{"id":688,"date":"2023-11-15T00:57:00","date_gmt":"2023-11-15T00:57:00","guid":{"rendered":"https:\/\/www.prolimehost.com\/blogs\/?p=688"},"modified":"2023-11-15T17:03:50","modified_gmt":"2023-11-15T17:03:50","slug":"ten-security-apps-for-linux-dedicated-servers","status":"publish","type":"post","link":"https:\/\/www.prolimehost.com\/blogs\/ten-security-apps-for-linux-dedicated-servers\/","title":{"rendered":"Ten Security Apps for Linux Dedicated Servers."},"content":{"rendered":"<p><img decoding=\"async\" class=\"alignleft wp-image-692 size-medium\" src=\"https:\/\/www.prolimehost.com\/wp-content\/uploads\/sites\/4\/Linux-Dedicated-Server-300x295.png\" alt=\"Linux Dedicated Server\" width=\"300\" height=\"295\" srcset=\"https:\/\/www.prolimehost.com\/blogs\/wp-content\/uploads\/sites\/4\/Linux-Dedicated-Server-300x295.png 300w, https:\/\/www.prolimehost.com\/blogs\/wp-content\/uploads\/sites\/4\/Linux-Dedicated-Server-512x504.png 512w, https:\/\/www.prolimehost.com\/blogs\/wp-content\/uploads\/sites\/4\/Linux-Dedicated-Server-65x65.png 65w, https:\/\/www.prolimehost.com\/blogs\/wp-content\/uploads\/sites\/4\/Linux-Dedicated-Server.png 640w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p>\n<p>Security is vitally important going forward in 2023 as cybercriminals have demonstrated over and over again their relentless pursuit to disrupt the hosting industry and all things Internet related. There are certainly many more apps we could list here, but these ten security apps for Linux dedicated servers are at the top of the iceberg in popularity and functionality. Let\u2019s start with:<\/p>\n<p><strong>ClamAV<sup>\u00ae<\/sup>\u00a0<\/strong><\/p>\n<p>As an anti-virus app, <a href=\"https:\/\/www.clamav.net\/\" target=\"_blank\" rel=\"noopener\">ClamAV<\/a> detects viruses, Trojans, malware and all sorts of malicious threats and it\u2019s the open source standard for scanning software for mail gateways<strong>. <\/strong>It\u2019s a highly versatile app, supporting multiple file formats and signature languages, plus file and archive unpacking.<\/p>\n<p><strong>Some features of ClamAV<\/strong><\/p>\n<ul>\n<li>It has a command-line scanner featuring on-access scanning<\/li>\n<li>Its database for identifying viruses is updated daily<\/li>\n<li>Support for multiple archive formats like RAR, Gzip, ZIP and others is built in<\/li>\n<li>Support for Microsoft Office and Mac Office files, plus HTML, PDF and RTF built in.<\/li>\n<li>It includes a Milter interface for sendmail<\/li>\n<li>And it features built-in support for many mail file formats.<\/li>\n<\/ul>\n<p><strong>Chkrootkit<\/strong><\/p>\n<p>Rootkits are a malicious set of software tools that enable cybercriminals to gain control of a computer system without being detected. <a href=\"https:\/\/www.chkrootkit.org\/\" target=\"_blank\" rel=\"noopener\">Chkrootkit<\/a> is a tool that enables you to check for signs of a rootkit. How does it do that? By testing applications like:<\/p>\n<ul>\n<li>Sniffer<\/li>\n<li>Pop3<\/li>\n<li>Telnetd<\/li>\n<li>Traceroute<\/li>\n<li>Write<\/li>\n<li>Grep<\/li>\n<li>Bindshell<\/li>\n<li>Cron<\/li>\n<li>Echo<\/li>\n<\/ul>\n<p>And many more.<\/p>\n<p>It checks for signs of LKM Trojans, utmp deletions and lastlog deletions (plus others).<\/p>\n<p><strong>GnuPG<\/strong><\/p>\n<p><a href=\"https:\/\/gnupg.org\/\" target=\"_blank\" rel=\"noopener\">GnuPG<\/a> is a privacy guard app facilitating secure data storage and communication. It essentially does this by encrypting, then signing data so others can determine its authenticity. As a command line tool, it easily integrates with other applications. It supports DSA, Elgamal and RSA public key algorithms, plus symmetric algorithms like 3DES, Twofish and AES. Add compression algorithms like ZLIB, BZIP2 and ZIP, plus digest algorithms like MD5, SHA-1 and others. It features:<\/p>\n<ul>\n<li>An online help system<\/li>\n<li>Integrated support for HKP keyservers<\/li>\n<li>Full replacement of PGP<\/li>\n<li>Full OpenPGP implementation<\/li>\n<\/ul>\n<p>And much more.<\/p>\n<p><strong>IPCop<\/strong><\/p>\n<p><a href=\"https:\/\/www.ipcop.org\/\" target=\"_blank\" rel=\"noopener\">IPCop<\/a> is a Linux firewall distribution designed for home and SOHO users. As such, it has a task based user friendly interface. It offers:<\/p>\n<ul>\n<li>Port forwarding<\/li>\n<li>DMZ support<\/li>\n<li>An IPChains based firewall with DHCP server<\/li>\n<li>Caching DNS<\/li>\n<li>IPSec based VPN support using FreeS\/WAN<\/li>\n<li>And the Squid web proxy<\/li>\n<\/ul>\n<p>It also offers IPSec VPN support.<\/p>\n<p><strong>Open Source Tripwire<\/strong><\/p>\n<p><a href=\"https:\/\/www.tripwire.com\/\" target=\"_blank\" rel=\"noopener\">Tripwire<\/a> assists businesses to successfully automate the hardening of security on their servers, network devices and databases, continuously monitoring the integrity of those systems.<\/p>\n<p>It\u2019s a free data integrity and software security tool that is useful for monitoring and alerting administrators to specific file changes, functioning as a host-based IDS.<\/p>\n<p>It\u2019s best utilized for monitoring a relatively small number of server where centralized control isn\u2019t deemed necessary.<\/p>\n<p>Its features include:<\/p>\n<ul>\n<li>Command Line User Interface<\/li>\n<li>Change Detection<\/li>\n<li>Textual reports with one to five levels of detail<\/li>\n<li>Send SNMP traps &amp; emails<\/li>\n<li>Single host based management<\/li>\n<\/ul>\n<p><strong>Denyhosts<\/strong><\/p>\n<p><a href=\"https:\/\/denyhosts.sourceforge.net\/\" target=\"_blank\" rel=\"noopener\">Denyhosts<\/a> analyzes the sshd server log messages, then determines what hosts are attempting to hack into your system. If you want to know what user accounts are being targeted, it does that as well. Its goal is to stop brute force attacks on SSH servers. It does this by monitoring invalid logins, then blocking the originating IP\u2019s.<\/p>\n<p>Some of its features include:<\/p>\n<ul>\n<li>Keeps track of each offending host<\/li>\n<li>Keeps track of suspicious logins<\/li>\n<li>Optionally sends an email of newly banned hosts and suspicious logins<\/li>\n<li>Resolves IP addresses to hostnames, if available<\/li>\n<li>Maintains failed valid and invalid user login attempts in separate files<\/li>\n<li>Keeps track of each non-existent user (eg. sdadasd) when a login attempt failed<\/li>\n<\/ul>\n<p>It also keeps a history of all host, user and suspicious logins encountered<\/p>\n<p><strong>Iptables<\/strong><\/p>\n<p><a href=\"https:\/\/linux.die.net\/man\/8\/iptables\" target=\"_blank\" rel=\"noopener\">iptables<\/a>\u00a0is a user space command line program used to configure the Linux 2.4.x and later packet filtering ruleset, which was primarily designed for system administrators. Network Address Translation (NAT) is configured from the same ruleset, so iptables is used for this as well.<\/p>\n<p>Some of its main features are:<\/p>\n<ul>\n<li>Handles filtering and management of incoming and outgoing IP packets<\/li>\n<li>Part of the Netfilter framework<\/li>\n<li>Performs Network Address Translation (NAT)<\/li>\n<\/ul>\n<p><strong>Nessus<\/strong><\/p>\n<p><a href=\"https:\/\/www.cs.cmu.edu\/~dwendlan\/personal\/nessus.html\" target=\"_blank\" rel=\"noopener\">Nessus<\/a> is a security auditing tool, making it possible to test security modules so that vulnerable spots can be identified and fixed.<\/p>\n<p>It\u2019s set up as a server and a client in two separate parts. The server\/daemon, nessusd, is in charge of the attacks, and the client, nessus, provides the user with an X11\/GTK+ interface.<\/p>\n<p>Its features include:<\/p>\n<ul>\n<li>Network Assessment and Discovery\n<ul>\n<li>Performs sophisticated remote scans and audits of UNIX, Windows, and network infrastructures<\/li>\n<li>Discovers network devices and identifies the operating systems, applications, databases, and services running on those assets<\/li>\n<\/ul>\n<\/li>\n<li>Agentless Patch, Configuration, Content Auditing\n<ul>\n<li>Allows you to rapidly deploy the scanners<\/li>\n<li>Eliminates the need for agent patching<\/li>\n<li>Creates a flexible environment that is not dependent on target-specific agents<\/li>\n<\/ul>\n<\/li>\n<li>High speed vulnerability identification\n<ul>\n<li>Can continuously scan your network devices to drastically save time identifying vulnerabilities<\/li>\n<li>Can be configured to test a range of IP addresses or for DNS or MAC addresses if IPs are dynamic<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong>Vuurmuur<\/strong><\/p>\n<p><a href=\"https:\/\/www.vuurmuur.org\/\" target=\"_blank\" rel=\"noopener\">Vuurmuur<\/a> is a firewall manager built on top of iptables. Its configuration is easy to comprehend, which allows it to work well in simple and complex configurations. Fully configurable through an Ncurses GUI, it facilitates secure remote admin via SSH or on the console.<\/p>\n<p>Vuurmuur allows admins to look at logs, connections and bandwidth usage in real-time.<\/p>\n<p>Some of its features include:<\/p>\n<p>Monitoring<\/p>\n<ul>\n<li>Basic traffic volume accounting<\/li>\n<li>Searching through old logfiles<\/li>\n<li>Realtime log viewing<\/li>\n<li>Realtime connection viewing<\/li>\n<li>Filtering in log viewing and connection viewing<\/li>\n<\/ul>\n<p>Administration<\/p>\n<ul>\n<li>Secure default policy<\/li>\n<li>Entirely manageable through SSH and from the console<\/li>\n<li>Scriptable for integration with other tools<\/li>\n<li>Can produce a bash firewall script<\/li>\n<li>No iptables knowledge required<\/li>\n<li>Humanly readable rules syntax<\/li>\n<li>Ncurses GUI, no X required<\/li>\n<li>Port forwarding is made very simple<\/li>\n<li>Easy to setup in with NAT<\/li>\n<li>Anti-spoofing features<\/li>\n<li>Killing of unwanted connections<\/li>\n<li>Supports working with Snort inline using QUEUE or NFQUEUE<\/li>\n<\/ul>\n<p>Accounting<\/p>\n<ul>\n<li>Audit logging: all changes are logged<\/li>\n<li>Logging of new connections and bad packets<\/li>\n<li>Traffic volume accounting<\/li>\n<\/ul>\n<p><strong>Rootkit Hunter<\/strong><\/p>\n<p><a href=\"https:\/\/rkhunter.sourceforge.net\/\" target=\"_blank\" rel=\"noopener\">Rootkit Hunter<\/a> is a Unix-based tool that scans for backdoors, rootkits and possible local exploits.<\/p>\n<p>It carries out a myriad of checks on the local system in an effort to detect known malware and rootkits. In addition to verifying if commands have been altered and if the system startup files have been altered, it performs various checks on the network interfaces, including checks for listening applications.<\/p>\n<p>It was written to be as generic as possible, so that it could run on most Linux and UNIX systems. It is provided with some support scripts should certain commands be missing from the system, and some of these are\u00a0Perl\u00a0scripts.<\/p>\n<p>Some features include:<\/p>\n<ul>\n<li>Compares MD5 hashes of important files with known good ones in online database<\/li>\n<li>Searches for:\n<ul>\n<li>Wrong permissions<\/li>\n<li>Hidden files<\/li>\n<li>Default directories of rootkits<\/li>\n<li>Suspicious strings in kernel modules, and<\/li>\n<li>Special tests<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4 class=\"wp-block-heading has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/www.prolimehost.com\/wp-content\/uploads\/sites\/4\/2014\/08\/unnamed-e1408122780935.jpg\" alt=\"ProlimeHost Cheap Dedicated Servers\" width=\"400\" height=\"80\" \/><\/h4>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_80 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.prolimehost.com\/blogs\/ten-security-apps-for-linux-dedicated-servers\/#BROUGHT_TO_YOU_BY_PROLIMEHOST\" >BROUGHT TO YOU BY PROLIMEHOST<\/a><ul class='ez-toc-list-level-5' ><li class='ez-toc-heading-level-5'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.prolimehost.com\/blogs\/ten-security-apps-for-linux-dedicated-servers\/#VPS_SERVICES_LIGHTNING_FAST_SSD_VIRTUAL_SERVERS\" >VPS SERVICES: LIGHTNING FAST SSD VIRTUAL SERVERS<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-5'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.prolimehost.com\/blogs\/ten-security-apps-for-linux-dedicated-servers\/#DEDICATED_SERVERS_BACKED_BY_A_999_SLA_NETWORK_UPTIME_GUARANTEE\" >DEDICATED SERVERS: BACKED BY A 99.9% SLA NETWORK UPTIME GUARANTEE<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-5'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.prolimehost.com\/blogs\/ten-security-apps-for-linux-dedicated-servers\/#ASIA_OPTIMIZED_SERVERS_IMPROVING_CONNECTION_SPEED_AND_QUALITY\" >ASIA OPTIMIZED SERVERS: IMPROVING CONNECTION SPEED AND QUALITY<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"BROUGHT_TO_YOU_BY_PROLIMEHOST\"><\/span>BROUGHT TO YOU BY PROLIMEHOST<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p>We\u2019ve been in the web hosting industry for over a decade, helping hundreds of clients succeed in what they do best and that\u2019s running their business. We specialize in Virtual Private Servers (VPS) and dedicated servers, with data centers in Los Angeles, Denver &amp; Singapore.<\/p>\n<h5 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"VPS_SERVICES_LIGHTNING_FAST_SSD_VIRTUAL_SERVERS\"><\/span>VPS SERVICES: LIGHTNING FAST SSD VIRTUAL SERVERS<span class=\"ez-toc-section-end\"><\/span><\/h5>\n<p>Our\u00a0<a href=\"https:\/\/www.prolimehost.com\/ssd-vps-server\/\">Virtual Private Servers<\/a>\u00a0all feature high performance Xeon processors and SSD storage in a RAID10 configuration to optimize your server\u2019s performance, which dramatically enhances visitor experiences on your site.<\/p>\n<p>That speed is backed by unparalleled 24\/7 support, featuring both outstanding response AND resolution times to maximize your uptime.<\/p>\n<p><strong><em>Now is the time to join the ProlimeHost virtual private server revolution.<\/em><\/strong><\/p>\n<h5 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"DEDICATED_SERVERS_BACKED_BY_A_999_SLA_NETWORK_UPTIME_GUARANTEE\"><\/span>DEDICATED SERVERS: BACKED BY A 99.9% SLA NETWORK UPTIME GUARANTEE<span class=\"ez-toc-section-end\"><\/span><\/h5>\n<p>We only use enterprise-class hardware in our\u00a0<a href=\"https:\/\/www.prolimehost.com\/los-angeles-dedicated-servers\/\">dedicated servers<\/a>\u00a0and offer a four (4) hour hardware replacement. Throw in IPMI for remote management, support for public and private networks, free operating system (OS) re-installs, and SATA, SAS &amp; SSD (including NVMe) storage. Call 1-877-477-9454 or\u00a0<a href=\"https:\/\/www.prolimehost.com\/contact\/\">contact us<\/a>. For everything from gaming servers to\u00a0<a href=\"https:\/\/www.prolimehost.com\/discounted-dedicated-server-deals\/\">cheap dedicated servers<\/a>, we\u2019re here to help.<\/p>\n<h5 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"ASIA_OPTIMIZED_SERVERS_IMPROVING_CONNECTION_SPEED_AND_QUALITY\"><\/span>ASIA OPTIMIZED SERVERS: IMPROVING CONNECTION SPEED AND QUALITY<span class=\"ez-toc-section-end\"><\/span><\/h5>\n<p>Procuring an Asia optimized server improves the connection speed and quality between the server and the users in Asia or China. This can reduce latency, packet loss, jitter, and bandwidth issues that can affect the performance and reliability of the server and the applications hosted on it. For more information, please call 1-877-477-9454 or\u00a0<a href=\"https:\/\/www.prolimehost.com\/contact\/\">contact us<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"Security is vitally important going forward in 2023 as cybercriminals have demonstrated over and over again their relentless&hellip;","protected":false},"author":3,"featured_media":4421,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_display_header_overlay":false,"csco_singular_sidebar":"","csco_page_header_type":"","footnotes":""},"categories":[1,10],"tags":[120,123,15,24,107,113,21,106,33],"class_list":{"0":"post-688","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-geneal","8":"category-tutorials-tips","9":"tag-asia-optimized","10":"tag-china-optimized","11":"tag-dedicated-server-security","12":"tag-dedicated-servers","13":"tag-dedicated-servers-usa","14":"tag-gaming-servers","15":"tag-linux","16":"tag-virtual-private-servers","17":"tag-vps","18":"cs-entry"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.prolimehost.com\/blogs\/wp-json\/wp\/v2\/posts\/688","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prolimehost.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prolimehost.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prolimehost.com\/blogs\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prolimehost.com\/blogs\/wp-json\/wp\/v2\/comments?post=688"}],"version-history":[{"count":0,"href":"https:\/\/www.prolimehost.com\/blogs\/wp-json\/wp\/v2\/posts\/688\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prolimehost.com\/blogs\/wp-json\/wp\/v2\/media\/4421"}],"wp:attachment":[{"href":"https:\/\/www.prolimehost.com\/blogs\/wp-json\/wp\/v2\/media?parent=688"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prolimehost.com\/blogs\/wp-json\/wp\/v2\/categories?post=688"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prolimehost.com\/blogs\/wp-json\/wp\/v2\/tags?post=688"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}