From owner-freebsd-security@FreeBSD.ORG Sun Jan 13 21:58:58 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 253F916A46C for ; Sun, 13 Jan 2008 21:58:58 +0000 (UTC) (envelope-from jordi.espasa@opengea.org) Received: from mail.opengea.org (mail.opengea.org [85.48.253.234]) by mx1.freebsd.org (Postfix) with ESMTP id B972013C4CC for ; Sun, 13 Jan 2008 21:58:57 +0000 (UTC) (envelope-from jordi.espasa@opengea.org) Received: from localhost (tartarus [127.0.0.1]) by mail.opengea.org (Opengea.org Project MailServer) with ESMTP id CDFE3D50044 for ; Sun, 13 Jan 2008 22:41:12 +0100 (CET) X-Virus-Scanned: amavisd-new at opengea.org Received: from mail.opengea.org ([127.0.0.1]) by localhost (mail.opengea.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id SMWoatQmabhA for ; Sun, 13 Jan 2008 22:41:12 +0100 (CET) Received: from [192.168.1.33] (113.Red-83-46-132.dynamicIP.rima-tde.net [83.46.132.113]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jordi.espasa@opengea.org) by mail.opengea.org (Opengea.org Project MailServer) with ESMTP id 71C99D50040 for ; Sun, 13 Jan 2008 22:41:12 +0100 (CET) Message-ID: <478A84DD.3040205@opengea.org> Date: Sun, 13 Jan 2008 22:38:37 +0100 From: Jordi Espasa Clofent User-Agent: Thunderbird 2.0.0.6 (X11/20071022) MIME-Version: 1.0 To: freebsd-security@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Subject: Anti-Rootkit app X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Jan 2008 21:58:58 -0000 Hi all, I need to install an anti-rootkid in a lot of servers. I know that there're several options: tripwire, aide, chkrootkit... ¿What do you prefer? Obviously, I have to define my needs: - easy setup and configuration - actively developed -- Thanks, Jordi Espasa Clofent