<div dir="ltr"><div><div><div>Hi,<br><br></div>I've already put fail2ban on there, but thanks for the 'last' command. I always wondered what that one did. <br><br></div>Regards,<br><br></div>Hazel<br></div><div class="gmail_extra"><br><div class="gmail_quote">On 7 May 2016 at 13:00, <span dir="ltr"><<a href="mailto:nottingham-request@mailman.lug.org.uk" target="_blank">nottingham-request@mailman.lug.org.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send Nottingham mailing list submissions to<br>
<a href="mailto:nottingham@mailman.lug.org.uk">nottingham@mailman.lug.org.uk</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:nottingham-request@mailman.lug.org.uk">nottingham-request@mailman.lug.org.uk</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:nottingham-owner@mailman.lug.org.uk">nottingham-owner@mailman.lug.org.uk</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Nottingham digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Silly mistakes (Hazel Windle)<br>
2. Re: Silly mistakes (Aaron Jackson)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Fri, 6 May 2016 19:05:37 +0100<br>
From: Hazel Windle <<a href="mailto:hwindle83@googlemail.com">hwindle83@googlemail.com</a>><br>
To: <a href="mailto:nottingham@mailman.lug.org.uk">nottingham@mailman.lug.org.uk</a><br>
Subject: [Nottingham] Silly mistakes<br>
Message-ID:<br>
<<a href="mailto:CAJ5MzFe1X3n9ZBpVvZR-TX4gjrjJeF-_uO6mc13fELejkycgmw@mail.gmail.com">CAJ5MzFe1X3n9ZBpVvZR-TX4gjrjJeF-_uO6mc13fELejkycgmw@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hello all,<br>
<br>
Sorry I couldn't make the social, I was a bit tired after work.<br>
Today I've been doing a firewall configuration for the main web server,<br>
which is also the only server. It had absolutely no firewall and a weak SSH<br>
password. Has anyone seen any silly mistakes like that?<br>
<br>
I think their IT guy doesn't really know all that much about Linux or IT<br>
security, or hasn't had the time to learn.<br>
<br>
Regards,<br>
<br>
Hazel Windle<br>
<br>
On 6 May 2016 at 13:00, <<a href="mailto:nottingham-request@mailman.lug.org.uk">nottingham-request@mailman.lug.org.uk</a>> wrote:<br>
<br>
> Send Nottingham mailing list submissions to<br>
> <a href="mailto:nottingham@mailman.lug.org.uk">nottingham@mailman.lug.org.uk</a><br>
><br>
> To subscribe or unsubscribe via the World Wide Web, visit<br>
> <a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a><br>
> or, via email, send a message with subject or body 'help' to<br>
> <a href="mailto:nottingham-request@mailman.lug.org.uk">nottingham-request@mailman.lug.org.uk</a><br>
><br>
> You can reach the person managing the list at<br>
> <a href="mailto:nottingham-owner@mailman.lug.org.uk">nottingham-owner@mailman.lug.org.uk</a><br>
><br>
> When replying, please edit your Subject line so it is more specific<br>
> than "Re: Contents of Nottingham digest..."<br>
><br>
><br>
> Today's Topics:<br>
><br>
> 1. Re: [Social] 7:30pm Thursday 05/05/2016: Savai Past The<br>
> Newshouse (Aaron Jackson)<br>
><br>
><br>
> ----------------------------------------------------------------------<br>
><br>
> Message: 1<br>
> Date: Thu, 05 May 2016 18:39:38 +0100<br>
> From: Aaron Jackson <<a href="mailto:aaron@aaronsplace.co.uk">aaron@aaronsplace.co.uk</a>><br>
> To: Martin <<a href="mailto:martin@ml1.co.uk">martin@ml1.co.uk</a>>, Notts GNU/Linux Users Group<br>
> <<a href="mailto:nottingham@mailman.lug.org.uk">nottingham@mailman.lug.org.uk</a>><br>
> Subject: Re: [Nottingham] [Social] 7:30pm Thursday 05/05/2016: Savai<br>
> Past The Newshouse<br>
> Message-ID: <<a href="mailto:87inys76at.fsf@walrus.aaronsplace.co.uk">87inys76at.fsf@walrus.aaronsplace.co.uk</a>><br>
> Content-Type: text/plain<br>
><br>
> I'll see you for all for a drink at Newshouse but there won't be any<br>
> food for me tonight :)<br>
><br>
> See you shortly,<br>
><br>
> Aaron<br>
><br>
><br>
> Martin via Nottingham writes:<br>
><br>
> > Folks,<br>
> ><br>
> > Aptly for our new found summertime sunshine, we have this Thursday our<br>
> > social:<br>
> ><br>
> ><br>
> > Savai Past The Newshouse<br>
> > <a href="http://nottingham.lug.org.uk/event/savai-past-the-newshouse-2" rel="noreferrer" target="_blank">http://nottingham.lug.org.uk/event/savai-past-the-newshouse-2</a><br>
> ><br>
> > ("Refresh" F5 or ctl-shift-R may be needed to flush your browser cache!)<br>
> ><br>
> ><br>
> > Usual 7:30pm meet in the Newshouse, and thence onwards for Italian style.<br>
> ><br>
> ><br>
> > All welcome,<br>
> ><br>
> > See ya there!<br>
> ><br>
> > Cheers,<br>
> > Martin<br>
><br>
><br>
> --<br>
><br>
><br>
><br>
> ------------------------------<br>
><br>
> Subject: Digest Footer<br>
><br>
> _______________________________________________<br>
> Nottingham mailing list<br>
> <a href="mailto:Nottingham@mailman.lug.org.uk">Nottingham@mailman.lug.org.uk</a><br>
> <a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a><br>
><br>
> ------------------------------<br>
><br>
> End of Nottingham Digest, Vol 634, Issue 3<br>
> ******************************************<br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://mailman.lug.org.uk/pipermail/nottingham/attachments/20160506/5d74e3e3/attachment-0001.html" rel="noreferrer" target="_blank">http://mailman.lug.org.uk/pipermail/nottingham/attachments/20160506/5d74e3e3/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Fri, 06 May 2016 19:38:24 +0100<br>
From: Aaron Jackson <<a href="mailto:aaron@aaronsplace.co.uk">aaron@aaronsplace.co.uk</a>><br>
To: Notts GNU/Linux Users Group <<a href="mailto:nottingham@mailman.lug.org.uk">nottingham@mailman.lug.org.uk</a>><br>
Subject: Re: [Nottingham] Silly mistakes<br>
Message-ID: <<a href="mailto:87d1ozjalb.fsf@walrus.aaronsplace.co.uk">87d1ozjalb.fsf@walrus.aaronsplace.co.uk</a>><br>
Content-Type: text/plain<br>
<br>
Hi Hazel,<br>
<br>
If the server has a weak password, I strongly suggest you run `last` to<br>
check recent logins. You can see all attempts with `lastb`. It would<br>
also be a good idea to install fail2ban and enable the ssh jail.<br>
<br>
Aaron<br>
<br>
<br>
Hazel Windle via Nottingham writes:<br>
<br>
> Hello all,<br>
><br>
> Sorry I couldn't make the social, I was a bit tired after work.<br>
> Today I've been doing a firewall configuration for the main web server,<br>
> which is also the only server. It had absolutely no firewall and a weak SSH<br>
> password. Has anyone seen any silly mistakes like that?<br>
><br>
> I think their IT guy doesn't really know all that much about Linux or IT<br>
> security, or hasn't had the time to learn.<br>
><br>
> Regards,<br>
><br>
> Hazel Windle<br>
><br>
> On 6 May 2016 at 13:00, <<a href="mailto:nottingham-request@mailman.lug.org.uk">nottingham-request@mailman.lug.org.uk</a>> wrote:<br>
><br>
>> Send Nottingham mailing list submissions to<br>
>> <a href="mailto:nottingham@mailman.lug.org.uk">nottingham@mailman.lug.org.uk</a><br>
>><br>
>> To subscribe or unsubscribe via the World Wide Web, visit<br>
>> <a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a><br>
>> or, via email, send a message with subject or body 'help' to<br>
>> <a href="mailto:nottingham-request@mailman.lug.org.uk">nottingham-request@mailman.lug.org.uk</a><br>
>><br>
>> You can reach the person managing the list at<br>
>> <a href="mailto:nottingham-owner@mailman.lug.org.uk">nottingham-owner@mailman.lug.org.uk</a><br>
>><br>
>> When replying, please edit your Subject line so it is more specific<br>
>> than "Re: Contents of Nottingham digest..."<br>
>><br>
>><br>
>> Today's Topics:<br>
>><br>
>> 1. Re: [Social] 7:30pm Thursday 05/05/2016: Savai Past The<br>
>> Newshouse (Aaron Jackson)<br>
>><br>
>><br>
>> ----------------------------------------------------------------------<br>
>><br>
>> Message: 1<br>
>> Date: Thu, 05 May 2016 18:39:38 +0100<br>
>> From: Aaron Jackson <<a href="mailto:aaron@aaronsplace.co.uk">aaron@aaronsplace.co.uk</a>><br>
>> To: Martin <<a href="mailto:martin@ml1.co.uk">martin@ml1.co.uk</a>>, Notts GNU/Linux Users Group<br>
>> <<a href="mailto:nottingham@mailman.lug.org.uk">nottingham@mailman.lug.org.uk</a>><br>
>> Subject: Re: [Nottingham] [Social] 7:30pm Thursday 05/05/2016: Savai<br>
>> Past The Newshouse<br>
>> Message-ID: <<a href="mailto:87inys76at.fsf@walrus.aaronsplace.co.uk">87inys76at.fsf@walrus.aaronsplace.co.uk</a>><br>
>> Content-Type: text/plain<br>
>><br>
>> I'll see you for all for a drink at Newshouse but there won't be any<br>
>> food for me tonight :)<br>
>><br>
>> See you shortly,<br>
>><br>
>> Aaron<br>
>><br>
>><br>
>> Martin via Nottingham writes:<br>
>><br>
>> > Folks,<br>
>> ><br>
>> > Aptly for our new found summertime sunshine, we have this Thursday our<br>
>> > social:<br>
>> ><br>
>> ><br>
>> > Savai Past The Newshouse<br>
>> > <a href="http://nottingham.lug.org.uk/event/savai-past-the-newshouse-2" rel="noreferrer" target="_blank">http://nottingham.lug.org.uk/event/savai-past-the-newshouse-2</a><br>
>> ><br>
>> > ("Refresh" F5 or ctl-shift-R may be needed to flush your browser cache!)<br>
>> ><br>
>> ><br>
>> > Usual 7:30pm meet in the Newshouse, and thence onwards for Italian style.<br>
>> ><br>
>> ><br>
>> > All welcome,<br>
>> ><br>
>> > See ya there!<br>
>> ><br>
>> > Cheers,<br>
>> > Martin<br>
>><br>
>><br>
>> --<br>
>><br>
>><br>
>><br>
>> ------------------------------<br>
>><br>
>> Subject: Digest Footer<br>
>><br>
>> _______________________________________________<br>
>> Nottingham mailing list<br>
>> <a href="mailto:Nottingham@mailman.lug.org.uk">Nottingham@mailman.lug.org.uk</a><br>
>> <a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a><br>
>><br>
>> ------------------------------<br>
>><br>
>> End of Nottingham Digest, Vol 634, Issue 3<br>
>> ******************************************<br>
>><br>
> _______________________________________________<br>
> Nottingham mailing list<br>
> <a href="mailto:Nottingham@mailman.lug.org.uk">Nottingham@mailman.lug.org.uk</a><br>
> <a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a><br>
<br>
<br>
--<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
Nottingham mailing list<br>
<a href="mailto:Nottingham@mailman.lug.org.uk">Nottingham@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a><br>
<br>
------------------------------<br>
<br>
End of Nottingham Digest, Vol 634, Issue 4<br>
******************************************<br>
</blockquote></div><br></div>