Hack The Sec-Leading Resource Of Linux Tutorial: fail2ban

How to Secure a CentOS Server SSH + Fail2ban + DDOS Deflate

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #990000; font-size: large;"><u><b>Secure a CentOS Server SSH + Fail2ban + DDOS Deflate</b></u></span><br />
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Secure Shell (SSH) is a UNIX-based command interface and protocol for securely getting access to a remote computer. By default SSH run on port 22. The ideal solution is to change this default value to other port number from 1 to 65535.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjC2UG7hlDw7h6NEQQGMw8cqPEK5fD0hMP9t4uuwh_H3SQD1Hm-N_oUu0QJlFUL5P0IVx0vT-dfNx5mUNDIv_STffytGS1RHx-D35jGzi0s-EurvbZMlIJorVsPQj5HUGyeA_E_1Zjn1pFX/s1600/Blog1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjC2UG7hlDw7h6NEQQGMw8cqPEK5fD0hMP9t4uuwh_H3SQD1Hm-N_oUu0QJlFUL5P0IVx0vT-dfNx5mUNDIv_STffytGS1RHx-D35jGzi0s-EurvbZMlIJorVsPQj5HUGyeA_E_1Zjn1pFX/s400/Blog1.jpg" width="400" /></a></div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Strengthening SSH access</u></b></span></span><br />
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">login to your server via SSH</span></span><br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;">vi /etc/ssh/sshd_config</span></span></pre>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Uncommented line that defines the port</span></span><br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;">#Port 22

set this to a port that is not already in use

port 8070</span></span></pre>
<br />
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Allow SSH port on Iptables Firewall</span></span><br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;">vi /etc/sysconfig/iptables
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8070 -j ACCEPT
service iptables restart</span></span></pre>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;">Apply this setting</span></span><br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;">/etc/init.d/sshd restart</span></span></pre>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;">SSH will now be listening on newly set port. - 8070</span></span><br />
<div style="text-align: center;">
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><b><u>Prevent bruteforce using Fail2ban and DDOS Deflate</u></b></span></span></div>
<div style="text-align: left;">
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><a href="http://www.fail2ban.org/wiki/index.php/Main_Page">Fail2ban </a>fails to protect against a distributed brute force attack. this is used to block selected IP addresses that may belong to hosts that are trying to breach the system's security.</span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><b><u>Download and Install Fail2ban </u></b></span></span><br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;">rpm -ivh http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-7.noarch.rpm
yum install fail2ban
vi /etc/fail2ban/jail.conf</span></span></pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><span style="color: #333333; font-family: Menlo, Monaco, Consolas, Courier New, monospace; font-size: large;"><span style="line-height: 25.7143px;">ignoreip = 127.0.0.1
bantime  = 240
findtime  = 240
maxretry = 10</span></span></pre>
<span style="background-color: white; color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">You can change as your need.</span><br />
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><b><u>Start Fail2ban service</u></b></span></span><br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;">service fail2ban start

/etc/init.d/fail2ban start</span></span></pre>
<div style="text-align: center;">
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><b><u> DDOS Deflate</u></b></span></span></div>
<span style="background-color: white;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><a href="http://deflate.medialayer.com/" style="font-size: 15px; line-height: 26px;">DoS Deflate</a><span style="font-size: 15px; line-height: 26px;"> is a lightweight bash shell script designed to assist in the process of blocking a denial of service attack. It utilizes the command below to create a list of IP addresses connected to the server, along with their total number of connections. It is one of the simplest and easiest to install solutions at the software level.</span><br /><span style="font-size: 15px; line-height: 26px;"><b>How To Install (D)DoS Deflate :-</b></span></span></span><br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;">cd /tmp
wget http://www.inetbase.com/scripts/ddos/install.sh
chmod 0700 install.sh
./install.sh</span></span></pre>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><b>How To UnInstall (D)DoS Deflate :-</b></span></span><br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;">wget http://www.inetbase.com/scripts/ddos/uninstall.ddos
chmod 0700 uninstall.ddos
./uninstall.ddos</span></span></pre>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;">How To Edit Configuration File:-<br />you can set your email for email notification and many more option</span></span><br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;">vi /usr/local/ddos/ddos.conf</span></span></pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><span style="color: #333333; font-family: Menlo, Monaco, Consolas, Courier New, monospace;"><span style="line-height: 25.7143px;">PROGDIR="/usr/local/ddos"
PROG="/usr/local/ddos/ddos.sh"
IGNORE_IP_LIST="/usr/local/ddos/ignore.ip.list"
CRON="/etc/cron.d/ddos.cron"
APF="/etc/apf/apf"
IPT="/sbin/iptables"

##### frequency in minutes for running the script
##### Caution: Every time this setting is changed, run the script with --cron
#####          option so that the new frequency takes effect
FREQ=1

##### How many connections define a bad IP? Indicate that below.
NO_OF_CONNECTIONS=5

##### APF_BAN=1 (Make sure your APF version is atleast 0.96)
##### APF_BAN=0 (Uses iptables for banning ips instead of APF)
APF_BAN=1

##### KILL=0 (Bad IPs are'nt banned, good for interactive execution of script)
##### KILL=1 (Recommended setting)
KILL=1

##### An email is sent to the following address when an IP is banned.
##### Blank would suppress sending of mails
EMAIL_TO="info@hackthesec.co.in"

##### Number of seconds the banned ip should remain in blacklist.
BAN_PERIOD=600</span></span><span style="color: #333333; font-size: 12px; line-height: 19.2px;">
</span></pre>
<div>
<br /></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><b>How To Check The Number Of Connected Ips:-</b></span></span><br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;">sh /usr/local/ddos/ddos.sh</span></span></pre>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><b>How To Restart DDos Deflate:-</b></span></span><br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;">sh /usr/local/ddos/ddos.sh -c</span></span></pre>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: medium;"><span style="line-height: 15.6px;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></span></pre>
</div>

How to Secure a CentOS Server SSH + Fail2ban + DDOS Deflate

Secure a CentOS Server SSH + Fail2ban + DDOS Deflate Secure Shell (SSH) is a UNIX-based command interface and protocol for securely gettin...

How To Install FreePBX on CentOS

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" itemprop="headline" style="background-color: #fdfdfd; box-sizing: border-box; font-family: proxima-nova, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 39px; line-height: 1.1; margin: 21px 0px 0px;">
<u><span style="color: red;">Install FreePBX on CentOS</span></u></h1>
<div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">PBX (stands for private branch exchange) is a private telephone network used that can be very easily connected to the public landline and mobile networks. The PBX network also provides audio, video and instant messaging communication through the TCP/IP protocol stack for its internal network and interconnects its internal network with the Public Switched Telephone Network (PSTN) for telephony communication.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggyfE0RGe3F6bNgKJwgmfEIGAcZp-aiPwwHnE7ozF_zlWvKp6oKjpXoSWvr5RXrWcAJ0XpN_TmttG36GOIdt3cSBN8CNZCjuQBl6Xmstji8pMAmlkpIxsB-Pgel9vbFNWYbrxi08fkUEOx/s1600/asterisk_centos_freepbx_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggyfE0RGe3F6bNgKJwgmfEIGAcZp-aiPwwHnE7ozF_zlWvKp6oKjpXoSWvr5RXrWcAJ0XpN_TmttG36GOIdt3cSBN8CNZCjuQBl6Xmstji8pMAmlkpIxsB-Pgel9vbFNWYbrxi08fkUEOx/s1600/asterisk_centos_freepbx_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;"><br /></span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">A lot of successful businesses are aiming to have their own telephony system that will allow them to have many different features, lower their costs using VoIP, especially on international calls, but inside that company as well. Some of them are choosing hosted solution, some are having their own In-House solution. In this tutorial we are installing FreePBX & Asterisk VoIP on a base <a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS</a> 6.4 installation.</span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">Asterisk is an open source software implementation of a telephone private branch exchange (PBX); it was created in 1999. Like any PBX, it allows attached telephones to make calls to one another, and to connect to other telephone services, such as the public switched telephone network (PSTN) and Voice over Internet Protocol (VoIP) services. Its name comes from the asterisk symbol, *. Asterisk includes many features like Voice mail, conference calling, Interactive voice response, automatic call distribution, Fax to email services etc.</span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">In order to control Asterisk, we will use FreePBX. It is open source graphical user interface that makes asterisk management very easy. It is usually included in the asterisk distribution, but it can be installed manually if needed. FreePBX distribution is unified server distribution that includes all of the software packages and dependencies required for Asterisk VoIP server, such as:</span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;">
</div>
<ul style="text-align: left;">
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/Apache" target="_blank">Apache Web Server</a></span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Cyrus SASL (Simple Authentication Security Layer)</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Dnsmasq</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/fail2ban" target="_blank">Fail2ban</a></span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/Iptables" target="_blank">iptables</a></span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Mailx</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/Mysql" target="_blank">MySQL </a>Server</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Network Time Protocol</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/VPN" target="_blank">OpenVPN </a>Server</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/postfix" target="_blank">Postfix </a>MTA</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Prosody XMPP Server</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">TFTP Server</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Very Secure FTP Daemon (<a href="http://www.hackthesec.co.in/search/label/vsftp" target="_blank">vsftpd</a>)</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Vim text editor</span></li>
</ul>
<br />
<div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;">
</div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">Before we start with the installation, we must make sure that the server has decent and stable internet connection and it should be in a geographical location near the place where the majority of our calls will come from. We also need to determine the size of our server. That will depends mostly on the number of the concurrent calls that we anticipate to have. It is not that bad even if we choose wrong, since we can resize our server at any time later, but some best practices showed that we should follow this calculations.</span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;">
</div>
<ul style="text-align: left;">
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 512 MB RAM can support approximately 5-15 concurrent calls</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 1 GB can support approximately 15-25 concurrent calls</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 2 GB can support approximately 25-50 concurrent calls</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 4 GB can support approximately 50-100 concurrent calls</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 8 GB can support approximately 100-175 concurrent calls</span></li>
<li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 16 GB can support approximately 175+ concurrent calls</span></li>
</ul>
<br />
<div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;">
</div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">Next, we must make sure that our fully qualified domain name is properly set in our hosts file and make sure that the server time setting match the appropriate time zone that server belongs to. The last step before we actually start with the installation is to update our currently installed packages from the standard <a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS </a>repositories:</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># yum update
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">Now, we are ready to start the deployment. We will use installation script that we need to download. The script will download some file during the installation, so we will use <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;">/tmp</code> folder during the installations.</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># cd /tmp
# wget http://upgrades.freepbxdistro.org/blank-centos-installer/5.211.65-track/5.211.65-1-Installer-Script.sh
# /tmp/4.211.64-1-Installer-Script.sh
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">Once it is finished, we will have fully functional IP-PBX server, based on the FreePBX Distribution. Now, we need to test if our GUI works. To do that, we will open our browser and point to the fully qualified name or the IP of our newly installed PBX, we will be presented with FreePBX administrator-account setup screen. We should setup our admin account using the GUI. That will be the information that we will use later for managing the server through the GUI.</span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">If we want to upgrade out FreePBX system later, we can search for available upgrades, download the upgrade script and execute it, similar to the installation process. First, we need to determine which our current version is:</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># cat /etc/schmooze/pbx-version
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">Then, we can check the change list for the new version that is available and make decision whether we would like to upgrade or not. The upgrade process work same as the installation. The upgrade script might ask us for some additional information or confirmation. Once the upgrade is done we can check and confirm that our system is upgraded but executing:</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># cat /etc/schmooze/pbx-version
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">If there is more than one upgrade script available, we should execute every upgrade script, one by one, is sequential order and save every script in the same folder. This Asterisk and OpenPBX server are part of a very wide field and there are a lot of additional things to be considered and explored. However, this tutorial underlines the very basic information and steps that are required in order to get our own PBX system up and running.</span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;"><a href="http://hackthesec.co.in/" target="_blank">hackthesec.co.in</a><br /><a href="http://hackthesec.co.in/" target="_blank">hackthesec</a></span></div>
</div>
</div>

How To Install FreePBX on CentOS

Install FreePBX on CentOS PBX (stands for private branch exchange) is a private telephone network used that can be very easily connecte...

How to protect your SSH server with Fail2Ban on Ubuntu

enabled  = true
port     = ssh
filter   = sshd
logpath  = /var/log/auth.log
maxretry = 4</span></code><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">This section makes <a href="http://www.hackthesec.co.in/search/label/SSH_Security" target="_blank">SSH monitoring active</a>, it listens on the SSH port for the ssh dameon, using the log file location <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;"><b>/var/log/auth.log</b></code> and bans the IP address of the user that will have 4 failed login attempts.</span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">After all settings are made, we need to restart fail2ban and it will start monitoring the log files according to our settings, you can also check which rules are currently applied with the following <b><code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;">iptables</code> </b>command.</span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;">Fail2ban is one of the most widely used applications when it comes to server security. It is very simple and effective, so you shouldn’t think twice in order to decide to install it on your server. It is a must have application.</span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: Georgia, Times New Roman, serif;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></div>
</div>
</div>

How to protect your SSH server with Fail2Ban on Ubuntu

Protect your SSH server with Fail2Ban on Ubuntu The most suitable application for this purpose is Fail2ban . It is an intrusion prevent...

How To Protect SSH/FTP using Fail2ban on CentOS/RHEL

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="background-color: white; border: 0px; color: #555555; font-family: 'Roboto Slab'; font-size: 16px; font-weight: 700; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><br />
<h2 class="title single-title title20" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #990000;">Protect SSH/FTP using Fail2ban on <span style="color: #990000;"><a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS</a>/<a href="http://www.hackthesec.co.in/search/label/RHEL" target="_blank">RHEL</a></span></span></h2>
<div>
<br /></div>
<span style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; font-weight: 700; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Fail2ban</span><span style="background-color: white; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px;"> is very useful application for you, if you are managing security of server, or you are running your own vps or physical server. Fail2ban scan log files created on system and has ability to ban ips which found malicious bassed on configuration rules. We can use it for monitoring various system services logs like Apache, SSH and blog the ips which are trying to breach the system’s security.</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvYwtsMX3Bq2_cXxy4niiEgIqf37zBT4OxmPthki2VDo-2_0ZGme6o8Dh9MCx8WbtvpA4_X4oExHdUqhEhJyd4273kHqF-JYwU3ulTphv8qzTenWsVnqudq6s8eqXAhMzZesm-wnqwqIUw/s1600/fail2ban-on-centos_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvYwtsMX3Bq2_cXxy4niiEgIqf37zBT4OxmPthki2VDo-2_0ZGme6o8Dh9MCx8WbtvpA4_X4oExHdUqhEhJyd4273kHqF-JYwU3ulTphv8qzTenWsVnqudq6s8eqXAhMzZesm-wnqwqIUw/s640/fail2ban-on-centos_www.hackthesec.co.in.jpg" width="640" /></a></div>
<span style="background-color: white; color: #0b5394; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px;"><br /></span>
<span style="background-color: white; color: #0b5394; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px;">Step 1: Install EPEL RPM Repository</span><br />
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-size: large;"><span style="line-height: 28px;">Fail2ban is available in <a href="http://www.hackthesec.co.in/2016/01/how-to-install-epel-repo-on-centos-and.html" target="_blank">EPEL</a> repository, So make sure you have installed <a href="http://www.hackthesec.co.in/2016/01/how-to-install-epel-repo-on-centos-and.html" target="_blank">EPEL</a> repository in your system or you can use </span><a href="http://www.hackthesec.co.in/2016/01/how-to-install-epel-repo-on-centos-and.html" style="line-height: 28px; outline: none; text-decoration: none;" target="_blank">these instructions</a><span style="line-height: 28px;"> to install it.</span></span></div>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="line-height: 28px;"><br /></span><span style="font-size: 24px; font-weight: bolder; line-height: 34px;"><span style="color: #0b5394;">Step 2: Install Fail2ban Package</span></span></div>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
After installing required repository use yum package manager to install Fail2ban rpm package using following command.</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># yum install fail2ban<span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 3: Setup Fail2ban Default Configuration</span></h2>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
Fail2ban provides its own security configuration file <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">/etc/fail2ban/jail.conf</span>, but we need to create a copy of this file as <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">jail.local</span>.</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
Now we need to make necessory changes in jail.local file to create ban rules. Edit this file in your favorite editor and make changes in <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">[DEFAULT]</span> section.</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># "ignoreip" can be an IP address, a CIDR mask or a DNS host. Fail2ban will use as always allowed, 
# so add your system ip to protect your ip from banned.
<orange style="color: orange;">ignoreip = 127.0.0.1/8 192.168.1.0/24 11.22.33.44</orange>

# "bantime" is the total number of seconds that a host is banned (3600sec = 1 Hour ).
<orange style="color: orange;">bantime  = 3600</orange>

# A host is banned if it has generated "maxretry" during the last "findtime" seconds. as per below 
# settings, 2 minutes
<orange style="color: orange;">findtime  = 120</orange>

# "maxretry" is the number of failures before a host get banned.
<orange style="color: orange;">maxretry = 3 </orange><span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 4: Protect SSH/SFTP</span></h2>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
After completing default configuration, go down in the same file jail.local and update <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">[ssh-iptables]</span> section as below.</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">enabled  = true
filter   = sshd
action   = iptables[name=SSH, port=22, protocol=tcp]
           sendmail-whois[name=SSH, dest=root, sender=admin@hackthesec.co.in, sendername="Fail2Ban"]
logpath  = /var/log/secure
maxretry = 3<span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 5: Protect FTP (vsFTPd) Server</span></h2>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
Let’s protect your FTP (vsFTPd) server, Find the below entry of <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">[vsftpd-iptables]</span> section and make changes as below. If you are not using vsFTPd, you can skip this section.</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[vsftpd-iptables]

enabled  = true
filter   = vsftpd
action   = iptables[name=VSFTPD, port=21, protocol=tcp]
           sendmail-whois[name=VSFTPD, dest=admin@hackthesec.co.in]
logpath  = /var/log/vsftpd.log
maxretry = 5
bantime  = 1800<span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 6: Restart Fail2ban Service</span></h2>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
After making all the changes save your file and restart Fail2ban service using following command.</div>
<br />
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div class="single-post-ad" style="background-color: white; border: 0px; clear: both; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<br />
<pre style="-webkit-text-stroke-width: 0px; background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 1.3em; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: start; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"># service fail2ban restart
# chkconfig fail2ban on<span style="font-size: 0.9em;">
</span></pre>
<pre style="-webkit-text-stroke-width: 0px; background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 1.3em; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: start; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"><a href="http://www.hackthesec.co.in/" target="_blank">Hack The Security</a>
<a href="https://www.twitter.com/hackthesecurity" target="_blank">Hack The Security Twitter</a>
<a href="http://facebook.com/htsecu" target="_blank">Hack The Security Facebook</a></pre>
</div>

How To Protect SSH/FTP using Fail2ban on CentOS/RHEL

Protect SSH/FTP using Fail2ban on CentOS / RHEL Fail2ban is very useful application for you, if you are managing security of server, ...