fail2ban and sshutout for Mageia Linux

Fail2ban
"Fail2ban is an extensible Swiss-army knife of brute-force authentication prevention and it comes with an additional filters to detect other attempts to compromise your system. If you do nothing but install it, run it, keep it updated and turn on its filters for any services you run, especially SSH, you will be far better off than you were otherwise." -- Greg Bledsoe

$ sudo urpmi fail2ban

Once installed, it will be started automatically. The configuration file is located in /etc/fail2ban.conf.

$ sudo urpmi sshutout

Sshutout
Sshutout is Bill DuPree's system daemon that is intended to be run from the server startup script. It periodically monitors log files looking for multiple failed login attempts via the Secure Shell daemon (sshd, or optionally, sshd2). The daemon is meant to address what are known as "dictionary attacks" which are scripted, brute-force attacks that use lists of user names and passwords to attempt unauthorized intrusions. You can use chkconfig to start it.

$ sudo chkconfig --level 5 sshutout on

The sshutout GitHub page has some pretty good - but brief - documentation of its use. The complete documentation is found in /usr/share/doc/sshutout/sshutout.html after you have installed the application. The configuration file is found at /etc/sshutout.conf.

The daemon reads /var/log/messages to see what intruders might be afoot, so you must also install rsyslog or syslog-ng if your system uses sysctl to run system services.

RESOURCES

fail2ban Wiki

Using fail2ban to Block Brute Force Attacks

fail2ban README

sshutout at GitHub

Comments

DOS4GW.EXE Version 2.01a and Alternative DOS Extenders

DOS4GW.EXE The Tenberry DOS extender DOS4GW.EXE was used by many early DOS games. I still enjoy playing many of these games and DOS4GW.EXE is usable with DOSBox , so they can be played on Linux. However, the version of DOS4GW.EXE that was included with the game was whatever was current at the time. The most recent version that includes many bugfixes that possibly affected the games when used with DOSBox have been fixed in the latest version, 2.01a. It's not free at US$49, but you can downloaded it here . Simply substitute it for whatever version of DOS4GW.EXE your game provided and enjoy the bug-fixed goodness. Tenberry also makes a "high-performance" "pro" version of DOS4GW.EXE, but it costs $300. I think that they could sell quite a few of these to hobby users (since, you know, DOS is dead) for US$5. Open Souce to the Rescue There are better performing, free and Open Source alternatives available and worth a look. DPMI Explained Let's unders...

Unpack those .EXE game files from GOG.com (Plus other un-packers)

I just came upon innoextract today. I have many of the wonderful games from GOG.com, some of which have native Linux Clients. Before now, I've had to use PlayOnLinux or Crossover to install these for use with WINE, then add the Linux client. InnoSetup as a way to create an installer to install the games on Windows. Daniel Scharrer has created innoextract to allow the unpacking of those archives on a non-Windows platform. The website provides information on using innoextract , but this information from the page is very useful: GOG.com Installers GOG.com installers with a 2.x.x version number on the download page or in the filename use InnoSetup 5.5.0 and cannot be extracted by innoextract 1.2 and older. Older installers use InnoSetup 5.2.3 and usually have no version in the filename. Some GOG.com multi-part installers with version 2.1.x or higher use RAR archives (renamed to .bin) to store the game data. These files are not part of the InnoSetup installer and require...

Medal of Honor: Allied Assault on Modern Linux

Medal of Honor: Allied Assault contains the original MOH and the two expansion packs, Spearhead and Breakthrough. MOH was first released in 2002. There is a Linux installer , released by Iculus, for the game, but it is for the original version and is a beta release. The libraries it needs are not available in a modern Linux. There is a standalone Linux binary available here . To use it, install the game on a Windows computer, patch it up to the latest level and then copy the installed game to a Linux computer. Place this downloaded archive in the root of the MOH directory and launch the game with ./mohaa_lnx . An attempt to use Crossover 16 to install the game failed as it was not possible to switch to the second DVD disc. There is a possible solution to this by creating a single DVD installation disk for MOH:AA. This process is described here . Reminder: DVD5 = 4.70 GB DVD9 = 7.95 GB Better yet would be to create a single DVD that would encompass the original MOH...

MaximumHoyt

Search This Blog