Compiling source code produces a binary. During compilation, you can provide flags to the compiler to enable or disable certain properties on the binary. Some of these properties are relevant to security. Checksec is a nifty little tool (and shell script) that, among other functions, identifies the security properties that were built into a binary … Continue reading Identify security properties on Linux using checksec
A DMZ, or demilitarized zone, is used to help improve the security of an organization’s network by segregating devices, such as computers and servers, on the opposite sides of a firewall. And setting up a DMZ in your home router designates a device as a DMZ host and will forward all the ports to that … Continue reading What is a DMZ?
Today we will discuss in detail the Linux iptables firewall and how to secure your server traffic using that awesome firewall. Table of Contents– Iptables on CentOS 7 How Linux firewall works Firewall types iptables firewall tables Table chains Chain policy Adding iptables rules iptables rules order List iptables rules Deleting Rules Replacing Rules Listing Specific Table … Continue reading Linux iptables Firewall
This is useful for putting rules on the input chain. Usually, you will have a DROP rule at the end of the chain, so if you want to add a new rule, it should go before DROP. To start, figure out which line should be used for the new rule. iptables -L -n –line-numbers You … Continue reading iptables insert rule at a specific position (prepend)
Quick post today showing some different ways to block visitors via their IP address. This can be useful for a variety of reasons, including stopping some stupid script kiddie from harassing your site or preventing some creepy stalker loser from lurking around your forums or even silencing the endless supply of angry trolls that never seem to … Continue reading How to Block IP Address with .htaccess
PING – ping is a computer network administration software utility used to test the reachability of a host on an Internet Protocol network. It is available for virtually all operating systems that have networking capability, including most embedded network administration software. Blocking PING on the server is helpful sometimes, if the server continues to face any type of DDoS … Continue reading Managing PING through iptables