Posts
FreeBSD DenyHosts 擋掉暴力破解 ssh 的使用者
# cd /usr/ports/security/denyhosts; make install clean;
-------------------------------------------------------------------------------
To run denyhosts from startup, add denyhosts_enable="YES"
in your /etc/rc.conf.
Configiration options can be found in /usr/local/etc/denyhosts.conf
-------------------------------------------------------------------------------
In order to proper working of denyhosts
1. edit your /etc/hosts.allow file and add:
sshd : /etc/hosts.deniedssh : deny
sshd : ALL : allow
2. issue the following command if /etc/hosts.deniedssh does not exist yet
touch /etc/hosts.deniedssh
-------------------------------------------------------------------------------
Warning:
syslogd should ideally be run with the -c option; this will ensure that
denyhosts notices multiple repeated login attempts.
To do this, add syslogd_flags="-c" to /etc/rc.conf
-------------------------------------------------------------------------------
===> Installing rc.d startup script(s)
===> Registering installation for denyhosts-2.6_3
===> Cleaning for denyhosts-2.6_3
#
Posts
FreeBSD 8.2-RELEASE
Release Highlights
The highlights in the 8.2-RELEASE are the following:
[amd64] FreeBSD/amd64 now always sets the KVA space as equal to or larger than physical memory size. This change would help to prevent a “kmem_map too small” panic which often occurs when using ZFS.[r214620] The FreeBSD GENERIC kernel is now compiled with KDB and KDB_TRACE options. From 8.2-RELEASE the kernel supports displaying a stack trace on panic by using stack(9) facility with no debugger backend like ddb(8).
Posts
Ntop FreeBSD
#cd /usr/ports/net/ntop/ #make install clean ... ************************************************************ ************************************************************ WARNING: This install created a directory for the ntop files and databases: //usr/local/share/ntop This directory MUST be owned by the user which you are going to use to run ntop. The command you must issue is something like: chown -R ntop.ntop //usr/local/share/ntop or chown -R ntop:users //usr/local/share/ntop man chown to check the syntax for YOUR system ************************************************************ ************************************************************ # ntop -A Wed Feb 9 16:55:29 2011 NOTE: Interface merge enabled by default Wed Feb 9 16:55:29 2011 Initializing gdbm databases ntop startup - waiting for user response!