CentOS - Mar 2006 - OT: New article: Let''s block cracker using denyhosts

Dear all,
I have written an article how to block cracker using denyhosts.
This is the excerpts:
Internet is a cruel world. Server owner that is always connected to the 
internet knows this. Crackers are always trying to hack into our server day 
and night, 24 hours, 365 days non-stop. How do we secure our server? There 
are many ways to do it, one of them is using denyhosts. With it, we can block 
those crackers after certain amount of failed login attempts.

The article can be found at:
http://linux2.arinet.org/index.php?option=com_content&task=view&id=132&Itemid=2

Knowledge belongs to everyone,
-- 
Fajar Priyanto | Reg''d Linux User #327841 | Linux tutorial 
http://linux2.arinet.org
21:26:21 up 12:02, 2.6.15-1.1830_FC4 GNU/Linux 
Let''s use OpenOffice. http://www.openoffice.org

Fajar Priyanto wrote:
> Dear all,
> I have written an article how to block cracker using denyhosts.
> This is the excerpts:
> Internet is a cruel world. Server owner that is always connected to the 
> internet knows this. Crackers are always trying to hack into our server day
> and night, 24 hours, 365 days non-stop. How do we secure our server? There 
> are many ways to do it, one of them is using denyhosts. With it, we can
block
> those crackers after certain amount of failed login attempts.
>
> The article can be found at:
>
http://linux2.arinet.org/index.php?option=com_content&task=view&id=132&Itemid=2
>
> Knowledge belongs to everyone,
>   
You might want to add a few lines describing how to add the appropriate 
yum repository so the user doesn''t see:

[root@somehost ]# yum install denyhosts
Gathering header information file(s) from server(s)
Server: CentOS-3 - Addons
Server: CentOS-3 - Base
Server: CentOS-3 - Extras
Server: CentOS-3 - Updates
Finding updated packages
Downloading needed headers
Cannot find a package matching denyhosts
No actions to take
#


8-)

Cheers,

On Thursday 30 March 2006 10:59 pm, Chris Mauritz wrote:
> Fajar Priyanto wrote:
> You might want to add a few lines describing how to add the appropriate
> yum repository so the user doesn''t see:
>
> [root@somehost ]# yum install denyhosts
> Gathering header information file(s) from server(s)
> Server: CentOS-3 - Addons
> Server: CentOS-3 - Base
> Server: CentOS-3 - Extras
> Server: CentOS-3 - Updates
> Finding updated packages
> Downloading needed headers
> Cannot find a package matching denyhosts
> No actions to take
You''re right, I forget to tell about the rpmforge repo. I add it in the
comment. Thanks.
-- 
Fajar Priyanto | Reg''d Linux User #327841 | Linux tutorial 
http://linux2.arinet.org
23:51:42 up 14:28, 2.6.15-1.1830_FC4 GNU/Linux 
Let''s use OpenOffice. http://www.openoffice.org

On Thu, 2006-03-30 at 23:51 +0700, Fajar Priyanto wrote:
> On Thursday 30 March 2006 10:59 pm, Chris Mauritz wrote:
> > Fajar Priyanto wrote:
> > You might want to add a few lines describing how to add the
appropriate
> > yum repository so the user doesn''t see:
> >
> > [root@somehost ]# yum install denyhosts
> > Gathering header information file(s) from server(s)
> > Server: CentOS-3 - Addons
> > Server: CentOS-3 - Base
> > Server: CentOS-3 - Extras
> > Server: CentOS-3 - Updates
> > Finding updated packages
> > Downloading needed headers
> > Cannot find a package matching denyhosts
> > No actions to take
> 
> You''re right, I forget to tell about the rpmforge repo. I add it
in the
> comment. Thanks.
----
the thread on the fedora-list has pointed out that the denyhosts rpm
packaging by rpmforge is deficient when compared to the packaging done
in fedora extras which correlates to all the extra steps necessary in
your write up.

you might want to...

1 - provide a suggestion to rpmforge of the post-install scripts used in
the spec file of the fedora-extras packaging so rpmforge does the same

2 - provide a suggestion to rpmforge that they remove the fedora-core 4
& 5 packages since fedora-extras is packaging them already and there is
a conflict

Craig

On Friday 31 March 2006 12:12 am, Craig White wrote:
> the thread on the fedora-list has pointed out that the denyhosts rpm
> packaging by rpmforge is deficient when compared to the packaging done
> in fedora extras which correlates to all the extra steps necessary in
> your write up.
>
> you might want to...
>
> 1 - provide a suggestion to rpmforge of the post-install scripts used in
> the spec file of the fedora-extras packaging so rpmforge does the same
>
> 2 - provide a suggestion to rpmforge that they remove the fedora-core 4
> & 5 packages since fedora-extras is packaging them already and there is
> a conflict
I''m sure Dag is monitoring this list. By the way, is it ok to use FC
package
in Centos? How far is the compatibility? Or is it that we shouldn''t use
it at
all for the sake of security and stability?
-- 
Fajar Priyanto | Reg''d Linux User #327841 | Linux tutorial 
http://linux2.arinet.org
05:10:56 up 19:47, 2.6.15-1.1830_FC4 GNU/Linux 
Let''s use OpenOffice. http://www.openoffice.org

On Fri, 2006-03-31 at 05:12 +0700, Fajar Priyanto wrote:
> On Friday 31 March 2006 12:12 am, Craig White wrote:
> > the thread on the fedora-list has pointed out that the denyhosts rpm
> > packaging by rpmforge is deficient when compared to the packaging done
> > in fedora extras which correlates to all the extra steps necessary in
> > your write up.
> >
> > you might want to...
> >
> > 1 - provide a suggestion to rpmforge of the post-install scripts used
in
> > the spec file of the fedora-extras packaging so rpmforge does the same
> >
> > 2 - provide a suggestion to rpmforge that they remove the fedora-core
4
> > & 5 packages since fedora-extras is packaging them already and
there is
> > a conflict
> 
> I''m sure Dag is monitoring this list. By the way, is it ok to use
FC package
> in Centos? How far is the compatibility? Or is it that we
shouldn''t use it at
> all for the sake of security and stability?
----
you got me there. I know that dag''s package is a noarch package and it
is AFAICT just python scripts so I don''t know why the fedora package is
labeled arch specific. Probably should ask Tibbits on that.

Craig