Security

7 guides

• The ufw firewall: managing portsufw (Uncomplicated Firewall) is a simplified front end for the Linux kernel's built-in firewall (netfilter/iptables): instead of writing out long iptables chains, you describe…
• Fail2ban: protection against brute-forceSSH on any public VPS gets scanned by bots almost immediately — the authentication log quickly fills up with failed login attempts from strangers guessing passwords. Fail2ban…
• How to harden SSH on your VPSIn this article you'll set up key-based SSH login on your ForestsNet Cloud VPS instead of a password, disable password and root SSH access in sshd_config, optionally change the…
• VPS security checklist: 8 basics for a new serverA fresh VPS is set up for convenience, not defense, by default: root logs in with a password, the firewall is off, and there are no automatic updates. This checklist closes eight…
• iptables basicsiptables is the classic Linux firewall tool: it decides which packets to let through and which to drop by running them through chains of rules. In this article you'll get familiar…
• How to block torrents on your VPN or proxyIf you share access to your VPS through a VPN or a proxy, your users' torrent traffic leaves for the internet from your IP address — and the copyright complaints land on you. In…
• A torrent detector for Remnawave: catching what the built-in blocker missesThe built-in Torrent Blocker in a Remnawave node relies on the xray sniffer, and that sniffer only sees a small share of torrent traffic: modern clients encrypt their peer…