Free protector software for linux

Openprotect is our set of e-mail filters bundle consisting of Kaspersky Antivirus, Clam Antivirus, SpamAssassinand MailScanner along with our Qmail module.
Enhancements:
- MailScanner was updated to version 4.46.2 with an improved phishing net for JavaScript.
- A highlight Phishing fraud option was added along with the ability to quarantine all mail that has been modified and a Scan Messages option to completely disable processing of a particular mail address.
- ClamAV was updated to 0.87 and SpamAssassin(SA) was updated to 3.1.0 with many plugins and MCP patches for better spam/MCP filtering.
- A openprotect-test utility that sends test virus, spam, and clean mail to verify the setup was added along with openprotect-renew, which installs a KAV license and views expiry status.
- razor 2.77 with various bugfixes was included.

ROCK is a Distribution Build Kit. You can configure your personal build of ROCK and easily build your own distribution (see the screenshots). Rock Linux is software for managing operating environments. In a way it is a software development toolkit for building OS solutions.
The available config options include, but are not limited to:
Package Selection
You can select the packages you want to have in your Distribution. So packages you dont want or need are not build at all. A list of available packages can be found here.
Compiler and Optimization
You can select a compiler (by default gcc3) and optimization options for building your distribution. That enables you to highly optimize for your hardware. You can also build your entire distribution with the GCC Stack-Smashing Protector enabled for enhanced security.
Dietlibc
You can use dietlibc instead of the GNU LibC as your C library. That can be very useful e.g. for embedded systems.
And much more ...
Other options are: selection of an init-style, custom GNU configure options, cross-building, and much more. A major focus in the ROCK development always has been to make adding new features and config options as easy as possible.
Enhancements:
- Packages can be forked (gcc=gcc3, gcc=gcc4) to reduce code duplication.
- Packages can be split (gcc, gcc:doc, gcc:dev) to reduce necessary filesystem space after installation.
- Postinstall scripts can be run to setup the application after installation rather than after compilation.
- Every ROCK script now has a -help text.
- udev has replaced devfs.
- Toolchain compilation for cross-builds has been made easier.
- Cluster Builds, Pseudonative Builds, and Cross Builds have been made easier.
- Lots of other improvements were made, and practically all of the 1600 packages were updated.

System Information Data Collector is a tool for collecting information from a HP-UX operating system and some HP hardware and software. System Information Data Collector is a free software and provided by the author AS IS under terms of the GNU General Public License.

Support engineers and system administrators can use System Information Data Collector to obtain a system configuration and troubleshoot problems. To get system information System Information Data Collector script calls specified modules. The modules of System Information Data Collector are located in the modules directory.

The following modules is available in this version:

- disks
Collects disk information (default).

- lvm
Collects LVM information (default).

- etc
Collects /etc configuration files (default).

- init
Collects /sbin/init.d and /sbin/rc? scripts (default).

- logs
Collects /var/adm/syslog file and dmesg output (default).

- net
Collects network information and network device information (default).

- sw
Collects software depot information (default).

- sysconf
Collects system configuration information (default).

- mcsg
Collects HP MC/Service Guard information. This module does not run by default.

- npar
Collects npar configuration information. This module does not run by default.

- dp
Collects HP Data Protector software information. This module does not run by default.

- default
Run all default modules.

The System Information Data Collector has been tested on several HP-UX 11.11 and 11.23 hosts. There was no problems detected with software or hardware during the time the script has been running. But it is not good idea to run script on production michines, because it has not been tested in all possible HP-UX environments.

distccKNOPPIX is a directly bootable and self-configuring Linux system on a small (55MB) iso running a distccd daemon. distccKNOPPIX is a simple remastering of Knoppix running a distccd daemon and some general cleaning up/removal of unneeded packages/apps.
Its obvious target is for those who have other machines at their hands, and for some reason or an other can not get a distccd daemon running on it.
Attention Gentoo Users: The distccKNOPPIX (Debian) version of gcc is not patched with pie or protector support like the Gentoo version is. Im working on fixing this, but you will probably have problems compiling glibc, grub and perhaps other programs until this issue is remedied.
All versions are identical except for the default gcc. All downloads have all 4 versions of gcc. You can also change the default gcc at the boot prompt by typing knoppix gcc-3.4 for example. Or you can change the gcc version at the command line with update-alternatives --config gcc. If you are unsure which version to download, try the gcc-3.3 one.
Main features:
- Kernel 2.4.26
- distcc 2.16 (port 3632)
- gcc 2.95.4, 3.2.3, 3.3.4, 3.4.1
- cpp 2.95.4, 3.2.3, 3.3.4, 3.4.1
- g++ 2.95.4, 3.2.3, 3.3.4, 3.4.1
Enhancements:
- added c++ link to g++
- more cleanups
- created a mailing list

Adamantix project aims to become a highly secure but usable Linux distribution. A standard Linux distribution is not very secure, despite the fact that it may be more secure than other operating systems.
The underlying problem is that most of Linux as we know it today was designed for speed and features, but not for security. Adding security to a system which is not designed to be secure will not solve most of the current and future problems.
This means that the whole system needs to be redesigned from the ground up to make it really secure. And that is what the Adamantix project is going to accomplish.
Adamantix v1.0 (known as Trusted Debian v1.0 back then) was the first Linux distribution to integrate support for PaX and SSP (Stack Smashing Protector, aka. Propolice). PaX is a kernel patch which protects against a number of buffer overflows and other memory corruption attacks. SSP is a GCC patch which provides protection of the stack, which makes stack overflows harder to exploit.
Currently work is going on to integrate RSBAC support in Adamantix. RSBAC is a kernel patch which provides a flexible and extensible security framework. This framework is very powerful and can be used to implement almost any security feature. A number of modules which use this framework have been implemented on top of it, such as:
- An improved chroot (jail) module
- On-access virus scanning module
- Linux capabilities management module
- Linux resource management module
- User ID changing management module
- Role based access module
- Access Control Lists (ACLs) module
- And others.
All these modules can be combined to form a whole which is greater than the sum of the individual modules. In the future the number of modules is likely to grow, including modules for gr-security RBAC and SELinux, to provide backwards compatibility for legacy systems. RSBAC is a toolkit, in the same spirit as Linux is a toolkit.
It takes quite some time to learn and understand RSBAC, just like learning Linux takes quite some time. But this time is well invested and will give similar rewards as learning Linux.

MailScanner is an email virus scanner, vulnerability protector, and spam tagger. It supports the Postfix, Sendmail, Exim, Qmail, and ZMailer MTAs, and the Sophos, McAfee, F-Prot, F-Secure, CommandAV, InoculateIT, Inoculan, eTrust, Kaspersky, Nod32, AntiVir, BitDefender, RAV, Panda, DrWeb, ClamAV, and other anti-virus scanners.

MailScanner uses SpamAssassin for highly successful spam identification, and is designed to handle denial of service attacks. It will detect password-protected zip files and apply filename checking to their contents.

It is very easy to install, requires no changes at all to your sendmail.cf file, is designed to be lightweight, and wont grind your mail system to a halt with its load. It can be integrated into any email system, regardless of the software in use.

Devil-Linux is a distribution which boots and runs completely from CDROM. The configuration can be saved to a floppy diskette or a USB pen drive.
Devil Linux was originally intended to be a dedicated firewall/router but now Devil-Linux can also be used as a server for many applications. Attaching an optional hard drive is easy, and many network services are included in the distribution.
The system is designed to install without the use of a hard drive. It requires the use of a CDROM and a write-protected floppy.
The CDROM provides the operating system, and the floppy provides the configuration information, via a tarball that is unpacked into the /etc directory. In this way, the system is fully configurable, yet the running system has no writeable device.
Main features:
- Boots from CD
- Traditionally Devil Linux boots from a CD-ROM which is read-only by nature. This means an intruder will not be able to install i.e. an "ordinary" root kit.
- Boots from USB pendrive
- As all movable parts in your computer, the CD-ROM is prone to failure. This is the reason why we provide a script to install the entire system on an USB pendrive. Note: You need a computer which is able to boot from USB harddisks, in order to use this feature.
- Configuration is saved on a floppy disc or on a USB Flash Media
- Due to the read-only nature of CD-ROMs, you need a place to save your configuration files. This can either traditionally be on a floppy disc or on a USB flash media (like a pendrive), to increase the reliability.
- Configuration can be burned on CD
- There are cases when you have to ensure that the configuration cant be modified. This is the reason why we provide the feature for loading the configuration archive from the (read-only) CD-ROM.
- No need for a harddisk although it can optionally be used for data storage
- Most distributions need a harddisk for data storage, with DL this is completely optional. Reasons for adding harddisk data storage would be, i.e. when you use DL as your mail server or for file sharing. DL uses dynamic disc configuration via the Logical Volume Manager, which makes adding and maintaining the harddisk storage easy (regardless if you have only 1 GB or 1 TB of data).
- Support for Intel 486 and higher
- Got some old boxes in your bone yard? For most internet connection an old computer is enough to play the role of your Firewall, this is the reason why we still support 486 CPUs. But were not stuck with old technologies, we also provide you a version vor 686 CPUs with SMP support.
- IPTables/Netfilter Support
- State of-the-art firewall functionality is provided by IPTables/Netfilter, which includes features like connection tracking. Devil-Linux adds many more Netfilter modules then you find in your standard Linux Kernel.
- Create your own, customized version with our Build System
- Since everybody has different requirements, Devil-Linux provides you with an easy-to-use build system, which enables you to create your own customized version. You can i.e. only add the packages you need on your machine or even add features which are currently missing in the mainstream version.
- Directly supported by Firewall Builder
- Dont like writing your Firewall rules by hand? Get Firewall Builder and use a great GUI tool to create your ruleset. Firewall Builder supports writing the rules directly onto your configuration floppy.
- No graphical desktop
- Devil-Linux has not support for i.e. X-Server. This greatly reduces the requirements to run DL and also greatly increases security by reducing the number of running programs. (Try this on Windows...)
- Almost all binaries are compiled with the GCC Stack Smashing Protector
- Except of a very few exceptions, all binaries are compiled with the GCC Stack Smashing Protector. Applications written in C will be protected by the method that automatically inserts protection code into an application at compilation time. The protection is realized by buffer overflow detection and the variable reordering feature to avoid the corruption of pointers.
- Improved Kernel Security through GRSecurity
- GRSecurity adds several new features and protection mechanisms to the Linux Kernel itself. This includes Chroot restrictions (did you know that it is easy to break out of a non-protected chroot jail?), Address space modification protection (like PAX), Auditing features, Randomization features and much more.
- Easy to use chroot
- Devil-Linux has support for chroot jails which is easy to use. Just define what you need in a configuration file and our jail script will take care of the rest. Some pre-defined configurations are already available.