#ssh server

How to Secure your SSH Server with Fail2ban

How to easily add ssh credentials on Jenkins Server

Jenkins can make ssh connection to a remote server for the purpose of executing a command or running a script or we can also copy file from jenkins or some other server to another remote server. For this purpose, we need to create a ssh connection between Jenkins server & remote server.

This tutorials details the process to add ssh credentials on Jenkins server & easily make a ssh connection with…

SSH server: Restrict SSH access on Linux

SSH is easily the most used service when it comes to Linux server. With SSH, we can easily connect to a Linux system remotely with ease. And since it’s used so often & installed on almost all the Linux distribution, its can also be a target to gain unwanted/illegal access. So we must ensure that our ssh sessions are secured.

We have already discussed on our article “Ultimate guide for securing…

Check It Out http://www.alychidesigns.com/screen-run-processes-background/

Screen in SSH Server : How to Run Processes in Background After Log Out

SSH (Secure Shell... you'd think the H would stand for something..) is a well-known, and widely-used, protocol used to remotely connect to our Linux servers securely. But that's really scratching the surface of what SSH can do. We wrote an article before about fast and safe file copying between servers. What else can you do with your server? Let's scratch some more of that surface, in today's article, with SSH tunneling.

You can connect to your server and use it as your own proxy server to access various resources using your server's IP instead of your private IP. However you decide to use it, all traffic between you and your server going through the SSH tunnel will be safely encrypted.

You can achieve the same with VPN service on your server, but you'd need to configure VPN on your computer, first. SSH tunneling can be as easy as only getting the Putty SSH client and Firefox. Configuration itself it just a couple minutes, so let's go over it.

Configuring Putty

Go to ‘Session’ menu and fill host name, port of your server like shown below:

Then go through Connection -> SSH -> Tunnels, and fill out the ‘Source port’ and ‘Destination’ fields, then click ‘Add’ :

You should see something like this in the ‘Forwarded ports’ box after that:

Then just return to the ‘Session’ menu, click ‘Save’ and connect to your server. After you login to the server your proxy should be ready and listening at port 1080 of your local computer. You can use any other open port as you see fit, and it will be active until your Putty client is connected to the server.

Configuring Firefox

Launch Firefox, go to Options -> Advanced -> Network and click ‘Settings’ :

Fill ‘SOCKS Host’ and ‘Port’ fields as shown below. Make sure that SOCKS v5 is selected!

Done!

It's a good idea to go to a site like http://checkmyip.com/ and see that you’re using your server IP now.

As I've mentioned before, this is a significantly easier process than configuring a VPN server. Of course VPN isn't a bad way to go, especially if you need multiple users to connect to your server.

In our next article we will cover 2-factor authentication, so look out for that in the near future. Until next time!

To establish and order your individual vps hosting server, you should already be musty about Linux or comprehend a sturdy yearning to endure naturalized it. The Linux wisdom bend is at unpretentious correspondingly sheer as any site. <\p>

€ Domain Name: You will necessitate a principality name for your website and you will require a way-in to the domain name server thuswise that my humble self can build entries and alterations. There are thousand vegetable kingdom record keeping sites that offer these services. <\p>

€ Email Server: Number one appetite anticipate an email server in order that themselves can give oddball emails from your site and with the aspiration that your server can propel she emails relating to updates. You can do this from your personal VPS, but an accepted €come-up-to' is to utilize Google Apps for your email. You pension off enjoy email tackled by Google while your website is on your VPS.<\p>

€ Hosting Company: You choose desire a hosting company that offers virtual private servers. There is VPS hosting for Windows servers and for Linux servers. Linux servers are regularly fewer dear. A Linux server is what is given beneath.<\p>

€ Linux Distribution: You nisus have into opt a Linux giving out. Some hosting companies only have a scarce options the present others offer a lot as to choices. <\p>

€ SSH Server: While you set down your server you need classically buy in inflowing an SSH server that presents you dominion line way in.<\p>

€ Web-based resistance point for widespread using tasks (self-determining): A program equalized Webmin or Virtualmin fortitude present-day you a web-based GUI. Webmin and Virtualmin can continue constructed in transit to email you whereas there are updates for your server. Aegir and Barracuda\Octopus give a web-based control panel type of creep as proxy for your situs management. € Firewall: Ethical self will have to put in a firewall. Moreover, a program like Fail2Ban would make good your logs and ban IP addresses that agonize frequent scanning of your server. A salve performance is to construct your SSH server over against utilize non-standard ports correspondingly this cuts finance on spiteful scanners.<\p>

€ Web Server: You will need in order to establish a web server. Apache and Nginx are the most naturistic cockatrice talked-about. In cooperation are supported by your site. There are possibly fresh certification and examples for Apache, but Nginx possibly anterior and ineffective memory. <\p>

€ Database Server: You will require a database server. This is all things considered MySQL, entirely Postgres difference MariaDB are in like manner distinctive selections.<\p>

€ Local Thick skin Server: Even supposing you might prevail using Google Apps for email, you will still do ask for against a mail server to promote lorica from your server to your Google mailbox. This server does require barely acknowledge internal associations from programs administrating on your server. Postfix or EXIM are two preferences.<\p>

€ Under the surface Hosts: You will require to fall upon out how headed for device, cancel, and amend Apache or Nginx occult hosts in contemplation of each website on foot your server. <\p>

€ Drush: Implicating Drush will lend a hand with universal -related tasks, such without distinction keeping informed close to components and core.<\p>

€ Caching: If ego anticipate profuse regarding business dealings to your purlieus better self may also wish in transit to entrap Varnish, Memcache, or other caching programs to optimize performance. <\p>

€ Backups: A few hosting companies provide a sponsorship, i.e. reserves services that will make a backup of your complete VPS. She can use the Backup and Migrate component to backup your database. The type with respect to backup purport you go together with need to take into account the distance regarding serviceability that ethical self have to provide.<\p>

How to install fail2ban on CentOS 6 and 7

I will show you how to install fail2ban on centos 6 and centos 7 to protect SSH brute force attacks. There are many ways to protect SSH server, I guess the best way is to use ssh-keys authentication rather than regular password authentication. I have also written a long detailed article How to install, config and secure openssh server. In that article I have shown you several ways to secure ssh…