Get email alert on root ssh login

Posted by soapy | Linux Tutorials | Tuesday 14 October 2008 2:08 pm

WARNING: According to eApps policy if you edit any system files manually, they might not support the changes you have made. Use at your own risk.

Do you want to receive email alert when someone makes a root login to your VPS?

This is how you can do it:
(more…)

Linux Tips: take control of your bash_history

Posted by soapy | Linux Tutorials | Tuesday 14 October 2008 1:20 pm

I spend most of my time working in front of a black and white terminal of remote SSH connections to various servers. This means that I use bash (as my preferred shell) most of the day. And bash history is a very important feature of bash that saves me much time by recalling previous commands I have typed. Here are some tricks on how you can optimize with some simple configurations settings the usage your bash history.
(more…)

Keep your Debian system up-to-date

Posted by soapy | Linux Tutorials | Tuesday 14 October 2008 1:20 pm

One of the first rules in security is to keep your servers always updated to the latest security patches. Debian provides a wonderful and very easy mechanism to do this. There have been many questions if it is best to update automatically or manually.
Here are my 2 cents on this issue:
(more…)

Using fail2ban to Block Brute Force Attacks

Posted by soapy | Linux Tutorials | Tuesday 14 October 2008 1:19 pm

From the category of log based tools I have chosen to present fail2ban because I consider it to be the best available log based brute force blocker. Basically, as any other log based brute force blockers, fail2ban will monitor the system log files and when certain configured events occur they will trigger fail2ban to block the offending host.
(more…)

Using iptables to Block Brute Force Attacks

Posted by soapy | Linux Tutorials | Tuesday 14 October 2008 1:19 pm

force attacks. In order to use this method you need a kernel and iptables installation that includes ipt_recent. If your linux distribution doesn’t include the ipt_recent module or you are using a custom compiled kernel you might need to first include the iptables recent patch that can be found on the author’s website or in the iptables patch-o-matic area. If you are using Debian/Ubuntu you don’t need to do anything special as this is already included in your system.
(more…)