# Secured Distributions # Astaro Security Linux http://www.astaro.com/html/gb/asl.htm http://freshmeat.net/projects/asl/ A firewall and VPN product based on the 2.4 Linux kernel. Available for free download but not completely open source. There are several branches. Version 3.200 (beta) was released June 4, 2002. A stable 3.216 (for i386) was released January 20, 2002. Beta version 3.391 was released January 30, 2003. The stable 2.x tree is at version 2.031, released November 15, 2002. There is also a version 2.027 for Sun Cobalt was released July 3, 2002. Stable version 4.000 was released February 17, 2003. # Castle http://castle.altlinux.ru/ Castle is a server distribution from the ALT Linux Team in Russia. Installation instructions and some other documentation is available in English. # Effort Linux http://www.effortlinux.com.br/ Effort Linux comes from Brazil. The website is in Portuguese. # Engarde Secure Linux http://www.engardelinux.org/ http://freshmeat.net/projects/esl/ EnGarde is a secure distribution of Linux engineered from the ground-up to provide organizations with the level of security required to create a corporate Web presence or even conduct e-business on the Web. It can be used as a Web, DNS, e-mail, database, e-commerce, and general Internet server where security is a primary concern. Version 1.2 (Professional) was released June 28, 2002. # Firegate Server http://www.wiresoft.net/ http://freshmeat.net/projects/firegate_server/ The Firegate Server SMB Edition from Wiresoft is a self-managing server operating system designed for small and mid-sized businesses. It securely connects offices to the Internet and to each other, protecting valuable electronic information. Office staff can securely surf the web, send and receive email, host the company Web site, share files, host a customer database, and more. It is controlled through a simple Web browser or mobile telephone interface and managed by an artificial intelligence-based administration service. This package contains proprietary software. Version 7.1 was released September 25, 2002. # FrazierWall Linux http://www.frazierwall.com/ Originally developed as a customized firewall, early versions were based on the Linux Router Project and Coyote Linux 1.03. It has evolved into a unique router/firewall distribution. FrazierWall 3.4 was released on August 29, 2001. # Immunix http://www.immunix.org/ WireX provides Immunix System 7 a secured Red Hat 7.0 distribution with StackGuard 2.0, FormatGuard 1.0, SubDomain 1.0 and a suite of application-level security tools. A Red Hat 6.2 version is also available. # IPCop Firewall http://www.ipcop.org/cgi-bin/twiki/view/IPCop/WebHome http://sourceforge.net/projects/ipcop IPCop Firewall is a Linux firewall distro. It will be geared towards home and SOHO users. The difference with existing firewalls is that the IPCop interface will be very user-friendly and task-based. IPCop v0.1.1 was released January 17, 2002. Version 1.2 was released December 27, 2002. # Kaladix Linux http://www.kaladix.org/ The aim of Kaladix Linux is to become a ultra-secure Linux distribution that satisfied all your needs as a Linux for your server environment. Current release is pre-0.4. # NSA Security Enhanced Linux http://www.nsa.gov/selinux/ http://freshmeat.net/projects/selinux/ The results of several previous research projects by the National Security Agency have been incorporated in a security-enhanced Linux system. This version of Linux has a strong, flexible mandatory access control architecture incorporated into the major subsystems of the kernel. The system provides a mechanism to enforce the separation of information based on confidentiality and integrity requirements. This allows threats of tampering and bypassing of application security mechanisms to be addressed and enables the confinement of damage that can be caused by malicious or flawed applications. Version 2003011510 was released January 16, 2002. # OpenNA Linux http://www.openna.com/ http://freshmeat.net/projects/opennalinux/ The OpenNA Linux Operating System provides a highly secure and fast Linux server. Dedicated for mission critical tasks in the servers domain, the OpenNA Linux operating system provides a secure, strong, reliable and fast solution. A beta4 development version was released July 22, 2002. Release Candidate 1 was released January 13, 2003. # Openwall GNU/Linux http://www.openwall.com/Owl/ "Owl" (or "Openwall GNU/*/Linux") is a security-enhanced operating system with Linux and GNU software as its core, compatible with other major distributions of GNU/*/Linux. It is intended as a server platform. The Owl 0.1-prerelease was released on May 11, 2001. Version 1.0 was released October 14, 2002. # Securepoint Firewall & VPN Server http://www.securepoint.cc/ The Securepoint Firewall & VPN server is a high end firewall and VPN solution for protecting your Internet gateway. Securepoint can also be used with existing firewalls and to protect interconnected locations or divisions and lets you create and manage VPN tunnels. Languages supported: English, German, Russian, and Korean. # SmoothWall http://www.smoothwall.org/ SmoothWall was first released to the world in July 2000 as a hardened internet firewall device. Products include Smoothwall Server and Smoothwall GPL. Smoothwall GPL 2.0 beta1 (metro) was released August 28, 2002. Smoothwall GPL 1.0 was released December 10, 2002. Smoothwall 2.0 beta 4 was released January 24, 2003. # Trustix http://www.trustix.com/ Trustix Secure Linux is a server oriented Linux distribution with high emphasis on security. Trustix provides several support alternatives for users of Trustix Secure Linux. The Trustix Secure Linux 2.0 Techology Preview 2 nicknamed Forecast was released February 18, 2003. # GENDIST http://www.bablokb.de/gendist/ http://freshmeat.net/projects/gendist/ GENDIST (the Linux Distribution Generator) allows you to create your own special mini-distribution. It creates a makefile-based build system for your distribution, and helps you to automate the following three tasks: maintaining your root filesystem, maintaining your "CD filesystem" (in case you create a bootable CD), and packaging everything on media. GENDIST 1.4.7 (Stable) was released December 29, 2002. # Recovery Is Possible! (RIP) http://www.tux.org/pub/people/kent-robotti/looplinux/rip/ http://freshmeat.net/projects/recoveryispossible/ RIP is a CD or floppy boot/rescue/backup system. It has support for a lot of filesystem types (Reiserfs, ext2/3, iso9660, UDF, XFS, JFS, UFS, HPFS, MINIX, MS DOS, NTFS, UMSDOS, and VFAT) and contains a bunch of utilities for system recovery. It might also be possible to install and boot it from a LS-120 floppy drive. It has been designed for non-networked stand-alone home PC hard drive booting and rescue. Only the CD version has UDF/HPFS/MINIX/XFS/JFS filesystem support. V51 was released March 21, 2002. # Trinux http://trinux.sourceforge.net/ Trinux is a ramdisk-based Linux distribution that boots from a single floppy or CD-ROM, loads it packages from an HTTP/FTP server, a FAT/NTFS/ISO filesystem, or additional floppies. Trinux contains network security tools as well as support for Perl, PHP, and Python scripting languages. Remote Trinux boxes can be managed securely with OpenSSH. Version 0.80rc2 was released February 4, 2002. # BYLD http://byld.sourceforge.net/ Build Your Linux Disk (BYLD) is a little package that helps you to build a Linux distribution on a single floppy disk to use as you want. Build a net client, rescue disk or other small application. # floppyfw http://www.zelow.no/floppyfw/ http://freshmeat.net/projects/floppyfw/ floppyfw is a static router with firewall capabilities. Suitable for use as a screening router or as a packet filtering firewall. Version 2.0.3 was released October 3, 2002. Stable version 1.0.15 was released December 9, 2002. Development version 2.9.1 was released February 14, 2003. # Leka Rescue Floppy http://www.leka.net/ http://leka.muumilaakso.org/ http://freshmeat.net/projects/lrf/ Leka Rescue Floppy is a Linux mini-distribution that installs into one floppy disk. It is meant for disaster recovery, but also contains many fine features like networking support, a dhcpd, a Web browser, and an IRC client. Initial release 0.5.0 is dated February 26, 2002. V0.5.1 was released the following day. Stable version 0.7.1 was released July 6, 2002. # Zool Linux http://zoollinux.sourceforge.net/ http://freshmeat.net/projects/zoollinux/ Zool Linux is a project whose goal is to assist in making Linux mini-distributions, useful for floppy-based rescue systems, or to check hardware and network connections. It supports many different filesystems and utilities. Zool 1 is a Linux rescue disk based on the 2.2.23 kernel. Zool 2, released January 9, 2003, is based on the 2.4.18 kernel. Zool 3, released January 21, 2003 adds network support. # BBLCD Toolkit http://www.bablokb.de/bblcd/ http://freshmeat.net/projects/bblcd/ BBLCD is the acronym for Bernhard's Bootable Linux CD or Build your own Bootable Linux CD. BBLCD is a toolkit for building your own bootable Linux CD from your favorite (and possibly customized) distribution. It uses, more or less, an intelligent cp -a / /dev/cdrom to create a CDROM from an existing system. Version 0.7.2 was released June 29, 2002. # Devil-Linux http://www.devil-linux.org/ http://freshmeat.net/projects/devillinux/ Devil-Linux is a special Linux distribution used for Firewalls and Routers. The goal of Devil-Linux is to have a small, customizable and secure Linux OS. It comes on a CDROM and saves configuration data on a floppy disk, and it has several optional packages. Devil-Linux 0.5RC1 (Beta) was released May 30, 2002. Devil-Linux 0.5 was released September 2, 2002. # eLSD http://www.thinman.com/eLSD/ The Linux Society Distro, eLSD, was announced September 21, 2002. Derived from Devil-Linux, eLSD is a highly secure CD boot only OS. It's currently available in three versions: 0.1 - Devil-Linux offered as a build and burn kit. 0.2 - This version begins to make changes towards the eLSD goals by creating a bigger divide between the initrd/linuxrc boot and the init/boot in the OS. It also boots w/o the floppy that includes the /etc filesystem. 0.3 - This version actually converts Devil-Linux into an optional hard drive boot OS. The boot process occurs entirely in the initrd phase and then accesses the harddrive. This kit offers a robust kernel, two custom initrds -- one that boots to busybox/tinylogin -- and grub and parted support. # EMERGENCY CD http://sourceforge.net/projects/emergencycd2/ http://freshmeat.net/projects/emergencycd2/ The LINUX EMERGENCY CD project has a bootable CD-ROM distribution, with Linux kernel 2.4.19-xfs(i586). It's a console-only mini-distribution based on Red Hat 7.3 and includes many console tools and utilities. The initial version, 2.01, was released under the GNU General Public License on January 27, 2003. # FIRE http://biatchux.dmzs.com/ http://freshmeat.net/projects/biatchux-blarg/ http://sourceforge.net/projects/biatchux/ FIRE is a portable bootable cdrom based distribution with the goal of providing an immediate environment to perform forensic analysis, incident response, data recovery, virus scanning and vulnerability assessment. The initial version (v.0.1.0.5b) was released February 28, 2002. FIRElite v0.2b was released August 19, 2002. # Gibraltar http://gibraltar.at/ Gibraltar is a project that aims to produce a Debian GNU/Linux-based router and firewall package. This package boots and runs from CD-ROM, so a hard disk installation is not necessary. Version 0.99.6 was released January 13, 2003.. Version 0.99.6a was released January 24, 2003. # Repairlix http://repairlix.sourceforge.net/ http://sourceforge.net/projects/repairlix/ Repairlix is a networked Linux distribution/bootable system intended to fit in 12MB of media - so small that an image can be burned onto a business-card-sized shaped CDROM, suitable for your wallet. It has a suite of utilities for doing system recovery. # Sentry Firewall http://www.sentryfirewall.com/ http://freshmeat.net/projects/sentry_firewall_cd/ Sentry Firewall CD-ROM is a Linux based bootable CD-ROM suitable for use as an inexpensive and easy to maintain Firewall or IDS (Intrusion Detection System) Node. The system is designed to be immediately configurable for a variety of different operating environments via a configuration file located on a floppy disk or a local hard drive. Version 1.2.0 was released March 27, 2002. Version 1.4.0-beta2 was released October 25, 2002. # SuperRescue http://www.kernel.org/pub/dist/superrescue/ SuperRescue is a single very large bootable system-on-a-disk. It's based on the observation that the vast majority of systems allow you to do so much more than the minimal system. Therefore, it isn't for everything, but for most desktop systems, it provides a much nicer rescue environment than your average rescue floppy. This version furthermore uses transparent compression to fit about 1.4 GB of software onto a single CD in usable form. # Timo's Rescue CD http://rescuecd.sourceforge.net/ Timo provides an easy way to generate a rescue system on a bootable CD, which can be easily adapted to your own needs. The project has evolved into a "Debian on CD" project, so it's not only possible to use the system as a rescue CD, it is also possible to install a whole Debian system on CD. Works with other distributions as well. # Flying Linux http://www.flyinglinux.net/ Flying Linux was originally based on Bambi. This wireless distribution is oriented to security in wireless environments and mobility. Unfortunately it looks defunct (20020605).