[webmin-devel] New Project

[hahmed <dim...@gm...>]

Hi,
I've been discovering lately the power of Webmin. It helped a lot
configuring my computer. So I decided to try to use webmin to
administrate all the other computers in the LAN but specially security
tools.
The objective is to centralize the administration of security tools
from one single interface.
Through this interface, I should be able to administrate any snort,
iptables, nessus (...) installed on a PC in the LAN, and centralize
their log to one single DataBase Server
and then  be able to correlate their log to identify if there is a
potential attack, a rule is set on the firewall automatically.
(I know that I need to install webmin and the requested modules on the
PCs on the LAN in order to make RPC calls)
For example for administrating netfilter/iptables, first choose the
host recorder in the servers index, second display its iptables-save
file, then modify it's config and last apply the config to this host.
Practically the same thing for snort, nessus and any security tool.
About correlation, my collegue is developping a correlation engine
between snort log and nessus log. Now he is in the phase of making his
correlation engine working in real time.

I'd like to ask u (Jamie Cameron) if u agree with this project idea.
If so, I'll upload to u my work and my collegue correlation engine by
the end of next week.
I already thought of a name for the project : Secmin (Security tools admin).
regards,
H.Ahmed

-- 
Ahmed Hamouda

http://www.fedora-tunisia.org/
http://forums.fedora-fr.org/