|
Advanced Policy Firewall (APF) is an iptables(netfilter) based firewall system designed around the essential needs of today's Internet deployed servers and the unique needs of custom deployed Linux in... |
|
|
Descripton: "BFD is a modular shell script for parsing applicable logs and checking for authentication failures. There is not much complexity or detail to BFD yet and likewise it is very straight... |
|
|
Product Name : LSM (Linux Socket Monitor)
Product Version : 0.6
Homepage : http://rfxnetworks.com/lsm.php
Description : A comprehensive alert system, simple program usage & installation make LS... |
|
|
wget http://rfxnetworks.com/downloads/les-current.tar.gz
tar -zxvf les-current.tar.gz
cd les-*/
./install.sh
LES Run
/usr/local/sbin/les --secure-bin on
/usr/local/sbin/les --secure-path on |
|
|
Stap 1: Maak een gebruiker aan (indien nodig)
/usr/sbin/useradd -p pass user
Stap 2: Maak deze gebruiker lid van een groep met login en Sudo rechten.
Stap 3: Zorg dat root niet meer kan inlog... |
|
|
Hiervan is een update, zie: http://de-help-desk.nl/installatie_csf_firewall-245.html
mkdir /usr/local/src cd /usr/local/src wget http://www |
|
|
Controleer eerst bij de maker van de software of je de laatste versie hebt.
cd /usr/local/src
wget ftp://ftp.kaybee.org/pub/linux/logwatch-7.3.6.tar.gz
tar xfz logwatch-7.3.6.tar.gz
cd logwatch-... |
|
|
Via de website van https://www.qualys.com/ kun je 10 gratis scans laten uitvoeren van je website, dit is niet zo uitgebreid als de gangbare pentest software, maar wel gratis en geheel online. |
|
|
Rootkit Hunter: cd /usr/local/src wget http://puzzle.dl.sourceforge.net/sourceforge/rkhunter/rkhunter-1.3.2.tar.gz tar xfz rkhunter-1.3.2.tar.gz cd rkhunter-1.3.2 ./installer.sh --layout default --ins... |
|
|
cp -a /tmp /tmp_backup
mount -t tmpfs tmpfs /tmp
cp -a /tmp_backup/* /tmp/
rm -f /tmp_backup/
rm -rf /var/tmp
ln -s /tmp /var/tmpEdit /etc/fstab and change to match:
tmpfs /dev/shm tmpfs default... |
|
|
About
(D)DoS Deflate is a lightweight bash shell script designed to assist in the process of blocking a denial of service attack. It utilizes the command below to create a list of IP addresses conn... |
|
|
Webserver Malware Scanner is a simple script for detecting and analyzing web-based threats. It currently handles exploitkits, shells, obfuscated JavaScript codes, Executables, Iframes and port scans.
... |
|
|
Is simpel ga in de terminal naar /etc/selinux, edit de config, zet selinux op disabled.
de inhoudt van mijn selinux: /etc/selinux/config: # This file controls the state of SELinux on the system.
# S... |
|
|
Soms heb je als webmaster bepaalde delen op je site die je niet voor iedereen toegankelijk wilt maken. De Apache webserver en andere webservers bieden mogelijkheden om mappen te beveiligen. Toegang wo... |
|
|
An adequately updated configuration file and the regularly updated system gives an extra layer of protection to your server. But it is essential to scan your system for malware, viruses, and rootkits ... |
|