So it is going to be ubuntu 10.10
Thursday, October 21, 2010
Got new server.
DL140. It is actually turbo jet going from runway. Just small. But loud. Hopefully it is powerful the way it is loud.
Sunday, October 17, 2010
Tuesday, October 5, 2010
Nobel H.A.M.S.T.E.R.
Two russian guys scooped Nobel prize. The article is from some early publications. Look at the list of authors.
Tuesday, March 4, 2008
iptables anti scan tricks
iptables -N SCAN
iptables -A SCAN -p tcp --dport 25 -m recent --set --name SMTP
iptables -A SCAN -p tcp --dport 22 -m recent --set --name SSH
iptables -A SCAN -p tcp --dport 21 -m recent --set --name FTP
iptables -A SCAN -m recent --update --seconds 300 --hitcount 5 --name SMTP -j DROP
iptables -A SCAN -m recent --update --seconds 300 --hitcount 5 --name SSH -j DROP
iptables -A SCAN -m recent --update --seconds 300 --hitcount 5 --name FTP -j DROP
iptables -A SCAN -p tcp --dport 25 -m recent --set --name SMTP
iptables -A SCAN -p tcp --dport 22 -m recent --set --name SSH
iptables -A SCAN -p tcp --dport 21 -m recent --set --name FTP
iptables -A SCAN -m recent --update --seconds 300 --hitcount 5 --name SMTP -j DROP
iptables -A SCAN -m recent --update --seconds 300 --hitcount 5 --name SSH -j DROP
iptables -A SCAN -m recent --update --seconds 300 --hitcount 5 --name FTP -j DROP
another way
#Anti-Bruteforce for SSH
iptables -N SSHSCAN
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j SSHSCAN
iptables -A SSHSCAN -m recent --set --name SSH
iptables -A SSHSCAN -m recent --update --seconds 3600 --hitcount 5 --name SSH -j DROP
iptables -A SSHSCAN -m recent --update --seconds 3600 --hitcount 5 --name SSH -j LOG --log-level info --log-prefix "Anti SSH-Bruteforce: "
iptables -N SSHSCAN
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j SSHSCAN
iptables -A SSHSCAN -m recent --set --name SSH
iptables -A SSHSCAN -m recent --update --seconds 3600 --hitcount 5 --name SSH -j DROP
iptables -A SSHSCAN -m recent --update --seconds 3600 --hitcount 5 --name SSH -j LOG --log-level info --log-prefix "Anti SSH-Bruteforce: "
Tuesday, December 4, 2007
Subscribe to:
Posts (Atom)
