Before starting with the installation and enabling steps of BFD, I would like to add some light on what is BFD?
Basically, BFD also known as Brute Force Detection is a simple SSH script which is used to parse applicable logs to check about the authentication failure. Installing BFD adds your server one more advantage that it will secure your dedicated server from any harmful brute force attempts. It also works in conjuction with APF firewall to manage your level of server protection and similar to most of the linux server tools, can be easily installed and configured. It is one of the most popular tool for all your dedicated server hosting requirements. Make sure the APF firewall is already installed on your server or the BFD won’t work.
Steps to Install BFD on your Dedicated Server:
Step 1 : Login to the root and cd root/downloads (directory where you store your files)
Step 2 : Use the SSH command of wget as shown below:
wget http://www.rfxnetworks.com/downloads/bfd-current.tar.gz
Step 3 : Use the SSH command of tar as shown below:
tar –xvzf bfd-current.tar.gz
Step 4 : Use the SSH command of cd as shown below:
cd bfd-0.7
Step 5 : Run the ./install.sh file. when its completed, it will show you the following message that alerts to you a proper installation:
.: BFD installed
Install path: /usr/local/bfd
Config path: /usr/local/bfd/conf.bfd
Executable path: /usr/local/sbin/bfd
This means your BFD is now succesfully installed. Now, moving to the enabling BFD which will allow you to block brute force attempts.
Steps to Enable BFD on your Dedicated Server:
Step 1 : Edit the config file, which is located at /usr/local/bfd/conf.bfd
Step 2 : Now, enabling “brute force hack attempt alerts”. Simply, find ALERT_USR=“0” and change it to ALERT_USR=“1” which is ensuring that yes, it will alert you whenever there is a brute force hacking attacks.
Step 3 : Where do you want to send those alerts comes next! Find EMAIL_USR=“root” and change that to EMAIL_USR=“emailaddresshere”
Step 4 : Ctrl+X then Y
Step 5 : However, if you are disallowing everyone from accessing your SSH, doesn’t that mean you can’t get in either? Yes, so let’s prevent that. pico –w /usr/local/bfd/ignore.hosts and add your own IP(s). Ctrl+X then Y.
You can run your installed BFD by entering /usr/local/sbin/bfd –s
Now, your Dedicated Server Hosting account will get alerts whenever there is a brute force hacking attacks.
Posted under Uncategorized
This post was written by on December 6, 2009
