Linux Server Secure Login considerations
Remove unnecessary users
Remove unnecessary groups of users
Set the responsible login password (case, number, letter, underscore, special character)
Disable root for remote login, use normal user
As PHP becomes more popular, Linux vps/servers are used more and more, and Linux security issues need to be enhanced, if you install denyhosts and set up email reminders, you may be subject to several letters each day denyhosts The reporting will come to break the SSH password IP join/etc/hosts.deny.
There are two types of Linux ssh logins:
1, the use of password Authentication login
Typically, a VPS or server
The secure client logs into the server via a key:1. Secure Client SettingsGenerate key650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M02/8C/1A/wKioL1hiT2_i5IZJAABxAlPoYyA079.png-wh_500x0-wm_3 -wmp_4-s_1034965126.png "title=" 1.png "alt=" Wkiol1hit2_i5izjaabxalpoyya079.png-wh_50 "/>Click Next:650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M01/8C/1A
which is Used to # Allow or deny connections to network services This # either use the Tcp_wrappers library or that has bee N # started through a tcp_wrappers-enabled xinetd. # # see ' Mans 5 Hosts_options ' and ' Man 5 hosts_access ' # for information on rule syntax. # see ' Mans TCPD ' for information on Tcp_wrappers # Sshd:192.168.1.*, 114.165.77.144,133.110.186.130,133.110.186.139:allow //The last allow can be omitted Sshd:all:deny () nbsp //This is a setup
In the previous article to ensure that Linux VPS and server more secure Xshell set key login article has been shared to Xshell use the key to login to our VPS server to ensure the safety of the machine, but many students are not like the old left with Xshell, There are still
prohibits password login. For the management of multiple servers, I am a direct replacement of the file, so simple and maintain the persistence.// Local SCP -P [Port] sshd_config [email protected]:/your/home///serversudoCP ~/sshd_config/etc/ssh/sshd_config4. Iptables settingsudo 1 22000-J ACCEPTsudo service iptables Save5. Restart the sshd service, test loginsudo service sshd restartSSH [email protected]-p [Port]Note: Do not close the previously ope
identification string from UNKNOWNNov 4 13:25:26 Server sshd[12201]: Did not receive identification string from UNKNOWNNov 4 13:26:26 Server sshd[13312]: Did not receive identification string from UNKNOWNNov 4 13:27:26 Server sshd[13400]: Did not receive identification string from UNKNOWNNov 4 13:28:26 Server sshd[135
Safety | design
For WEB applications, it is important to secure logins. But most WEB systems are sending plaintext when they send a login password, so it's easy for intruders to hear passwords. Of course, SSL is a good way to implement secure connections, but in many cases we can't set the server to be a WEB
Secure login authentication for Web applicationsSome days ago I saw a blog post about secure login authentication, but the login authentication algorithm mentioned in this article is a bit complicated and there are still some security flaws. Thinking about the HMAC algorithm
I saw a blog post about secure login authentication a few days ago. However, the logon authentication algorithm mentioned in this article is a bit complicated and still has some security defects. I think we can use the HMAC algorithm to perform secure logon authentication for WEB applications.
The so-called security is actually mainly to solve the problem: hiding
This article is mainly for everyone to introduce the AJAX implementation of a beautiful, secure login interface method, with a certain reference value, interested in small partners can refer to, hope to help everyone.
The login interface is an essential feature provided by the information system and an interface to provide maintenance information to the user. Ne
This article mainly introduces the database in PHP to achieve a more secure permanent login, remember my features, interested in the reference of friends, I hope to be helpful to everyone.
Permanent login refers to the mechanism of continuous validation between browser sessions. In other words, today's logged-on user is still logged on tomorrow, even if the user
Before the summer vacation, I strolled online and went to coolcode somehow. CN, I saw andot's article "design and implementation scheme of Secure Login System", which was deeply inspired and decided to apply it in practice. However, the article only points out the general process and does not describe the specific operation method. After one afternoon and one night of exploration, I finally realized it. Thi
User login is the basic function of any application system, especially for the internet banking system, the security of user login is especially important. How to design a secure login authentication program for a website is the main issue discussed in this paper.Static password There are a lot of security risks, attac
time the server generates a random number verification code for the account, responds to the front-end login page. when a user enters a password, the front-end page encrypts the password entered by the user. The encrypted plaintext is then combined with the verification code returned by the server to encrypt it again. Then send this information to the
In the actual product service publishing environment, Linux servers generally prohibit the use of remote root account login, only allow the least privileged remote account using SSH login, and then switch accounts to achieve the purpose of Management Server. Let's summarize how to create a secure SSH
Use PHPRPC for AJAX secure logon and phprpc for ajax. Use PHPRPC for AJAX secure login, phprpc implementation of ajaxPHPRPC is a lightweight, secure, cross-Internet, cross-language, cross-platform, cross-environment, cross-origin, and support for complex objects. using PHPRPC for AJAX
The user login function is the most basic function of the Web application system. It is related to the security of user data and application system data. Designing a secure user login function involves the following aspects.(1) Conventional discussion-Password1. password length and complexity ConstraintsRestrict users to enter passwords that are very easy to crac
The user login function is the most basic function of the Web application system. It is related to the security of user data and application system data. Designing a secure user login function involves the following aspects.(1) Conventional discussion-Password1. password length and complexity ConstraintsRestrict users to enter passwords that are very easy to crac
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.