Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Index: I

echo

Building Internet Firewalls, 8.12.3. ping
(see also ping command)

packets, configuring : Building Internet Firewalls, 8.12.5. Other ICMP Packets

parameter problem message header : TCP/IP Network Administration, F.3. ICMP Parameter Problem Message Header

returning error codes : Building Internet Firewalls, 6.4.2. Returning ICMP

statement (in gated) : TCP/IP Network Administration, B.8.9. The icmp Statement

tracing messages in : TCP/IP Network Administration, B.8.9. The icmp Statement

ICMP Router Discovery Messages : DNS & BIND, 8.5.2. Recommendations

IDA sendmail

sendmail, History
TCP/IP Network Administration, 10. sendmail

IDEA (International Data Encryption Algorithm)

Practical UNIX & Internet Security, 6.4.1. Summary of Private Key Systems
Practical UNIX & Internet Security, 6.6.3.1. Encrypting files with IDEA

identd daemon

Practical UNIX & Internet Security, 17.3.12. Identification Protocol (auth) (TCP Port
sendmail, 20.2.4. Verify identd Information

Identification field : TCP/IP Network Administration, 1.5.1.3. Fragmenting datagrams

identification headers : sendmail, 35.6.4. Identification and Control Headers

identification protocol : Practical UNIX & Internet Security, 17.3.12. Identification Protocol (auth) (TCP Port

identifiers

default user

sendmail, 13.2.5. The Default User Identities
sendmail, 22.8.3.1. The DefaultUser option
sendmail, 34.8. Alphabetized Reference

envelope (ENVID), DSN

sendmail, 23.9. The qf File Internals
sendmail, 36.7. Alphabetized Reference

message

sendmail, 13.4. Sending Mail
sendmail, 14.2.3. The Message-ID: Header
sendmail, 26.1.3.5. msgid= the Message-ID: identifier

queue : (see queue identifier)

queue file : (see $i macro)

rule set : sendmail, 29.1.1. Rule-Set Numbers

vendor : sendmail, 27.5.1. The vendor

identity

system : sendmail, 31.7.1. Macros and the System Identity
user : (see usernames)

IDENTPROTO macro : sendmail, 18.8. Alphabetized Reference

IDRP (InterDomain Routing Protocol) : TCP/IP Network Administration, 7.5.2. Border Gateway Protocol

IEEE 802.3 : TCP/IP Network Administration, 1.2. A Data Communications Model

IEEE Computer Society : Practical UNIX & Internet Security, F.1.7. IEEE Computer Society

Ierrs (input errors) : TCP/IP Network Administration, 11.4.3. Checking the Interface with netstat

IETF (Internet Engineering Task Force) : TCP/IP Network Administration, 2.2.2. Classless IP Addresses

RFC page : TCP/IP Network Administration, 13.4. Retrieving RFCs

ifconfig

TCP/IP Network Administration, 3.5.1. Reverse Address Resolution Protocol

TCP/IP Network Administration, 6.1. The ifconfig Command

TCP/IP Network Administration, 6.4.1. slattach

TCP/IP Network Administration, 7.2. The Minimal Routing Table

in troubleshooting

TCP/IP Network Administration, 11.2. Diagnostic Tools
TCP/IP Network Administration, 11.3. Testing Basic Connectivity
TCP/IP Network Administration, 11.4.1. Troubleshooting with the ifconfig Command

Linux implementation of : TCP/IP Network Administration, 7.3.1.1. Installing static routes at startup

putting in startup files : TCP/IP Network Administration, 6.1.5.6. Putting ifconfig in the startup files

setting values indirectly : TCP/IP Network Administration, 6.1.3. Assigning a Subnet Mask

IFS variable

Practical UNIX & Internet Security, 5.5.3.2. Another SUID example: IFS and the /usr/lib/preserve
Practical UNIX & Internet Security, 23.4. Tips on Writing SUID/SGID Programs
attacks via : Practical UNIX & Internet Security, 11.5.1.2. IFS attacks

ignore (in Swatch command) : Practical UNIX & Internet Security, 10.6.2. The Swatch Configuration File

IgnoreDots (i) option

sendmail, 34.1.3. Appropriateness of Options
sendmail, 34.8. Alphabetized Reference
sendmail, 36.7. Alphabetized Reference

ignoretc option (nslookup) : DNS & BIND, 11.3. Option Settings

ignoring illegal switches : sendmail, 36.7. Alphabetized Reference

IHL (Internet Header Length) : TCP/IP Network Administration, 1.5.1.1. The datagram

ILL signal : DNS & BIND, 7.1. BIND Name Server Signals

image content type : TCP/IP Network Administration, 3.4.3. Multipurpose Internet Mail Extensions

IMAP (Internet Message Access Protocol)

TCP/IP Network Administration, 4.5.3. Planning Your Mail System
TCP/IP Network Administration, 9.7.2. IMAP Server

imapd file : TCP/IP Network Administration, 9.7.2. IMAP Server

immutable attribute (BSD 4.4-Lite) : Building Internet Firewalls, 5.8.4.3. Mount filesystems as read-only

immutable files : Practical UNIX & Internet Security, 9.1.1. Immutable and Append-Only Files

implicit database class : sendmail, 33.8. Alphabetized Reference

import statement (in gated) : TCP/IP Network Administration, B.10.1. The import Statement

importing NIS accounts

Practical UNIX & Internet Security, 19.4.1. Including or excluding specific accounts:
Practical UNIX & Internet Security, 19.4.4.2. Using netgroups to limit the importing of accounts

imposter on Ethernet : TCP/IP Network Administration, 11.4.2.1. ARP problem case study

IN class : DNS & BIND, 4.2.3. SOA Records

in-addr.arpa domain

DNS & BIND, 2.6.4. Mapping Addresses to Names
DNS & BIND, 3.2.4. Registering with Your Parent
TCP/IP Network Administration, 4.4.1.1. Obtaining an IN-ADDR.ARPA domain
TCP/IP Network Administration, 8.3.5. The Reverse Domain File
delegating : DNS & BIND, 9.4.5. Delegating an in-addr.arpa Zone
incorrect delegation : DNS & BIND, 13.6.5. rlogin and rsh to Host Fails Access Check
internal roots and : DNS & BIND, 15.4.4.3. in-addr.arpa delegation
misconfigured servers : DNS & BIND, 9.6. Good Parenting
registering : DNS & BIND, E. in-addr.arpa Registration Form
reverse domain files : TCP/IP Network Administration, C.3.1.6. Domain Name Pointer record
subdomains of : DNS & BIND, 9.5. Subdomains of in-addr.arpa Domains

"In-Reply-To:" header line : sendmail, 35.10. Alphabetized Reference

in.named daemon : Practical UNIX & Internet Security, 16.2.6.1. DNS under UNIX

inbound

packets : Building Internet Firewalls, 6.2.2. Be Careful of `Inbound'

filtering rules for : Building Internet Firewalls, 6.8.6. It Should Apply Rules Separately to
Telnet : Building Internet Firewalls, 6.7.2. Inbound Telnet Service

services : Building Internet Firewalls, 10. Authentication and Inbound

INCDIRS= directive : sendmail, 18.4.3. INCDIRS=

incident response teams

Building Internet Firewalls, 13.1.4.2. CERT-CC or other incident response
Building Internet Firewalls, 13.4.4.2. CERT-CC and other incident response teams
Building Internet Firewalls, A.5. Response Teams and Other Organizations
resources for : Building Internet Firewalls, A.2.2. info.cert.org

incidents, attacks, threats

TCP/IP Network Administration, 1.7. Application Layer

TCP/IP Network Administration, 4.2.1. Obtaining an IP Address

accidental : Building Internet Firewalls, 1.2.3. Stupidity and Accidents

assessing

Practical UNIX & Internet Security, 2.3.3. Adding Up the Numbers
TCP/IP Network Administration, 12.1.1. Assessing the Threat

back doors

Practical UNIX & Internet Security, 2.5. The Problem with Security Through Obscurity
Practical UNIX & Internet Security, 6.2.3. Cryptographic Strength
Practical UNIX & Internet Security, 11.1. Programmed Threats: Definitions
Practical UNIX & Internet Security, 11.1.2. Back Doors and Trap Doors
Practical UNIX & Internet Security, 11.5. Protecting Yourself
Practical UNIX & Internet Security, 27.1.2. Trusting Trust
in MUDs and IRCs : Practical UNIX & Internet Security, 17.3.23. Other TCP Ports: MUDs and Internet Relay Chat (IRC)

backup-related

Practical UNIX & Internet Security, 7.1.6. Security for Backups
Practical UNIX & Internet Security, 7.1.6.3. Data security for backups

bacteria programs : Practical UNIX & Internet Security, 11.1.7. Bacteria and Rabbits

biological threats : Practical UNIX & Internet Security, 12.2.1.7. Bugs (biological)

broadcast storms : Practical UNIX & Internet Security, 25.3.2. Message Flooding

via CGI scripts : Practical UNIX & Internet Security, 18.2.3.2. Testing is not enough!

changing file owners : Practical UNIX & Internet Security, 5.7. chown: Changing a File's Owner

changing system clock : Practical UNIX & Internet Security, 5.1.5. File Times

code breaking

Practical UNIX & Internet Security, 6.1.1. Code Making and Code Breaking
(see also cryptography)

command channel : Building Internet Firewalls, 8.1. Electronic Mail

commonly attacked accounts : Practical UNIX & Internet Security, 8.1.2. Default Accounts

computer failures : Practical UNIX & Internet Security, 7.1.1.1. A taxonomy of computer failures

contacting service providers about : Building Internet Firewalls, 13.4.4.3. Vendors and service providers

data-driven attacks : Building Internet Firewalls, 8.1. Electronic Mail

decode aliases : Practical UNIX & Internet Security, 17.3.4.2. Using sendmail to receive email

deep tree structures : Practical UNIX & Internet Security, 25.2.2.8. Tree-structure attacks

denial of service

Building Internet Firewalls, 1.2.1.2. Denial of Service

Practical UNIX & Internet Security, 1.5. Role of This Book

Practical UNIX & Internet Security, 17.1.3. The /etc/inetd Program

Practical UNIX & Internet Security, 17.3.21.5. Denial of service attacks under X

Practical UNIX & Internet Security, 25. Denial of Service Attacks and Solutions

Practical UNIX & Internet Security, 25.3. Network Denial of Service Attacks

Practical UNIX & Internet Security, 25.3.4. Clogging

TCP/IP Network Administration, 12.1.1. Assessing the Threat

accidental

Building Internet Firewalls, 1.2.3. Stupidity and Accidents
Practical UNIX & Internet Security, 25.2.5. Soft Process Limits: Preventing Accidental Denial

automatic lockout : Practical UNIX & Internet Security, 3.3. Entering Your Password

checklist for : Practical UNIX & Internet Security, A.1.1.24. Chapter 25: Denial of Service Attacks and Solutions

destructive attacks : Practical UNIX & Internet Security, 25.1. Destructive Attacks

disk attacks

Practical UNIX & Internet Security, 25.2.2. Disk Attacks
Practical UNIX & Internet Security, 25.2.2.8. Tree-structure attacks

inodes : Practical UNIX & Internet Security, 25.2.2.3. Inode problems

internal inetd services : Practical UNIX & Internet Security, 17.1.3. The /etc/inetd Program

on networks

Practical UNIX & Internet Security, 25.3. Network Denial of Service Attacks
Practical UNIX & Internet Security, 25.3.4. Clogging

overload attacks

Practical UNIX & Internet Security, 25.2. Overload Attacks
Practical UNIX & Internet Security, 25.2.5. Soft Process Limits: Preventing Accidental Denial

via syslog : Practical UNIX & Internet Security, 10.5.1. The syslog.conf Configuration File

system overload attacks : Practical UNIX & Internet Security, 25.2.1.2. System overload attacks

X Window System : Practical UNIX & Internet Security, 17.3.21.5. Denial of service attacks under X

detecting, plan for : Building Internet Firewalls, 13.4.1. Planning for Detection

dictionary attacks

Building Internet Firewalls, 10.3.1. One-Time Passwords
Practical UNIX & Internet Security, 8.6.1. The crypt()
TCP/IP Network Administration, 12.2. User Authentication

disposed materials : Practical UNIX & Internet Security, 12.3.3. Other Media

DNS client flooding : Practical UNIX & Internet Security, 16.3.2. Security and Nameservice

DNS nameserver attacks : Practical UNIX & Internet Security, 17.3.6.2. DNS nameserver attacks

DNS zone transfers : Practical UNIX & Internet Security, 17.3.6.1. DNS zone transfers

documenting

Building Internet Firewalls, 13.1.5. Snapshot the System
Building Internet Firewalls, 13.1.7. Document the Incident
planning for : Building Internet Firewalls, 13.4.5. Planning for Snapshots

dormant accounts

Practical UNIX & Internet Security, 8.4. Managing Dormant Accounts
Practical UNIX & Internet Security, 8.4.3. Finding Dormant Accounts

evaluating, plan for : Building Internet Firewalls, 13.4.2. Planning for Evaluation of the Incident

false syslog entries : Practical UNIX & Internet Security, 10.5.3.1. Beware false log entries

filename attacks : Practical UNIX & Internet Security, 11.5.1.4. Filename attacks

having tools and supplies for : Building Internet Firewalls, 13.5.5. Keeping a Cache of Tools and Supplies

hidden space : Practical UNIX & Internet Security, 25.2.2.7. Hidden space

hijacking : Building Internet Firewalls, 10.1.1. Hijacking

HOME variable attacks : Practical UNIX & Internet Security, 11.5.1.3. $HOME attacks

identifying and quantifying

Practical UNIX & Internet Security, 2.2.1.2. Identifying threats
Practical UNIX & Internet Security, 2.2.2. Review Your Risks

IFS variable attacks : Practical UNIX & Internet Security, 11.5.1.2. IFS attacks

intruders/attackers

Building Internet Firewalls, 1.2.1.1. Intrusion

Practical UNIX & Internet Security, 1. Introduction

TCP/IP Network Administration, 1.7. Application Layer

TCP/IP Network Administration, 5.2. Linux Kernel Configuration

(see also finger service)

(see also firewalls)

creating hidden files : Practical UNIX & Internet Security, 24.4.1.7. Hidden files and directories

discovering

Practical UNIX & Internet Security, 24.2. Discovering an Intruder
Practical UNIX & Internet Security, 24.2.6. Anatomy of a Break-in

legal options regarding : Practical UNIX & Internet Security, 26.1. Legal Options After a Break-in

pursuing and capturing : Building Internet Firewalls, 13.3. Pursuing and Capturing the

recovering from : Building Internet Firewalls, 13.1.6. Restore and Recover

responding to

Practical UNIX & Internet Security, 24. Discovering a Break-in
Practical UNIX & Internet Security, 24.7. Damage Control

revealing DNS information to : Building Internet Firewalls, 8.10.4.3. Revealing too much information to

reviewing response strategies : Building Internet Firewalls, 13.4.8. Periodic Review of Plans

slower machines and : Building Internet Firewalls, 5.3.2. How Fast a Machine?

tracking from log files : Practical UNIX & Internet Security, 24.3. The Log Files: Discovering an Intruder's

types of : Building Internet Firewalls, 1.2.2. Types of Attackers

letting in accidentally : Practical UNIX & Internet Security, 11.4. Entry

logic bombs

Practical UNIX & Internet Security, 11.1.3. Logic Bombs
Practical UNIX & Internet Security, 27.2.2. Viruses on the Distribution Disk

mailing list for : Practical UNIX & Internet Security, E.1.3.9. RISKS

media failure : Practical UNIX & Internet Security, 7.1.4. Guarding Against Media Failure

meet-in-the-middle attacks : Practical UNIX & Internet Security, 6.4.5.1. Double DES

MUD/IRC client programs : Practical UNIX & Internet Security, 17.3.23. Other TCP Ports: MUDs and Internet Relay Chat (IRC)

multiple failed attacks : Building Internet Firewalls, 12.2.3. The Good, the Bad, and the Ugly

newly created accounts : Practical UNIX & Internet Security, 24.4.1. New Accounts

NIS, unintended disclosure : Practical UNIX & Internet Security, 19.4.5. Unintended Disclosure of Site Information with NIS

with NNTP : Practical UNIX & Internet Security, 17.3.13. Network News Transport Protocol (NNTP) (TCP Port

notifying people about

Building Internet Firewalls, 13.1.4. Make `Incident in Progress'
Building Internet Firewalls, 13.4.4. Planning for Notification of People
TCP/IP Network Administration, 12.4.2. Looking for Trouble
TCP/IP Network Administration, 12.4.2.2. Checking login activity

open (guest) accounts

Practical UNIX & Internet Security, 8.1.4. Open Accounts
Practical UNIX & Internet Security, 8.1.4.6. Potential problems with rsh

password attacks : Building Internet Firewalls, 10.3.1. One-Time Passwords

PATH variable attacks : Practical UNIX & Internet Security, 11.5.1.1. PATH attacks

plaintext attacks : Practical UNIX & Internet Security, 6.2.3. Cryptographic Strength

playback (replay) attacks : Practical UNIX & Internet Security, 19.6.1.2. Using the ticket granting ticket

practicing drills for : Building Internet Firewalls, 13.5.7. Doing Drills

programmed

Practical UNIX & Internet Security, 11. Protecting Against Programmed Threats
Practical UNIX & Internet Security, 11.6.2. Shared Libraries
Practical UNIX & Internet Security, A.1.1.10. Chapter 11: Protecting Against Programmed Threats
Practical UNIX & Internet Security, D.1.4. Computer Viruses and Programmed Threats
authors of : Practical UNIX & Internet Security, 11.3. Authors
damage from : Practical UNIX & Internet Security, 11.2. Damage

recovering from : Building Internet Firewalls, 13.1.6. Restore and Recover

planning to : Building Internet Firewalls, 13.4.6. Planning for Restoration and Recovery

replay attacks : Practical UNIX & Internet Security, 17.3.14. Network Time Protocol (NTP) (UDP Port 123)

responding to

Building Internet Firewalls, 12.2.5. Responding to Attacks
Building Internet Firewalls, 13. Responding to Security Incidents

reviewing response strategies : Building Internet Firewalls, 13.4.8. Periodic Review of Plans

rsh, problems with : Practical UNIX & Internet Security, 8.1.4.6. Potential problems with rsh

sendmail problems : Practical UNIX & Internet Security, 17.3.4.1. sendmail and security

spoofed network connection : Practical UNIX & Internet Security, 8.5.3.1. Trusted path

start-up file attacks

Practical UNIX & Internet Security, 11.5.2. Start-up File Attacks
Practical UNIX & Internet Security, 11.5.2.7. Other initializations

system clock : (see system clock)

theft : (see theft)

/tmp directory attacks : Practical UNIX & Internet Security, 25.2.4. /tmp Problems

toll fraud : Practical UNIX & Internet Security, 14.4.1. One-Way Phone Lines

traffic analysis : Practical UNIX & Internet Security, 18.4. Avoiding the Risks of Eavesdropping

tree-structure attacks : Practical UNIX & Internet Security, 25.2.2.8. Tree-structure attacks

Trojan horses

Practical UNIX & Internet Security, 4.3.5. Using su with Caution
Practical UNIX & Internet Security, 11.1.4. Trojan Horses
Practical UNIX & Internet Security, 11.5. Protecting Yourself
Practical UNIX & Internet Security, 27.2.2. Viruses on the Distribution Disk
Kerberos and : Practical UNIX & Internet Security, 19.6.5. Kerberos Limitations
X clients : Practical UNIX & Internet Security, 17.3.21.2. X security

trusted hosts : (see trusted hosts)

types of : Building Internet Firewalls, 1.2. What Are You Trying To Protect

unattended terminals

Practical UNIX & Internet Security, 12.3.5. Unattended Terminals
Practical UNIX & Internet Security, 12.3.5.2. X screen savers

unowned files : Practical UNIX & Internet Security, 24.4.1.8. Unowned files

vandalism

Practical UNIX & Internet Security, 12.2.4. Vandalism
Practical UNIX & Internet Security, 12.2.4.3. Network connectors

viruses

Building Internet Firewalls, 1.4.2.4. A firewall can't protect against
Practical UNIX & Internet Security, 11.1. Programmed Threats: Definitions
Practical UNIX & Internet Security, 11.1.5. Viruses
Practical UNIX & Internet Security, 27.2.2. Viruses on the Distribution Disk
bacteria programs : Practical UNIX & Internet Security, 11.1.7. Bacteria and Rabbits
references on : Practical UNIX & Internet Security, D.1.4. Computer Viruses and Programmed Threats

war and terrorism : Practical UNIX & Internet Security, 12.2.5. Defending Against Acts of War and Terrorism

weakness-finding tools : Practical UNIX & Internet Security, 11.1.1. Security Tools

by web browsers

Practical UNIX & Internet Security, 18.5. Risks of Web Browsers
Practical UNIX & Internet Security, 18.5.2. Trusting Your Software Vendor

worms : Practical UNIX & Internet Security, 11.1.6. Worms

*include* delivery agent : sendmail, 30.5.1. The *file* and *include* Agents

include directive

DNS & BIND, F.1.8. include (4.9.3)
DNS & BIND, F.1.16. include (8.X.X)
sendmail, 16.2.1. include

:include: directive

sendmail, 22.5.2. Permissions for :include:
sendmail, 23.9. The qf File Internals
sendmail, 25.2. :include: Mailing Lists
sendmail, 30.8. Alphabetized F= Flags

$INCLUDE entries (db files)

DNS & BIND, 7.3.3. Including Other Database Files
DNS & BIND, A.1. Master File Format

includes : (see server-side includes)

Includes option : Practical UNIX & Internet Security, 18.3.2. Commands Within the <Directory>

IncludesNoExec option : Practical UNIX & Internet Security, 18.3.2. Commands Within the <Directory>

incoming directories, FTP : Building Internet Firewalls, 8.2.1.6. Be careful of writable

incompatibility problems, handling : TCP/IP Network Administration, 5.2. Linux Kernel Configuration

inconsistent answers : DNS & BIND, 13.6.3. Wrong or Inconsistent Answer

incremental backups : Practical UNIX & Internet Security, 7.1.3. Types of Backups

incrementing serial number : (see serial numbers)

indecent material : Practical UNIX & Internet Security, 26.4.5. Pornography and Indecent Material

indefinite tokens : TCP/IP Network Administration, 10.6.1. Pattern Matching

substituting : TCP/IP Network Administration, 10.6.2. Transforming the Address

index.html file, absence of : Practical UNIX & Internet Security, 18.2.2.2. Additional configuration issues

individual host assignment of addresses : TCP/IP Network Administration, 4.2.1.1. Assigning host addresses

inetd daemon

Building Internet Firewalls, 5.8.2.1. How are services managed?
Practical UNIX & Internet Security, 17.1.2. Starting the Servers
Practical UNIX & Internet Security, 17.1.3. The /etc/inetd Program
TCP/IP Network Administration, 5.4. The Internet Daemon
-nowait option : Practical UNIX & Internet Security, 25.3.1. Service Overloading
-t (trace) option : Practical UNIX & Internet Security, 10.3.6. Logging Network Services
denial-of-service attacks : Practical UNIX & Internet Security, 17.1.3. The /etc/inetd Program
modifying for anonymous FTP : Building Internet Firewalls, 8.2.1.3. Providing anonymous
starting bootpd from : TCP/IP Network Administration, 9.4. A BOOTP Server
starting bootpgw from : TCP/IP Network Administration, 9.4.1. BOOTP gateway
starting POP3 from : TCP/IP Network Administration, 9.7.1. POP Server

inetd.conf file

Practical UNIX & Internet Security, 11.5.3.2. inetd.conf
Practical UNIX & Internet Security, 17.3. Primary UNIX Network Services
TCP/IP Network Administration, 5.4. The Internet Daemon
TCP/IP Network Administration, 9.4. A BOOTP Server
TCP/IP Network Administration, 12.3.1. Remove Unnecessary Software
TCP/IP Network Administration, 12.4.2. Looking for Trouble
editing in tcpd : TCP/IP Network Administration, 12.5.1. wrapper

inetinit script : TCP/IP Network Administration, 7.3.1.1. Installing static routes at startup

"Infinite loop in ruleset" error : sendmail, 28.6.2. Rewrite Once Prefix: $:

infinite loops, detecting possible : TCP/IP Network Administration, 10.6.2. Transforming the Address

information

ensuring integrity of : TCP/IP Network Administration, 12.1.1. Assessing the Threat

gathering, first phase in problem-solving : TCP/IP Network Administration, 11.1. Approaching a Problem

lookup services, configuring : Building Internet Firewalls, 8.8. Information Lookup Services

passing to users : TCP/IP Network Administration, 4.6. Informing the Users

disseminating mask information : TCP/IP Network Administration, 4.2.2. Defining the Subnet Mask

resources, finding : TCP/IP Network Administration, 13. Internet Information Resources

theft and espionage

Building Internet Firewalls, 1.2.1.3. Information Theft
Building Internet Firewalls, 1.2.2.4. Spies (Industrial and
Practical UNIX & Internet Security, 11.3. Authors
(see also theft)

init program

Practical UNIX & Internet Security, 5.3.2. Common umask Values
Practical UNIX & Internet Security, C.5.1. Process #1: /etc/init

init.d directory : TCP/IP Network Administration, 9.1.1. NFS Daemons

autofs script : TCP/IP Network Administration, 9.1.4. NFS Automounter
inetinit script : TCP/IP Network Administration, 7.3.1.1. Installing static routes at startup
sendmail script : TCP/IP Network Administration, 10.2. Running sendmail as a Daemon

initgroups command : sendmail, 34.8. Alphabetized Reference

Initial Sequence Number (ISN) : TCP/IP Network Administration, 1.6.2. Transmission Control Protocol

initialization vector (IV) : Practical UNIX & Internet Security, 6.4.4.2. DES modes

initializing

alias database : sendmail, 36.7. Alphabetized Reference

default domain : DNS & BIND, 4.7.3.1. Initialize the default domain name

environment variables

Practical UNIX & Internet Security, 11.5.2.7. Other initializations
sendmail, 36.4.2.1. Initialize the environment

macros : sendmail, 36.4.2.2. Initialize macros

name server (debugging example) : DNS & BIND, 12.3.1. Name Server Startup (Debug Level 1)

system, files for : Practical UNIX & Internet Security, 11.5.3.5. System initialization files

inittab program

Practical UNIX & Internet Security, 14.5.1. Hooking Up a Modem to Your Computer
Practical UNIX & Internet Security, C.5.1. Process #1: /etc/init

INND program : Practical UNIX & Internet Security, 17.3.13. Network News Transport Protocol (NNTP) (TCP Port

inodes

Practical UNIX & Internet Security, 5.1. Files
Practical UNIX & Internet Security, 5.1.2. Inodes
change time : (see ctime)
for device files : Practical UNIX & Internet Security, 5.6. Device Files
numbers for : sendmail, 23.9. The qf File Internals
problems with : Practical UNIX & Internet Security, 25.2.2.3. Inode problems

input/output (I/O)

checking for meta characters : Practical UNIX & Internet Security, 23.2. Tips on Avoiding Security-related Bugs
input errors (Ierrs) : TCP/IP Network Administration, 11.4.3. Checking the Interface with netstat
portable library : Practical UNIX & Internet Security, 1.3. History of UNIX

insects : Practical UNIX & Internet Security, 12.2.1.7. Bugs (biological)

insecure networks : Building Internet Firewalls, 4.4.2. Insecure Networks

insist data category (logging) : DNS & BIND, 7.5.3. Category Details

installation planning sheets : TCP/IP Network Administration, 4.6.1. Sample Planning Sheets

installing

BIND : DNS & BIND, B. Compiling and Installing BIND on a Sun

cables : Practical UNIX & Internet Security, 12.2.4.2. Network cables

db library package : sendmail, C.3. Compile and Install

filesystems as read-only : Building Internet Firewalls, 5.8.4.3. Mount filesystems as read-only

Internet services : Building Internet Firewalls, 5.8.3. Installing and Modifying Services

Kerberos : Practical UNIX & Internet Security, 19.6.3. Installing Kerberos

kernel : Building Internet Firewalls, 5.8.4.1. Reconfigure and rebuild the kernel

logging installations : Practical UNIX & Internet Security, 10.7.2.1. Exception and activity reports

operating system : Building Internet Firewalls, 5.8.1.1. Start with a minimal clean operating system

physical security plan for : Practical UNIX & Internet Security, 12.1.1. The Physical Security Plan

sendmail

sendmail, 2.1. Get the Source
sendmail, 18.6. Install sendmail

sendmail.cf file : sendmail, 15.6. Install the client.cf File

software on machine : Building Internet Firewalls, 5.8.4. Reconfiguring for Production

insurance

Practical UNIX & Internet Security, 26.1. Legal Options After a Break-in
Practical UNIX & Internet Security, 26.2.6. Other Tips

int domain

DNS & BIND, 2.2.1. Top-Level Domains
TCP/IP Network Administration, 3.3.1. The Domain Hierarchy

INT signal

DNS & BIND, 7.1. BIND Name Server Signals
DNS & BIND, 13.2.2. How to Read a Database Dump

integer serial numbers : DNS & BIND, 7.2.2. SOA Serial Numbers

Integrated Services Digital Network (ISDN) : DNS & BIND, 15.7.3. X25, ISDN, and RT

integrity

Practical UNIX & Internet Security, 2.1. Planning Your Security Needs
Practical UNIX & Internet Security, 9. Integrity Management
Practical UNIX & Internet Security, 9.3. A Final Note
Practical UNIX & Internet Security, 11.1.5. Viruses
Practical UNIX & Internet Security, 12.3. Protecting Data
Practical UNIX & Internet Security, 12.3.6. Key Switches
information : (see information)
Kerberos : Practical UNIX & Internet Security, 19.6.1.3. Authentication, data integrity, and secrecy
management checklist : Practical UNIX & Internet Security, A.1.1.8. Chapter 9: Integrity Management
Secure RPC : Practical UNIX & Internet Security, 19.3.4. Limitations of Secure RPC
software for checking : Practical UNIX & Internet Security, 19.5.5. NIS+ Limitations

intelligent proxy servers : Building Internet Firewalls, 7.3.3. Intelligent Proxy Servers

interactive

logins : TCP/IP Network Administration, 4.5.3. Planning Your Mail System
mode : TCP/IP Network Administration, 8.4. Using nslookup
protocols : TCP/IP Network Administration, 9.6. Managing Distributed Servers

interactive nslookup : DNS & BIND, 11.2. Interactive Versus Noninteractive

InterDomain Routing Protocol (IDRP) : TCP/IP Network Administration, 7.5.2. Border Gateway Protocol

interface interval : DNS & BIND, 10.4.3.2. Interface interval

interfaces

checking with ifconfig : TCP/IP Network Administration, 6.1.2. Checking the Interface with ifconfig
connectors : TCP/IP Network Administration, 1.2. A Data Communications Model
determining name of : TCP/IP Network Administration, 6.1.1. Determining the Interface Name
multiple : TCP/IP Network Administration, 6.1.1. Determining the Interface Name
not enabled (*) : TCP/IP Network Administration, 6.1.1. Determining the Interface Name
statements (in gated) : TCP/IP Network Administration, B.6. Interface Statements

interior router

Building Internet Firewalls, 4.2.3.3. Interior router
TCP/IP Network Administration, 12.7. Firewalls
configuring : Building Internet Firewalls, 9.1.2.1. Interior Router
merging with bastion host : Building Internet Firewalls, 4.3.4. It's Dangerous to Merge the Bastion
merging with exterior router : Building Internet Firewalls, 4.3.2. It's OK to Merge the Interior Router and the Exterior Router
multiple : Building Internet Firewalls, 4.3.5. It's Dangerous to Use Multiple

intermediate gateway : (see gateways)

Intermediate System to Intermediate System (IS-IS) protocol : TCP/IP Network Administration, 7.4. Interior Routing Protocols

intermediate systems : (see gateways)

intermittent problems : TCP/IP Network Administration, 11.4.2. Troubleshooting with the arp Command

internal

bastion hosts : Building Internet Firewalls, 5.2.3. Internal Bastion Hosts

clients, and proxying : Building Internet Firewalls, 7.4.5. Internal Versus External Clients

firewalls : Building Internet Firewalls, 4.4. Internal Firewalls

bastion hosts on : Building Internet Firewalls, 4.4.6. An Internal Firewall May or May Not

mail, accepting only : sendmail, 20.2.1. Accept Mail Only From Our Domain

mailing lists

sendmail, 20.2.2. Workstation Refuses to Act as a Mail Gateway
sendmail, 25.1. Internal Mailing Lists

name for mail hub : sendmail, 11.4.2. A Word About ${HUB}

news server : Building Internet Firewalls, 8.5.3.4. Relaying news through your bastion

predefined macros : sendmail, 7.3. Predefined Macros

rule sets : sendmail, 8.3. Rule Sets

threats : TCP/IP Network Administration, 12.1.1. Assessing the Threat

internal keyword : TCP/IP Network Administration, 5.4. The Internet Daemon

internal root servers : DNS & BIND, 15.4.4. Internal Roots

international cryptography export

Practical UNIX & Internet Security, 6.4.4.1. Use and export of DES
Practical UNIX & Internet Security, 6.7.2. Cryptography and Export Controls

International Data Encryption Algorithm (IDEA)

Practical UNIX & Internet Security, 6.4.1. Summary of Private Key Systems
Practical UNIX & Internet Security, 6.6.3.1. Encrypting files with IDEA

International Standards Organization (ISO)

TCP/IP Network Administration, 1.2. A Data Communications Model
TCP/IP Network Administration, 11.9. Simple Network Management Protocol

internationalization

DNS & BIND, 2.2.1. Top-Level Domains

sendmail, 28.1.2.1. Backslashes in rules

geographic domain names

DNS & BIND, 2.2.2. Further Down
DNS & BIND, 3.2.1. Where in the World Do I Fit?
choosing : DNS & BIND, 3.2.1. Where in the World Do I Fit?
list of : DNS & BIND, C. Top-Level Domains

Internet

Practical UNIX & Internet Security, 16.1.1. The InternetWe recommend that readers

Practical UNIX & Internet Security, 18. WWW Security

(see also World Wide Web)

addresses

Practical UNIX & Internet Security, 16.2.1. Internet Addresses
Practical UNIX & Internet Security, 16.2.1.3. CIDR addresses
sendmail, 17.1.3. Internet Addresses
TCP/IP Network Administration, 10.7.1. Modifying Local Information

conferencing services, real-time : Building Internet Firewalls, 2.8. Real-Time Conferencing

connected or non-connected to : TCP/IP Network Administration, 4.1. Connected and Non-Connected Networks

connections to unbuilt bastion host : Building Internet Firewalls, 5.8. Building a Bastion Host

Control Message Protocol : (see ICMP)

daemon : (see inetd daemon)

defense in depth : Building Internet Firewalls, 3.2. Defense in Depth

dialup connections

DNS & BIND, 6.4.9. Windows 95
DNS & BIND, 15.5. Dialup Connections

domain as NIS domain : Practical UNIX & Internet Security, 19.4.3. NIS Domains

domain name space

DNS & BIND, 2.2. The Internet Domain Name Space
DNS & BIND, 2.2.1. Top-Level Domains

email over : (see email)

firewalls

DNS & BIND, 15.4. DNS and Internet Firewalls
(see firewalls)

future of IP addresses : Building Internet Firewalls, 4.5. What the Future Holds

global

TCP/IP Network Administration, 3.2. The Host Table
TCP/IP Network Administration, 4.1. Connected and Non-Connected Networks
TCP/IP Network Administration, 12.6. Encryption

internets vs. Internet : DNS & BIND, 1.2. On the Internet and internets

layer, TCP/IP : Building Internet Firewalls, C.5. Internet Layer

logging activity on : (see logs/logging)

military origins of : TCP/IP Network Administration, 1.1. TCP/IP and the Internet

multicasting : Building Internet Firewalls, 8.9.3. The Multicast Backbone (MBONE)

multiple connections to : Building Internet Firewalls, 4.3.6. It's OK to Use

need for DNS : DNS & BIND, 1.5.1. If you're connected to the Internet...

Protocol : (see IP)

rapid growth of

TCP/IP Network Administration, Foreword from the First Edition
TCP/IP Network Administration, 1.1. TCP/IP and the Internet
TCP/IP Network Administration, 2.2.1. Address Classes
TCP/IP Network Administration, 7.5.1. Exterior Gateway Protocol

registering domains : DNS & BIND, D. Domain Registration Form

Relay Chat : (see IRC)

routing architecture

Building Internet Firewalls, C.10. Internet Routing Architecture
TCP/IP Network Administration, 2.4. Internet Routing Architecture

search programs for : Building Internet Firewalls, 2.6. Other Information Services

security resource : Building Internet Firewalls, A.3.5. CERT-Advisory

servers : (see servers, Internet)

services : (see services, Internet)

Worm program : Practical UNIX & Internet Security, 1. Introduction

WWW : (see World Wide Web)

Internet Control Message Protocol (ICMP)

Building Internet Firewalls, 2.10. Network Management Services

Building Internet Firewalls, 6.3.3.3. ICMP

Building Internet Firewalls, C.5.2. Internet Control Message

Practical UNIX & Internet Security, 16.2.4.1. ICMP

TCP/IP Network Administration, 1.5.2. Internet Control Message Protocol

echo

Building Internet Firewalls, 8.12.3. ping
(see also ping command)

packets, configuring : Building Internet Firewalls, 8.12.5. Other ICMP Packets

parameter problem message header : TCP/IP Network Administration, F.3. ICMP Parameter Problem Message Header

returning error codes : Building Internet Firewalls, 6.4.2. Returning ICMP

statement (in gated) : TCP/IP Network Administration, B.8.9. The icmp Statement

tracing messages in : TCP/IP Network Administration, B.8.9. The icmp Statement

Internet Control Protocol (IPCP) : TCP/IP Network Administration, 6.2.1. The Serial Protocols

Internet Engineering Task Force (IETF) : TCP/IP Network Administration, 2.2.2. Classless IP Addresses

RFC page : TCP/IP Network Administration, 13.4. Retrieving RFCs

Internet Header Length (IHL) : TCP/IP Network Administration, 1.5.1.1. The datagram

Internet Layer : TCP/IP Network Administration, 1.5. Internet Layer

Internet Message Access Protocol (IMAP)

TCP/IP Network Administration, 4.5.3. Planning Your Mail System
TCP/IP Network Administration, 9.7.2. IMAP Server

Internet Packet Exchange (IPX) : Practical UNIX & Internet Security, 16.4.1. IPX

Internet Protocol (IP) : TCP/IP Network Administration, 1.5.1. Internet Protocol

Internet Registries

TCP/IP Network Administration, 4.2.1. Obtaining an IP Address
TCP/IP Network Administration, 4.3.1. Obtaining an autonomous system number

Internet Relay Chat (IRC) : Practical UNIX & Internet Security, 17.3.23. Other TCP Ports: MUDs and Internet Relay Chat (IRC)

Internet Resource Registries (IRR) : TCP/IP Network Administration, 4.2.1. Obtaining an IP Address

Internet Routing Registry (IRR) : TCP/IP Network Administration, 2.4. Internet Routing Architecture

Internet Security Scanner (ISS) : Practical UNIX & Internet Security, 17.6.2. ISS

Internet Service Providers : (see ISPs)

Internet Software Consortium (ISC) : TCP/IP Network Administration, 9.5. DHCP

Internet Talk Radio

TCP/IP Network Administration, 5.2. Linux Kernel Configuration
TCP/IP Network Administration, 5.3.1.1. Options

internets, classes of : DNS & BIND, 2.1.3. Resource Records

InterNIC

TCP/IP Network Administration, 4.2.1. Obtaining an IP Address
TCP/IP Network Administration, 4.4.1. Obtaining a Domain Name
TCP/IP Network Administration, 8.3.3. The Cache Initialization File
TCP/IP Network Administration, 11.6.3. Cache corruption
TCP/IP Network Administration, 13.6. The White Pages
registering with : (see registering)

interoperability

DNS & BIND, 13.5. Interoperability and Version Problems
(see also DHCP)
(see also POP)
(see also routers and routing)

intervals

queue processing interval : sendmail, 23.6.1. Periodically with -q
return interval : sendmail, 13.2.2. Limit the Life of Queued Messages

intranets

DNS & BIND, 1.2. On the Internet and internets
TCP/IP Network Administration, 4.1. Connected and Non-Connected Networks

intruders/attackers

Practical UNIX & Internet Security, 1. Introduction

TCP/IP Network Administration, 1.7. Application Layer

TCP/IP Network Administration, 5.2. Linux Kernel Configuration

(see also finger service)

(see also firewalls)

creating hidden files : Practical UNIX & Internet Security, 24.4.1.7. Hidden files and directories

discovering

Practical UNIX & Internet Security, 24.2. Discovering an Intruder
Practical UNIX & Internet Security, 24.2.6. Anatomy of a Break-in

legal options regarding : Practical UNIX & Internet Security, 26.1. Legal Options After a Break-in

pursuing and capturing : Building Internet Firewalls, 13.3. Pursuing and Capturing the

recovering from : Building Internet Firewalls, 13.1.6. Restore and Recover

responding to

Practical UNIX & Internet Security, 24. Discovering a Break-in
Practical UNIX & Internet Security, 24.7. Damage Control

revealing DNS information to : Building Internet Firewalls, 8.10.4.3. Revealing too much information to

reviewing response strategies : Building Internet Firewalls, 13.4.8. Periodic Review of Plans

slower machines and : Building Internet Firewalls, 5.3.2. How Fast a Machine?

tracking from log files : Practical UNIX & Internet Security, 24.3. The Log Files: Discovering an Intruder's

types of : Building Internet Firewalls, 1.2.2. Types of Attackers

"invalid ruleset name" error : sendmail, 29.1. The S Configuration Command

invalid zone data messages : DNS & BIND, 7.6.1. Common Syslog Messages

inverse queries

DNS & BIND, 2.6.5. Inverse Queries
DNS & BIND, 11.6.1. Seeing the Query and Response Packets
DNS & BIND, 11.7.4. Query Refused

ioctl system call : Practical UNIX & Internet Security, C.1.3.4. Process groups and sessions

IOT signal : (see ABRT signal)

IP (Internet Protocol)

Building Internet Firewalls, 6.3.2. IP
Building Internet Firewalls, C.5.1. Internet Protocol
Building Internet Firewalls, C.9. The IP Address
TCP/IP Network Administration, 1.5.1. Internet Protocol
encryption : Building Internet Firewalls, 10.5.2. What Do You Encrypt?
fragmentation : Building Internet Firewalls, 6.3.2.2. IP fragmentation
multicasting : Building Internet Firewalls, 8.9.3. The Multicast Backbone (MBONE)
nested over IP : Building Internet Firewalls, 6.3.3.5. IP over IP
packet routes to : (see traceroute utility)
source route option : Building Internet Firewalls, 6.3.2.1. IP options
status and control messages : Building Internet Firewalls, 6.3.3.3. ICMP
Version 6 (IPv6) : Building Internet Firewalls, 6.3.6. IP Version 6

IP addresses

Building Internet Firewalls, 2.9. Name Service

Building Internet Firewalls, 6.3.6. IP Version 6

Building Internet Firewalls, C.9. The IP Address

TCP/IP Network Administration, 2.2. The IP Address

TCP/IP Network Administration, 6.1. The ifconfig Command

(see addresses)

classless : TCP/IP Network Administration, 2.2.2. Classless IP Addresses

controlling access by : Practical UNIX & Internet Security, 17.2. Controlling Access to Servers

depletion of : TCP/IP Network Administration, 2.2.2. Classless IP Addresses

future of : Building Internet Firewalls, 4.5. What the Future Holds

incorrect : TCP/IP Network Administration, 11.4.1. Troubleshooting with the ifconfig Command

name service and

Practical UNIX & Internet Security, 16.2.6. Name Service
Practical UNIX & Internet Security, 16.2.6.2. Other naming services

private : Building Internet Firewalls, 4.5. What the Future Holds

restricting access by : Practical UNIX & Internet Security, 18.3. Controlling Access to Files on Your Server

unique : TCP/IP Network Administration, 4.2.1. Obtaining an IP Address

IP datagrams

forwarding : TCP/IP Network Administration, 5.2. Linux Kernel Configuration
headers for : TCP/IP Network Administration, F.1. IP Datagram Header

IP numbers, monitoring : Practical UNIX & Internet Security, 12.3.1.2. Eavesdropping by Ethernet and 10Base-T

IP packets

(see packet sniffing)
(see packet switching)
(see packets)

IP protocols

Practical UNIX & Internet Security, 1.4.3. Add-On Functionality Breeds Problems
Practical UNIX & Internet Security, 16.2.4. Packets and Protocols
Practical UNIX & Internet Security, 16.2.4.3. UDP

IP routers

Building Internet Firewalls, C.5.1.2. Routing datagrams
(see also gateways)

IP security

Practical UNIX & Internet Security, 16.3. IP Security
Practical UNIX & Internet Security, 16.3.3. Authentication

IP services : (see network services)

IP spoofing

Practical UNIX & Internet Security, 1.4.3. Add-On Functionality Breeds Problems
Practical UNIX & Internet Security, 16.3. IP Security

IP_SRCROUTE macro : sendmail, 18.8. Alphabetized Reference

IPC (interprocessor communications) : sendmail, 6.2. Define a Mail Delivery Agent

IPCP (Internet Control Protocol) : TCP/IP Network Administration, 6.2.1. The Serial Protocols

IPv4 (IP Version 4)

Practical UNIX & Internet Security, 16.2. IPv4: The Internet Protocol Version 4
Practical UNIX & Internet Security, 16.2.6.2. Other naming services

IPv6

DNS & BIND, 15.7.5. IPv6 Addresses
TCP/IP Network Administration, 2.2.2. Classless IP Addresses

IPX (Internet Packet Exchange)

Practical UNIX & Internet Security, 16.4.1. IPX
TCP/IP Network Administration, A.2. The PPP Daemon

IRC (Internet Relay Chat)

Building Internet Firewalls, 2.8. Real-Time Conferencing
Practical UNIX & Internet Security, 17.3.23. Other TCP Ports: MUDs and Internet Relay Chat (IRC)
configuring : Building Internet Firewalls, 8.9.2. Internet Relay Chat

IRIX : DNS & BIND, 6.4.6. Silicon Graphics' IRIX

IRIX wtmpx file : Practical UNIX & Internet Security, 10.1.2. utmp and wtmp Files

irq parameter : TCP/IP Network Administration, 6.1.5.5. Point-to-point

IRR (Internet Resource Registries)

TCP/IP Network Administration, 2.4. Internet Routing Architecture
TCP/IP Network Administration, 4.2.1. Obtaining an IP Address

IS (intermediate system)

TCP/IP Network Administration, 1.7. Application Layer
TCP/IP Network Administration, B.8.4. The isis Statement

IS-IS protocol : TCP/IP Network Administration, B.8.4. The isis Statement

trace options : TCP/IP Network Administration, B.8.4. The isis Statement

ISC (Internet Software Consortium)

TCP/IP Network Administration, 9.5. DHCP
TCP/IP Network Administration, D.1. Compiling dhcpd

ISDN interface : TCP/IP Network Administration, 5.2. Linux Kernel Configuration

experimental : TCP/IP Network Administration, 5.3.1.3. Devices

ISDN records

DNS & BIND, 15.7.3. X25, ISDN, and RT
DNS & BIND, A.1.3.2. ISDN Integrated Services Digital Network address - experimental

isis statement (in gated) : TCP/IP Network Administration, B.8.4. The isis Statement

ISN (Initial Sequence Number) : TCP/IP Network Administration, 1.6.2. Transmission Control Protocol

ISPs (Internet Service Providers)

Practical UNIX & Internet Security, 27.2.6. Network Providers that Network Too Well
TCP/IP Network Administration, 1.1. TCP/IP and the Internet
TCP/IP Network Administration, 4.1. Connected and Non-Connected Networks
TCP/IP Network Administration, 6.3.2. Dial-Up PPP
choosing : TCP/IP Network Administration, 4.1.1. Network Contacts
interconnections among : TCP/IP Network Administration, 7.5.2. Border Gateway Protocol
services of : TCP/IP Network Administration, 4.4.1. Obtaining a Domain Name

ISS (Internet Security Scanner)

Building Internet Firewalls, B.2.5. ISS
Practical UNIX & Internet Security, 17.6.2. ISS
Practical UNIX & Internet Security, E.4.4. ISS (Internet Security Scanner)ISS

iterative (nonrecursive) queries

DNS & BIND, 2.6.2. Recursion
DNS & BIND, 10.7. Building Up a Large Site-wide Cache with Forwarders
DNS & BIND, 14.1.1. A Typical Problem

iterative (nonrecursive) resolution : DNS & BIND, 2.6.2. Recursion

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z