Security – Page 4 – shell{&}co

Fail2ban fakegooglebot jail bug

When I have checked my fail2ban server logs (by default the fail2ban log file is /var/log/fail2ban.log ), I have found the following error: fail2ban.action [10241]: ERROR /etc/fail2ban/filter.d/ignorecommands/apache-fakegooglebot 66.249.78.164 — returned 1 fail2ban.filter [10241]: INFO [apache-fakegooglebot] Found 66.249.78.164 fail2ban.action [10241]: ERROR

Digitally sign your email on the MTA side

Why sign your email directly on the MTA (here we will talk about Postfix MTA) ? I don’t find a simple webmail client for my email server that include a S/MIME and/or PGP functionality to sign/encrypt outgoing messages. So I

Sign and encrypt your emails

I have finally found a good email application running on Android that have the following features: support Gmail, Exchange and Postfix/Dovecot email account support S/MIME and PGP signing and encryption This application is called R2Mail2 The price is quite low:

Configure proFTPd with TLS and IP address restriction

If you want to secure your proFTPD server to use TLS, follow these steps : Edit the file proftpd.conf vi /etc/proftpd/proftpd.conf If don’t need IPv6, disable it : UseIPv6 off Force listening on one specific IP address and a specific

Secure your WordPress updates

I have found an interesting article on how to use ssh to update your WordPress blog instead of the default method (FTP/FTPS). The steps are the following : create a new user account adduser wp-user set the security rights for

What is a Cipher suite

If you need to improve the security of your website for example, one of the step will be to turn on TLS on it. If you want to go further, one another step is to analyze the SSL/TLS on your

Active Directory security interesting links

Active Directory security interesting links This is 3 very interesting links/articles about Active Directory and authentication : CredCrack : this is a python script that uses the powershell script Invoke-Mimikatz.ps1. CredCrack is a fast and stealthy credential harvester. It exfiltrates