On this page:
OS |
Administration |
Server |
Browser |
Extensions |
Real Time |
E-mail |
Newsgroups
Graphic |
Animation |
Sound |
Editors |
File transfer |
Data Security |
Knowledge |
Main
OPERATION SYSTEMS
Puppy Linux [Mirrors: Europe | U.S.A] - well balanced working desktop system in a comparable small package.
Incognito CD - live CD with network applications connecting through the Tor privacy network.
Debian Linux, Installation, Problems, Updates, Debfoster packet manager
Debian boot floppy disks, Rawrite and Loadlin utilities in the Debian tools directory.
Ubuntu download | free CD - desktop Linux for hard disk installation.
Pardus - easy to use desktop Linux.
Solaris or OpenSolaris - Sun's OS features an advanced file system.
+ Solaris 10 Security How To Guide
Grml - Linux distribution tuned for system administrators.
Trinity Rescue Kit - Linux distribution useable for Windows system recovery (~140MB).
Knoppix - includes speech aided web and mail usage for blind people.
Peanut Linux - medium sized distribution with emphasis on GUI, Mirror.
Fedora Linux - newest features, LVM by default
CentOS - enterprise Linux, LVM by default
SuSE Linux (Novell), more mirrors.
Slackware Linux
Slax
Easys - easy to use Linux based on Slackware
GNU/Linux kernel archive - make dep; make clean; make bzImage.
International kernel patch - secure file system modification for kernel source.
LIDS - kernel patch and configuration tool for protected files, processes, ACLs.
Ibiblio's Linux archive
SECT and RSE - Linux SSH disk for secure shell access and PGP e-mail disk.
RSBAC - modular Linux access control.
Linux Router Project - Linux on a 1.44MB floppy disk.
Tomsrtbt - Linux on a 3.5 floppy with focus on recovery functions.
BSD (Berkeley Software Distribution)
Desktop BSD
DragonFly - experiments'r'us.
FreeBSD - aka reliable.
FreeSBIE - FreeBSD live CD.
FuguIta - OpenBSD live CD.
NetBSD - old pioneers.
OpenBSD - secure out of the box.
PCBSD
PicoBSD - fit on a floppy disk systems for various tasks.
Parallel Virtual Machine - turn your mixed network into a parallel computer.
Local Area Multicomputer - turn your mixed network into a parallel computer (MPI).
"We pay the price, Watson, for being too up-to-date!" he cried.
"We are before our time, and suffer the usual penalties."
ASCI-Red Archive
Plex86 - running different operation systems at the same time on one machine
Bochs - X86 PC emulator
--- --- --- ---
ADMINISTRATION 
System and network administration
[Routers / NAT / Connection sharing]
OpenWrt - extensible wireless router software for Linksys WRT54G/GS and the like
BBIagent - easy to maintain router, DNS, DHCP, NAT, PPP*, one floppy disk
Fli4l - router, DSL, ISDN, optional DNS&DHCP (German)
Zebra - GNU routing software, BGP-4, OSPF, RIP
[DNS Domain name system software]
DNSCurve - adds link-level public-key protection to DNS packets.
You can keep existing DNS servers using the DNSCurve forwarder.
Djbdns - improved DNS software
MaraDNS - public domain DNS over UDP resolver running chroot
BIND - latest version of the widely used DNS software
NSD - authoritative only name server, open source
Loopback 127.0.0.0 - 127.255.255.255
Local net 10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255
Multicast 224.0.0.0 - 239.255.255.255
Autoconfigure 169.254.0.0 - 169.254.255.255
[Firewalls / IDS Intrusion detection systems]
Reading: Firewalling with PF
Reading: Netfilter/Iptables FAQ & IPchains HOWTO
Pfsense - FreeBSD based firewall, web configuration.
M0n0wall
NetBSD Firewall
MonMotha - bash script starts and configures iptables firewall on Linux 2.4, easy
Linux Firewall - based on netfilter/iptables
Floppyfw - iptables firewall and masquerading router on floppy
Firestarter - firewall, NAT, for Gnome or KDE
IPCop - firewall
T.Rex - firewall
Gibraltar - firewall
Quarantine - ip chains firewall
Snort - libcap based network intrusion detection system (IDS signatures)
HogWash - packet filter drops bad packets, based on Snort
TCPdumb - examines the raw TCP/IP network packets
Kismet - passive wireless network detection
Ippl - selectively logs incoming packets
Tcpwrapper - logs and filters requests for common network services
Netlog - TCP and UDP traffic logging system
Logdaemon - improved logging versions of common network services
Analog - log file analyzer for WWW servers
Swatch - real time log watcher
LaBrea - slows scans with replies of non-existing hosts and persisting connections
Chkrootkit - shell script and programs to check system for signs of common rootkits
"If a component fails on a Linux system, it's the documentation."
[Data Integrity / Information security]
SRP - secure authentication and data exchange system
OpenSSL - free secure socket layer implementation
OpenSSH - free SSH 1 & SSH 2 implementation
LSH - free SSH 2 implementation
Stunnel - running net services over SSL
Strongswan - private IPsec network, IKEv1 & IKEv2
FreeSwan - private network
Zebedee - private network
Virtual private network daemon - VPND securely connects two networks
Vpnstarter - PPP secured with SSH
Titan - shell scripts to improve
Free BSD, Linux, SunOS, Solaris security
Nddconfig - shell script to secure Solaris' network settings
Radmind - detects changed files and can replace with reference files
AIDE - Tripwire like file integrity tool detects changed files using several digests
ViperDB - fast file integrity checker
TCFS - encrypted network file system, kernel modules
Rubberhose - encrypted disks
StegFS - steganographic file system; watch your space (concept, analysis PDF)
Tor - improved privacy for web browsing and other services. Read the Tor FAQ, free
+ Tor Mirror 1 | Mirror 2
GNU Privacy Guard - PGP replacement
TCT The Coroner's Toolkit - helper programs for data recovery
Recover - to recover lost files
E2undel - file undelete
Magic Rescue - recover some file types from block devices
Wipe - overwriting files for permanent deletion
Sara - security auditor's research assistant, scanner
Nmap - advanced port scanner and OS detection
BASS - bulk auditing security scanner
Nikto - web server/CGI security scanner
Ngrep - string/regex/hex search in network packet data
Wireshark - packet viewer with filters
Ettercap - self contained packet viewer, SSH1 interception, character injection
# nice nice
[This and that]
SystemImager &
SystemInstaller &
SystemConfigurator - automates installs, updates and configures over network
EtherApe - shows network traffic graphically for many protocolls
Nagios - fast services and resources monitor, notifies over e-mail or pager
Big Sister - service monitoring and status change notification, SNMP traps supported.
Expect - automate programs which need predictable text input, needs Tcl
Xinetd - improved inetd replacement
CGIWrap - running CGI scripts as User, alternative to Apache's Suexec.
LUFS - mount a remote file system with secure access options
Parted - creating and resizing partitions for various file systems
ReiserFS - fast journaling file system, may make FS based databases more attractive
Self-Certifying File System - security improved network file system
Linux-NTFS - Windows file system for Linux
Radius - adaptable remote user authentication and accounting
Freenet - server and client for a distributed net in development
related: Iris - development of distributed secure storage
KBackup - backup program
Amanda - backup of local network to central backup server
PostgreSQL - relational object database, transactions, triggers, write locks & reads separated
XNC Northern Captain - good dual panel file manager
FileRunner - X11 file manager with FTP support, needs Tcl/Tk
Midnight Commander - dual directory file manager similar to the Norton Commander
Dotfile Generator - menu interface for the options of common programs
DOOM Process Manager : )
Netboot - booting PC's diskless over network (540K)
Etherboot - booting PC's diskless over network
Multi Router Traffic Grapher - shows traffic load graphically
GNU - list of free software under the GNU agreement.
Perl - multi purpose interpreted programming language (related: GUI in Perl)
Perl Modules list & Perl Modules search
Sugar - desktop environment.
KDE - windows based graphical desktop environment, drag & drop (related: CSV tree)
GTK - Gimp Toolkit is an open source GUI toolkit.
Wine - running Windows and DOS programms under Linux
Samba - MS Windows can access the Linux FS like a local directory over a network using CIFS
Recode - character set converter for letters and digits, Unicode, ISO, ANSI, ASCII ...
Pavuk - parallel wget
Puf - parallel wget
Pwebstats - statistics from web logs with Perl
Robotcop - Apache module which can automatically block spiders which don't heed the robot exclusion standard
Stow - manages program installations with symlinks
Alien - tries to convert distribution packet formats, Debian - Redhat - Slackware
Instmon - keeping track of installed files
Advanced computer cooling : )
--- --- --- ---
SERVER 
[Mail server]
Qmail - security improved replacement for sendmail.
related : Life with qmail | Admin web interface | Ezmlm mailing list manager.
Postfix - Wietse Venema's security improved replacement for sendmail.
Exim, download - advanced sendmail replacement (related: Sauce).
Courier - modular MTA with maildirs for IMAP, ESMTP over TLS, webmail.
IMAP - IMAP mail server.
Mailman - Python based GNU mailing list manager, user web interface, filtered delivery.
[Web server / Proxies]
Lighttpd - fast web server.
Yaws - web server for many concurrent connections, written in Erlang.
Hiawatha - web server written with security in mind.
Public file - serves HTTP and FTP requests.
Apache - widely used web server.
Mod_ssl - Apache server module for secure 128 bit SSL connections.
Apache-SSL - works with OpenSSL.
Squid - proxy/cache server.
Mathopd - small and fast web server.
Thttpd - small and fast web server.
Caudium - web server uses Pike.
NaviServer - web server with integrated TCL.
AOL Server - web server with integrated TCL.
Jetty - web server in Java.
Zope - web application server, expandable in Python.
Hawkey - integrates web, mail, ftp, news and chat services, needs MySQL data base.
WN Server - database controlled web server with search and page modification functions.
Fhttpd - web server with ftp support.
MIT - full featured server.
Phttpd - fast multithreaded server.
Junkbuster - proxy that filters banner advertising, cookies and some user details.
related: check your Junkbuster proxy
Delegate - proxy supports HTTP/SSL/FTP/NNTP/POP/SMTP/ Telnet/Wais/X/CU-SeeMe/Socks/ICP/Gopher.
WWWoffle - caching proxy for offline browsing.
For FTP servers scroll down.
[IRC server]
Unrealircd - IRC server
--- --- --- ---
BROWSER 
Firefox - open source browser with good features, free
(older versions)
- Basic selection of Firefox extensions:
- Adblock plus - blocks advertising (don't miss the filter: EasyPrivacy).
> (NoScript may impede some Adblock plus functionality)
- BlockSite - blocks whole domains.
- Send Referer - sends referer header only on demand.
Seamonkey - browser, e-mail-, newsgroup-, IRC-client, HTML editor, free
Galeon - Mozilla offspring using its Gecko page renderer under Gnome
QEMU-Puppy - Puppy Linux running in a QEMU virtual engine from an USB-stick,
browsing without changes on the host PC (86.9MB)
Konqueror - KDE's browser, HTML 4, JavaScript, full SSL support with OpenSSL
ELinks - advanced text only web browser
Lynx - text only web browser
Client request:
GET /net-lab2.htm HTTP/1.0
Server response:
HTTP/1.* ***
1** Info
2** OK
3** Redirection
4** Client's error (gave non-existing address)
5** Server's error
| |
--- --- --- ---
EXTENSIONS 
Currently none. Write if you like to recommend an extension.
--- --- --- ---
REAL TIME COMMUNICATION 
Chat and similar programs
Vic - video conferencing tool.
Twinkle - secure VOIP softphone using ZRTP.
Zfone - secure voice communication supplement for VOIP softphones.
Rat - audio conferencing.
Speak Freely - secure voice communication, source code.
Ethernet Phone - real time voice communication over the Internet.
Gale - instant messaging
Epic - irc console client with many options.
XChat - graphical irc client.
--- --- --- ---
NEWSGROUP READER 
Nget - command line NNTP file retrieval with regex and resume.
Knews - threaded tree display with X interface.
SLRN - threaded tree display.
Trn - threaded NNTP newsreader.
Tin - threaded NNTP newsreader.
Skim - NNTP news reader.
Cleanfeed - Perl based filter for usenet servers.
Parchive - recovering from missing blocks in multi-part archives, versions 1 and 2.
Example usenet control message to create
an unmoderated alt group alt.yournewgroup.news
(Post to alt.config and alt.yournewgroup.news):
Subject: cmsg newgroup alt.yournewgroup.news
Control: newgroup alt.yournewgroup.news
Approved: admin@example.int
| |
--- --- --- ---
E-MAIL 
Thunderbird - graphical open source client with junk mail control and OpenPGP support
Claws Mail - good email client
Pine - easy text mode client
Mutt - extended regex searches; many non-associative key bindings (.muttrc configuration builder)
XF-Mail - easy to use X windows e-mail program
Elm - text mode client
Getmail - replaces fetchmail, gets mail from server to mbox or maildir, SSL option.
Fetchmail - IMAP and POP mail retrieval.
GNU Privacy Guard - free PGP replacement (related: remailer list).
Ezmlm - mailing list manager for qmail.
Mailman - Python based GNU mailing list manager, user web interface, filtered delivery.
Mixmaster - client and server remailer software.
CRM114 - regex filter and change e-mail data.
Bogofilter - Bayesian analysis of e-mail data to filter unwanted mailings.
MessageWall - filtering SMTP proxy.
Spambouncer.org - procmail filter scripts to handle unsolicited e-mails.
SpamAssassin - filters unwanted e-mails, compatible with qmail & postfix.
Procmail - rule based mail filter, likely already on your system (FAQ & Procmail Tips)
Timo Salmi's procmail tips - and a procmail based e-mail password system.
RabidFire - filter and response scripts for unsolicited e-mails.
related: reading e-mail headers
-
E-mail filtering with regular expressions:
A formula for renewed joy in receiving.
Especially effective when case is insensitive.
/(v|\\\/)+.?[il1|]+.?[a@]+.?[gkc(]+.?r+.?[a@]+/
E-mail Sanitizer - procmail filter scripts deactivating executable content.
MIMEDefang - perl filters for sendmail modifying/removing unwanted content/attachments.
ClamAV - virus scanner often used to scan e-mails attachments.
MailScanner - e-mail virus scanner.
--- --- --- ---
GRAPHIC 
Graphic viewer, painting and drawing programs
Gimp - versatile image manipulation program.
Inkscape - good vector drawing program, reads/writes SVG, free.
Xzgv - image viewer with thumbnail browser for X, needs GTK and Imlib.
Xv - image manipulation and conversion for major formats.
Zvv - console image viewer for (S)VGA
Image Viewer - for many formats, needs GTK and Imlib.
Geist - image manipulation program.
Blender - 3D modeller, renderer, animator.
RenderPark - advanced renderer.
Radiance - advanced rendering suite.
POV-Ray part I part II - renderer.
Sceda - 3D modeller.
--- --- --- ---
ANIMATION 
Gif animation and video programs
Heroine Virtual Cinelerra / Cinelerra CV - video editor, developer / community edition.
Kino - feature rich video editor.
T@b ZS4 - Zweistein video editor.
Gifsicle - for producing GIF animations.
Mplayer - Video and Audio player.
--- --- --- ---
SOUND & MUSIC 
SND - cut & paste sound editor.
Taon - sound creator and editor for X, needs GTK.
Rosegarden - MIDI sequenzer and notation editor.
Lilypond - prints note sheets from ASCII input.
Lame - MP3 encoder.
XMMS - MP3 audio player.
Amarok - MP3 player, database connectivity, cd burning support.
Mpg123 - MPEG, MP3 audio player.
Flac - good lossless compression for audio data, patent free.
Multitrack - four track sound recorder for Linux.
MiXViews - sound editor / Linux version needs
InterViews library.
--- --- --- ---
EDITORS 
HTML and text editors
Quanta Plus - KDE HTML editor with syntax highlighting and preview.
NEdit - graphical interface, syntax highlighting.
Cooledit - X editor, drag&drop, regular expression search&replace.
TkHTML - HTML editor.
related: Net lab's survival guide for Vim and Emacs
--- --- --- ---
FTP 
[FTP servers]
Pure-FTPD - simple and secure FTP server with many advanced features.
FTPsshd - FTP over SSH.
FTP4ALL - FTP server.
ProFTPD - FTP server.
[FTP clients]
LFTP - scriptable file transfer.
LukemFTP - console client with advanced features.
Tip: You can use your browser to access ftp sites which require
a user name and password (May not work in recent MS IE versions).
Enter in the browser location line an address in the form of:
ftp://username:password@ftp.servername.int
--- --- --- ---
DATA SECURITY 
TrueCrypt - secured hard disk part as a virtual drive.
--- --- --- ---
KNOWLEDGE BASE 
"./configure make make install"
World Wide Web Security FAQ
CERT Intruder Detection Checklist
Laptop Security Tips
Bugtraq: System security lacks
UGU
Linux Newbie Administrator Guide
Josh's Linux Guide
(download)
Linux Documentation Project
Newsgroup: Linux Setup
Linux Installation
Linux RPM packages described
Linux HOWTO Index
Linux HOWTOs
Python Tutorial
Lube & Tune: Partitioning, TCP/IP, and more
IDE/Fast-ATA FAQ
"The look and feel is best described as .. complicated."
|