mallrot.blogg.se

1. #Nxfilter selinux install#
2. #Nxfilter selinux portable#
3. #Nxfilter selinux password#
4. #Nxfilter selinux windows#

The kernel manages the labels during boot.

Labels are a logical way of grouping things together. SELinux works as a labeling system, which means that all of the files, processes, and ports in a system have an SELinux label associated with them. Type enforcement and labeling are the most important concepts for SELinux. The file will have a section that shows you whether SELinux is in permissive mode, enforcing mode, or disabled, and which policy is supposed to be loaded. You can tell what your system is supposed to be running at by looking at the /etc/sysconfig/selinux file. MLS can be very complicated and is typically only used by government organizations. Targeted policy is the default option and covers a range of processes, tasks, and services. The most common are targeted policy or multi-level security (MLS). There are a number of ways that you can configure SELinux to protect your system. If permission is denied, an "avc: denied" message will be available in /var/log.messages. Security context is applied from the SELinux policy database. The security server checks for the security context of the app or process and the file. If SELinux is unable to make a decision about access based on the cached permissions, it sends the request to the security server. When an application or process, known as a subject, makes a request to access an object, like a file, SELinux checks with an access vector cache (AVC), where permissions are cached for subjects and objects. It uses security policies, which are a set of rules that tell SELinux what can or can’t be accessed, to enforce the access allowed by a policy.

#Nxfilter selinux install#

Visit the official " Install NxFilter on Unix" tutorial for more details.SELinux defines access controls for the applications, processes, and files on a system. However, on some GNU/Linux platforms it fails to even start, simply because of its Java Runtime Environment requirements.

#Nxfilter selinux portable#

Summing up, NxFilter is a decent web filtering application designed from the ground up to be portable and easy to use. Its modern web-based interface includes numerous functions and a demo that can be found at. Furthermore, it provides load balancing and fail-safe with clustering, bandwidth control, remote user filtering, and support for urlblacklist and shallalist.Īnother important feature is the blacklist and whitelist functionality, which is based on keyword searching and domain matching. When using NxFilter, it is also possible to use the local DNS cache to accelerate your network connection. The application also comes with embedded web server and database, support for internationalized domain names, reporting, dashboard, ability to export the logs to syslog, Single Sign-On (SSO) with Active Directory, and DNS query log search.

#Nxfilter selinux password#

In addition, it boasts a built-in graphical user interface (GUI) that allows user to configure some functions, email-based notifications, four types of authentication, including LDAP (Lightweight Directory Access Protocol) authentication, password and IP-based ones.

Key features include Active Directory integration, group or user based policy assignment, dual policy setup for free-time and work-time, quota time, phishing protection, ability to block sites by domain categories, an unlimited number of custom categories, as well as unlimited user and group creation.

#Nxfilter selinux windows#

It is an application written in the Java programming language that supports Linux, Microsoft Windows and Apple Macintosh operating systems. With NxFilter, you will be able to detect and block malware or botnets, thanks to its DNS packet inspection functionality. NxFilter is a freeware project (only for non-commercial usage) that offers a DNS filtering program to system administrators who are looking for a platform-independent solution to filter and monitor Internet activity in their network.