Is Your e3000 Environment Secure? - by Mark Bixby

Is Your e3000 Environment Secure? - HPWorld 2003 page 11August 14, 2003
There's more than just the
console and system logging
§Many subsystems use separate logging facilities:
– INETD – JINETD $STDLIST spoolfile
– Apache - /APACHE/PUB/logs
– DNS BIND/iX – syslog (and possibly the console)
– Samba - /usr/local/samba/var
– Sendmail – syslog (and possibly the console)
§Home-grown applications?
§Third-party applications?
§ALL logs need to be checked periodically for anomalies