Security

DDos Analysis

by

DDos Detection Articles: https://www.hivelocity.net/kb/how-to-check-if-your-linux-server-is-under-ddos-attack/ http://linuxaria.com/howto/how-to-verify-ddos-attack-with-netstat-command-on-linux-terminal https://support.plesk.com/hc/en-us/articles/360000345633-How-to-diagnose-possible-DoS-or-DDoS-attack-on-Apache

Fix the Meltdown on a CentOS/RHEL/Fedora/Oracle/Scientific Linux

by

How to Fix the Meltdown on a CentOS/RHEL/Fedora/Oracle/Scientific Linux Always keep backups. So backup now to an offsite location. Note the Linux kernel version running the following command: Fix the Meltdown on a CentOS/RHEL/Fedora/Oracle/Scientific Linux Type the following yum command: You must reboot your Linux server using shutdown/reboot command: Run the following dnf command if … Read more

Meltdown And Spectre Security Flaws

by

Articles and Information regarding the Meltdown And Spectre Security Flaws Links: https://meltdownattack.com/ https://hothardware.com/news/researchers-disclose-meltdown-and-spectre-cpu-vulnerabilities https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/ Patches: VMware https://lists.vmware.com/pipermail/security-announce/2018/000397.html https://esxi-patches.v-front.de/ESXi-5.5.0.html#2017-09-14 How To’s Fix the Spectre on a CentOS/RHEL/Fedora/Oracle/Scientific Linux Fix the Meltdown on a CentOS/RHEL/Fedora/Oracle/Scientific Linux

Install rkhunter on CentOS 6.6

by

Rootkit Hunter (rkhunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. Rootkits are self-hiding toolkits secretly installed by a malicious intruder to allow that user to gain access to the server. Rootkit Hunter offers protection by comparing SHA-1 hashes of important files with known good ones in a online database … Read more

kernel: Firewall: *SYNFLOOD Blocked*

by

CSF Firewall is blocking these attacks in /var/log/messages Check with You have set the following in your csf configuration but having such a setting, we definitely block SYN connections but legit connections as well. With the above settings, you will see a drop down in SYN connections but you won’t be able to browse your … Read more

Ghost Vulnerability

by

A very serious security problem has been found and patched in the GNU C Library called Glibc. It was announced on 27th January 2015.

Here are the affected Linux distros:

  • RHEL (Red Hat Enterprise Linux) version 5.x, 6.x and 7.x
  • CentOS Linux version 5.x, 6.x & 7.x
  • Ubuntu Linux version 10.04, 12.04 LTS
  • Debian Linux version 7.x
  • Linux Mint version 13.0
  • Fedora Linux version 19 or older
  • SUSE Linux Enterprise 11 and older (also OpenSuse Linux 11 or older versions).
  • SUSE Linux Enterprise Software Development Kit 11 SP3
  • SUSE Linux Enterprise Server 11 SP3 for VMware
  • SUSE Linux Enterprise Server 11 SP3
  • SUSE Linux Enterprise Server 11 SP2 LTSS
  • SUSE Linux Enterprise Server 11 SP1 LTSS
  • SUSE Linux Enterprise Server 10 SP4 LTSS
  • SUSE Linux Enterprise Desktop 11 SP3
  • Arch Linux glibc version <= 2.18-1

Read More to Fix the GHOST vulnerability on a CentOS/RHEL/Fedora/Ubuntu Linux

Read more

Install and Configure Monit on CentOS 6.6

by

Monit is not available from the system base repositories, you need to add and enable third party epel repository to install monit package under your RHEL/CentOS systems. Install Monit Monit has it’s web interface that runs on port 2812 using web server. To enable web interface you need to make changes in monit configuration file. … Read more