Архивы Security - Page 5 of 9

ClamAV script for automatic scanning and email notifications

I will give an example of a script for scanning and email notifications when infected files are detected.

Installing FastNetMon

FastNetMon – DDoS attacks detector, allows you to detect attacks and block them, for example using the BGP Flow spec, displays information in the form of graphs.

“Lock the self-replacement of SIM” at Kyivstar

Usually, simple SIM cards of the Kyivstar mobile operator, bought in some kind of stall or store, can be replaced independently with a new SIM card, for example, you can buy another SIM card there and call the operator, say that the old card is lost, report the last few dialed and accepted numbers, then the operator will block the old SIM card and activate a new one but with the same number that was on the old one.

How to remove an IP address from email blacklists

Once I had to remove from the blacklists IP addresses of different dedicated servers located in data centers, since some mail services did not receive emails from them, due to the fact that the previous tenant did not use the IP address honestly or had viruses, spammed, and the current one got locks.

Creating a bootable flash drive with Kali Linux

I will give an example of creating a bootable flash drive with Kali Linux.
Kali Linux is a security testing tool.

Suppression of DHCP servers (dhcdrop)

dhcdrop is a utility for suppressing unnecessary DHCP servers and stress testing.

Nextcloud two-factor authentication

I will give an example of setting up two-factor authentication in Nextcloud using Google Authenticator.

How to configure IPTables

IPTables is a command line utility that is the standard interface for managing the firewall.

How to detect DDOS attacks

I will give examples of viewing the number of active compounds:

The script against DDOS attacks

I will give an example of a simple script against DDOS attacks for NAT servers.
The script is executed when the total number of “conntrack” connections is more than 500000, it saves to the text file the IP address which has the most “conntrack” connections, who has more than 10,000 – adds to the ipset list.