Security

Frustrate SSH Scanners with Iptables GeoIP Blocking

Updated 2018:  Still working! xt_geoip_dl is now available and handles Geolite2 database downloading, simplifying our script. In the rare situation that we need to run a system that has SSH exposed to the world, we always install something to monitor and block SSH attempts. On the low end, we use fail2ban or sshguard, but our […]

Enable Elliptical Curve Diffie-Hellman (ECDHE) in Linux

With all the recent publicity regarding Internet spying, there has been a renewed interest in security and encryption. One oft-neglected feature of SSL is the ability to use a cipher with Diffie-Hellman key exchange that enables so-called perfect forward secrecy. The advantage of PFS is that even if your private key is compromised, recorded past […]

1 2