PDA

View Full Version : Interesting Links



Barry J. Stiefel
2005-08-13, 16:34
Interesting Links



Resources (Security and Check Point-related)




Atstake Advisories: http://www.atstake.com/research/advisories/index.html (http://www.atstake.com/research/advisories/index.html)
CERT Advisories: http://www.cert.org/advisories/ (http://www.cert.org/advisories/)
Check Point's Knowledge Base: http://support.checkpoint.com/ (http://support.checkpoint.com/)
Check Point's News Server: news://nntp.checkpoint.com (news://nntp.checkpoint.com/)
Common Vulnerabilities and Exposures Database: http://cve.mitre.org/ (http://cve.mitre.org/)
DNS Resource Directory: http://www.dns.net/dnsrd/ (http://www.dns.net/dnsrd/)
FireWall-1 FAQ/Whitepaper pages:

Attack Prevention -- IPSO/FireWall-1 articles: http://attackprevention.com/ap/library/ (http://attackprevention.com/ap/library/)
Check Point FAQ: http://www.checkpointfaq.com (http://www.checkpointfaq.com/)
Clico eSupport White Papers on FireWall-1: http://www.clico.pl/html/esupport.html (http://www.clico.pl/html/esupport.html)
Digital Migrations: http://www.digitalmigrations.com (http://www.digitalmigrations.com/) (Nokia IPSO/FireWall-1 Specific)
FireWall-1 tips and tricks: http://is-it-true.org/fw/fwtips4.shtml (http://is-it-true.org/fw/fwtips4.shtml)
fixmyfirewall: http://fixmyfirewall.com/ (http://fixmyfirewall.com/)
Rowton Consulting articles on Nokia: http://www.rowtonconsulting.com/Articles.htm (http://www.rowtonconsulting.com/Articles.htm)
Turkish VPN-1/FireWall-1/Nokia docs: http://support.intellect.com.tr (http://support.intellect.com.tr/)
VPN-1/FireWall-1 in Deutsch (German): http://www.vpn-1.de/ (http://www.vpn-1.de/)
VPN docs between Cisco and VPN-1: http://www.thenall.com/vpn/index.htm (http://www.thenall.com/vpn/index.htm)
Some VPN Interoperabiliy: http://www.fw-1.de/aerasec/4x/vpn-cp-x.html (http://www.fw-1.de/aerasec/4x/vpn-cp-x.html)

Firewall Wizards Mailing List: http://honor.trusecure.com/mailman/listinfo/firewall-wizards (http://honor.trusecure.com/mailman/listinfo/firewall-wizards) (not specific to FireWall-1)
FireWall-1 Mailing List (operated by Check Point): http://www.checkpoint.com/services/mailing.html (http://www.checkpoint.com/services/mailing.html) (searchable indexes at http://msgs.securepoint.com/fw1/ (http://msgs.securepoint.com/fw1/))
FireWall-1 Gurus Mailing List (operated by PhoneBoy (http://www.phoneboy.com/bin/view.pl/Main/PhoneBoy)): http://www.phoneboy.com/gurus (http://www.phoneboy.com/gurus)
Firewalls Mailing list: http://www.isc.org/services/public/lists/firewalls.html (http://www.isc.org/services/public/lists/firewalls.html) (not specific to FireWall? (http://www.phoneboy.com/bin/edit.pl/FAQs/FireWall?topicparent=FAQs.InterestingLinks)-1)
ginspect: http://www.decock.org/ginspect/ (http://www.decock.org/ginspect/) (A webpage that helps you generate INSPECT code)
Internet Firewalls FAQ: http://www.ranum.com/pubs/fwfaq/ (http://www.ranum.com/pubs/fwfaq/)
Internet Security Servers Security Center: http://xforce.iss.net (http://xforce.iss.net/)
Lance Spitzner s Publications: http://www.spitzner.net/ (http://www.spitzner.net/) (contains various topics, including using snoop, configuring your NICs, hardening Solaris, and stuff on Honeypots)
NTBugtraq: http://www.ntbugtraq.com/ (http://www.ntbugtraq.com/) (Windows Security site)
ntsecurity.nu: http://www.ntsecurity.nu/ (http://www.ntsecurity.nu/) (Windowshttp://support.intellect.com.tr NT and 2000 Security site)
SANS Institute: http://www.sans.org/ (http://www.sans.org/) (security education, research, and training)


Software



(See also the Third Party Log Analysis (http://www.phoneboy.com/bin/view.pl/FAQs/ThirdPartyProgramsLogAnalysis) FAQ page.


Analyzer: http://netgroup-serv.polito.it/analyzer/ (http://netgroup-serv.polito.it/analyzer/) (a public-domain protocol analyzer for Windows 95/ 98/NT)
Check Point Tools: http://www.wyae.de/software/ (http://www.wyae.de/software/)
cron: http://www.kalab.com/freeware/cron/cron.htm (http://www.kalab.com/freeware/cron/cron.htm) (a Windows port of the UNIX utility)
GNU Utilities for Win32: http://www.weihenstephan.de/~syring/win32/UnxUtils.html (http://www.weihenstephan.de/~syring/win32/UnxUtils.html) (ports of various GNU utilities for Win32 that run natively without an emulation layer; covers tar, gzip, and md5sum)
Microsoft Windows Services for Unix: http://www.microsoft.com/windows/sfu/ (http://www.microsoft.com/windows/sfu/) (Provides Windows versions of various Unix utilities as well as POSIX libraries)
MinGW: http://www.mingw.org/ (http://www.mingw.org/) (minimalist GNU for Windows, which provides a gcc that produces Windows-native binaries)
Nessus: http://www.nessus.org/ (http://www.nessus.org/) (an open-source security scanner)
Netcat: http://www.atstake.com/research/tools/network_utilities/ (http://www.atstake.com/research/tools/network_utilities/) (the TCP/IP Swiss Army Knife)
NMAP: http://www.insecure.org/nmap/ (http://www.insecure.org/nmap/) (the Network Mapper)
Osiris: http://osiris.shmoo.com/ (http://osiris.shmoo.com/) (a tripwire-like program for Windows NT)
Perl for Windows: http://aspn.activestate.com/ASPN/Downloads/ActivePerl/index/ (http://aspn.activestate.com/ASPN/Downloads/ActivePerl/index/)
SniffIt: http://reptile.rug.ac.be/~coder/sniffit/sniffit.html (http://reptile.rug.ac.be/~coder/sniffit/sniffit.html) (a packet sniffer for LINUX, SunOS, Solaris, FreeBSD and IRIX)
SKey generators:

Archive of OTP clients: http://www.tifosi.com/OTP/ (http://www.tifosi.com/OTP/)
Opie: http://www.inner.net/pub/opie/ (http://www.inner.net/pub/opie/) (One-Time Passwords in Everything)
otpgen: http://www.phoneboy.com/attachments/otpgen.zip (http://www.phoneboy.com/attachments/otpgen.zip)

The Laughing Bit: http://www.tlb.ch/ (http://www.tlb.ch/) (some useful FireWall-1 scripts and programs)
Zebra: http://www.zebra.org/ (http://www.zebra.org/) (a multipurpose routing daemon available under the GNU license, also available on Secure Platform NG AI)


Companies




OPSWAT: http://www.opswat.com (http://www.opswat.com/) (Check Point OPSEC Dev , Secure Client Protection)
Tufin Technologies (OPSEC consulting, Check Point solutions, software development): http://www.tufin.com (http://www.tufin.com/)


-- PhoneBoy (http://www.phoneboy.com/bin/view.pl/Main/PhoneBoy) - 15 Apr 2004