Index: S
Symbols
| A
| B
| C
| D
| E
| F
| G
| H
| I
| J
| K
| L
| M
| N
| O
| P
| Q
| R
| S
| T
| U
| V
| W
| X
| Y
| Z
Index: S
- S command (sendmail): 10.6.3. The Set Ruleset Command (TCP/IP Network Administration)
- sabotage (see denial of service attacks)
- SAGE (System Administrators Guild): A.6.4. System Administrators Guild (SAGE) (Building Internet Firewalls)
- B.1. Sources of Information (Network Troubleshooting Tools)
- SAINT (automated system monitoring): 12.4.3. Automated Monitoring (TCP/IP Network Administration)
- sales information: 1.3.1. Documentation (Network Troubleshooting Tools)
- Samba: 17.4.1. Samba (Building Internet Firewalls)
- daemon: 9.3. Using Samba to Share Resources with Windows (TCP/IP Network Administration)
- directory sharing: 9.3.1.2. Sharing directories through Samba (TCP/IP Network Administration)
- name servers: 9.3.2. NetBIOS Name Service (TCP/IP Network Administration)
- overview: 9.3. Using Samba to Share Resources with Windows (TCP/IP Network Administration)
- passwords: 9.3.1. Configuring a Samba Server (TCP/IP Network Administration)
- PC/NFS and: 10.2.1. NFS versus SMB (CIFS) (Managing NFS and NIS)
- printer sharing: 3.5.2. Print Services (TCP/IP Network Administration)
- 9.3.1.3. Sharing printers through Samba (TCP/IP Network Administration)
- server, configuring: 9.3.1. Configuring a Samba Server (TCP/IP Network Administration)
- sample programs, obtaining: 0.5. Obtaining the Example Programs (DNS and Bind)
- samspade tool: A.4. Sources for Tools (Network Troubleshooting Tools)
- sandbox security model: 15.4.3. Java (Building Internet Firewalls)
- Sanitize privacy scripts: 5.5.1. sanitize (Network Troubleshooting Tools)
- A.4. Sources for Tools (Network Troubleshooting Tools)
- SANS Institute: Institute (Building Internet Firewalls) A.6.5. System Administration, Networking, and Security (SANS)
- SAns statistic: 7.6.2.1. BIND 4.9 and 8 statistics (DNS and Bind)
- 8.1.2. Capacity Planning (DNS and Bind)
- SANS (System Administration, Networking and Security) Institute web site: 12.1.2.2. Use the network to distribute information (TCP/IP Network Administration)
- SARA (automated system monitoring): 12.4.3. Automated Monitoring (TCP/IP Network Administration)
- satan scanning tool: 11.4. Security Tools (Network Troubleshooting Tools)
- SATAN (Security Administrator's Tool for Analyzing Networks): 11.6. Running a Security Audit (Building Internet Firewalls)
- B.2.4. SATAN (Building Internet Firewalls)
- diagnostics and: 14.4.5. SATAN (Managing NFS and NIS)
- saturation, network collisions: 17.1.2. Collisions and network saturation (Managing NFS and NIS)
- saturation points: A. Using Input and Output Octets (Essential SNMP)
- saving changes in tkined: 7.2.3.6. Caveats (Network Troubleshooting Tools)
- SAY command (chat): A.3. chat (TCP/IP Network Administration)
- sc command: 12.4.1. How Are Services Managed Under Windows NT? (Building Internet Firewalls)
- scalability
- address translation compared to proxy servers: 4.2.1. Obtaining an IP Address (TCP/IP Network Administration)
- DNS: 3.3. DNS (TCP/IP Network Administration)
- gateway hierarchy: 2.3. Internet Routing Architecture (TCP/IP Network Administration)
- host tables: 3.2. The Host Table (TCP/IP Network Administration)
- scalar objects
- data collection and: 9.2.3.1. Designing collections (Essential SNMP)
- graphing in MRTG: 13.3. Graphing Other Objects (Essential SNMP)
- OIDs: 2.6.1. The get Operation (Essential SNMP)
- 11.2.1. Extensibility for Unix and Windows NT (Essential SNMP)
- scaling
- graphs: 8.4.1.1. mrtg configuration file (Network Troubleshooting Tools)
- scalability vs. raw capacity: 1.3.2.4. Economic considerations (Network Troubleshooting Tools)
- test networks: 9.2. Network Emulators and Simulators (Network Troubleshooting Tools)
- scaninterval (gated): B.6. Interface Statements (TCP/IP Network Administration)
- scanners, security: 11.4. Security Tools (Network Troubleshooting Tools)
- scanning ports: 4.8.1. Port Scanning (Building Internet Firewalls)
- scanning tools
- security and politics: 6.6. Politics and Security (Network Troubleshooting Tools)
- uses: 2.1.7. Scanning Tools (Network Troubleshooting Tools)
- Windows tools: 2.3. Microsoft Windows (Network Troubleshooting Tools)
- SCCS
- map files: 4.2.5. Source code control for map files (Managing NFS and NIS)
- maps, disadvantages: 4.2.5. Source code control for map files (Managing NFS and NIS)
- scheduler in initialization: 2.2.4. Startup Files and Scripts (Network Troubleshooting Tools)
- schema, X.500 and: 2.2.4. X.500 (Managing NFS and NIS)
- scion statistics tool: 8.4. Network-Monitoring Tools (Network Troubleshooting Tools)
- A.4. Sources for Tools (Network Troubleshooting Tools)
- SCM (Service Control Manager): 12.4.1. How Are Services Managed Under Windows NT? (Building Internet Firewalls)
- ScoreBoardFile directives (httpd.conf file): 11.3.4. Defining Where Things Are Stored (TCP/IP Network Administration)
- scorekeepers: 1.2.2.3. Scorekeepers (Building Internet Firewalls)
- scotty management tool
- Microsoft Windows: 6.7.2. Other Tools for Windows (Network Troubleshooting Tools)
- SNMP usage: 7.2.2. scotty (Network Troubleshooting Tools)
- source web site: A.4. Sources for Tools (Network Troubleshooting Tools)
- tkined requirements: 6.5.1.2. Autodiscovery with tkined (Network Troubleshooting Tools)
- scp2: 3.8.2. scp2/sftp Details (SSH, The Secure Shell)
- compatibility with scp1: 7.4.14. SSH1/SSH2 Compatibility (SSH, The Secure Shell)
- debugging: 7.4.15. Logging and Debugging (SSH, The Secure Shell)
- regular expressions: A. SSH2 Manpage for sshregex (SSH, The Secure Shell)
- 12.2.6. Secure Shell (TCP/IP Network Administration)
- scp (Secure Copy Program): 1.4.2. Secure File Transfer (SSH, The Secure Shell)
- 2.2.1. File Transfer with scp (SSH, The Secure Shell)
- 2.2.1. File Transfer with scp (SSH, The Secure Shell)
- 7.5. Secure Copy with scp (SSH, The Secure Shell)
- authentication through local agents: 2.5.3. Agent Forwarding (SSH, The Secure Shell)
- broken features, unexpected behaviors: 12.2.5.1. General client problems (SSH, The Secure Shell)
- command line
- failure of wildcards or shell variables: 12.2.5.4. scp (SSH, The Secure Shell)
- options: 4.1.5.11. scp behavior (SSH, The Secure Shell)
- compile-time configuration: 4.1.5.11. scp behavior (SSH, The Secure Shell)
- copy access to your account, allowing others: 12.2.5.4. scp (SSH, The Secure Shell)
- display of statistics: 4.1.5.11. scp behavior (SSH, The Secure Shell)
- double-remote copying: 2.5.2. A More Complex Passphrase Problem (SSH, The Secure Shell)
- environment variables: 4.1.5.11. scp behavior (SSH, The Secure Shell)
- 7.5.7.1. scp1 statistics (SSH, The Secure Shell)
- error messages
- "Not a regular file": 12.2.5.4. scp (SSH, The Secure Shell)
- "packet too long": 12.2.5.4. scp (SSH, The Secure Shell)
- "Write failed after flushing stdout buffer. write stdout. Broken pipe.": 12.2.5.4. scp (SSH, The Secure Shell)
- failure of copy to remote machine: 12.2.5.4. scp (SSH, The Secure Shell)
- file ownership, preserving in copied files: 12.2.5.4. scp (SSH, The Secure Shell)
- gateway hosts and: 11.5.2. Using SCP Through a Gateway (SSH, The Secure Shell)
- keywords: B.4. ssh and scp Keywords (SSH, The Secure Shell)
- options: B.6. scp Options (SSH, The Secure Shell)
- protocols: 3.8. SSH and File Transfers (scp and sftp) (SSH, The Secure Shell)
- statistics display: 7.5.7. Statistics Display (SSH, The Secure Shell)
- syntax: 2.2.1. File Transfer with scp (SSH, The Secure Shell)
- 7.5.1. Full Syntax (SSH, The Secure Shell)
- troubleshooting wildcards and shell variables: 12.1.2. Server Debugging (SSH, The Secure Shell)
scrambling addresses in data: 5.5.2. tcpdpriv (Network Troubleshooting Tools)
screen captures: 11.1.1. Automating Documentation (Network Troubleshooting Tools)
- 11.5. Microsoft Windows (Network Troubleshooting Tools)
screened hosts
- screened subnets and: 6.5.7. It's Dangerous to Use Both Screened Subnets and Screened Hosts (Building Internet Firewalls)
- architecture of: 6.2. Screened Host Architectures (Building Internet Firewalls)
screened subnets:
6.3. Screened Subnet Architectures (Building Internet Firewalls)
- 12.7. Firewalls (TCP/IP Network Administration)
- screened hosts and: 6.5.7. It's Dangerous to Use Both Screened Subnets and Screened Hosts (Building Internet Firewalls)
- architecture of: 6.3. Screened Subnet Architectures (Building Internet Firewalls)
- 24.1. Screened Subnet Architecture (Building Internet Firewalls)
screening routers: 4.1. What Does a Packet Look Like? (Building Internet Firewalls)
- 4.1. What Does a Packet Look Like? (Building Internet Firewalls)
- 5.2. Packet Filtering (Building Internet Firewalls)
- 6.1.1. Screening Router (Building Internet Firewalls)
- acceptable addresses for: 8.5. Conventions for Packet Filtering Rules (Building Internet Firewalls)
- choosing: 8.8. Choosing a Packet Filtering Router (Building Internet Firewalls)
- configuring: 8.2. Configuring a Packet Filtering Router (Building Internet Firewalls)
- proxy systems: 9. Proxy Systems (Building Internet Firewalls)
- rules for: 8.5. Conventions for Packet Filtering Rules (Building Internet Firewalls)
- where to use: 8.10. Where to Do Packet Filtering (Building Internet Firewalls)
script command file output: 5.4.1. Using tcpdump (Network Troubleshooting Tools)
- 11.1.1. Automating Documentation (Network Troubleshooting Tools)
ScriptAlias directive (httpd.conf file): 11.3.4. Defining Where Things Are Stored (TCP/IP Network Administration)
scripts
- adding to OpenView menus: B.2. Adding a Menu to NNM (Essential SNMP)
- books and resources: B.2.8. Scripting (Network Troubleshooting Tools)
- disk-space checker: 12.5. Disk-Space Checker (Essential SNMP)
- extensible SNMP agents: 7.2.1.8. Agents and traps (Network Troubleshooting Tools)
- languages for device discovery: 6.1.2. Discovery and Mapping Tools (Network Troubleshooting Tools)
- MGEN and: 9.1.2.2. MGEN (Network Troubleshooting Tools)
- port monitoring: 12.6. Port Monitor (Essential SNMP)
- recording logins: 12.2. Who's Logging into My Machine? (I-Am-in) (Essential SNMP)
- 12.2. Who's Logging into My Machine? (I-Am-in)
(Essential SNMP)
- scripting tools
- network management: 6.4. Scripts (Network Troubleshooting Tools)
- network maps and: 6.5. Mapping or Diagramming (Network Troubleshooting Tools)
- startup: 2.2.4. Startup Files and Scripts (Network Troubleshooting Tools)
- system initialization: 5.2.1.1. Understanding /etc/inittab (TCP/IP Network Administration)
- throw core: 12.3. Throw Core (Essential SNMP)
- trap generation: 12.1. General Trap-Generation Program (Essential SNMP)
- Veritas disk check script: 12.4. Veritas Disk Check (Essential SNMP)
SDupQ statistic: 7.6.2.1. BIND 4.9 and 8 statistics (DNS and Bind)
SEAM (Sun Enterprise Authentication Mechanism): 12.5.5.2. SEAM: Kerberos V5 for Solaris (Managing NFS and NIS)
search algorithm: 13.4. The Resolver Search Algorithm and Negative Caching (BIND 8) (DNS and Bind)
search directive: 6.1. The Resolver (DNS and Bind)
- 6.1.3. The search Directive (DNS and Bind)
- E.5.2. search (DNS and Bind)
search entry (resolv.conf file): 8.2.1. The Resolver Configuration File (TCP/IP Network Administration)
search list: 6.1.2. The Search List (DNS and Bind)
- nslookup and: 12.1.3. The Search List (DNS and Bind)
- avoiding with: 12.4. Avoiding the Search List (DNS and Bind)
search option (nslookup): 12.3. Option Settings (DNS and Bind)
search paths, automounter and: 9.6.1. Long search paths (Managing NFS and NIS)
searching
- exhaustive database (see inverse queries)
- for IP addresses: 3.1.2. Finding IP Addresses (DNS and Bind)
- us domain name space: 3.2.3.1. The us domain (DNS and Bind)
SEAS (Solaris Easy Access Server): 8.2. Setting up a diskless client (Managing NFS and NIS)
sec= option (vfstab file): 9.1.3.2. The vfstab and fstab files (TCP/IP Network Administration)
second-level domains: 2.1.2. Domains (DNS and Bind)
- 2.1.2. Domains (DNS and Bind)
- names of: 3.2.2. Where in the World Do I Fit? (DNS and Bind)
secondary directive: E.2.3. secondary (DNS and Bind)
secondary master name servers (see slave name servers)
secondary servers: 3.3.4. BIND, Resolvers, and named (TCP/IP Network Administration)
secondary statements, adding: 4.9. Adding More Zones (DNS and Bind)
SecPanel: 13.4. Other SSH-Related Products (SSH, The Secure Shell)
secrecy in organizations: 1.3.2.1. Professionalism (Network Troubleshooting Tools)
secrecy, keys and passphrases: 2.4.2. Generating Key Pairs with ssh-keygen (SSH, The Secure Shell)
secret field (chap-secrets file): 6.3.4. PPP Daemon Security (TCP/IP Network Administration)
secret-key ciphers: 3.2.2. Public- and Secret-Key Cryptography (SSH, The Secure Shell)
secret key, symmetric key encryption: 12.5.2.1. Symmetric key encryption (Managing NFS and NIS)
secring.gpg file: 12.6.2. Public-Key Encryption Tools (TCP/IP Network Administration)
SECSH (Secure Shell) working group: 1.5. History of SSH (SSH, The Secure Shell)
sec=type option (share command): 9.1.2.1. The share command (TCP/IP Network Administration)
secure channel: 2.2. Remote Terminal Sessions with ssh (SSH, The Secure Shell)
Secure Copy Program (see SCP)
secure HTTP: 8.3.1.2. Web mode (Network Troubleshooting Tools)
secure mode in syslog: 11.2.1.2. Remote logging (Network Troubleshooting Tools)
secure NFS: 12.5.4.1. Old terms: AUTH_DES, secure RPC, and, secure NFS (Managing NFS and NIS)
secure RPC: 12.5.4.1. Old terms: AUTH_DES, secure RPC, and, secure NFS (Managing NFS and NIS)
secure servers, bastion hosts: 12.7. Firewalls (TCP/IP Network Administration)
secure shell (see SSH)
Secure Socket Layer (see SSL)
Secure Socket Layers (SSL): Protocol (SSH, The Secure Shell) 1.6.6. Secure Socket Layer (SSL)
secure syslog tool: 11.2.1.2. Remote logging (Network Troubleshooting Tools)
- A.4. Sources for Tools (Network Troubleshooting Tools)
SecureCRT: 13.3. Table of Products (SSH, The Secure Shell)
- 15. SecureCRT (Windows)
(SSH, The Secure Shell)
- authentication methods: 15.4.1. Mandatory Fields (SSH, The Secure Shell)
- client configuration: 15.2. Basic Client Use (SSH, The Secure Shell)
- data compression: 15.4.2. Data Compression (SSH, The Secure Shell)
- encryption algorithms, specification: 15.4.1. Mandatory Fields (SSH, The Secure Shell)
- forwarding: 15.5. Forwarding (SSH, The Secure Shell)
- identities: 15.3.2. Using Multiple Identities (SSH, The Secure Shell)
- installing: 15.1. Obtaining and Installing (SSH, The Secure Shell)
- key management: 15.3. Key Management (SSH, The Secure Shell)
- keys, generating: 15.3.1. RSA Key Generation Wizard (SSH, The Secure Shell)
- keys, installing: 15.3.1. RSA Key Generation Wizard (SSH, The Secure Shell)
- port forwarding: 15.5.1. Port Forwarding (SSH, The Secure Shell)
- ports: 15.4.1. Mandatory Fields (SSH, The Secure Shell)
- protocols: 15.4.1. Mandatory Fields (SSH, The Secure Shell)
- secure file copy with ZModem: 15. SecureCRT (Windows) (SSH, The Secure Shell)
- session and global options: 15.4. Advanced Client Use (SSH, The Secure Shell)
- Session Options window, mandatory fields: 15.4.1. Mandatory Fields (SSH, The Secure Shell)
- sessions: 15.2. Basic Client Use (SSH, The Secure Shell)
- SOCKS: 15.4.4. Firewall Use (SSH, The Secure Shell)
- TIS authentication: 15.4.3. TIS Authentication (SSH, The Secure Shell)
- troubleshooting: 15.6. Troubleshooting (SSH, The Secure Shell)
- X forwarding: 15.5.2. X Forwarding (SSH, The Secure Shell)
SecureFX: 11.2. FTP Forwarding (SSH, The Secure Shell)
- 13.3. Table of Products (SSH, The Secure Shell)
SecureKoalaTerm: 13.3. Table of Products (SSH, The Secure Shell)
securenets file: 12.3.2.1. The secure nets file (Managing NFS and NIS)
secure_zone records: 11.2.2.2. Restricting queries in a particular zone (DNS and Bind)
SecurID
- authentication using: 3.4.2.5. One-time passwords (SSH, The Secure Shell)
- 5.5.1.9. SecurID authentication (SSH, The Secure Shell)
- compile-time configuration: 4.1.5.7. Authentication (SSH, The Secure Shell)
security (see also security issues):
- 11. Security (DNS and Bind)
- 1.5. What Is an Internet Firewall? (Building Internet Firewalls)
- 7.2. Security Concerns (Essential SNMP)
- A.3. chat (TCP/IP Network Administration)
- of BSD r commands: 18.2.1. BSD "r" Commands (Building Internet Firewalls)
- on Unix/Linux: 18.2.1. BSD "r" Commands (Building Internet Firewalls)
- on Windows: 18.2.1.1. BSD "r" commands under Windows NT (Building Internet Firewalls)
- of computer games: 23.2. Games (Building Internet Firewalls)
- of database protocols: 23.1.1. Locating Database Servers (Building Internet Firewalls)
- of email: 16.1.1. Keeping Mail Secret (Building Internet Firewalls)
- of FTP: 17.1.4. Providing Anonymous FTP Service (Building Internet Firewalls)
- of ICMP: 22.4. ICMP and Network Diagnostics (Building Internet Firewalls)
- of Java: 15.4.3. Java (Building Internet Firewalls)
- of JavaScript: 15.4.1. JavaScript (Building Internet Firewalls)
- of lpr and lp printing systems: 17.6.1. lpr and lp (Building Internet Firewalls)
- of Net8: 23.1.3.1. Security implications of SQL*Net and Net8 (Building Internet Firewalls)
- of NetBT name service: 20.3.6. Security Implications of NetBT Name Service and WINS (Building Internet Firewalls)
- of NIS: 20.2. Network Information Service (NIS) (Building Internet Firewalls)
- of NNTP: 16.9. Network News Transfer Protocol (NNTP) (Building Internet Firewalls)
- of passwords: 21.2. Passwords (Building Internet Firewalls)
- of PostScript printers: 17.6. Printing Protocols (Building Internet Firewalls)
- of programs
- indicators of: 13.5.3. Real Indicators of Security (Building Internet Firewalls)
- evaluating: 13.5. Choosing Security-Critical Programs (Building Internet Firewalls)
- of protocols: C.4. What Makes a Protocol Secure? (Building Internet Firewalls)
- proxying and: 13.4.5. Protocol Security (Building Internet Firewalls)
- of push technologies: 15.6. Push Technologies (Building Internet Firewalls)
- of rdist: 22.6.1. rdist (Building Internet Firewalls)
- of remote graphical interfaces
on Windows operating systems: 18.3.2. Remote Graphic Interfaces for Microsoft Operating Systems (Building Internet Firewalls)
- of routing protocols: 22.2. Routing Protocols (Building Internet Firewalls)
- of Sendmail: 16.2.7. Sendmail (Building Internet Firewalls)
- of SQL*Net: 23.1.3.1. Security implications of SQL*Net and Net8 (Building Internet Firewalls)
- of SSH: 18.2.5.1. What makes SSH secure? (Building Internet Firewalls)
- of VBScript: 15.4.2. VBScript (Building Internet Firewalls)
- of Windows Browser: 20.4.4. Security Implications of the Windows Browser (Building Internet Firewalls)
- of WINS: 20.3.6. Security Implications of NetBT Name Service and WINS (Building Internet Firewalls)
- of X Window System: 18.3.1. X11 Window System (Building Internet Firewalls)
- access control
- language extensions: 12.5.1.3. Optional access control language extensions (TCP/IP Network Administration)
- overview: 12.5. Access Control (TCP/IP Network Administration)
- shell command: 12.5.1.2. Defining an optional shell command (TCP/IP Network Administration)
- tcpd: 12.5.1.1. tcpd access control files (TCP/IP Network Administration)
- account permissions: 2.4.3. Installing a Public Key on an SSH ServerMachine (SSH, The Secure Shell)
- aclok option (share command): 9.1.2.1. The share command (TCP/IP Network Administration)
- ACLs: 12.4.8. Access control lists (Managing NFS and NIS)
- ActiveX and: 15.4.4. ActiveX (Building Internet Firewalls)
- address spoofing: 4.2.1. Obtaining an IP Address (TCP/IP Network Administration)
- address translation: 4.2.1. Obtaining an IP Address (TCP/IP Network Administration)
- against system failure: 3.5. Fail-Safe Stance (Building Internet Firewalls)
- anonymous users, mapping: 12.4.3. Unknown user mapping (Managing NFS and NIS)
- applications
- removing unnecessary: 12.3.1. Remove Unnecessary Software (TCP/IP Network Administration)
- updating: 12.3.2. Keep Software Updated (TCP/IP Network Administration)
- asymmetric key encryption: 12.5.2.2. Asymmetric key encryption (Managing NFS and NIS)
- audit: 10.10.7. Running a Security Audit (Building Internet Firewalls)
- on Unix: 11.6. Running a Security Audit (Building Internet Firewalls)
- AUTH_DH: 12.5.4. AUTH_DH: Diffie-Hellman authentication (Managing NFS and NIS)
- authentication: 12.2. How secure are NIS and NFS? (Managing NFS and NIS)
- shadow password files: 12.2.1. The Shadow Password File (TCP/IP Network Administration)
- ssh: 12.2.6. Secure Shell (TCP/IP Network Administration)
- authentication-failure traps: 7.1. Parameter Settings (Essential SNMP)
- AUTH_SYS security flavor: 12.2. How secure are NIS and NFS? (Managing NFS and NIS)
- of backups: 10.12. Protecting the Machine and Backups (Building Internet Firewalls)
- bastion host speed and: 10.3.2. How Fast a Machine? (Building Internet Firewalls)
- BIND and
- features of: 3.1. Getting BIND (DNS and Bind)
- patches for: 3.1. Getting BIND (DNS and Bind)
- books on: A.9. Books (Building Internet Firewalls)
- chat: A.3. chat (TCP/IP Network Administration)
- of checksums: 27.5.3. Keeping Secured Checksums (Building Internet Firewalls)
- choke points: 24.1.4.3. Choke point (Building Internet Firewalls)
- 24.2.4.3. Choke point (Building Internet Firewalls)
- choosing hosts and: 8.1.1. Where Do I Put My Name Servers? (DNS and Bind)
- community strings: 2.2. SNMP Communities (Essential SNMP)
- 7.2. Security Concerns (Essential SNMP)
- cryptography: 12.5.2. Brief introduction to cryptography (Managing NFS and NIS)
- DCE/DFS: 12.2. How secure are NIS and NFS? (Managing NFS and NIS)
- dedicated connections and: 6.3.1. The PPP Daemon (TCP/IP Network Administration)
- default deny stance: 8.2.3. Default Permit Versus Default Deny (Building Internet Firewalls)
- default permit stance: 8.2.3. Default Permit Versus Default Deny (Building Internet Firewalls)
- defense in depth: 24.1.4.2. Defense in depth (Building Internet Firewalls)
- 24.2.4.2. Defense in depth (Building Internet Firewalls)
- designing for network: 1.6.1. Buying Versus Building (Building Internet Firewalls)
- distributing responsibility: 12.1.2. Distributed Control (TCP/IP Network Administration)
- subnets: 12.1.2.1. Use subnets to distribute control (TCP/IP Network Administration)
- diversity of defense: 3.7. Diversity of Defense (Building Internet Firewalls)
- 24.1.4.7. Diversity of defense (Building Internet Firewalls)
- 24.2.4.7. Diversity of defense (Building Internet Firewalls)
- of DNS: 20.1.4. DNS Security Problems (Building Internet Firewalls)
- drills for, practicing: 27.5.7. Doing Drills (Building Internet Firewalls)
- encryption: 12.6. Encryption (TCP/IP Network Administration)
- public key: 12.6. Encryption (TCP/IP Network Administration)
- public key tools: 12.6.2. Public-Key Encryption Tools (TCP/IP Network Administration)
- stunnel: 12.6.2.1. stunnel (TCP/IP Network Administration)
- symmetric: 12.6.1. When Is Symmetric Encryption Useful? (TCP/IP Network Administration)
- extension scripts and: 11.2.1. Extensibility for Unix and Windows NT (Essential SNMP)
- fail-safe stance: 24.1.4.5. Fail-safe stance (Building Internet Firewalls)
- 24.2.4.5. Fail-safe stance (Building Internet Firewalls)
- filesystem access: 12.4.4. Access to filesystems (Managing NFS and NIS)
- firewalls: 12.4.7. Using NFS through firewalls (Managing NFS and NIS)
- 11.3. DNS and Internet Firewalls (DNS and Bind)
- 7.2. Security Concerns (Essential SNMP)
- filtering routers: 12.7.2. Filtering Traffic with iptables (TCP/IP Network Administration)
- functions of: 12.7.1. Functions of the Firewall (TCP/IP Network Administration)
- iptables command: 12.7.2.1. Defining iptables filter rules (TCP/IP Network Administration)
- overview: 12.7. Firewalls (TCP/IP Network Administration)
- future of: 7.6.2. Security (Managing NFS and NIS)
- host: 1.4.3. Host Security (Building Internet Firewalls)
- of HTTP: 15.1. HTTP Server Security (Building Internet Firewalls)
- incident response teams (see incident response teams)
- incidents (see incidents)
- information resources: 12.1.2.2. Use the network to distribute information (TCP/IP Network Administration)
- Internet connection considerations: 4.1. Connected and Non-Connected Networks (TCP/IP Network Administration)
- IPsec: 12.5.3. NFS and IPSec (Managing NFS and NIS)
- of IRC: 19.1. Internet Relay Chat (IRC) (Building Internet Firewalls)
- Kerberos V5: 12.5.5. RPCSEC_GSS: Generic security services for RPC (Managing NFS and NIS)
- lack of: 1.4. How Can You Protect Your Site? (Building Internet Firewalls)
- LDAP and: 12.2. How secure are NIS and NFS? (Managing NFS and NIS)
- least privilege: 24.1.4.1. Least privilege (Building Internet Firewalls)
- 24.2.4.1. Least privilege (Building Internet Firewalls)
- legal responsibilities: 25.2.3. External Factors That Influence Security Policies (Building Internet Firewalls)
- limiting requests to agents: 7.2. Security Concerns (Essential SNMP)
- 7.3.4.2. Creating a configuration by hand (Essential SNMP)
- login restrictions: 12.1. User-oriented network security (Managing NFS and NIS)
- of machine: 10.9. Securing the Machine (Building Internet Firewalls)
- Unix/Linux: 11.2.1. Setting Up System Logs on Unix (Building Internet Firewalls)
- Windows NT: 12.3.1. Setting Up System Logs Under Windows NT (Building Internet Firewalls)
- MACs: 12.5.2.4. One-way hash functions and MACs (Managing NFS and NIS)
- maps, private: 12.3.2. Making NIS more secure (Managing NFS and NIS)
- methods for remote account access: 1. Introduction to SSH (SSH, The Secure Shell)
- models: 1.4.2. Security Through Obscurity (Building Internet Firewalls)
- modem pools: 6.6. Terminal Servers and Modem Pools (Building Internet Firewalls)
- for name servers: 11.2. Securing Your Name Server (DNS and Bind)
- netacl: 11.4.1.2. Using netacl to protect services (Building Internet Firewalls)
- netgroups: 12.1.3. Using netgroups (Managing NFS and NIS)
- networks
- insecure: 6.7.2. Insecure Networks (Building Internet Firewalls)
- protecting: 6.7. Internal Firewalls (Building Internet Firewalls)
- NFS: 12.4. NFS security (Managing NFS and NIS)
- future of: 12.5.7. NFS security futures (Managing NFS and NIS)
- increasing: 12.5. Stronger security for NFS (Managing NFS and NIS)
- increasing, transition: 12.5.6. Planning a transition from NFS/sys to stronger NFS security (Managing NFS and NIS)
- levels: 12.2. How secure are NIS and NFS? (Managing NFS and NIS)
- RPC: 12.4.1. RPC security (Managing NFS and NIS)
- superuser mapping: 12.4.2. Superuser mapping (Managing NFS and NIS)
- version 4 and: 7.6.1. NFS Version 4 (Managing NFS and NIS)
- NIS
- increasing: 12.3.2. Making NIS more secure (Managing NFS and NIS)
- passwords: 12.3. Password and NIS security (Managing NFS and NIS)
- NIS+ and: 2.2.3. NIS+ (Managing NFS and NIS)
- NIS levels: 12.2. How secure are NIS and NFS? (Managing NFS and NIS)
- one-way hash functions: 12.5.2.4. One-way hash functions and MACs (Managing NFS and NIS)
- operating system bugs: 10.9.2. Fix All Known System Bugs (Building Internet Firewalls)
- passwords
- one-time: 12.2.3. One-Time Passwords (TCP/IP Network Administration)
- OPIE: 12.2.4. OPIE (TCP/IP Network Administration)
- selecting: 12.2.2. Choosing a Password (TCP/IP Network Administration)
- per-account configuration: 8.1. Limits of This Technique (SSH, The Secure Shell)
- performance and: 12.5.5.4. Security and performance (Managing NFS and NIS)
- planning, overview: 12.1. Security Planning (TCP/IP Network Administration)
- policies, creating: 12.1.3. Writing a Security Policy (TCP/IP Network Administration)
- policies for: 1.5.1.1. A firewall is a focus for security decisions (Building Internet Firewalls)
- 25. Security Policies (Building Internet Firewalls)
- reviewing: 25.1.1.6. Provision for reviews (Building Internet Firewalls)
- polling over the Internet: 3.2. NMS Architectures (Essential SNMP)
- of POP: 16.6. Post Office Protocol (POP) (Building Internet Firewalls)
- port monitoring: 12.4.6. Port monitoring (Managing NFS and NIS)
- PPP: 6.3.4. PPP Daemon Security (TCP/IP Network Administration)
- private keys: 12.5.4.6. Public and private keys (Managing NFS and NIS)
- proxy servers: 4.2.1. Obtaining an IP Address (TCP/IP Network Administration)
- public key exchange: 12.5.2.3. Public key exchange (Managing NFS and NIS)
- public keys: 12.5.4.6. Public and private keys (Managing NFS and NIS)
- queries, restricting: 11.2.2. Restricting Queries (DNS and Bind)
- r commands (Unix): 12.2.5. Secure the r Commands (TCP/IP Network Administration)
- disabling: 12.2.6. Secure Shell (TCP/IP Network Administration)
- read-only access: 12.4.5. Read-only access (Managing NFS and NIS)
- refused queries and: 12.7.4. Query Refused (DNS and Bind)
- remote logins: 1.4.1. Secure Remote Logins (SSH, The Secure Shell)
- resolvers and: 11.2.5.2. "Resolving" name server configuration (DNS and Bind)
- resources: 12.8. Words to the Wise (TCP/IP Network Administration)
- A. Resources (Building Internet Firewalls)
- response from unexpected source message: 7.6.1. Common Syslog Messages (DNS and Bind)
- risks: 4.1. Connected and Non-Connected Networks (TCP/IP Network Administration)
- types of: 12.1.1. Assessing the Threat (TCP/IP Network Administration)
- RPC: 12.4.1. RPC security (Managing NFS and NIS)
- RPC/DH: 12.5.4.3. How RPC/DH works (Managing NFS and NIS)
- RPCSEC_GSS: 12.5.5. RPCSEC_GSS: Generic security services for RPC (Managing NFS and NIS)
- Samba, encrypted passwords: 9.3.1. Configuring a Samba Server (TCP/IP Network Administration)
- sandbox model: 15.4.3. Java (Building Internet Firewalls)
- SATAN: 14.4.5. SATAN (Managing NFS and NIS)
- SEAM: 12.5.5.2. SEAM: Kerberos V5 for Solaris (Managing NFS and NIS)
- securenets file: 12.3.2.1. The secure nets file (Managing NFS and NIS)
- services: 12.5.1. Security services (Managing NFS and NIS)
- session keys: 12.5.4.8. Establishing a session key (Managing NFS and NIS)
- setuid executables and: 12.4.2. Superuser mapping (Managing NFS and NIS)
- simplicity of: 3.8. Simplicity (Building Internet Firewalls)
- SMB (CIFS): 12.2. How secure are NIS and NFS? (Managing NFS and NIS)
- of SNMP: 22.1.2. Simple Network Management Protocol (SNMP) (Building Internet Firewalls)
- 7.2. Security Concerns (Essential SNMP)
- F. SNMPv3 (Essential SNMP)
- SNMPv3 and: 7.2. Security Concerns (Essential SNMP)
- F.1. Changes in SNMPv3 (Essential SNMP)
- Cisco routers: F.2.1. Configuring SNMPv3 for a Cisco Router (Essential SNMP)
- encryption: F.1.1. The SNMPv3 Engine (Essential SNMP)
- F.2.1. Configuring SNMPv3 for a Cisco Router (Essential SNMP)
- levels: F.1.4. SNMPv3 Textual Conventions (Essential SNMP)
- Net-SNMP: F.2.2. Configuring SNMPv3 for Net-SNMP (Essential SNMP)
- USM: F.1.4. SNMPv3 Textual Conventions (Essential SNMP)
- ssh: 12.2.6. Secure Shell (TCP/IP Network Administration)
- strategies for: 3. Security Strategies (Building Internet Firewalls)
- symmetric key encryption: 12.5.2.1. Symmetric key encryption (Managing NFS and NIS)
- system monitoring: 12.4.1. Know Your System (TCP/IP Network Administration)
- find command: 12.4.2.1. Checking files (TCP/IP Network Administration)
- intruder detection: 12.4.2. Looking for Trouble (TCP/IP Network Administration)
- login activity: 12.4.2.2. Checking login activity (TCP/IP Network Administration)
- TCP Wrapper: 11.4.1. Using the TCP Wrapper Package to Protect Services (Building Internet Firewalls)
- terminal servers: 6.6. Terminal Servers and Modem Pools (Building Internet Firewalls)
- time information and: 22.5. Network Time Protocol (NTP) (Building Internet Firewalls)
- trusted hosts: 12.1.1. Trusted hosts and trusted users (Managing NFS and NIS)
- 12.2.5. Secure the r Commands (TCP/IP Network Administration)
- trusted users: 12.1.1. Trusted hosts and trusted users (Managing NFS and NIS)
- UIDs: 12.3.3. Unknown password entries (Managing NFS and NIS)
- universal participation: 3.6. Universal Participation (Building Internet Firewalls)
- 24.1.4.6. Universal participation (Building Internet Firewalls)
- 24.2.4.6. Universal participation (Building Internet Firewalls)
- user authentication: 12.2. User Authentication (TCP/IP Network Administration)
- user-oriented: 12.1. User-oriented network security (Managing NFS and NIS)
- vendors, information mailing lists: 12.1.2.2. Use the network to distribute information (TCP/IP Network Administration)
- violations: 2.3.1. Known Hosts (SSH, The Secure Shell)
- 3.1.2. Integrity (SSH, The Secure Shell)
- viruses: 12.6. Viruses (Managing NFS and NIS)
- vulnerabilities of: 11.2.1. BIND Version (DNS and Bind)
- weakest link: 3.4. Weakest Link (Building Internet Firewalls)
- 24.1.4.4. Weakest link (Building Internet Firewalls)
- 24.2.4.4. Weakest link (Building Internet Firewalls)
- web servers
- CGI scripts: 11.4.1. The CGI and SSI Threat (TCP/IP Network Administration)
- overview: 11.4. Web Server Security (TCP/IP Network Administration)
- SSI: 11.4.1. The CGI and SSI Threat (TCP/IP Network Administration)
- when proxying is ineffective: 9.8.2. Proxying Won't Secure the Service (Building Internet Firewalls)
- when system crashes: 10.12.1. Watch Reboots Carefully (Building Internet Firewalls)
- of whois service: 20.7.2. whois (Building Internet Firewalls)
- zone data, importance of backups for: 4.8.2. Backup Files (DNS and Bind)
- zone transfers, preventing unauthorized: 11.2.3. Preventing Unauthorized Zone Transfers (DNS and Bind)
- zones, Internet Exporer and: 15.2.5. Internet Explorer and Security Zones (Building Internet Firewalls)
security category: 7.5.3.1. BIND 8 categories (DNS and Bind)
security configuration files: 2.2.5.2. Security files (Network Troubleshooting Tools)
security issues
- books and resources: B.2.7. Security (Network Troubleshooting Tools)
- challenge response systems: 11.1.2. vnc (Network Troubleshooting Tools)
- compromised ps command: 2.1.7. Scanning Tools (Network Troubleshooting Tools)
- discovery tools and: 6.6. Politics and Security (Network Troubleshooting Tools)
- egos and: 1.3.2.2. Ego management (Network Troubleshooting Tools)
- expn and vrfy telnet commands: 10.1.1. Email (Network Troubleshooting Tools)
- levels in syslog: 11.2.1.1. Configuring syslog (Network Troubleshooting Tools)
- network management software: 6.1.1. Characteristics of Management Software (Network Troubleshooting Tools)
- packet capture and: 5. Packet Capture (Network Troubleshooting Tools)
- 5.7. Dark Side of Packet Capture (Network Troubleshooting Tools)
- ping and DOS attacks: 3.3.3.1. Security and ICMP (Network Troubleshooting Tools)
- protecting networks: 5.7.2. Protecting Yourself (Network Troubleshooting Tools)
- secrecy and: 1.3.2.1. Professionalism (Network Troubleshooting Tools)
- security tools: 11.4. Security Tools (Network Troubleshooting Tools)
- cops: 11.4. Security Tools (Network Troubleshooting Tools)
- iss: 11.4. Security Tools (Network Troubleshooting Tools)
- nmap: 11.4. Security Tools (Network Troubleshooting Tools)
- portscan: 11.4. Security Tools (Network Troubleshooting Tools)
- sanitize: 5.5.1. sanitize (Network Troubleshooting Tools)
- satan: 11.4. Security Tools (Network Troubleshooting Tools)
- system integrity checkers: 11.4. Security Tools (Network Troubleshooting Tools)
- tcpdpriv tool: 5.5.2. tcpdpriv (Network Troubleshooting Tools)
- tcpwrappers: 11.2.3.1. tcpwrappers (Network Troubleshooting Tools)
- 11.4. Security Tools (Network Troubleshooting Tools)
- tripwire: 11.4.1. tripwire (Network Troubleshooting Tools)
- segmented networks and: 5.2. Access to Traffic (Network Troubleshooting Tools)
- Smurf attacks: 3.3.3.2. Smurf Attacks (Network Troubleshooting Tools)
- SNMP security: 7.1. Overview of SNMP (Network Troubleshooting Tools)
- ssh tools: 11.1.3. ssh (Network Troubleshooting Tools)
- switches and: 5.7.1. Switch Security (Network Troubleshooting Tools)
- syslog files: 11.2.1.1. Configuring syslog (Network Troubleshooting Tools)
- TCP streams and: 5.6.1.1. Using ethereal (Network Troubleshooting Tools)
- testing firewalls: 12.2.1.1. Firewall testing (Network Troubleshooting Tools)
- web server configuration: 10.1.2. HTTP (Network Troubleshooting Tools)
- Windows and packet capture tools: 5.8. Microsoft Windows (Network Troubleshooting Tools)
security manager (Java): 15.4.3. Java (Building Internet Firewalls)
security parameter (smb.config file): 9.3.1. Configuring a Samba Server (TCP/IP Network Administration)
security roots: 11.4.5.1. Security roots (DNS and Bind)
Security Subsystem (SNMPv3): F.1.1. The SNMPv3 Engine (Essential SNMP)
security threats
- countered by SSH: 3.10. Threats SSH Can Counter (SSH, The Secure Shell)
- dictionary attack: 2.4.3. Installing a Public Key on an SSH ServerMachine (SSH, The Secure Shell)
- not countered by SSH: 3.11. Threats SSH Doesn't Prevent (SSH, The Secure Shell)
seed devices: 6.2. Castle Rock's SNMPc Enterprise Edition (Essential SNMP)
- 6.2.2. Discovery and Filters (Essential SNMP)
seed files: 6.1.2. The netmon Process (Essential SNMP)
seeds: 3.7. Randomness (SSH, The Secure Shell)
segment header: Appendix g.2. TCP Segment Header (TCP/IP Network Administration)
segmenting networks: 5.2. Access to Traffic (Network Troubleshooting Tools)
segments: 1.3. TCP/IP Protocol Architecture (TCP/IP Network Administration)
- format: 1.6.2. Transmission Control Protocol (TCP/IP Network Administration)
- TCP headers: 1.6.2. Transmission Control Protocol (TCP/IP Network Administration)
SELECT command (IMAP): 3.4.3. Internet Message Access Protocol (TCP/IP Network Administration)
selector fields in syslog configuration: 11.2.1.1. Configuring syslog (Network Troubleshooting Tools)
self-decrypting archives: 16.1.1. Keeping Mail Secret (Building Internet Firewalls)
semicolon (;) starting comments: 4.2.2. Comments (DNS and Bind)
- 4.3. Setting Up a BIND Configuration File (DNS and Bind)
- A.1. Master File Format (DNS and Bind)
- E.5.4. ; and # (4.9+)
(DNS and Bind)
- in resolv.conf file: 6.1.7. Comments (DNS and Bind)
send command (dip): 6.3.2. Dial-Up PPP (TCP/IP Network Administration)
- A.1.1. The dip Script File (TCP/IP Network Administration)
send (gated): B.4. Trace Statements (TCP/IP Network Administration)
send queues, displaying with netstat: 2.1.3. netstat (Network Troubleshooting Tools)
send utilization (If%util): A. Using Input and Output Octets (Essential SNMP)
sendbuffer parameter (gated): B.8.4. The bgp Statement (TCP/IP Network Administration)
Sender fields (sendmail): 10.5.8. Defining Mailers (TCP/IP Network Administration)
sending email with telnet: 10.1.1. Email (Network Troubleshooting Tools)
sending traps: 10.3. Sending Traps (Essential SNMP)
- Cisco devices: 7.3.6.2. Advanced configuration (Essential SNMP)
- forcing: 10.3.5. Forcing Your Hardware to Generate Traps (Essential SNMP)
- hooks in programs: 10.3.6. Using Hooks with Your Programs (Essential SNMP)
- Net-SNMP: 10.3.4. Sending Traps with Net-SNMP (Essential SNMP)
- F.2.2.3. Sending SNMPv3 traps with Net-SNMP (Essential SNMP)
- OpenView: 10.3.1. Sending Traps with OpenView (Essential SNMP)
- Perl: 10.3.2. Sending Traps with Perl (Essential SNMP)
- SNMPv3: F.1.2. SNMPv3 Applications (Essential SNMP)
- F.2.2.3. Sending SNMPv3 traps with Net-SNMP (Essential SNMP)
- testing: 10.3.5. Forcing Your Hardware to Generate Traps (Essential SNMP)
- Trap Generator: 10.3.3. Sending Traps with Network Computing Technologies Trap Generator (Essential SNMP)
Sendmail: 2.3.1. Electronic Mail (Building Internet Firewalls)
- 2.3.1. Electronic Mail (Building Internet Firewalls)
- 3.1. Least Privilege (Building Internet Firewalls)
- 16.2.7. Sendmail (Building Internet Firewalls)
- Morris worm: 13.2.2. What Data Does the Protocol Transfer? (Building Internet Firewalls)
- 13.2.3.1. Does it have any other commands in it? (Building Internet Firewalls)
sendmail process
- checking running processes: 11.1. Net-SNMP (Essential SNMP)
- monitoring: 7.3.5.2. Advanced configuration (Essential SNMP)
sendmail.cf file: 6.3.2. Electronic Mail (DNS and Bind)
- 6.3.3. Updating .rhosts, hosts.equiv, etc. (DNS and Bind)
- configuring: E.4. More sendmail.cf (TCP/IP Network Administration)
- creating with m4 macros: 10.4.1.1. Building a sendmail.cf with m4 macros (TCP/IP Network Administration)
- modifying
- local information: 10.7.1. Modifying Local Information (TCP/IP Network Administration)
- Options section: 10.7.2. Modifying Options (TCP/IP Network Administration)
- overview: 10.7. Modifying a sendmail.cf File (TCP/IP Network Administration)
- overview: 10.4. The sendmail.cf File (TCP/IP Network Administration)
- samples: 10.4.1. Locating a Sample sendmail.cf File (TCP/IP Network Administration)
- structure: 10.4.2. General sendmail.cf Structure (TCP/IP Network Administration)
- testing: 10.8. Testing sendmail.cf (TCP/IP Network Administration)
- testing rewrite rules: 10.8.1. Testing Rewrite Rules (TCP/IP Network Administration)
sendport command: 11.2.5.3. FTP with the default data ports (SSH, The Secure Shell)
sendto() system calls: 7.6.2.1. BIND 4.9 and 8 statistics (DNS and Bind)
Sequence Number field, TCP headers: 1.6.2. Transmission Control Protocol (TCP/IP Network Administration)
sequence numbers, for one-time password systems: 5.5.1.10. S/Key authentication (SSH, The Secure Shell)
sequence (sendmail K command value): E.4.5. The sendmail K Command (TCP/IP Network Administration)
sequence space arithmetic: 7.2.3. Starting Over with a New Serial Number (DNS and Bind)
Sergey Okhapkin (see Okhapkin's SSH1)
serial connections with crossover cables: 3.2. Testing Adapters (Network Troubleshooting Tools)
serial counters in servers: 10.1.4.1. nslookup and dig (Network Troubleshooting Tools)
Serial Line IP protocol, BSD Unix support: 5.1.5.2. The pseudo-device statement (TCP/IP Network Administration)
serial lines
- connections, troubleshooting: 6.3.7. Troubleshooting Serial Connections (TCP/IP Network Administration)
- overview: 6.2. TCP/IP Over a Serial Line (TCP/IP Network Administration)
- protocols, SLIP: 6.2.1. The Serial Protocols (TCP/IP Network Administration)
- speed: A. Using Input and Output Octets (Essential SNMP)
serial numbers: 4.8.4. Multiple Master Servers (DNS and Bind)
- dynamic update and: 10.2.1. Dynamic Update and Serial Numbers (DNS and Bind)
- incrementing: 7.2.2. SOA Serial Numbers (DNS and Bind)
- nslookup and: 12.1.4. Zone Transfers (DNS and Bind)
- of equipment: 1.3.1. Documentation (Network Troubleshooting Tools)
- setting new: 7.2.3. Starting Over with a New Serial Number (DNS and Bind)
- SOA serial# message and: 7.6.1. Common Syslog Messages (DNS and Bind)
- unincremented: 14.3.1. Forgot to Increment Serial Number (DNS and Bind)
- 14.3.1. Forgot to Increment Serial Number (DNS and Bind)
- for zone data: 4.8.3. SOA Values (DNS and Bind)
serial ports, troubleshooting: 6.3.7. Troubleshooting Serial Connections (TCP/IP Network Administration)
serial-queries option (named): C.2.5. The options Statement (TCP/IP Network Administration)
serial-queries substatement: 10.12.2.6. Limiting the number of SOA queries (DNS and Bind)
SErr statistic: 7.6.2.1. BIND 4.9 and 8 statistics (DNS and Bind)
server
- AAA: 21. Authentication and Auditing Services (Building Internet Firewalls)
- caching: 15.3.4. Proxying Characteristics of HTTP (Building Internet Firewalls)
- 15.5. Cache Communication Protocols (Building Internet Firewalls)
- database, locating: 23.1.1. Locating Database Servers (Building Internet Firewalls)
- DNS
- for internal hosts: 20.1.5.2. Set up a real DNS server on an internal system for internal hosts to use (Building Internet Firewalls)
- setting up fake: 20.1.5.1. Set up a "fake" DNS server on the bastion host for the outside world to use (Building Internet Firewalls)
- FTP, preventing attacks from: 17.1.4.3. Preventing people from using your server to attack other machines (Building Internet Firewalls)
- HTTP: 15.3.2. Special HTTP Servers (Building Internet Firewalls)
- security of: 15.1. HTTP Server Security (Building Internet Firewalls)
- KDC: 21.5.1. How It Works (Building Internet Firewalls)
- mail, evaluating: 16.1.2.1. Junk mail (Building Internet Firewalls)
- proxy (see proxy services)
- routed: 11.3.4.5. routed (Building Internet Firewalls)
- SMB authentication: 21.6.4. SMB Authentication (Building Internet Firewalls)
- SMTP
- for Windows NT: 16.2.13. SMTP Servers for Windows NT (Building Internet Firewalls)
- commercial: 16.2.9. Commercial SMTP Servers for Unix (Building Internet Firewalls)
- freely available: 16.2.8. Other Freely Available SMTP Servers for Unix (Building Internet Firewalls)
- SSH, authentication: 18.2.5.2. SSH server authentication (Building Internet Firewalls)
- TIS FWTK authentication: 21.4.1. The TIS FWTK Authentication Server (Building Internet Firewalls)
- web: 2.2.2. Web Server Security Issues (Building Internet Firewalls)
- Windows Browser: 20.4. The Windows Browser (Building Internet Firewalls)
- WINS, communication among: 20.3.4. WINS Server-Server Communication (Building Internet Firewalls)
- wuarchive: 17.1.4.4. Using the wuarchive FTP daemon (Building Internet Firewalls)
server authentication: 3.1.3. Authentication (SSH, The Secure Shell)
- 3.4.1. Establishing the Secure Connection (SSH, The Secure Shell)
server command (nslookup): 12.5.3. Switching Name Servers (DNS and Bind)
- bogus servers and: 10.11. Avoiding a Bogus Name Server (DNS and Bind)
server configuration
- per-account: 8. Per-Account Server Configuration (SSH, The Secure Shell)
- three levels of: 0.4. Our Approach (SSH, The Secure Shell)
server executable, finding location of in manual pages: 4.7.1. Starting Up the Name Server (DNS and Bind)
server field
- chap-secrets file: 6.3.4. PPP Daemon Security (TCP/IP Network Administration)
- inet.conf file: 5.3. The Internet Daemon (TCP/IP Network Administration)
server-identifier parameter (dhcpd): D.3.2. Configuration Parameters (TCP/IP Network Administration)
server keys: 3.3. The Architecture of an SSH System (SSH, The Secure Shell)
- generating: 5.4.4. Server Key Generation (SSH, The Secure Shell)
- recommended settings for: 10.3.2. /etc/sshd_config (SSH, The Secure Shell)
Server Message Block (SMB): and Server Message Block (SMB) (Building Internet Firewalls) 14.4. Common Internet File System (CIFS)
- 3.5.1. File Sharing (TCP/IP Network Administration)
server-name parameter (dhcpd): D.3.2. Configuration Parameters (TCP/IP Network Administration)
server names: 5.1. The Name of the Server (SSH, The Secure Shell)
server only NIS: 3.1. Masters, slaves, and clients (Managing NFS and NIS)
server response time,
threshold value: 16.2. Measuring performance (Managing NFS and NIS)
Server Selection (SRV) records: C.3.1.11. Server Selection record (TCP/IP Network Administration)
server setting (smb.config file): 9.3.1. Configuring a Samba Server (TCP/IP Network Administration)
server-side caching: 7.4.3. Server-side caching (Managing NFS and NIS)
server-side configuration, PC/NFS: 10.3.1. Server-side PC/NFS configuration (Managing NFS and NIS)
server-side fields (RPC), statistics: 14.2. NFS statistics (Managing NFS and NIS)
Server Side Includes (see SSI)
server-side performance tuning: 16. Server-Side Performance Tuning (Managing NFS and NIS)
- benchmarking: 16.3. Benchmarking (Managing NFS and NIS)
server statement (named.conf file): C.2.4. The server Statement (TCP/IP Network Administration)
server string parameter (smb.config file): 9.3.1. Configuring a Samba Server (TCP/IP Network Administration)
server threads: 7.2.1. NFS RPC procedures (Managing NFS and NIS)
- 7.3.3. NFS kernel code (Managing NFS and NIS)
- NFS: 7.3.1. nfsd and NFS server threads (Managing NFS and NIS)
server-to-client relationships, trusted hosts and users: 12.1.1. Trusted hosts and trusted users (Managing NFS and NIS)
server-to-server relationships, trusted hosts and users: 12.1.1. Trusted hosts and trusted users (Managing NFS and NIS)
ServerAdmin defines (httpd.conf file): 11.3.2. Basic Configuration Directives (TCP/IP Network Administration)
ServerAdmin values (Apache), changing (Solaris): 11.2.1. Configuring Apache on Solaris (TCP/IP Network Administration)
ServerKeyBits: 5.4.4. Server Key Generation (SSH, The Secure Shell)
ServerName (httpd.conf file): 11.3.2. Basic Configuration Directives (TCP/IP Network Administration)
ServerRoot directive (httpd.conf file): 11.3.2. Basic Configuration Directives (TCP/IP Network Administration)
servers: 3.3. The Architecture of an SSH System (SSH, The Secure Shell)
- 4.3.5. Compilation Flags (SSH, The Secure Shell)
- 11. Configuring Apache (TCP/IP Network Administration)
- allocating, domains: 4.1.3. Number of NIS servers per domain (Managing NFS and NIS)
- caching-only: 8.1.1. BIND Configurations (TCP/IP Network Administration)
- configuration: 8.3.1.1. A caching-only server configuration (TCP/IP Network Administration)
- checking email servers: 10.1.1. Email (Network Troubleshooting Tools)
- checking FTP performance: 10.1.3. FTP and TFTP (Network Troubleshooting Tools)
- checking HTTP servers: 10.1.2. HTTP (Network Troubleshooting Tools)
- as clients: 3.3.11. NIS server as an NIS client (Managing NFS and NIS)
- compensation, slow: 18.1. Slow server compensation (Managing NFS and NIS)
- configuration: 3.6. Configuration Servers (TCP/IP Network Administration)
- DHCP: 3.6.2. Dynamic Host Configuration Protocol (TCP/IP Network Administration)
- diskless clients: 8. Diskless Clients (Managing NFS and NIS)
- RARP: 3.6.1. Reverse Address Resolution Protocol (TCP/IP Network Administration)
- RPCs and: 1.5.3. Internet and RPC server configuration (Managing NFS and NIS)
- configuration files: 5.3.1. Server Configuration Files (SSH, The Secure Shell)
- CPU loading, bottlenecks and: 16.4.1. Problem areas (Managing NFS and NIS)
- debugging: 12.1.2. Server Debugging (SSH, The Secure Shell)
- 10.1. Application-Protocols Tools (Network Troubleshooting Tools)
- disk bandwidth: 16.4.1. Problem areas (Managing NFS and NIS)
- disk-space checking script: 12.5. Disk-Space Checker (Essential SNMP)
- distributed, management: 9.6. Managing Distributed Servers (TCP/IP Network Administration)
- DNS: 5.2.3. Run DNS on NIS clients and servers (Managing NFS and NIS)
- DNS, authoritative: 3.3. DNS (TCP/IP Network Administration)
- graphing parameters: 13.3. Graphing Other Objects (Essential SNMP)
- IMAP
- configuring: 9.7.2. IMAP Server (TCP/IP Network Administration)
- testing: 3.4.3. Internet Message Access Protocol (TCP/IP Network Administration)
- listing open files: 2.1.4. lsof (Network Troubleshooting Tools)
- load, buffer size and: 18.3. Adjusting for network reliability problems (Managing NFS and NIS)
- locating, binding the domain: 3.3.10. The ypbind daemon (Managing NFS and NIS)
- log files: 14.6.1. NFS server logging mechanics (Managing NFS and NIS)
- logging: 5.8. History, Logging, and Debugging (SSH, The Secure Shell)
- configuration: 14.6.3. NFS server logging configuration (Managing NFS and NIS)
- configuration files: 14.6.3. NFS server logging configuration (Managing NFS and NIS)
- disabling: 14.6.9. Disabling NFS server logging (Managing NFS and NIS)
- enabling: 14.6.2. Enabling NFS server logging (Managing NFS and NIS)
- mail: 4.5.3. Planning Your Mail System (TCP/IP Network Administration)
- mail servers, monitoring: 12.6. Port Monitor (Essential SNMP)
- master name: 8.1.1. BIND Configurations (TCP/IP Network Administration)
- configuration: 8.3.1.2. Master and slave server configurations (TCP/IP Network Administration)
- master server
- creating: 3.2.2. Installing the NIS master server (Managing NFS and NIS)
- hosts, changing: 4.3.2. Changing NIS master servers (Managing NFS and NIS)
- number of: 3.2.2. Installing the NIS master server (Managing NFS and NIS)
- unavailable: 3.2.2. Installing the NIS master server (Managing NFS and NIS)
- ypxfr tool: 4.2.2. Regular map transfers (Managing NFS and NIS)
- memory usage, bottlenecks: 16.4.1. Problem areas (Managing NFS and NIS)
- multihomed: 16.5.7. Multihomed servers (Managing NFS and NIS)
- name, classifications: 3.3.4. BIND, Resolvers, and named (TCP/IP Network Administration)
- name servers: 10.1.4.1. nslookup and dig (Network Troubleshooting Tools)
- 10.1.4.2. doc, dnswalk, and lamers (Network Troubleshooting Tools)
- network interface, bottlenecks: 16.4.1. Problem areas (Managing NFS and NIS)
- NFS: 9.1. The Network File System (TCP/IP Network Administration)
- 10.1.6. NFS (Network Troubleshooting Tools)
- B.1. NFS server problems (Managing NFS and NIS)
- NIS
- selecting: 3.2.1. Choosing NIS servers (Managing NFS and NIS)
- testing: 3.2.2. Installing the NIS master server (Managing NFS and NIS)
- NLM crash: 11.2.2.1. Server crash (Managing NFS and NIS)
- performance tuning: 16.5. Server tuning (Managing NFS and NIS)
- buffers: 16.5.3. Memory usage (Managing NFS and NIS)
- CPU loading: 16.5.1. CPU loading (Managing NFS and NIS)
- cross-mounting filesystem: 16.5.6. Cross-mounting filesystems (Managing NFS and NIS)
- kernel configuration: 16.5.5. Kernel configuration (Managing NFS and NIS)
- memory usage: 16.5.3. Memory usage (Managing NFS and NIS)
- multhomed: 16.5.7. Multihomed servers (Managing NFS and NIS)
- nfsd threads: 16.5.2. NFS server threads (Managing NFS and NIS)
- throughput: 16.5.4. Disk and filesystem throughput (Managing NFS and NIS)
- polling: 12.5. Disk-Space Checker (Essential SNMP)
- 12.5. Disk-Space Checker (Essential SNMP)
- POP, configuring: 9.7.1. POP Server (TCP/IP Network Administration)
- PPP, configuring: 6.3.5. PPP Server Configuration (TCP/IP Network Administration)
- proxy servers: 10.3. Sending Traps (Essential SNMP)
- renegade, debugging case study: 15.2. Renegade NIS server (Managing NFS and NIS)
- replication, automounter: 9.5.1. Replicated servers (Managing NFS and NIS)
- response time
- disk-intensive activity and: 16.2. Measuring performance (Managing NFS and NIS)
- users and: 16.2. Measuring performance (Managing NFS and NIS)
- root: 3.3.1. The Domain Hierarchy (TCP/IP Network Administration)
- cache initialization files: 8.3.4. The Cache Initialization File (TCP/IP Network Administration)
- root privileges: 12.3.1. Managing the root password with NIS (Managing NFS and NIS)
- RPC
- configuration: 1.5.3. Internet and RPC server configuration (Managing NFS and NIS)
- initialization: 1.5.3. Internet and RPC server configuration (Managing NFS and NIS)
- Samba, configuring: 9.3.1. Configuring a Samba Server (TCP/IP Network Administration)
- serial counters: 10.1.4.1. nslookup and dig (Network Troubleshooting Tools)
- slave: 8.1.1. BIND Configurations (TCP/IP Network Administration)
- configuration: 8.3.1.2. Master and slave server configurations (TCP/IP Network Administration)
- slave server
- adding: 3.2. Basics of NIS management (Managing NFS and NIS)
- adding later: 3.2.3.1. Adding slave servers later (Managing NFS and NIS)
- initializing: 3.2.3. Installing NIS slave servers (Managing NFS and NIS)
- installing: 3.2.3. Installing NIS slave servers (Managing NFS and NIS)
- listing: 3.2.3. Installing NIS slave servers (Managing NFS and NIS)
- removing: 4.3.1. Removing an NIS slave server (Managing NFS and NIS)
- slow
- testing: 18.1.1. Identifying NFS retransmissions (Managing NFS and NIS)
- timeo parameter and: 18.1.2. Timeout period calculation (Managing NFS and NIS)
- stack fingerprinting and: 6.3.1. Stack Fingerprinting (Network Troubleshooting Tools)
- stratum 1 and 2 servers: 11.3. NTP (Network Troubleshooting Tools)
- synchronizing clocks on: 11.3. NTP (Network Troubleshooting Tools)
- TCP/IP networks compared to PC LAN servers: 3. Network Services (TCP/IP Network Administration)
- terminal servers: 16.5.1. CPU loading (Managing NFS and NIS)
- troubleshooting name services: 10.1.4.1. nslookup and dig (Network Troubleshooting Tools)
- usage guage: 4.1.3. Number of NIS servers per domain (Managing NFS and NIS)
- vnc servers: 11.1.2. vnc (Network Troubleshooting Tools)
- 11.1.2. vnc (Network Troubleshooting Tools)
- web servers: 7.3.5.2. Advanced configuration (Essential SNMP)
- B.4. Using NNM for Communications (Essential SNMP)
- zone authority records: 10.1.4.1. nslookup and dig (Network Troubleshooting Tools)
- 10.1.4.1. nslookup and dig (Network Troubleshooting Tools)
ServerType directive (httpd.conf file): 11.3.2. Basic Configuration Directives (TCP/IP Network Administration)
serverwide configuration: 0.4. Our Approach (SSH, The Secure Shell)
- 4.1.5. Compile-Time Configuration (SSH, The Secure Shell)
- 5. Serverwide Configuration (SSH, The Secure Shell)
- 10.3. Serverwide Configuration (SSH, The Secure Shell)
- command-line options: 5.3.2. Command-Line Options (SSH, The Secure Shell)
- files, commenting: 5.3.1. Server Configuration Files (SSH, The Secure Shell)
- modifying: 5.3.3. Changing the Configuration (SSH, The Secure Shell)
- port forwarding: 9.2.10.2. Serverwide configuration (SSH, The Secure Shell)
- precedence rules: 5.3.2. Command-Line Options (