Bài đăng

Đang hiển thị bài đăng từ Tháng 4, 2017

Top 20 OpenSSH Server Best Security Practices

Hình ảnh
OpenSSH is the implementation of the SSH protocol. OpenSSH is recommended for remote login, making backups, remote file transfer via scp or sftp, and much more. SSH is perfect to keep confidentiality and integrity for data exchanged between two networks and systems. However, the main advantage is server authentication, through the use of public key cryptography. From time to time there are  rumors  about OpenSSH  zero day  exploit. Here are a few things you need to tweak in order to improve OpenSSH server security. Default Config Files and SSH Port /etc/ssh/sshd_config  – OpenSSH server configuration file. /etc/ssh/ssh_config  – OpenSSH client configuration file. ~/.ssh/  – Users ssh configuration directory. ~/.ssh/authorized_keys  or  ~/.ssh/authorized_keys  – Lists the public keys (RSA or DSA) that can be used to log into the user’s account /etc/nologin  – If this file exists, sshd refuses to let anyone except root log in. /etc/hosts.allow  and  /etc/hosts.deny  :

Top 20 Nginx WebServer Best Security Practices

N ginx is a lightweight, high performance web server/reverse proxy and e-mail (IMAP/POP3) proxy. It runs on UNIX, GNU/Linux, BSD variants, Mac OS X, Solaris, and Microsoft Windows. According to Netcraft, 6% of all domains on the Internet use nginx webserver. Nginx is one of a handful of servers written to address the C10K problem. Unlike traditional servers, Nginx doesn’t rely on threads to handle requests. Instead it uses a much more scalable event-driven (asynchronous) architecture. Nginx powers several high traffic web sites, such as WordPress, Hulu, Github, and SourceForge. This page collects hints how to improve the security of nginx web servers running on Linux or UNIX like operating systems. Default Config Files and Nginx Port /usr/local/nginx/conf/  – The nginx server configuration directory and /usr/local/nginx/conf/nginx.conf is main configuration file. /usr/local/nginx/html/  – The default document location. /usr/local/nginx/logs/  – The default log file locat