Server Shield is a lightweight method of protecting and hardening your Linux server. It is easy to install, hard to mess up, and makes your server instantly and effortlessly resistant to many basic and advanced attacks.
Automatic security updates are enabled by default, including the self-updating of Server Shield. If you are running a modified version of Server Shield you should turn self-updating off so your changes don't get overwritten.
No maintenance required— just set it and forget it!
- Slowloris Protection
- Firewall Hardening
- TCP Hardening
- ICMP/Ping Flood Protection
- DoS Protection
- Spoof Protection
- FTP/SSH Bruteforce Protection
- Automatic Security Updates
- Disables Bash History
- DNS Amplification Protection
git clone https://github.com/Brian-Holt/server-shield
cd server-shield;chmod +x sshield;mv sshield /etc/init.d
/etc/init.d/sshield start
Server Shield depends on several pieces of open source software to function properly. If yum is available, the following packages will be silently installed and kept up to date:
- yum-security
- iptables
- nmap
- net-tools
- sed
- gawk
- git
If you're interested in helping out, fork the project and start coding! This project is young and there is a lot of room for improvement. All comments and suggestions are welcomed too.