Research Servers - default software loads

Linux

• SSHd AllowUsers directive should be used; root login allowed (for admin reasons)
• Amanda-client
• Tripwire intrusion-detection
• Development tools
• Logwatch
• emacs/vim

SuSE Linux

Complete install of SuSE 9.3 Pro.

• Auto Updates
• Either KDE and GNOME
  • should not be running, by default (just available)
• K3B for cd/dvd writing

Gentoo Linux

• Vixie-cron is standard
• iptables
• fail2ban + gamin
  • fail2ban will alter iptable-rules, to block repeated-failures. Gamin advises fail2ban of (log-)file changes, which seems better than polling