Re: ideal OS distro for network scanning?

[wrhaynes () gmail com]

Well the most secure OS is going to be the one that you patch and update, not necessarily OpenBSD. I used to be an 
OpenBSD fan but no longer because I've been using FreeBSD for over 4 years now with 0 regret. FreeBSD is much more 
useable and actually remendously easier to upgrade/patch because of the great ports system. And for the most part, it's 
the applications that are vulnerable not the OS so which distro is more of a specific questiong that you need to dial 
in on. BSD in general is probably a small notch above the rest and using a 'server-install' of something like Ubuntu 
which maintains and distributes rigorous updates instantly, you'll also probably find exactly what you're looking for. 
-Securing it would be best to just do the most minimal installation possible and install ONLY what you need. 
-Optimize the kernel 
-Install Firewall with strict rules, 
-Keep the box up to date...

All of these things can be done best with FreeBSD or Ubuntu for example. I choose Ubuntu over Debian because they sync 
and stabalize code from Debian's "Unstable" tree which means the apps are WAY more current. 

I choose FreeBSD over OpenBSD/NetBSD/Dragonfly because of cvsup and portupgrade. Portupgrade let's the you build EVERY 
installed app from new patched/updated source from the cvs servers. Which with a good kernel setup, gives you a killer 
performance machine WITH all of the latest patches. Kernel config is much easier in BSD IMHO, but no too difficult 
wherever you go.

--Bill

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------