Iptables is a firewall utility that uses policy chains to allow or block traffic. It can configure IPv4 tables, chains or rules provided by the Linux kernel firewall. Some key things to consider: 1. Installation: apt install...
Category - Tutorials
Tutorials
Uncomplicated Firewall (UFW) -frontend for iptables and is a program for managing a netfilter firewall. Some key things to consider: 1. Installation: apt install ufw 2. Verify if ufw is enabled: systemctl is-enabled ufw 3...
Secure Shell or SSH is a cryptographic network protocol used to securely log or access to remote systems. The most popular tool is the OpenSSH which provides a large suite of secure tunneling capabilities and different...
Here’s how to install the program “auditd” and best security practice and recommended settings for system auditing. 1.Install the auditd a. Verify if the package is installed or not, using the dpkg...
A. Install and configure Rsyslog Rsyslog is the recommended syslog server on Linux, and has replaced the “syslogd” program. It is has better features and improvements such as TCP log transmission, encryption and can...
Sysctl is a tool to configure or modify kernel parameters at runtime. It is a way to fine tune the kernel, of course without the need to rebuild the kernel. Sample Options: Write variable from the command line (instead of editing...
As part of Best Security Practices, it is recommended to remove service clients that are not required for normal operation to reduce local attack. Here are the following programs or clients that need to remove. (Not in particular...
As part of the Best Security Practices, it is recommended to disable all services that are not required for normal operation to prevent the vulnerabilities exploitation of these services. These are the following services that...
Cacti is an open-source, web-based network monitoring and RRDTool-based Graphing Solution. Compared to MRTG, Cacti stores information in a MySQL database to create graphs and populate data. It was designed to monitor and...
1.Find if your interface has IP address, it’s either obtained dynamically via DHCP server or manually configured using static configuration. You can either use commands from the “iproute” or...