search for: secchk

...f). If you've got this many servers I would suggest you install masquerading/NAT firewall with routing turned on one one of them. This would have to be a dual-homed (2 network interfaces) machine. On this you could also run one of the excellent IDS systems out there, (SuSE have they're own secchk), and maybe realtime monitoring of the log files with something like swatch. This can be connected directly to an application level firewall, (again, 2 network interfaces), using squid for HTTP and (tunnelled) FTP and, if necessary SuSE's ftp-proxy if you need better FTP connection. You can run...

.... RPM: hardsuse.rpm SuSE Secumod - This loadable kernel module enhances the security of the system by adding a symlink/hardlink/pipe protection, procfs protection, trusted path execution and capabilities. RPM: secumod.rpm SuSE Secchk - These are cron scripts which run daily, weekly and monthly to check the security of the system and compare them to the last run. RPM: seccheck.rpm Yast-1 - New administration menu for setting password aging, authentic...