Security

SFTP is a protocol allowing for secure file transfers over SSH. This guide describe how to setup SFTP only accounts on a SSH server.

Rootkit Hunter is, as its name describe, a rootkits detection tool. It can detect if a system has been compromised. It is a required tool for checking a system health. This guide describe how to configure rkhunter on Debian.

DFind is the vulnerability scanner generating the “w00tw00t.at.ISC.SANS.DFind” HTTP requests found in Web servers logs. This guide setup some iptables rules blocking these requests. A better method is to use fail2ban to block the sources of these requests.

This post describe a simple way to block all access to a network port on Debian, except for specified IP addresses.

PeerGuardian is a firewall for Peer to Peer software (i.e. BitTorrent) blocking bad peers.

The /tmp folder can be used to compromise the system security. A simple way to prevent this issue is to prevent the execution of scripts stored in this path. This guide describe how to do this.

ClamAV is a free software antivirus particularly suited to scan e-mails during their SMTP server processing. This howto helps you install the latest version of ClamAV on Debian.