Boa noite,
Estou com umas idéias de coisas que planejo “desenvolver” para navegar de maneira mais segura. Como precisarei do SSH, acesso a portas das máquinas virtuais e coisas assim estou fazendo posts relacionados a estes assuntos já que precisarei dos mesmos para “desenvolver” tal segurança. E assim, o futuro post não ficará tão extenso.
Para você instalar o ssh-server no Ubuntu é muito simples:
$ sudo apt-get install openssh-server
Após isso você deve fazer algumas modificações para ficar mais seguro. Acesse o arquivo /etc/ssh/sshd_config
$ sudo vi /etc/ssh/sshd_config
AllowUsers USUARIO #habilita somente este usuario
AllowGroups GRUPO_DO_USUARIO # habilita somente este grupo
PasswordAuthentication yes
MaxStartups 2:100:2
Port XXX # Alguma porta aleatoria de sua vontade que não esteja em uso.
O que o MaxStartups faz? Especifica o número máximo de conexões não autenticadas ao servidor. Sua sintaxe é a seguinte inicio:porcentagem:maximo. Vamos supor, inicio = 10, porcentagem = 50, maximo = 20. Quando for atingidas 10 conexões ele irá iniciar com a porcentagem, ou seja, uma conexão terá chance de ser fechada de cara ou não, a mesma aumenta linearmente até o número máximo de conexões, e apartir dessa todas são negadas. Eu particularmente pensei um pouco e decidi adotar o inicio com 2, porcentagem com 100 e máximo como 2 então qualquer nova conexão apartir de 2 será automaticamente recusada. (Isso pode ser um problema caso existam pessoas tentando invadir seu servidor e provavelmente estarão utilizando todas as sessões). Talvez o recomendavel seja mais correto 10:30:60 porém prefiro deixar o meu mais restrito.
/etc/init.d/ssh
Você ainda pode adicionar o seguinte código ao /home/usuario/.profile:
echo Digite sua senha de segurança:
read senha
if [ $senha == “SUA_SENHA” ]
then
# CÓDIGOS QUE JÁ ESTÃO NO PROFILE!
else
exit
fi
Não se esqueça de bloquear acesso do root
Na minha máquina também desabilitei o comando “su” da seguinte maneira:
$ chmod 700 /usr/bin/su-to-root
Grato,
Matheus
Referencias:
Desabilitar Comando SU
Informação MaxStartups
Duas dicas que não são relacionadas com segurança, você pode descomentar a linha
Banner /etc/arquivo # Default /etc/issue.net
A mensagem que está dentro do /etc/arquivo irá ser exibida quando se conectar no SSH.
Para editar a mensagem que apareça assim que o usuario se loga você deve editar o /etc/motd.
I am not sure where you are getting your info, but great topic. I needs to spend some time learning more or understanding more. Thanks for great info I was looking for this information for my mission.
Whoa! This blog looks just like my old one! It’s on a entirely different subject but it has pretty much the same page layout and design. Excellent choice of colors!
Right here is the right site for anyone who hopes to understand this topic. You realize a whole lot its almost tough to argue with you (not that I actually will need to…HaHa). You certainly put a new spin on a topic which has been discussed for many years. Wonderful stuff, just excellent!
https://mostbet-zerkaloonline.buzz/gates-of-olympus-1000-demo-v-rublyah-gatesofolympus1000play/
Hi there I am so happy I found your webpage, I really found you by error, while I was looking on Askjeeve for something else, Regardless I am here now and would just like to say kudos for a tremendous post and a all round entertaining blog (I also love the theme/design), I don’t have time to browse it all at the minute but I have bookmarked it and also added your RSS feeds, so when I have time I will be back to read a great deal more, Please do keep up the superb jo.
Watch sexual porno video xxx sex adults site
https://888starz.net.co/
888Starz Colombia es una plataforma de casino online y casa de apuestas que reune mas de 9.500 juegos, abarcando maquinas tragamonedas, ruletas y mesas con croupier real y una completa cobertura de eventos deportivos que abarca desde la Liga BetPlay hasta la Champions League y esports.
Right here is the right webpage for anybody who wishes to understand this topic. You realize a whole lot its almost tough to argue with you (not that I actually would want to…HaHa). You definitely put a brand new spin on a subject that has been discussed for many years. Excellent stuff, just wonderful!
Xxx video onlyfans sex video site
I think that what you wrote made a lot of sense. However, consider this, what if you wrote a catchier post title? I mean, I don’t wish to tell you how to run your blog, however suppose you added something that grabbed a person’s attention? I mean %BLOG_TITLE% is a little plain. You ought to glance at Yahoo’s front page and watch how they create news titles to grab viewers to open the links. You might add a video or a picture or two to get people interested about everything’ve written. Just my opinion, it might bring your posts a little livelier.
Timothy Malmros Genach
Good day I am so thrilled I found your webpage, I really found you by error, while I was browsing on Askjeeve for something else, Anyhow I am here now and would just like to say cheers for a remarkable post and a all round interesting blog (I also love the theme/design), I don’t have time to read it all at the minute but I have book-marked it and also added your RSS feeds, so when I have time I will be back to read a great deal more, Please do keep up the awesome b.
https://ital-parts.com.ua/chomu-na-santa-fe-shvydko-zhovtiie-korpus.html
Casino vavada zyskuje pozytywne opinie dzięki różnorodnej ofercie obejmującej sloty, gry stołowe oraz turnieje z evolution gaming. Kasyno online oferuje bonus powitalny, darmowe spiny i bonusy oraz kody promocyjne dla nowych graczy. Obsługa klienta gaming działa sprawnie, a gracze mogą wziąć udział w promocjach dostępnych na vavada pl.
My brother suggested I might like this blog. He was entirely right. This post truly made my day. You can not imagine simply how much time I had spent for this information! Thanks!
What’s up everybody, here every person is sharing such know-how, so it’s good to read this website, and I used to visit this webpage all the time.
Xxx video onlyfans sex video site
Helpful info. Fortunate me I discovered your web site by chance, and I’m stunned why this coincidence didn’t came about in advance! I bookmarked it.
Dołączając do Casino Slottica Polska, zyskujesz dostęp do wyjątkowych promocji, w tym bonusu powitalnego 250 do 1600 zł oraz 300 darmowych spinów na najpopularniejsze gry. Niezależnie od tego, czy grasz na komputerze, tablecie, czy smartfonie, nasza platforma działa płynnie na każdym urządzeniu. Wypróbuj już dziś i dołącz do ponad 500 tysięcy aktywnych graczy z całego świata!
Dbamy o to, aby każdy gracz czuł się bezpiecznie i komfortowo. Oferujemy popularne metody płatności, takie jak Blik, Przelewy24, Skrill czy karty VISA/Mastercard, z minimalnym depozytem wynoszącym zaledwie 40 zł. Wypłaty w kasynie Slotica PL realizujemy błyskawicznie – zazwyczaj w ciągu 24 godzin. Zapewniamy także całodobowe wsparcie w języku polskim, dostępne przez czat online lub e-mail.
It’s really a great and useful piece of information. I’m happy that you just shared this helpful info with us. Please stay us up to date like this. Thank you for sharing.
Wonderful items from you, man. I’ve bear in mind your stuff previous to and you’re just extremely great. I really like what you’ve obtained here, really like what you are stating and the way in which wherein you say it. You’re making it enjoyable and you continue to take care of to stay it sensible. I can’t wait to read far more from you. This is actually a great website.
I’m not positive the place you are getting your information, however great topic. I must spend a while finding out much more or understanding more. Thank you for excellent info I was in search of this information for my mission.
I am in fact happy to read this weblog posts which includes lots of valuable facts, thanks for providing these kinds of statistics.
Hi there mates, nice article and pleasant urging commented here, I am really enjoying by these.
Superb, what a weblog it is! This blog provides useful information to us, keep it up.
Wow, marvelous blog layout! How long have you been blogging for? you made blogging look easy. The overall look of your site is fantastic, let alone the content!
https://share.google/FAzQNdsFpXrF278f4
Hello! I just wanted to ask if you ever have any problems with hackers? My last blog (wordpress) was hacked and I ended up losing months of hard work due to no backup. Do you have any solutions to stop hackers?
I like it when people get together and share ideas. Great website, keep it up!
Vavada to znane kasyno online, które działa również w Polsce. Strona przyciąga graczy szeroką ofertą gier, przejrzystymi warunkami i obsługą w PLN (zł). Bonus powitalny oraz intuicyjna obsługa sprawiają, że platforma zdobyła popularność wśród polskich użytkowników. Opierając się na naszym doświadczeniu, platforma wyróżnia się szybkim działaniem i różnorodnością treści. Vavada Polska jest chętnie wybierana w Polsce przez szeroki wybór gier i bonusów. Marka Vavada pojawiła się na scenie w 2017 roku z garścią slotów w ofercie. Od tamtej chwili przeszła długą drogę – dziś w jej katalogu znajdziesz nie tylko automaty, lecz także klasyczne gry stołowe, jackpoty i rozbudowane kasyno na żywo. Z lokalnego debiutanta Vavada stała się graczem globalnym, a w Polsce zdobyła sympatię użytkowników dzięki prostym zasadom, licencji Curaçao oraz wygodnym płatnościom w złotówkach. To konsekwentne podejście sprawia, że marka systematycznie wzmacnia swoją pozycję w świecie iGamingu.