Difference between revisions of "Template:Menu content security"
(→Firewall) |
(→Firewall) |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 46: | Line 46: | ||
!colspan="2"|Firewall | !colspan="2"|Firewall | ||
|- | |- | ||
| − | |rowspan=" | + | |rowspan="8"|Basics |
|[[Firewall principle]] | |[[Firewall principle]] | ||
|- | |- | ||
| Line 60: | Line 60: | ||
|- | |- | ||
|[[Firewall log dropped]] | |[[Firewall log dropped]] | ||
| + | |- | ||
| + | |[[Firewall Peer to Peer]] | ||
|- | |- | ||
|rowspan="2"|Advanced | |rowspan="2"|Advanced | ||
| Line 69: | Line 71: | ||
|[[Firewall installation scripts]] | |[[Firewall installation scripts]] | ||
|} | |} | ||
| + | |||
| + | |||
| + | SSH can also be used to create a '''[[VPN tunnel over SSH]]''' | ||
| + | |||
| Line 104: | Line 110: | ||
* [[VPN client]] | * [[VPN client]] | ||
| + | * [[VPN L2TP client]] | ||
==Remote desktop== | ==Remote desktop== | ||
Latest revision as of 22:07, 29 November 2017
Contents
Security
How to secure your server / workstation ?
Global security
Internet security
SSH
SSH
- SSH server setup
- SSH server using local user / password auth.
- SSH server using key auth.
- SSH server using LDAP user auth.
- SSH server using LDAP key auth.
Firewall
This section explains HOW to create, maintain and use a firewall with IpTables.
SSH can also be used to create a VPN tunnel over SSH
You can also try to setup the interactive firewall: DouaneAPP (http://douaneapp.com/)
apt-get install build-essential
apt-get install dkms
apt-get install libboost-filesystem-dev libboost-regex-dev libboost-signals-dev policykit-1 libdbus-c++-dev libdbus-1-dev liblog4cxx10-dev libssl-dev
apt-get install libboost-signals-dev libdbus-c++-dev libdbus-1-dev liblog4cxx10-dev libgtkmm-3.0-dev
apt-get install gtk+3.0 python3 python3-gi policykit-1 python3-dbus>> Official Douane website: https://github.com/Douane/Douane
SSL
SSL certificates and chain of trust
VPN
Virtual Private Network (VPN)
Remote desktop
Remote desktop
Intrusion Detection / Protection
Protection is good, but that's not enough! We need to detect attacks.
- IDS = Intrusion Detection System : tool that detect attacks.
- IPS = Intrusion Protection System : detect an intrusion attempt and react upon it.
I'm using one of the most famous IDS: "Snort" (https://www.snort.org/).
Crontab
To run some task / scripts periodically
