 |
 |
 |
 |
Registered: 06/05/06
Posts: 14904
|
|
|
 |
 |
 |
 |
|
 |
 |
 |
 |
|
Express Hosting
"We are the official hosting company of UBB.threads. Ask us about our free migration services to migrate your UBB.threads installation."
|
|
|
 |
 |
 |
 |
 |
 |
 |
 |
#234666 - 02/11/10 12:20 PM
Re: Server getting attacked
[Re: Bad Frog]
|
old hand
|
Registered: 02/10/07
Posts: 1144
|
|
|
|
|
Top
|
|
|
|
|
 |
 |
 |
 |
 |
 |
 |
 |
#234761 - 02/11/10 07:31 PM
Re: Server getting attacked
[Re: Gizmo]
|
newbie
|
Registered: 12/31/06
Posts: 36
|
|
Hi, Have had many sort of attacks from China, Brazil, and eastern Europe. I use IPTables to block some countries completely. I get a master list from: http://www.wizcrafts.net/chinese-iptables-blocklist.html for example... Once I get their list I put it into a script file and run it on the server. Something like this:
#!/bin/bash
# china blocklist
# generated from http://blacklists.linuxadmin.org
/sbin/iptables -A INPUT -p tcp -s 58.14.0.0/15 --dport 22 -j REJECT
/sbin/iptables -A INPUT -p tcp -s 58.16.0.0/13 --dport 22 -j REJECT
/sbin/iptables -A INPUT -p tcp -s 58.24.0.0/15 --dport 22 -j REJECT
A few other things is I move my default SSH port. This helps tremendously. On my server it is controlled in the file /etc/ssh/sshd_config I changed or added this line. Except I used my secret numbers. These are not the actual numbers I used. You may also want to consider moving your FTP ports as well. You can also do port scans against your server to see what is obviously visible to a hacker. There are tools for that at Sourceforge.net
|
|
Top
|
|
|
|
|
 |
 |
 |
 |
 |
 |
 |
 |
#234839 - 02/13/10 05:58 PM
Re: Server getting attacked
[Re: David Dreezer]
|
addict
|
Registered: 06/05/06
Posts: 687
|
|
Thanks for the help, everyone, here is my next problem I DON'T HAVE A CLUE HOW TO DO THIS  code. Installation ============ Installation is quite straightforward: rm -fv csf.tgz wget http://www.configserver.com/free/csf.tgztar -xzf csf.tgz cd csf sh install.sh Next, test whether you have the required iptables modules: perl /etc/csf/csftest.pl Don't worry if you cannot run all the features, so long as the script doesn't report any FATAL errors You should not run any other iptables firewall configuration script. For example, if you previously used APF+BFD you can remove the combination (which you will need to do if you have them installed otherwise they will conflict horribly): sh /etc/csf/remove_apf_bfd.sh etc etc etc I am only a humble macintosh guy, never learned command
|
|
Top
|
|
|
|
|
 |
 |
 |
 |
|
|