Fail2ban - Block attacks

Your server is venerable to attacks, and you have to time and again monitor. After monitoring you have to block the attackers IP’s. Use Fail2ban package, which would ease you a bit. To install Fail2ban you need to add extra 3rd party repositories - Extra Package for Enterprise Linux (EPEL). After that you can use yum to install the package.

How to install addition repositories for your linux box (Add Repository)

yum install fail2ban

Comments

Know your Lha Zha, Sog Zha, Shi Zha

There is believe in Buddhism, that an individual person have got their own lucky day and bad luck day in a week. They are derived from the twelve animals similar to chiness horscope. Your birth year tells you which Buddhism zodiac sign you below to. Lha Zha and Sog Zha are belived to be good day while Shi zha is consider bad day.

Remove Log files from Checkpoint

Here is how you can delete checkpoint old log files 1. Go to Gaia Terminal 2. Enter expert mode 3. echo $FWDIR to get the log file location 4. Go to the Log directory cd $FWDIR/log 5. rm 2013-10-01* to remove 1st Oct 2013 logs

IPTABLES

Under linux OS, we use iptables to secure the machine from any other external attack. In current scenario I am forwarding the packages from local interface to external interface and i have squid configured which will be acting as transparent proxy. Only selective port numbers are open for the network. 1. Save the script to a file. 2. Give permission to execute. chmod +x filename . 3. Execute the file as follows ./filename 4. save the output of the script to system iptables file, by running the command service iptables save 5. You are done, start/restart the iptables service. service iptables restart Script: #!/bin/sh # chmod +x file name to execute # eth0 LAN # eth1 WAN # Local IP range 192.168.0.0/25 # NATing # Transparent proxy iptables -F iptables -X iptables -t nat -F iptables -t nat -X iptables -t mangle -F iptables -t mangle -X iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPT iptables -A INPUT -i lo -j ACCEPT iptables -A...

Bhutan ICT

Search This Blog