berkeleyprosopography / bps

Prosopographic toolkit
http://berkeleyprosopography.org/
3 stars 2 forks source link

Set up iptables to block sshd attacks #109

Closed conditionsofexistence closed 9 years ago

conditionsofexistence commented 9 years ago

From LudicrousResearcher@gmail.com on December 09, 2014 17:25:33

See the following for guidelines: https://wiki.debian.org/iptables http://www.rackaid.com/blog/how-to-block-ssh-brute-force-attacks/ http://www.rackaid.com/blog/how-to-harden-or-secure-ssh-for-improved-security/ This will be helped if we containerize the app, since we will close down many ports, and can remap the sshd port. We should think about the other iptables rules in any case.

We would need to open up the 8080 ports for tomcat, and related java ports as well. We can test this in VBox first if we have a good script.

Original issue: http://code.google.com/p/berkeley-prosopography-services/issues/detail?id=109