I read an interesting piece about securing servers written by Greg Bledsoe in LinuxJournal . I thought I would try it out and it turns out that it needed a few massages to make it run on my Mageia5 system. There are two parts to his approach, a short script that runs as rc.local , which file does not exist in Mageia, but will be properly run if you create it in /etc/rc.d/rc.local . #!/bin/sh #/etc/rc.d/rc.local #REF: http://www.linuxjournal.com/content/server-hardening?page=0,2 #create iptables blocklist rule and ipset hash /usr/sbin/ipset create blocklist hash:net /usr/sbin/iptables -I INPUT 1 -m set --match-set blocklist ↪src -j DROP This file owner should be root with 700 permissions. Once you create it, you should execute it manually because that needs to be done before you run the script to collect the blocklists. I put the blocklist collection script in /usr/local/bin . You will need to create the directory /usr/local/bin/tmp because the script wa...
All the Hoyt You Need