Preventing SSH server attacks with DenyHosts

Pre Debian lenny

cd /tmp
wget http://mesh.dl.sourceforge.net/sourceforge/denyhosts/DenyHosts-2.6.tar.gz
tar xvfz DenyHosts-2.6.tar.gz
cd DenyHosts-2.6
python setup.py install
cd /usr/share/denyhosts
cp denyhosts.cfg-dist denyhosts.cfg
vi denyhosts.cfg
	#debian
	SECURE_LOG = /var/log/auth.log
	LOCK_FILE = /var/run/denyhosts.pid
cp daemon-control-dist daemon-control
vi /usr/share/denyhosts/daemon-control
	DENYHOSTS_BIN = "/usr/bin/denyhosts.py"
	DENYHOSTS_LOCK = "/var/run/denyhosts.pid"
	DENYHOSTS_CFG = "/usr/share/denyhosts/denyhosts.cfg"
chown root daemon-control
chmod 700 daemon-control
cd /etc/init.d
ln -s /usr/share/denyhosts/daemon-control denyhosts
update-rc.d denyhosts defaults
/etc/init.d/denyhosts start
cat /etc/hosts.deny

Resources

• DenyHosts
• Automated Install of Deny Host SSH Security for Ubuntu

Komentáre