by To get satan to run under linux get the patch from sunsite.unc.edu (or
a mirror) (/pub/Linux/system/Network/admin/satan-linux.1.1.1.diff.gz)
I did not write the patch (and I have no idea who did) I just noticed
that it was there without a readme. I also noticed a lot of questions
about how to get satan to work with linux (there is even one in the
satan documentation trouble shooting section), so I put this readme
together.
Since I did not write the patch I can't make any claims about it,
including whether or not it works properly or whether it might break or
damage you computer or the software on it.
I had a lot of trouble getting this patch to work. For one thing the
version of perl 5 on sunsite (perl5.001l-linux-a.out.tar.gz) does not
handle globs which the reconfig script wants. So I had to get
perl5.001m (perl5.001m.tar.gz) and compile it myself. This required
that I get the dld library (dld.3.2.7.tar.gz on sunsite mirrors). The
perl FAQ suggested that older bash programs might have problems so I
upgrade my bash as well (bash-1.14.4.tar.gz)
You will need to get satan-1.1.1 to use the patch. To find the source
you can look at the satan home page:
http://www.fish.com/~zen/satan/satan.html
or look at this list which I got from a link from the home page:
Europe
ftp://ftp.cs.ruu.nl/pub/SECURITY/satan-1.1.1.tar.Z
ftp://ftp.wi.leidenuniv.nl/pub/security/
ftp://ftp.win.tue.nl/pub/security/
ftp://ftp.kulnet.kuleuven.ac.be/pub/mirror/ftp.win.tue.nl/security/
ftp://ftp.denet.dk/pub/security/tools/satan/
http://ftp.luth.se/pub/unix/security/
ftp://ftp.luth.se/pub/unix/security/
ftp://ftp.cert.dfn.de/pub/tools/net/satan/
ftp://ftp.informatik.uni-kiel.de/pub/sources/security/MIRROR.ftp.win....
ftp://ftp.kfki.hu/pub/util/security/ftp.win.tue.nl/
ftp://cnit.nsk.su/pub/unix/security/satan
ftp://ftp.csi.forth.gr/pub/security/
ftp://ftp.ox.ac.uk/pub/comp/security/software/satan/
USA
ftp://coast.cs.purdue.edu/pub/tools/unix/satan/
ftp://ciac.llnl.gov/pub/ciac/sectools/unix/satan/
ftp://ftp.acsu.buffalo.edu/pub/security/
ftp://ftp.cerf.net/pub/software/unix/security/
ftp://ftp.mcs.anl.gov/pub/security/
ftp://ftp.net.ohio-state.edu/pub/security/satan/
ftp://ftp.tisl.ukans.edu/pub/security/
ftp://sunsite.unc.edu/pub/packages/security/
ftp://vixen.cso.uiuc.edu/security/
Australia
ftp://ftp.auscert.org.au/pub/mirrors/ftp.win.tue.nl/
ftp://ftp.dstc.edu.au/pub/security/satan/
ftp://coombs.anu.edu.au/pub/security/satan/
Then you need to get the a perl that works (since then one on sunsite
(perl5.001l-linux-a.out.tar.gz) didn't work for me I would suggest
getting the latest or at least "1m" which is what I used.) From the
perl FAQ (posted to comp.lang.perl.announce, comp.lang.perl.misc,
comp.lang.perl, comp.answers, news.answers, and I would think is on
rtfm.mit.edu):
North America:
ftp://ftp.netlabs.com/pub/outgoing/perl5.0/ 192.94.48.152
ftp://ftp.cis.ufl.edu/pub/perl/src/5.0/ 128.227.100.198
ftp://prep.ai.mit.edu/pub/gnu/ 18.71.0.38
not current as of 7/15/95
ftp://ftp.uu.net/languages/perl/ 192.48.96.9
not current as of 7/15/95
ftp://ftp.khoros.unm.edu/pub/perl/ 198.59.155.28
not current as of 7/15/95
ftp://ftp.cbi.tamucc.edu/pub/duff/Perl/ 165.95.1.3
ftp://ftp.metronet.com/pub/perl/sources/ 192.245.137.1
ftp://genetics.upenn.edu/perl5/ 128.91.200.37
Europe:
ftp://ftp.cs.ruu.nl/pub/PERL/perl5.0/src/ 131.211.80.17
ftp://ftp.funet.fi/pub/languages/perl/ports/perl5/ 128.214.248.6
ftp://ftp.zrz.tu-berlin.de/pub/unix/perl/ 130.149.4.40
ftp://src.doc.ic.ac.uk/packages/perl5/ 146.169.17.5
Australia:
ftp://sungear.mame.mu.oz.au/pub/perl/src/5.0/ 128.250.209.2
South America (mirror of ftp://prep.ai.mit.edu/pub/gnu):
ftp://ftp.inf.utfsm.cl/pub/gnu/ 146.83.198.3
The patch seemed to work well once I figured out that it was different
from other patches that I used and seemed to need two copies of the
source code. The second bit of confusion is that the resulting
hierarchy called satan-1.1.1.linux is the NON-patched version while
satan-1.1.1.clean was the patched version. Next time I will pay more
attention and look for the .orig files :) At any rate the following
works (if there is a better way to use this type of patch let me
know.)
tar -xzf satan-1.1.1.tar.gz
mv satan-1.1.1 satan-1.1.1.linux
tar -xzf satan-1.1.1.tar.gz
mv satan-1.1.1 satan-1.1.1.clean
zcat satan-linux.1.1.1.diff.gz | patch
cd satan-1.1.1.clean
reconfig
make linux
./satan # to test
The reason why I needed to run satan on linux in the first place is
that I had a summer intern-ship assisting a companies security
administrator. I am posting this because I would like to encourage
companies to use linux, since think that that is good for the linux
community in general. As the satan readme says:
Last but not least, SATAN was written to improve Internet
security. Don't put [their] work to shame.
Richard Yentis, Jr.