Thursday, October 21, 2010

Got new server.

DL140. It is actually turbo jet going from runway. Just small. But loud. Hopefully it is powerful the way it is loud.

So it is going to be ubuntu 10.10

Sunday, October 17, 2010

Tuesday, October 5, 2010

Nobel H.A.M.S.T.E.R.

Two russian guys scooped Nobel prize. The article is from some early publications. Look at the list of authors.

Tuesday, March 4, 2008

iptables anti scan tricks

iptables -N SCAN
iptables -A SCAN -p tcp --dport 25 -m recent --set --name SMTP
iptables -A SCAN -p tcp --dport 22 -m recent --set --name SSH
iptables -A SCAN -p tcp --dport 21 -m recent --set --name FTP
iptables -A SCAN -m recent --update --seconds 300 --hitcount 5 --name SMTP -j DROP
iptables -A SCAN -m recent --update --seconds 300 --hitcount 5 --name SSH -j DROP
iptables -A SCAN -m recent --update --seconds 300 --hitcount 5 --name FTP -j DROP

another way
#Anti-Bruteforce for SSH
iptables -N SSHSCAN
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j SSHSCAN
iptables -A SSHSCAN -m recent --set --name SSH
iptables -A SSHSCAN -m recent --update --seconds 3600 --hitcount 5 --name SSH -j DROP
iptables -A SSHSCAN -m recent --update --seconds 3600 --hitcount 5 --name SSH -j LOG --log-level info --log-prefix "Anti SSH-Bruteforce: "

Tuesday, December 4, 2007