【正文】 ............................................. 22 LDAPUX Integration ................................................................................................ 23 LDAPUX Client Services .......................................................................................... 23 NIS/LDAP Gateway ................................................................................................... 24 Password Security Considerations ............................................................................. 25 Security Features in Domain Name Service................................................................... 27 Enhanced Security with BIND v9 .............................................................................. 28 Domain Name System Security Extensions – DNSSec................................................ 29 Authenticated Transaction with TSIG and TKEY ...................................................... 29 Auditability................................................................................................................ 30 Split DNS .................................................................................................................. 30 Secure Routing .............................................................................................................. 31 Routing Information Protocol ─ RIP ........................................................................... 31 Open Shortest Path First Routing ─ OSPF ................................................................ 32 Border Gateway Protocol ─ BGP ............................................................................... 33 Secure id ─ .......................................................................................... 34 Security Features in Sendmail ...................................................................................... 35 AntiSpam ................................................................................................................. 35 Relaying denied by default ...................................................................................... 35 Better checking on sender information .................................................................... 35 Access database ...................................................................................................... 35 Header checks......................................................................................................... 35 Blocks hosts listed in the Realtime Blackhole list (RBL)......................................... 36 Denial of service......................................................................................................... 36 Other Security Enhancements ................................................................................... 36 Encryption is the Foundation of Network Security ........................................................ 37 Available Cryptographic APIs and Toolkits in HPUX 11i .......................................... 37 Faster BSAFE RSA Performance in HPUX ............................................................... 37 Faster NES performance in HPUX ...................................................................... 38 Network Security Features of HPUX 11i 4 SpeedCard speeds up SSL .......................................................................................... 38 Superior encryption for IPSec/9000 ............................................................................ 38 Conclusion..................................................................................................................... 40 Product information ...................................................................................................... 41 HPUX 11i Security Products ..................................................................................... 42 Reference ...................................................................................................................... 43 HPUX .................................................................................................................... 43 Kerberos ................................................................................................................. 43 LDAPUX ............................................................................................................... 43 Praesidium Products............................................................................................... 44 Standards ............................................................................................................... 44 Cryptography.......................................................................................................... 44 Glossary ........................................................................................................................ 45 Network Security Features of HPUX 11i 5 Executive Summary HewlettPackard has been recognized as a leader in work security1. The 11i release of HPUX marks the mitment of HewlettPackard to lead in the Inter space. In work security, this mitment is demonstrated by a rich set of standardsbased and directoryenabled work security features that will enable panie