Enable logwatch for your server
Logwatch is a customizable log analysis system, it creates a analysis report base on the are that you specify. The report will be send to your email address everyday and the report has been proceesed. As mention in the title, we are enabling logwatch but not installing logwatch here. Logwatch is already installed on most cPanel servers, so i will only covered for those who have Logwatch ready in the server.
First thing to do is SSH into your server as root.
And then nano/pico/vi /etc/log.d/conf/logwatch.conf
Seek for Mailto = root
change it to
Installing BFD(Brute Force Detector)
Previously i have posted a tutorial on “Setup firewall for your Linux Server”, now as promised i deliver the tutorial for setting Brute Force Detector. But please ensure that you have already installed APF because you need APF in BFD. For those who have not yet installed APF, you can go to this page “Setup firewall for your Linux Server”.
So why do we need APF in BFD? BFD will detect for suspicious activity like attempts of failed login and then insert their IP into APF deny hosts list, so that they will be totally lock out from the server.
Now we start for the installing.