Linux development environment that just happens to be running on Windows.

Will people be running a Linux desktop, such as Unity, KDE, or Gnome, on this hybrid Windows Linux software stack as well? That's not the plan. This stack is meant for developers. But, programmers be programmers. Also we'll soon see people trying to port all Linux user-space programs, including desktops, to Windows.
After all we live in this transcending era..

Share this blog entry

To share this blog post use the code below and insert it into comments, status messages, forum posts or your signature.

Blog: Some basic linux pondering...

All Comments

Thanks for the infobiggrin
Report a bug Open chat