Prerequisite is a fresh remote server with Debian 9 Stretch installed and booted From remote terminal Block all traffic iptable -F iptables -P INPUT DROP iptables -P OUTPUT DROP iptables -P FORWARD DROP Create a User sudo useradd -d /home/username -m username Set the User’s Password sudo passwd username Add the User to the Admin Group sudo adduser username adm...
http://www.linuxstall.com/block-country-iptables/ http://www.ipdeny.com/ipblocks/ http://www.ipdeny.com/ipblocks/data/countries/ #!/bin/bash # country codes ISO="cn it kr br ru tw af sa iq sy tr ua in jp id at ro pl bg vn hk ve th mx co ar ir cz ph eg pk" # set path IPT=/sbin/iptables WGET=/usr/bin/wget EGREP=/bin/egrep $IPT-save -c > /home/iptables/iptables_bak_$(/bin/date +\%Y\%m\%d\%H\%M\%S).txt SPAMLIST="countrydrop" ZONEROOT="/root/iptables" DLROOT="http://www.ipdeny.com/ipblocks/data/countries" cleanOldRules(){ $IPT -F $IPT -X $IPT -t nat...
When it comes to manipulating files, you can do almost anything with GREP SED AWK VI and FIND (and I’m a novice). My notes (taken from far more capable individuals online than I. Thank you all for the education.) File manipulation using AWK, GREP, SED, FIND, VI AWK AWK to extract IPs from logs Lists of IPs from log file...
Harden WordPress chown [username]:www-data find /var/www/html/DOMAIN -type d -exec chmod 755 {} \; find /var/www/html/DOMAIN -type f -exec chmod 644 {} \; chmod 440 /var/www/html/DOMAIN/*.php chmod 450 -R /var/www/html/DOMAIN/wp-admin chmod 450 -R /var/www/html/DOMAIN/wp-includes chmod 440 /var/www/html/DOMAIN/.htaccess chmod 766 /var/www/html/DOMAIN/sitemap.* chmod 770 -R /var/www/html/DOMAIN/wp-content/uploads chmod 770 -R /var/www/html/DOMAIN/wp-content/upgrade chmod 750 -R /var/www/html/DOMAIN/wp-content/plugins (You could put all that in a script for...
Earlier I posted how to use a text file created by a script to similarly manage the rogue IPs that Fail2ban bans. The problem with using scripts and crontab is that it is not reporting in real-time. The method here works in real-time because Fail2ban reports directly to the MySQL on the control server. On each remote you’ll want to...