background preloader

Linux

Facebook Twitter

Security

Running commands on Putty without fear of losing connection. Fail2ban. Fail2Ban is an intrusion prevention framework written in the Python programming language.

Fail2ban

It works by reading SSH, ProFTP, Apache logs etc.. and uses iptables profiles to block brute-force attempts. To install fail2ban, type the following in the terminal: sudo apt-get install fail2ban Configuration To configure fail2ban, make a 'local' copy the jail.conf file in /etc/fail2ban cd /etc/fail2ban sudo cp jail.conf jail.local Now edit the file: sudo nano jail.local Set the IPs you want fail2ban to ignore, the ban time (in seconds) and maximum number of user attempts to your liking: [DEFAULT] # "ignoreip" can be an IP address, a CIDR mask or a DNS host ignoreip = 127.0.0.1 bantime = 3600 maxretry = 3. Fail2ban.

UNIX / Linux: Send E-mail When sudo Runs. I'm not told to use the root user to perform activities that do not require it.

UNIX / Linux: Send E-mail When sudo Runs

I've configured sudo for myself and for other web developers so that they can restart MySQL or Apache web server. How do I send email when sudo run by one of my user? How do I keep track of user login done via sudo command? Sudo does greatly enhances the security of the system without sharing root password with other users and admins. sudo provides simple auditing and tracking features too. UNIX / Linux: Send E-mail When sudo Runs. E-mail Alert on Root SSH Login. Want to be notified instantly when someone logs into your server as root?

E-mail Alert on Root SSH Login

No problem, check out this nice tutorial on email notification for root logins. Want to be notified instantly when someone logs into your server as root? No problem, check out this nice tutorial on email notification for root logins. Keeping track of who logs into your server and when is very important, especially when you're dealing with the super user account. We recommend that you use an email address not hosted on the server your sending the alert from. So lets get started! 1. 2. cd /root. Locally checks for signs of a rootkit. Newbie: Intro to cron. Setup Virtual Users and Directories in VSFTPD. Setup virtual users instead of local users and configure user specific home directories for each user, or shared between a handful of users.

Setup Virtual Users and Directories in VSFTPD

The reason for setting up virtual users, and different home directory for each user, was to allow ftp access to a web server running a number of different sites for different clients. Each client can have one or more login to the ftp server, and the usernames and passwords can be shared with the apache webserver, so you only need to store their passwords in one place. I'm choosing vsftpd as the ftp server, as it seems to have the best reputation for being secure (and having the fewest security bugs) Installing Whilst each flavour of linux has it's own way of installing software, I'm going to run through using debian, so you will need to adapt it for whichever distro you use.

FireHOL, a Linux iptables packet filtering firewall builder for humans... SSH & Public Keys. Virtual Appliances for Virtual Machines, Cloud Computing and Bare Metal. HOWTO: set up ssh keys. Now this is all well and good, but who wants to run their whole life from a single bash instance?

HOWTO: set up ssh keys

If you use an X window system, you can type your passphrase once when you fire up X and all subprocesses will have your keys stored. Rute. Nginx. Puppy Linux. Tutorial on how to Install Apache, Subversion and Trac with Virtual Hosting suppor in Ubuntu Linux : Voip Phreak.

We recently had to setup Apache, Subversion and Trac all within a virtual hosting environment for one of our Clients to be able to develop easily and effictively among team members.

Tutorial on how to Install Apache, Subversion and Trac with Virtual Hosting suppor in Ubuntu Linux : Voip Phreak

They wanted to use multiple domain names for separate projects. Made sense to us, so we started looking for instructions on setting this up. We wanted to setup LigHTTPD, however it's not nearly as easy because of no svn-dav module available, so we stuck with Apache 2 for now. We found a howto on doing this, however there were a few vital steps and explanations missing so we've re-written it in hopes it will help others the trouble of searching to find this information. So, lets move on to the tutorial shall we. First install the required packages on your system. . # sudo aptitude install enscript libapache2-mod-python python-docutils trac db4.3-util libapache2-svn subversion-tools Now create a virtual host for your SVN container. # mkdir -p /var/local/svn/svn.yourdomain.com # adduser username # passwd username.

Installing Trac and Subversion - InstallationWiki. .NET VNC Viewer. RealVNC remote control software. How-To: Ubuntu Media Server. AndLinux.org. Introduction to Linux. The Linux Documentation Project: Guides. The Linux Documentation Project (LDP) is working on developing good, reliable documentation for the Linux operating system.

The Linux Documentation Project: Guides

The overall goal of the LDP is to collaborate in taking care of all of the issues of Linux documentation, ranging from online documentation (man pages, HTML, and so on) to printed manuals covering topics such as installing, using, and running Linux. Here is the Linux Documentation Project Manifesto and Copyright License for LDP works. Translations of LDP works (languages other than English) can be found on the "Non-English Linux Info" links page. Advanced Bash-Scripting Guide This document is both a tutorial and a reference on shell scripting with Bash. It assumes no previous knowledge of scripting or programming, but progresses rapidly toward an intermediate/advanced level of instruction . . . all the while sneaking in little nuggets of UNIX® wisdom and lore. PCLinuxOS.