A great way to add more security to your web server is to disable GET, wget, and Curl which will stop web, and shell users from being able to download files to the server. You can set up a group called get-users so that only users that are a member of this group will be able to to download files to the server.
This is a guide on how to install and configure a firewall on your server. A firewall is one of the most import features of security on a server if NOT the MOST important.
First thing we are going to do is install APF (Advanced Policy Firewall) from R-fx Networks.
Log-in to the server with ssh and change to root user.
Continue reading
This is a guide on how to add more security to your server by disabling root logins and change the standard port that ssh uses.
First thing we need to do is create a a user name that we are going to use that will be our new root login.
[root@dev ~]# /usr/sbin/adduser admin
-OR-
[root@dev ~]# useradd admin
You do not have to use admin you can use whatever you would like e.g. joe, jeff john, carl, richard either way remember that Linux is case sensitive so if you use a capitals in your login name you will have to use capitals every time you login.
Continue reading
I recently decided to write a Root Login Notifier Script this script checks every user that logs in as root or switches user to root against your firewall’s allowed hosts if the IP address of the root user is not in the allowed hosts list it silent sends an email to the address specified in the script listing the the username they sudo from or logged in as, as well as their ip address, and the date/time. If the root user is in the allowed hosts list of the firewall it will echo “Welcome Super User”.