CSF and LFD: two projects that will help you improve security

Hardware security padlocked circuit

Surely you have heard about these projects before, if not, here we dedicate this small article to teach you what these two fantastic projects are that can help us improve the security of our GNU / Linux systems. Remember that GNU / Linux is safe, but it is not infallible against attacks, far from it, we have seen malware that affects our system and vulnerabilities, so being trusting can be your downfall ... We are all susceptible to attacks! And those who have been able to analyze the attacks that honeypots receive will know how many of them are carried out after a single day.

Well, with that said, say that LFD stands for Login Failure Daemon, that is, a daemon that takes care of security in the background in something as important as the logins system where we register and log in. These systems are susceptible to brute force or dictionary attacks, trying with an infinite number of combinations or words until finding the key if it is found in the dictionary used by the attacker or ending up decrypting it if brute force is used and it is not too much of a password. strong…

LFD is a process that is part of CSF, constantly seeking possible brute force attacks looking for blocks of IP addresses that are trying to attack the server. Ok, so what is CSF then? Well CFS stands for ConfigServer Security & Firewall. An SPI (Stateful Packet Inspection) firewall, intrusion detector and other integrated security functionalities for servers with GNU / Linux systems.

It is supported by a multitude of distributions, like Red Hat, SUSE, openSUSE, CentOS, CloudLinux, Fedora, Slackware, Ubuntu, Debian, etc., and also in virtualization systems like Xen, VirtualBox, OpenVZ, KVM, Virtuozzo, VMWare, etc. You also have the guarantee of Configserver.com, specialized in cPanel solutions, and being one of the most recommended security solutions for your servers ...


Leave a Comment

Your email address will not be published. Required fields are marked with *

*

*

  1. Responsible for the data: AB Internet Networks 2008 SL
  2. Purpose of the data: Control SPAM, comment management.
  3. Legitimation: Your consent
  4. Communication of the data: The data will not be communicated to third parties except by legal obligation.
  5. Data storage: Database hosted by Occentus Networks (EU)
  6. Rights: At any time you can limit, recover and delete your information.