Free openssh 4.6 software for linux

Quest OpenSSH provides password-less, secure, encrypted remote login and file transfer services for Vintela Authentication Services (VAS). It is a derivative of OpenSSH, an open-source implementation of the SSH protocol.
Quest OpenSSH provides:
- default single sign on for Quest customers using VAS or VMX. Users are automatically and securely authenticated against Microsoft Active Directory using GSSAPI.
- compatibility with other SSH tools, including Quest PuTTY.
- integrated enhancements including high performance network support and TCPwrap access controls.
The software packages include both the client, ssh, and the server, sshd. Packages are subject to open source licence conditions.
Enhancements:
- This releases new features are the Match directive and inclusion of the HPN patches (High Performance Networking).
- Minor bugs fixed include NIS+ compatibility and improved service script reliability.

Openswan is an implementation of IPsec for the Linux operating system.
It provides IPSEC (IP Security, which is both encryption and authentication) kernel extensions and an IKE (Internet Key Exchange, keying and encrypted routing daemon), as well as various rc scripts and documentation.
It is known to interoperate with other IPSEC and IKE systems already deployed by other vendors such as OpenBSD, Cisco, and CheckPoint. It features Opportunistic Encryption, subnet extrusion, X.509 certificates, NAT Traversal support, XAUTH, and DNSSEC support.
Enhancements:
- Compile fixes for 2.6.16-2.6.18-rc2, a dpdaction=restart fix, and various miscellaneous fixes for ipcomp, nat-t, and rekeys.

Vintela OpenSSH project is a version of OpenSSH modified and packaged to provide default single sign-on capability for Vintela customers using the Vintela Authentication Service (VAS) and/ or Vintela Management eXtensions (VMX) products.
Vintelas version of OpenSSH defaults to authenticating users via the GSSAPI-with-MIC mechanism, and authenticating hosts with GSS-KEX. It works in conjunction with VAS, to allow secure shell single sign-on to Unix hosts that have been joined to Active Directory domains.
Enhancements:
- This release is primarily a bugfix release and brings the source in line with the upstream OpenSSH 4.3p2.
- It fixed problems with the user credential cache being lost when pam_vas, keyboard-interactive, and privsep were used, and public key authentication failures on Solaris.
- Improvements include faster login on systems with many VAS-enabled groups and GSSAPI auth being tried before public-key.

psad is a collection of three lightweight system daemons (two main daemons and one helper daemon) that run on Linux machines and analyze Netfilter log messages to detect port scans and other suspicious traffic.
psad incorporates many signatures from the Snort intrusion detection system to detect probes for various backdoor programs (e.g. EvilFTP, GirlFriend, SubSeven), DDoS tools (mstream, shaft), and advanced port scans (FIN, NULL, XMAS) which are easily leveraged against a machine via nmap.
When combined with fwsnort, psad is capable of detecting approximately 50% of all Snort rules, including those that inspect the application portion of IP packets. In addition, psad makes use of various packet header fields associated with TCP SYN packets to passively fingerprint remote operating systems (in a manner similar to p0f) from which scans originate. For more information, see the complete list of features offered by psad.
psad is developed with three main principles in mind:
Good network security starts with a properly configured firewall.
A significant amount of intrusion detection data can be gleaned from firewalls logs, especially if the logs provide information on nearly every field of the network and transport headers (and even application layer signature matches as in Netfilters case).
Suspicious traffic should not be detected at the expense of trying to also block such traffic.
Enhancements:
- Added ENABLE_AUTO_IDS_REGEX and AUTO_BLOCK_REGEX to allow filtering on
- logging prefixes.
- Added code to save DShield email to a file.
- Added IPTABLES_PREREQ_CHECK to allow the administrator to control the frequency of Netfilter checks (for auto-block compatibility).
- Added IGNORE_LOG_PREFIXES to allow certain log prefixes to be completely
- ignored by psad.
- Added classification.config file from Snort-2.3.3 so that psad can assign danger levels based upon Snort rule class type. This is useful when also running fwsnort.
- Added snort_rule_dl to allow specific psad to assign specific danger level values to particular signatures. This is useful if you want to do define certain Snort rules as being particularly evil (or not).
- Running fwsnort is also necessary to take advantage of this feature.
- Added reference.config so that psad can include reference information in email alerts that are derived from attacks detected by fwsnort.
- Updated to Snort-2.3.3 signatures.

libssh2 library implements the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS, SECSH-USERAUTH, SECSH-CONNECTION, SECSH-ARCH, SECSH-FILEXFER, SECSH-DHGEX, SECSH-NUMBERS, and SECSH-PUBLICKEY.
Main features:
- Key Exchange Methods: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group-exchange-sha1**
- Hostkey Types: ssh-rsa, ssh-dss
- Ciphers: aes256-cbc (rijndael-cbc@lysator.liu.se), aes192-cbc, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, arcfour, none**
- Compression Schemes: zlib, none
- MAC hashes: hmac-sha1, hmac-sha1-96, hmac-md5, hmac-md5-96, hmac-ripemd160 (hmac-ripemd160@openssh.com), none**
- ** - Affected by build time ./configure options. See INSTALL file for more information.
- Authentication: none, password, public-key, hostbased, keyboard-interactive
- Channels: shell, exec (incl. SCP wrapper), direct-tcpip, subsystem
- Global Requests: tcpip-forward
- Channel Requests: x11, pty
- Subsystems: sftp(version 3), publickey(version 2)
Enhancements:
- A bunch of bugs were fixed, new public defines for version/major/minor/patch numbers were introduced, and the old APINO define was removed.

LostIRC is a simple, yet very useful IRC client. It has features such as tab-autocompletion, multiple server support, automatic joining of servers/channels, logging and DCC sending which should cover the needs of most people.
Another goal that the application has in mind, is 100% keyboard controlability. It was written using the gtkmm GUI library.
Main features:
- Simple and minimal - the client doesnt try to satisfy the needs of 99% of the globe, this means that the client almost exclusively has "nice" features, compared to many other clients which can be considered bloated to some extent.
- Keyboard controlled - you can use the mouse if you want to, but you are also free to keep your fingers at the keyboard and control everything from there. Sometimes its actually faster.
- Tab-completion - both nicks and IRC-commands can be autocompleted when using the TAB key. This can speed up your typing quite a bit, especially if you are talking to people with a complicated or lengthy nick. to /JOIN etc.)
- Multiple server support - The client can in theory connect to an unlimited number of IRC-servers at once. When getting disconnected from a server, LostIRC automatically reconnects and joins the channels that you were previously on.
- Automatic joining of servers and channels - In LostIRCs preferences, you can setup exactly which servers you want to connect to when starting LostIRC. You can also specify exactly which commands that should be executed on connect, e.g. you could put /JOIN #foo,#bar to join #foo and #bar.
- Logging - Again in Preferences, you can set up LostIRC to log data from your LostIRC sessions to a file.
- DCC SEND support - While this feature hasnt been perfected yet, LostIRC supports both receiving and sending of files using the DCC protocol.

DBSight is a highly customizable full-text search platform for relational databases.
DBSight is a platform that you can create a search engine on any relational databases. DBSight is quick, feature-packed, easy to customize, and easy to integrate.
Instead of weeks or even months to develop a full-text search for your data, if you know how to use DBSight, you can easily create the full-text search literally in minutes.
And you can have several database searches available in one central page. They can be Oracle, DB2, MySQL, SQL Server, Postgres, or any JDBC supported databases.
Easy to customize
Customization is even simpler. You can choose a template to start with. You add you logo, change the layout, and add/remove components -- all by web UI. You can render the search results similar to Google or Yahoo style, but with more features, or render them like product catalog, or results that fit for mobile phones, or, if you prefer, directly jump to the most relevant match.
Easy to integrate
The search results can be easily integrated with your web application. With the result template, you can send back the search results in HTML or XML you defined, in CSV (Comma Separated Values), or just a list of document IDs that you can process by yourself.
Main features:
- Summarized and highlighted results
- Results counted for each category, and sub-category
- Order results by the field you choose
- Recent searches history
- RSS feed for latest match
- Spelling check
- Display Cached Highlighted full document
- Pagination of the results
- Automatic results clustering
Enhancements:
- Indexing speed was increased by 2 to 3 times. JSP or another templating facility can be used to render search results.
- ISOLatin1AccentFilter was added to FrenchAnalyzer. SynchronizedUpdateIndex and SynchronizedUpdateTempIndex were added for optimal performance in Storage Area Network.
- The Lucene library was upgraded to the latest version.