> I was wondering if there are any archives of tripwire 1.2 configs on the
> net? I would love to have a look at the various config files for solaris or
> linux. I made up my own recently but we humans tend to make mistake here and
> there. And what are the essential files for say firewall-1 or Gauntlet which
> need to be protected other than the *.pf files (for firewall-1). Any
> suggestion folks?
I think the 1.3.1 version is the one you want:
http://www.tripwiresecurity.com/products/ASR1_3.html
Depending on the process that's in your firewall, I wouldn't think it
would be too much of a problem if you monitored too many files. After a
week or so of auditing, you can see which ones you can take out. There
are also different types of auditing, including date, size, ownership,
permissions, etc... I think it includes a few templates already..
Dave
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
