Tips for Securing SSH in Linux Box (Securing SSH Series)

Secured Shell or SSH is a great way to enable a secure login for your UNIX / Linux Box. However there are precaution that you should take in order to properly secure SSH daemon from being scanned or attacked by script kiddies or automated bots.

This week I’m going to write a series of article on securing SSH on Ubuntu Linux Box (VPS) and I’m going to link to this post from time to time.

  1. Disable Root login, enable SSH login for a handful of users only
  2. Install and configure Fail2Ban
  3. Limit access with Firewall Rules (limit by ip block, or ip address)
  4. Limit connection rate to SSH port
  5. Disable keyboard interactive login, Use public-key login
  6. Security Security through obscurity: Hiding SSH version
  7. Security Security through obscurity: Change default SSH ports

Hope this will help in securing your Linux Box / Linux VPS

Top 5 things I do with my Ubuntu Linux

I haven’t had much time since I migrated my blog to a new VPS server. However, here is a little treat for all my readers out there. The top 5 things I do with my Ubuntu Linux:

  1. Surfing the internet
    Pretty obvious – I usually surf the internet using my Ubuntu Linux on my Desktop computer. I’ve a dual-monitor setup computer with Intel Core i5 CPU (12GB RAM), It is not a gaming pc, but I do occasionally play DOSBox games as well as Need For Speed: World from another operating system. The seamless Unity integration with the web intrigues me though, wished I had touchscreen monitor
  2. Developing Android Application
    The qemu-based Android device emulator runs nicely on Ubuntu, with no sign of lagging presents in other operating systems. Plus with 12GB of RAM, I can say that I could study and do mobile application with relative comfort. For Android 4.x development, I prefer to use the x86 images, because put less contraint on the CPU for skipping ARM-related code translation.
  3. Torrents
    Usually this is being done in parallel with other works. My current favorite bittorent client is Deluge. For some reason, I find Azureus/Vuze too cumbersome and I haven’t got around to use Transmission. I used to study bittorrent protocol in my spare time, but has since abandoned it when I realise that I’ve not much time to spend on side-projects anymore.
  4. Writing Manual
    I’m now in the process of writing a Lab Manual for those who just begining to learn about Mobile Computing. Although I wouldn’t call myself as an expert, I think every little bit of knowledge-sharing helps. I’ll promise I’ll share my progress with all of you sometimes at the end of the year. Though, I usually prepare my academic papers using Latex (IEEE templates), I choose to write my manual in LibreOffice, for reasons that I’m more familiar with WYSIWYG word-processor, plus, the publisher would prefer to receive the written manuscript in OpenDocument or Microsoft OpenXML file.
  5. Internet Radio
    Though I rarely if ever listen to MP3 in portable devices, I do listen to internet radio station from Rhythmbox. There are sizeable collection of preset Internet Radio station in Rhythmbox according to genre and age-group. I prefer to listen to trance or easy-listening radio stations.

There you go, the top 5 things that I usually do with my Ubuntu Linux. Nothing fancy, just that I prefer to use Ubuntu for reasons of application development. I’m a terminal-emulator typed guy. I prefer to switch/change the environmental settings using terminal emulator, something I find very easy to do in Ubuntu (or any GNU/Linux distribution for that matter).

Until next time…

No Official pre-press Ubuntu 13.04 CD/DVD will be distributed by Canonical

Previously as an effort to promote Ubuntu and Free Software, Canonical has made pre-pressed CD/DVD available for LoCo team to be distributed during release party or promo events.

But starting from Ubuntu 13.04 (Raring Ringtail), pre-pressed Ubuntu CD/DVD will only be made available only for LTS release (the next one will be 14.04 LTS ) from this point forward. This is in-line with Canonical policy to only concentrate on supporting Ubuntu LTS.

In the mean time, Canonical will continue to provide pre-pressed Ubuntu 12.04 LTS CD/DVD to Ubuntu LoCo until 14.04 LTS release in 2014.

source: Ubuntu Loco Council

Why I’m have not become an Ubuntu Member

By this time, I’ve already received dozens of question regarding why I’ve not applied to be an Ubuntu Member.

First and foremost, being an Ubuntu Member is cool. It is about being part of the greater Ubuntu Community officially. Being an Ubuntu members grants certain privileges such as username@ubuntu.com email address and the privilege of having personal blog featured in the Ubuntu Planet.

However, I still have not applied or planned to apply to become an Ubuntu Member anytime soon, as I felt that being an Ubuntu Member carries great weight and responsibility towards the community, something that I felt in my current state would be difficult to do, since I hardly have extra spare time nowadays (so does the hiatus).

Secondly, as the Ubuntu Membership page have cleared out, Membership is not required for contribution, but contribution is required for membership. While I did contribute towards the Ubuntu community, I still thinks that Ubuntu community comes second place than my day-to-day responsibilities. I still felt that I couldn’t do much to deserves being an Ubuntu Member, therefore I elect to be an ordinary user who occasionally contributes back to the Free Software community.

Finally, all of you should note that this is my personal opinion and I still think being an Ubuntu Member is a good thing, I even encourage you to apply for it! However, as for me, I’m still going to hold off my thoughts of becoming one until I can find a valid reason to do so.

Cheers!

Canonical reduces support length for Non-LTS Ubuntu releases

Canonical has decided on reduces the official support for non-LTS Ubuntu releases to NINE(9) months starting with the upcoming Ubuntu 13.04 release

As for my personal opinion, this changes is long overdue since 18 month support time for a SIX(6)-month cycle release can be considered as long, thus it is better to invest those precious time and effort into producing newer Ubuntu release.

These changes has been voted with presence of Ubuntu Technical Board and will be effective starting with Ubuntu 13.04 Raring Ringtail onwards.