linux security – ITFROMZERO – Share tobe shared!

Linux Server Security Audit with Lynis: From Installation to a Hardening Index of 80+

By admin March 8, 2026

Lynis runs directly inside your server and checks over 200 configuration points that remote scanners simply can't see. This guide walks through installation, interpreting results, and fixing real-world warnings — from SSH to kernel hardening — to push your hardening index from 55 up to 80+.

Ubuntu

Configuring Fail2ban to Protect Your Ubuntu Server from Brute-Force Attacks

By admin March 6, 2026

Fail2ban automatically blocks brute-force IPs targeting SSH, Nginx, and WordPress by reading logs and adding iptables rules. This guide covers installation, practical jail configuration, and common troubleshooting scenarios on Ubuntu 22.04.

Centos

Configuring SELinux on Rocky Linux: Don’t Disable It Before You Understand What It Does

By admin March 6, 2026

From firsthand experience migrating 5 servers off CentOS 8 EOL to Rocky Linux, this guide covers how to configure SELinux properly — from Permissive for debugging to Enforcing on production — with practical audit2allow, sealert, and semanage examples.

Linux

Securing Your SSH Server: Essential Steps to Prevent Getting Hacked

By admin March 4, 2026

A hands-on guide to SSH server security: comparing 4 common approaches, analyzing their trade-offs, and concrete configuration steps from SSH keys to Fail2ban. Prioritize in the right order to protect your server as effectively as possible.

Security

Linux Disk Encryption with LUKS: Protecting Data When Your Server Is Lost or Stolen

By admin March 1, 2026

LUKS enables AES-256 encryption on Linux partitions, ensuring data remains unreadable even if the drive is physically removed from the server. This guide walks through the full workflow — from formatting and mounting, to auto-mount on boot, LUKS header backup, and passphrase management.