0
votes
1answer
83 views

Help writing server script to ban IP's from a list

I have a VPS that I use as an openvpn and web server. For some reason, my apache log files are filled with thousands of these hack attempts: "POST /xmlrpc.php HTTP/1.0" 404 395 These attack attempts ...
2
votes
1answer
1k views

linux command to prevent dos attack by using netstat and iptables

I want to DROP more than 200 requests per ip to prevent ddos attack. this is command that i used to detect requests count per ip : netstat -alpn | grep :80 | awk '{print $5}' |awk -F: '{print ...
3
votes
2answers
6k views

Help! My server has been hacked - .IptabLes and .IptabLex in /boot [closed]

I'm running a Ubuntu 6.06 dapper server and it has been hacked. I'll admit up front here that I'm a programmer and not a system administrator so even though I've worked with Unix/Linux for years my ...
2
votes
2answers
250 views

UFW and firewall

So I recently installed ubuntu and I have been working with it no problem.While browsing through the security guides (specifically: https://wiki.ubuntu.com/BasicSecurity) I noticed this: "enable the ...
1
vote
0answers
360 views

fail2ban block retry count always changes

As title mentions clearly, fail2ban block retry count always changes. I set all retry counts to 3; but sometimes it blocks me after 6 or 7 retries. How can set its behavior a constant value? I added ...
0
votes
4answers
3k views

fail2ban or denyhosts to block invalid username login attempts

Is there a way to automatically block IP address when a user tries to login as any invalid username? I already have: [ssh] enabled = true port = ssh filter = sshd logpath = /var/log/auth.log ...
0
votes
1answer
1k views

xtables-addon installation failed

I have a server with ubuntu 12.04 and when I try to install xtables-addon with this command module-assistant auto-install xtables-addons-source I get this error Bad luck, the kernel headers for the ...
2
votes
1answer
2k views

how to enable iptables tarpit?

I'm using ubuntu server 10.04 and I have to enable tarpit module . I installed the followning packet : aptitude install xtables-addons-common xtables-addons-source module-assistant auto-install ...
0
votes
1answer
2k views

fail2ban is not sending mail when it bans an ip!

I have configured fail2ban to send me a mail when it bans an IP, but it is not working. I get a message when the jails start and stop but nothing else . I am using ssmtp to send mail via Google Mail. ...
1
vote
1answer
816 views

Minimal LAMP iptables setup

What rules are needed for an Ubuntu LAMP server only having minimum necessary ports open.
2
votes
3answers
2k views

Why is Ubuntu permissive with outgoing connections by default?

I am pretty newbie to Linux, as most of computers for resources in my school use Linux, I just installed Ubuntu to learn. By default iptables and ufw sets policy as under: IPTABLES -P INPUT DROP ...
9
votes
2answers
3k views

potential ufw and fail2ban conflicts

Will running both fail2ban and ufw cause problems? I noticed that fail2ban modifies iptables rules, but ufw already has a ton of iptables rules defined... so I'm not sure if fail2ban will mess these ...
12
votes
5answers
19k views

How to secure ubuntu server from bruteforce ssh attacks?

I have my passwords secure, but I heard people complaining about perfomance of a server going down drastically when a bruteforce attack is taking place. How can I secure my ubuntu 10.10 server from ...
11
votes
4answers
14k views

How can I block ping requests with IPTables?

and stealth specific ports?
14
votes
4answers
18k views

GUI for iptables?

I would like to secure my server and it seems that IPtables is one of the first steps. Unfortunately editing the rules in a terminal is a bit complicated and dangerous (those who ever did an iptables ...