security

close open DNS server

you made a check on dnsreport.com and you got a FAIL on open dns server?not a problem, now we show you how to close that gap.start your favorite editor (vim, nano, pico, ...) and load "/etc/named.conf".At the beginning you should have something like key "rndckey" {};orcon...[read more]

BIND - how to hide the version number

Here is your little tutorial that shows you how to hide the version number behind hide.What is it good for? Some exploits or brute force attacks are just good for one version of bind (DNS), so why should we show which version we are using?Ok, start your favorite editor (VIM, nano, pico) and load &qu...[read more]

Installing BFD (Brute Force Detection)

Do you think your server is getting flooded by brute force attacks?Does your logfile like this?Mar 18 10:07:09 server sshd[3736]: Failed password for root from 203.193.56.133 port 59498 ssh2Mar 18 10:07:13 server sshd[3809]: Failed password for root from 203.193.56.133 port 59713 ssh2Mar 18 10:07:17...[read more]

get notified by email on root access

Wouldn\'t it be better to get an email if someone is logging in as root (or any other user) on your server?Ok, let\'s change a file.Start your editor (nano or vim) and open "/root/.bash_profile"At the end add the following line...echo \'ALERT - Root Shell Access on:\' `date` `who` | mail -...[read more]

security

Other useful links