List of content you will read in this article:
The use of Linux in the cyber-space has grown enormously; with it, the number of possible security threats is now more than ever. Security has become an essential factor for any business in the information technology world. That is why you too need to upgrade your security around your Linux server. Inside this article, you will get various ways to secure Linux servers listed here.
Before diving to know more about these Linux hardening security tips, You should know what a Linux server is.
What is a Linux Server?
A Linux server is a powerful computer system used to host and manage services or applications in a network. It is typically configured with various services, such as web servers, database servers, file servers, and application servers, and it is used to support the needs of users or clients within an organization or across the internet. Linux servers are popular due to their stability, security, and flexibility, and they are often used in enterprise environments, hosting providers, and cloud computing platforms.
A Linux server is running on various distributions such as Debian, Ubuntu, CentOS, RHEL, etc.
Importance of Linux Security
When setting up any web server, keep its security in mind. The most preferred hosting server is a Linux server over a Windows Server for its improved security.
However, it is only as secure as the configuration you put on it. Many will opt for various layers, such as reacting in real time to different threats.:
1. WAF (i.e., Web Application Firewalls)
2. IDS (i.e., Intrusion Detection System)
3. Mod Security
If you are storing sensitive information on a virtual private server, it can all be stolen because of simple security oversight. Without proper security measures, malware could find its way onto the server, which is when the trouble starts.
Your server can also be used as a spam-sending relay and possibly be blocked from certain DNS providers, making your website invisible to anyone.
If your Linux server security is lacking, hackers can take control of your server and perform either malicious or outright illegal activities. Depending on what they do, you, as the owner of the server, might even be held responsible for it.
In the worst-case scenario, you might completely lose access to the server; however, in most such situations, your web hosting provider will delete the compromised server plan and provide you with a new one.
All these cyber security threats scratch the surface of what can happen if someone hacks into your server or certain malware is installed on it. Do not forget, however, that these are just that – threats.
If proper security measures are taken, they will only stay as threats and will never become a problem. Here are some measures you can have a look at:
8 ways to Improve Linux Server Security
You should read these best tips for Linux hardening and improving Linux security.
1. Using complex and unpredictable passwords
The utmost important step in securing a Linux server is to choose a strong password.
The first attempt by hackers will be to use Brute Force attacks to infiltrate your system. Having a complex and unpredictable password makes it nearly impossible for them to gain access to your server.
Here are a few tips for choosing a sophisticated password:
- Use at least 12 characters
- Use upper and lower case letters
- Put numbers between letters
- Use non-numeric and non-letter characters
Use the following commands to change the Linux password:
passwd username
To change the root password:
passwd root
2. Disable login with root user
Being a root user will give you all the power to make any kind of changes on your Linux Terminal. Disabling login with the root user means that the person logging in can no longer use the root privileges. This is a great safety measure to follow because in order to access root privileges, the user will have to provide the password again.
To disable logging in with the root user, follow these steps:
Step 1: Open the file “etc/ssh/sshd_config/” with an editor:
nano /etc/ssh/sshd_config
Step 2: Look for the following statement in this file and change the word yes to no.
# Prevent root logins:
PermitRootLogin no
Step 3: Restart the SSH service after making changes and save the file.
service ssh restart
3. Restrict user logins to secure VPS
You might have a lot of usernames on your server, but you only need a few of the accounts to be logged in.
Let's assume you have 10 users on Linux, but only two people (Sophia and Emma) should be allowed to connect remotely to the server.
To restrict Linux users, open the sshd_config file with an editor.
nano /etc/ssh/sshd_config
After the file is opened,
AllowUsers Sophia Emma
Restart the SSH service after making changes and save the file.
Service ssh restart
4. Disable protocol 1
The SSH service works with 2 protocols, namely Protocol 1 and 2. Protocol 1 has lesser security than the other, so it's better to use protocol 2 in your communications.
To disable protocol 1, open the sshd_config file with an editor.
nano /etc/ssh/sshd_config
Find the following statement and change it to "protocol 2".
# Protocol 2,1
Protocol 2
Restart the SSH service after making changes and save the file.
Service ssh restart
5. Use non-standard ports for SSH
The default SSH service port is 22, so hackers will check this port before anything else. In some cases, administrators can change the default SSH port from 22 to 2222, but you should know that hackers will surely scan port 22, and if they get no result, their second choice will be port 2222. It's better to use ports with many digits that are not reserved for other services. The best choice is between 10,000 and 65,000, most of which are free.
6. Filter SSH connections with a firewall
If you only connect remotely to the server and use a particular IP, you can use the following command to isolate your connection to the SSH service.
iptables –A INPUT –p tcp –s 5.56.233.9 –dport 22 –j –ACCEPT
By entering the above command, you can only connect to the server from a system with an IP address of 5.56.233.9.
If you want to access the server from all locations, enter the below commands:
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name ssh –rsource
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent ! --rcheck --seconds 60 --hitcount 4 --name ssh --rsource -j ACCEPT
You open access to port 22 for all IPs in the first command.
In the second command firewall automatically blocks the IPs that send multiple requests in less than 60 seconds.
Note: To properly execute the second command, you must add the default DROP policies.
7. Use the Security Keys for identification
Using Security Keys has two main advantages.
- You can access your terminal without entering a password.
- You can disable password logging completely so that no password is required to connect to the server.
This feature protects against certain possible attacks, such as brute force attacks.
8. Keep servers up to date
Linux Server updates are one of the critical factors that you should always keep in mind. Updating a server regularly will keep security and fix performance issues. The developers often include security improvements and patches for recently discovered vulnerabilities in newly released versions. If your server is not up to date, hackers might exploit said vulnerabilities to gain access to your Linux VPS.
Conclusion
We have discussed a Linux server and the importance of having an exemplary security configuration on it. Along with this, we explained various Linux hardening Security tips that will improve your Linux server performance and keep you safe from hackers. We hope this article has been helpful to you, and if you have any questions, You can comment via the comment box.
People are also reading:
My name is Sophia H. My degree is MS in Information Technology Engineering. I have been working for 5 years on Java developing (j2ee), Computer Networking (Optical Networks), Virtualization and Hosting.