Maldet Install, Setup and Syntax

Maldet is a security software usually used in linux to scan for vulnarabilities or malware check. To install maldet follow the steps below:

cd /usr/local/src/
rm -vrf maldetect-*
wget http://www.rfxn.com/downloads/maldetect-current.tar.gz
tar -xzf maldetect-current.tar.gz
cd maldetect-*
sh ./install.sh
maldet --update-ver
maldet --update

You may also want to consider activating the many features of maldet, for example:

 email_alert=1
 email_addr="root"
 quar_hits=1
 scanthreads=5
 maxfilesize="1024k"

To edit these options, $EDITOR /usr/local/maldetect/conf.maldet
To scan all users public_html give the command below:
maldet -a /home?/?/public_html

Read more »

Installing Clam AntiVirus

Clamwin is an Open Source Software and comes with open source code, absolutely free of charge. All you have to do is download it and run it. It is based on the Clam AV technology for UNIX and has been primarily designed to guard and scan email on mail gateways.

To Install Clam AntiVirus on a linux (RHEL, CentOS) server without control panel:

Download the repo file:
 wget http://www.linux-mail.info/files/dag-clamav.repo
This will save a file  dag-clamav.repo in the current location.

Place the repo file in the correct repo location:
mv dag-clamav.repo /etc/yum.repos.d

Use yum to install
yum install clamav clamav-devel clamd

To update the virus definitions type:
 freshclam

To use this anti virus type:
 clamscan

Read more »

Basic steps to secure the server

To prevent exploits in our server, we can do some simple yet effective steps to secure our linux server. Its better late than never :)

Disable SUID
Change ssh port
Disable root login
Disable unneeded services and check open ports.
Install a good firewall
Apply TCP wrappers
Install root kit detection
Install mod_security
Disable dangerous / unused PHP functions / harden your PHP

Regularly update you packages
Disable shell access to unwanted users.
Use only command line access.
Most important use long passwords for root (preferably 14-20 digits)
It is advisable to configure a backup on a weekly basis to a remote server or our local system.

Read more »