Another long batch of denial of service attacks on the site gives room for thought

I will show you howto install PSAD on Ubuntu 8.04 LTS server to block DDOS attacks (distributed denial of service) and port scan.

I don't know if you've noticed or not, but Linuxtracker has been up and down more than your favorite roller coaster over the past week or so. The unsteadiness of the site is due to a number of DDOS attacks being sent against the server

If anything good came out of the deluge of DDoS attacks, it is increased awareness of Free software benefits

Having a great defense involves proper detection and recognition of an attack. In our security world we have great IDS tools to properly recognize when we are being attacked as well as firewalls to prevent such attacks from happening. However, certain attacks are not blindly thrown at you - a good attacker knows that a certain amount of reconnaissance and knowledge about your defenses greatly increases the chances of a successful attack. How would you know if someone is scanning your defenses? Is there any way to properly respond to such scans? You bet there is...

Am I the only one out there who thinks this is an admission that Boycott Novell did it to themselves to get attention? Several blogs out there have already started talking about it so it seems to have worked.

Brutelock is an open source program that actively monitors various system logs and immediately blocks malicious IPs trying to attack your server. Brutelock not only protects against ssh attacks but also other common systems such as ftp, pop and imap.

Recently, I've been working on an application (bash based) that could gather some information that I need from a host (network interfaces configuration, arp neighborgs, routing policy, pinging some other hosts, etc).

pam_abl provides auto blacklisting of hosts and users responsible for repeated failed authentication attempts. Generally configured so that blacklisted users still see normal login prompts but are guaranteed to fail to authenticate.