Sudo is a program that allows users to run programs with the security privileges of another user (normally the superuser, or root). The /etc/sudoers file controls who can run what commands as what users on what machines and can also control special things such as whether you need a password for particular commands. To add…
Fail2ban is an important software for system administrator. It scans log files (e.g. /var/log/auth.log) and bans IPs that show malicious signs, something like too many password failures and looking for exploits. To install fail2ban, execute this command: Open the configuration file to activate some rules: Find following line to set email destination for notification: Find…
PHP Suhosin is an open source patch for PHP5 to harden the servers security. I found this Suhosin looping error message when checked on /var/log/user.log Feb 25 07:28:39 rastavarian suhosin[444]: ALERT – configured GET variable value length limit exceeded – dropped variable ‘cookie’ (attacker ‘202.42.246.191’, file ‘/var/www/wp-admin/admin-ajax.php’) Feb 25 07:28:40 rastavarian suhosin[442]: ALERT – configured…
The purpose of this installation is to filter spam email and virus on Postfix mail agent. Here I already installed Postfix in the server, because it is included in EHCP installation. 1. Install the packages 2. Install the optional packages for better spam detection libmail-spf-query-perl package is not available in Debian, therefore I change to…
