[NTLUG:Discuss] linux based security tool...recommendation

[MadHat]

On Jan 13, 2004, at 3:02 PM, Richard Geoffrion wrote:
> Are there any tools out there that can be used to evaluate a linux 
> based
> network for security faux-pas?  Maybe one that can compare results 
> after
> being run from outside the network then inside the network?  Of course 
> there
> are always tools like nmap to do port testing...but...what about 
> SATAN? (in
> the church-lady's voice)  Exactly how easy is it to be hacked if one 
> becomes
> a target?
>
> I know everyone has there opinions on necessary security for xy&z..but 
> is
> there a program that lists them and tests them?   What are your 
> opinions on
> the best web site that lists xyz minimum security needed?
>

Bunches.  Nessus (nessus.org) is the defacto security scanner of the 
open source community.  There are other tools built on it.  There are 
also a boatload of one off scanners for specific protocols.  It just 
depends on what you are expecting and what your goal is as to what the 
right tool is.