Help wanted from all Amiga owners

I'm working on completing a first draft of the security FAQ to help new and existing users make the best of a bad job with Amiga online and personal security.

It will be split into two parts:

1. How to secure your Amiga against viruses, exploits and monitor for bad software. General things including backups.

2. How to secure your Amiga when using the internet.

The task is pretty big, and I only have AmigaOS3.9 and AmigaOS4.0 to do it with so I need your help.

What virus checkers do you have? How good are they? What filesystems do you run ( PFS? SFS? ) how good is it?

What about TCP/IP? Who out there runs Miami, NetConnect, AmiTCP etc.

Please post some details about your configuration if you are willing to be ask questions, contribute and be given some commands to run:

Please fill out like this so I can put your details in a database:

Hardware:
Operating System:
Filesystem:
TCP/IP stack:
Browser(s):
Email software:
Chat software:
Virus software:
Do you use PGP with your emails:
Extra info/other software used online:

Together we can make Amiga a bit of a safer hobby for all.

Mitch

You seem to be doing a grand job. Maybe we should try and get you an on-line form set up at some point tied in with the members site ID or something.

Having said that, the system admins/devs are all extremely busy at the moment, maybe a couple of weeks down the line.

Keep going though

Mikey C

@Mitch

looking good you are dedicated to this i see

Currently travelling away from atm. Will try to send info when I get back.

TrevorDick

One thing for your FAQ

NETFS (aminet) works with Miami, MiamiDX and Roadshow, never tried it with amitcp / genesis.

However it offers zero security features. If you have it installed then your amiga will be vunerable to explotation including the remote deletion of files and remote retreival of files.

@Mitch

Hardware:
AmigaOneXE G3 750GX 800MHz 1GB Ram 2 120GB PATA HD 1 DVD Burner 1 DVD Player

Operating System:
AmigaOS4 pre4

Filesystem:
SFS 1.264

TCP/IP stack:
Roadshow

Browser(s):
AWeb 3.5.09cvs

Email software:
Yam 2.4p1 (68k)

Chat software:
WookieChat 2.4

Virus software:
None - Mill installed, not running due to problems with xvs.library

Do you use PGP with your emails:
Not anymore - no one was able to open them because no one had PGP installed but me

Extra info/other software used online:
DNetC

Two colums: A1200 and A1G4 (currently dead, but that' correct info for the day it died, hopefully it'll be ressurected soon)
H/W: A1200+68060+64FastRAM+3com pcmcia net. card+80Gb HD/
A1G4XE 7451+0.5GbRAM+80Gb HD+onboard 3com net. card

OS: 3.9/4.0p3

Filesystem:pfs3/ffs2
Except the one glich with pfs (ver. 2 then, formating of certain partition resuted in empty space instead of 2 from first 3). Luckily I had backups of everything crucial)

TCP/IP stack: Netconnect3(Genesis, amitcp inside)/Roadshow
Both work great except the stange bug with DHCP in roadshow in pre3 (Hyperion got the report, probably fixed in pre4)

Browsers: Aweb 3.5.08( with latest amissl, frequently)+latest Voyager(seldom) on both
Both have limitations, I like the look and feel of Voyager, Aweb is much more stable.

Email s/w: none (using pine remotely on X11, IMap support isn't good enough in SimpleMail )

Chat s/w: none (Gaim on linux)

Virus s/w: VirusChecker+Virusz (acrually didn't use it seriosly for a long time, I launch them ocassionally for general amusement)/None

Do you use PGP with your emails: seldom, not on amiga side anyway. I do encrypt critical data such as exams (not amiga side too).

Extra info/other software used online:
A1200: AmiWinDemo(seldom)+GeekGadgets X (not recently)+ssh (GG)
Both:XAmi4.3(frequently, not sure about the number of the version), vva, nfs client from Genesis

ssh is ok, not the recent though, XAmi works ok, didn't have a chance to use X11 for OS4, nfs was sloow on A1.


Jack

Quote:

I think AmigaOS is where safe as default, but once you start installing FTP, Samba you become more open, and then you need firewall, most ADSL modems have NAPT that can be configured to only allow compunction on some TCP/IP ports.

The biggest problem for AmigaOS is the possibility of backdoors in software we use, but I do not think there are many Amiga developers that are that evil.

As for client software like e-mail, I do not think we are in the risk of being infected by e-mail viruses, simply because there is no auto run script feature that I?m aware of in Amiga e-mail clients.

Quote:

Hardware:
AmigaOne-XE, 800Mhz, 512MB
Operating System:
AmigaOS4 update 4
Filesystem:
FFS, one SFS partition
TCP/IP stack:
Roadshow
Browser(s):
IBrowse, AWeb, Voyager
Email software:
YAM, SimpleMail
Chat software:
WookieChat, AmIRC
Virus software:
none currently
Do you use PGP with your emails:
yes
Extra info/other software used online:
AmTelnet, AmFTP, Amster, AmiPodder, Thor, NewsCoaster, AmRSS, WebVision, NetMon, Stricq

Hardware:
AmigaOne-SE G3, 600Mhz, 256MB
Operating System:
AmigaOS4 update 4
Filesystem:
FFS DOS3, FFS DOS7
TCP/IP stack:
Roadshow
Browser(s):
IBrowse
Email software:
YAM
Chat software:
AmIRC
Virus software:
none currently
Do you use PGP with your emails:
no
Extra info/other software used online:
AmFTP, online true router with firewall

Hardware:
AMD 64 X2 3000+ 2gigs of ram
(WinUAE 68040 8MB Chip 512MB 32bit Fast)

Operating System:
Amiga OS 3.9 BB2

Filesystem:
SFS 1.265

TCP/IP stack:
WinUAE's bsdsocket.library

Browser(s):
IBrowse 2.3

Email software:
SimpleMail

Chat software:
WookieChat 2.4

Virus software:
None

Do you use PGP with your emails:
Not that i know of.

Here I go:


Hardware:
AmigaOne G4XE, 256 Mb, Radeon 9100, Soundblaster 128, Sii0680
Operating System:
AmigaOS 4 update 4
Filesystem:
FFS
TCP/IP stack:
Roadshow
Browser(s):
IBrowse (registered), AWeb
Email software:
Simplemail
Chat software:
Epistula (only the MSN plugin)
Virus software:
None but I have the A1 connected to Internet via a hardware firewall.
Do you use PGP with your emails:
No (I don?t even know what it is).
Extra info/other software used online:
I used to use Amaya but it doesn?t work any longer with the latest x11 update on my system

Hardware:
?A1-C, 800Mhz, 512MB
Operating System:
AmigaOS4 update 4
Filesystem:
SFS on all three partions
TCP/IP stack:
Roadshow
Browser(s):
IBrowse
Email software:
YAM
Chat software:
WookieChat (installed anyway)
Virus software:
N/A
Do you use PGP with your emails:
No
Extra info/other software used online:
AmiTradeCenter, Epistula, TuneNet (playing radio)

Thank you all whom have posted details so far.

@Jack

Can you try out doing a "netstat" or post a list of what is in the "bin" subdirectory of Amitcp:

Mitch,

@samwel

"Extra info/other software used online:
AmiTradeCenter, Epistula, TuneNet (playing radio)"

Do you actually have AmiTradeCenter working?

Here it crashes with a DSI every time I run it.

Chris.

@Mitch

Hardware:
A1200 BPPC 200/040/25 32 MB Ram
Operating System:
AmigaOS 3.1
Filesystem:
FFS
TCP/IP stack:
Miami
Browser(s):
IBrowse
Email software:
YAM
Chat software:
Gadami, AmiGG, WookieChat, AmIRC
Virus software:
VirusZ + xvs.library
Do you use PGP with your emails:
No

@Mitch

Hardware:
Amiga 1200 68060/50hz (Blizzard 1260/1230 scsi) + 192mb Fast, 3.1 OS Roms, 2mb chip, 4xide adapter, dvd rom, cd-rw, 3com etherlink III PCMCIA network card (hooked to motorolo wireless router), USR sportster 56k external modem (I operate dial-up over an ethernet LAN, and am sometimes too lazy to walk across the apartment to dial out with the proxy), external floppy drive (880k, original a1000 style), optical boing mouse, 6-button sega genesis gamepad. (last 3 probably not too important)

Operating System:
Amiga OS 3.9, Windows3.1 (PC-Task), Windows95 (PC-Task), Dos 6.something (PC-Task), Macintosh Sysyem 8.something (Shapeshifter)

Filesystem:
2 FFS partitions, 2 MS-Dos/Windows FAT partitions, one MFS partition

TCP/IP stack:
Miami 3.2b, Windows 95 dialer (PC-Task)

Browser(s):
Ibrowse 2.3, Aweb 3.1, Voyager 3.3.126, Internet Explorer (PC-Task, and it is PAINFUL!!)

Email software:
yam 2.
4
Chat software:
jabberwocky 1.4, Wookiechat 2.4 beta 15, AmIRC 3.4

Virus software:
none

Do you use PGP with your emails:
nope

Extra info/other software used online:
Quicksilver arexx web server, only when connected via router for LAN access, AExplorer only on LAN, SMBFS also only over the LAN (LAN= wireless router with proper WEP/authentication settings over 3com ethernet card). Also use Portscan!, weather experience, RC-FTPd 2.74 FTP server (Manually fired off for faster x-fer speeds of large files, either LAN or Modem), AmTelnet, Ftpmount, AmFTP, and Mnews (Most available on Aminet).


Only real security concerns I have are Amiga Explorer, RC-FTPd, and possibly SMBFS, though probably not too much for SMBFS, as it only mounts remote samba shares locally, and doesn't host anything. Nonetheless, I only run the last 3 with the LAN through my firewalled/encrypted router for ease of computer access from one 'puter to the other. (I'm too lazy to walk from one room to the next with a floppy disk/ cd-rw) SMBFS would be pointless to run over the moded connection, and the webserver I've only done once when I was bored and wanted to log into my 1200 with my cellphone. (It actually worked, too. I was shocked) The FTP server I RARELY fire up at all, as SMBFS and Amiga explorer seem to fit my transfer needs, failing that, (.iso cd images, huge .avi/.mpg/.mp3 files, etc...) I use cerberus FTP on one of the 2 windows machines and AMFTP on the Amiga. Not too worried about viruses (virii?), not too many for classic miggy to worry about. Would PGP my e-mails if they contained anything truly important, and if the recipient would know how to decode them, but it hasn't been an issue yet. Hope all this helps.