When I upgraded my server to Red Hat 7.1 with the new 2.4 kernal, I switched the firewalling from ipchains to the newer iptables. I haven't had chance to fully utilize all the features of iptables, but it looks quite promising.    (Since: 2001)

This excellent tool mines the valuable security information contained within an operating system's log files and emails the pertinent information to the system administrator. An excellent tool in one's security toolbox.    (Since: 2000)

This excellent log auditing tool is now part of the default Red Hat install. It provides timely notifications of abnormal log entries in a customizable fashion.    (Since: 2002)

I gained experience in building, installing, and configuring SSL for the Apache webserver back in 1999. Nowadays, the RSA patent has expired and Redhat ships apache with SSL pre-configured.    (Since: 1999)

The premier port scanning tool available on the web. I use this tool to test the firewall configurations of machines that I am administrating. It is great for finding vulnerabilities that you may have overlooked.    (Since: 2000)

This tool for encrypting and signing email messages is a great idea that I wish more people would use. I've been signing all my email for years now using GnuPG in my email client, Mutt. My PGP public key is available on my 'Contact' page.    (Since: 1999)

I use this easily installed tool to monitor and respond to abnormal port activity.    (Since: 2001)

This excellent software package management tool allows an administrator to manage patches and updates for a large number of RH Linux servers remotely via a web interface. It also provides an admin with timely alerts to get security holes patched quickly which is crucial for internet servers.    (Since: 2001)

I have built, installed and configured this secure replacement for telnet on numerous Unix systems. I only use OpenSSH from the OpenBSD project. I make it a rule to disable telnet access on any Unix server I come across.    (Since: 1999)

I have experience installing, configuring and monitoring this system integrity checker. Tripwire stores a cryptographic hash of critical system files which can alert you if an attacker changes them (i.e. installs a root kit).    (Since: 2000)