linux server hardening

Write in front:When you get a server, don't worry about deploying apps, security is a top priority. If you sort the order, the Linux system can be secured by following several steps. This article is mainly for the enterprise common CentOS system, Ubuntu system slightly different can be Baidu query.1. System User Optimization2. System service Optimization3.SSH Access Policy4. Firewall configuration1. System

This article describes how to use php to troubleshoot and reinforce Linux server Trojans. This article describes how to search for, search for recently modified files, and modify php based on the pattern. ini, modify nginx. conf and other methods. if you need a friend, can you refer to the website frequently infected with Trojans? After some improvements, we can basically solve this problem. because discuz

This article describes how to use php to troubleshoot and reinforce Linux server Trojans. This article describes how to search for, search for recently modified files, and modify php based on the pattern. ini, modify nginx. conf and other methods. if you need a friend, can you refer to the website frequently infected with Trojans? After some improvements, we can basically solve this problem. because discuz

I. Linux hardening targets and objectsobjective of the project strengthening: to solve the security problems of Linux servers identified by the company in the risk assessment work this year, and to promote the security status of Linux servers to a higher level of security, in combination with the requirements of the re

★ Welcome to The Guardian God · V Classroom, website address: http://v.huweishen.com★ Guardian God · V Classroom is a Web site dedicated to providing server instructional video for the Guardian God, updated weekly video.★ This section we will lead you: Server Security Hardening• Due to the wide variety of security factors and different

, such as: DD, cpio, tar, dump, etc.7 Other 7.1 using firewallsFirewall is an important aspect of network security, we will have another topic to elaborate on the firewall, including the principle of the firewall, Linux 2.2 kernel under the IPChains implementation, Linux 2.4 kernel NetFilter implementation, commercial firewall product applications.7.2 Using third-party security toolsLinux has a lot of good

Server relative to the other, security settings more difficult, then the server of the cow B, the hacker who encountered the cow B, there is no black not to go. Of course, for small sites, the general reinforcement on the line.Because of the wide variety of security factors and different server settings, this section can simply introduce several aspects of securi

;/etc/issueCp-f/etc/issue/etc/issue.netEcho >>/etc/issue2) for Apache configuration file, find Servertokens and serversignature two directive, modify its default properties as follows, use no echo version number:Servertokens PRODServersignature OFFVi. iptables Firewall Rules:Iptables-a input-p--dport 22-j ACCEPTIptables-a input-i eth0-p TCP--dport 80-j ACCEPTIptables-a input-m State--state established,related-j ACCEPTIptables-a input-j DROPThe above rule will block TCP active pick-up from the in

1. Update system PatchesUpdating patches is the most important step in security hardening.2. Disable services that you do not needThe following services must be disabled: Server, Workstation, Print Spooler, Remote Registry, Routing and remote Access, TCP/IP NetBIOS Helper, computer Browser3. System Permission settingsBecause there are so many places to set up the system permissions, we can only publish the

The United States Cloud (MOS) provides the Windows Server 2008 R2 and the Windows Server R2 Data Center version of the cloud host server. Windows Server security issues require extra attention because of the high market share of Windows servers, more malware such as virus Trojans for Windows servers, easy access, and l

servlet only with Tomcat.(6) Apache is the most beginning page parsing service, Tomcat is developed after, in essence, the function of Tomcat can completely replace Apache, but Apache is the predecessor of Tomcat, and there are many people in the market still using Apache, So Apache will continue to exist, will not be replaced,Apache can not parse Java things, but parsing HTML fast .4. Examples of both:Apache is a car, which can be loaded with things such as HTML, but not water, to fill the wat

those modules.Locate the code that contains loadmodule in the Httpd.conf. To close these modules, simply add a # sign before the line of Code. To find a module that is running, you can use the following statement:grep loadmodule httpd.confThe following modules are usually activated and are not large: mod_imap, mod_include, mod_info, mod_userdir, mod_status, mod_cgi, mod_autoindex13. Clear the default annotations from httpd.confThe default httpd.conf file in Apache 2.2.4 has more than 400 lines.

member server hardening procedures." The following table lists all the IPSEC filters that can be created on the IIS server in the Advanced Security environment defined in this guidance. Service Agreement Source Port Target Port Source Address Destination Address Operation Mirror Terminal Services Tcp All 3389 All ME Allow Is HTTP

Overview This chapter provides information about working with Microsoft? Windows Server? Recommendations and resources for security hardening on Internet Authentication Service (IAS) servers above 2003. IAS is a Remote Authentication Dial-In User Service (RADIUS) server that implements the functions of user authentication, authorization, and centralized managemen

unlock_time=120To the second row.The server needs to be restarted for the configuration to take effect. Check host access control (IP limit)To perform a backup:#cp-P/etc/hosts.allow/etc/hosts.allow_bak#cp-P/etc/hosts.deny/etc/hosts.deny_bakVim/etc/hosts.allow #插入all:*. *.*.*:allowVim/etc/hosts.deny #插入sshd: 555.555.555.555:deny Check Password lifecycle requirementsCp-p/etc/login.defs/etc/login.defs_bakTo modify policy settings:#vi/etc/login.defsM

directoryGive them Administrators, SYSTEM "Full Control" permission; Tomcat_hws "read/write/delete" permission；3) Locate the website file directory (default in the Tomcat installation directory webapps\root);Store directory Administrators, SYSTEM "Full Control" permission for Web site files, tomcat_hws "read/write/delete "permissions;(If you have more than one Web site file directory, you need to add the Tomcat_hws "read/write/delete" permission;)3. Set up Tomcat service1) Set the Tomcat servic