SSH is the primary remote administration protocol for Linux servers. A default SSH configuration leaves many attack vectors open: root login, password authentication, and broad listening options. This guide hardens SSH on Ubuntu 26.04 LTS using key-based authentication, restricted access, and fail2ban. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS SSH access […]
WireGuard is a modern, high-performance VPN protocol built into the Linux kernel. It is faster and simpler than OpenVPN and IPsec, using state-of-the-art cryptography. This guide sets up a WireGuard VPN server on Ubuntu 26.04 LTS and connects a client. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS server with a public […]
ClamAV is the most popular open-source antivirus engine for Linux. While Linux malware is less common than on other platforms, ClamAV is valuable for scanning files shared with Windows users, email servers, and web upload directories. This guide installs and configures ClamAV on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu […]
AppArmor (Application Armor) is a Linux kernel security module that restricts program capabilities using per-program profiles. It is enabled by default on Ubuntu and provides Mandatory Access Control (MAC) to contain the blast radius of exploited applications. This guide manages AppArmor profiles on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu […]
Lynis is an open-source security auditing tool for Linux systems. It performs in-depth security scans of the system configuration, checks for vulnerabilities, and provides detailed hardening recommendations with a scored report. This guide runs a Lynis audit on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS A user with […]
Two-factor authentication (2FA) for SSH adds an extra layer of security by requiring both your SSH key and a time-based one-time password (TOTP) from an authenticator app. This guide configures 2FA for SSH using Google Authenticator PAM on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS SSH access with […]
iptables is the traditional Linux packet filtering framework. While UFW provides a simplified interface, understanding iptables directly is valuable for advanced firewall rules, NAT, port forwarding, and Docker networking. This guide configures iptables on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS A user with sudo privileges Basic networking […]
rkhunter (Rootkit Hunter) is a security tool that scans for rootkits, backdoors, and local exploits on Linux systems. It checks for known malware, suspicious file attributes, hidden files, and unusual system configurations. This guide installs and configures rkhunter on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS A user […]
OpenSSL is a toolkit implementing the SSL/TLS protocols and providing a full-featured cryptographic library. Understanding how to generate, inspect, and manage SSL certificates is fundamental for securing web servers, APIs, and internal services. This guide covers certificate generation with OpenSSL on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS […]
Login banners and MOTD (Message of the Day) serve both legal and operational purposes: they warn unauthorised users, satisfy compliance requirements (PCI-DSS, HIPAA, SOC 2), and display important system information to admins. This guide configures SSH banners and MOTD on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS A […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions ā Specializing in Web Development, Mobile App Development, and Expert IT Services.
Ā© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
