Tools developed by SuSE that are included in SuSE 6.3:
SuSE FTP Proxy - A secure FTP proxy with support for SSL, LDAP, command restriction, active and passive FTP support, and much more.
RPM: fwproxy.rpm, fwproxys.rpm (SSL - not in the US version)
SuSE Firewall - The new firewall script from SuSE, rewritten from scratch. Auto detection of interface information, masquerading, auto protection of services, protection from internal networks, fail-close design and easy to configure.
RPM: firewals.rpm
Harden SuSE - A special script for hardening a SuSE Linux 5.3 - 6.3. By answering 9 questions, the system is reconfigured very tightly; insecure network services are disabled, Suid/sgid/world-writable permissions that are not critical are removed.
RPM: hardsuse.rpm
SuSE Secumod - This loadable kernel module enhances the security of the system by adding a symlink/hardlink/pipe protection, procfs protection, trusted path execution and capabilities.
RPM: secumod.rpm
SuSE Secchk - These are cron scripts which run daily, weekly and monthly to check the security of the system and compare them to the last run.
RPM: seccheck.rpm
Yast-1 - New administration menu for setting password aging, authentication, fail delay and logging of logins and failures.
RPM: yast.rpm
SuSE auditdisk - (Please note that this is in beta phase) this tool generates a boot-disk with checksum data and all binaries needed to automatically verify file checksums upon booting. This way it can't be subverted by lkm's like a standard tripwire installation.
WWW: http://www.suse.de/~marc - not included on SuSE 6.3 yet
Watch out for updates of these tools on SuSE's WWW or FTP update sites. Although these are tools developed by SuSE, they should work on any Linux distributions with little problems.
New tools included in the SuSE Linux distribution (not created by SuSE):
FreeS/WAN - IPSEC implementation to build secure VPN tunnels via public networks.
RPM: freeswan.rpm (not in the US version)
GNU Privacy Guard - A free pgp-like tool for secure communication (not limited to email). Frontends are also included.
RPM: gpg (not in the US version)
Nessus - A very good network security scanner.
RPM: nessus
