BFD is a nice shell script developed by R-fx networks (http://www.rfxnetworks.com/bfd.php)
for parsing applicable logs and checking for authentication failures.
BFD is very straight-forward in its installation, configuration and
usage.This guide will show you how to install and configure BFD to
protect your system from brute force hack attempts.
This guide will show you how to install and configure BFD to
protect your system from brute force hack attempts.Login to your server
through SSH and su to the root user.
1. cd /root/downloads or another temporary folder where you store your files.
2. wget http://www.rfxnetworks.com/downloads/bfd-current.tar.gz
3. tar -xvzf bfd-current.tar.gz
4. cd bfd-0.7
5. Run the install file: ./install.sh
You will receive a message saying it has been installed
.: BFD installed Install path: /usr/local/bfd Config path: /usr/local/bfd/conf.bfd Executable path: /usr/local/sbin/bfd
6. Lets edit the configuration file: pico /usr/local/bfd/conf.bfd
7. Enable brute force hack attempt alerts: Find: ALERT_USR="0" CHANGE TO: ALERT_USR="1"
Find: EMAIL_USR="root" CHANGE TO: EMAIL_USR="your@yourdomain.com"
Save the changes: Ctrl+X then Y
8. Prevent locking yourself out! vi /usr/local/bfd/ignore.hosts and add your own trusted IPs Eg: 192.168.1.1
Save the changes: Ctrl+X then Y
9. Run the program,
/usr/local/sbin/bfd -s
|
Add to Favourites
Print this Article
|