Manage Vulnerabilities. Defend Against Threats.
Your IT and Security budgets are tight. This White Paper shows real-world case studies demonstrating the ROI potential of automated penetration testing.
http://findtechinfo.com/penton/nl/178
=== IN FOCUS: Alternative Firmware for Wireless APs: Thibor ====
by Mark Joseph Edwards, News Editor, mark at ntsecurity / net
So far, I've told you about three alternative firmware packages for wireless access points (APs): DD-WRT, OpenWRT, and Talisman. If you missed those stories, you can read them at our Web site at their respective URLs:
http://www.windowsitpro.com/Article/ArticleID/93587
http://www.windowsitpro.com/Article/ArticleID/93747
http://www.windowsitpro.com/Article/ArticleID/93839
Continuing this series, this week, I give you a peek into Thibor. Unlike the previously discussed firmware, Thibor is designed specifically for the Linksys WRT54G, WRT54GL, WRT54GS, and WRTSL54GS routers.
Like the other firmware packages, Thibor is based on the open source code published by Linksys. Thibor is actually a continuation of the firmware package HyperWRT, which started in 2004 and was, as far as I know, maintained until early 2005. When HyperWRT development apparently ceased, two other developers picked up the ball to continue independent development of HyperWRT forks. Eventually the two packages were merged into what became known as Thibor.
Like DD-WRT, OpenWRT, and Talisman, Thibor includes enhancements to the core features available in the Linksys firmware. These include enhancements to the Quality of Service (QoS) traffic shaping, port forwarding, and port triggering subsystems, as well as access restrictions including the blocking of specific services.
Added features include static DHCP leasing, a port redirector, a site survey tool, support for DDNS including the ZoneEdit tool, and Wake-on-LAN capability. In terms of security, Thibor also includes the Dropbear Secure Shell (SSH) server and client as well as enhanced filtering that can block potentially unwanted content, such as Java applets, ActiveX controls, cookies, and P2P software such as BitTorrent, Kazaa, WinMX, Direct Connect (DC), and Gnucleus.
As you might expect, Thibor supports PPTP for VPNs and Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA), and WPA2 for communication encryption, and even supports a number of file systems including NTFS, FAT, FAT32, ReiserFS, Ext2, and Ext3.
In the previous articles of this series, I said that the firmware packages include ipchains firewall software. However, reader Bonno Bloksma wrote to correct me. Iptables ia a much improved successor to ipchains. The firmware packages I've mentioned to date, including Thibor, use iptables. Thanks, Bonno, for pointing out that mistake.
Thibor not only includes iptables but can also be made to use Firewall Builder. Firewall Builder is a GUI-based tool that's designed to make creating iptable firewall policies easier. Firewall Builder creates a script that you copy to the router. The script then configures iptables with the behavior that you've defined. At the Firewall Builder site (at the URL below), you can also see some screenshots of the tool in action.
http://www.fwbuilder.org
Like DD-WRT and Talisman, Thibor (at the first URL below) includes an easy-to-use GUI. Although HyperWRT isn't being maintained anymore, the Web site (at the second URL below)is still active and has a Web-based forum where people can openly discuss problems, request features, and get help using the Thibor firmware.
http://www.thibor.co.uk
http://www.hyperwrt.org
===
Top 10 topics at the upcoming TechX World roadshows:
1. Run Windows commands at the same time as UNIX commands. With SUA, applications can actually mix calling Windows APIs directly and calling into the UNIX APIs.
2. Get a single view of users across your various enterprise repositories.
3. Configure networked Linux systems to accept logins in a secured manner using Windows AD accounts.
4. Improve how you manage access across Windows Terminal Services, UNIX and Linux X Windows, legacy telnet, and even SSH.
5. Address problems with distributed identity management and enhance the security of the network by preventing unauthorized access.
6. Query an LDAP server from AD and manage AD with LDAP. Ensure tighter, more secure interoperability.
7. Set up transactional replication between SQL Server 2005 and Oracle.
8. Create reports that draw data from multiple heterogeneous data sources such as SQL Server and Oracle.
9. Use SSIS to extract and cleanse data from an Oracle database and then load that data to a SQL Server database.
10. Put virtualization tips & tricks to work immediately for security, availability, backup/recovery, and server utilization.
http://www.techxworld.com/?code=1018security
=== SPONSOR: SurfControl