How to install and secure egroupware - Directory UMM

There is one important line in the configuration file from the SSH client. The make sure the following line
exists in your ssh_config file:
Protocol 2
This allows your clients connections with the version 2 of the SSH protocol only.
6.1.4.2.5 Securing your SSHD
For your SSH daemon you can use the following values to make it more secure:
Protocol 2
PermitRoot Login no
PubKeyAuthentication yes
Passwor dAuthentication no
PermitEmptyPassword no
6.1.5 Installing software to monitor your server logs
Analyzing your log files is a must for every administrator. When you don’t monitor your log files, you have no
chance of seeing security problems or anomalies. There are several products on the market that can help
you to monitor your log files:
logcheck
logwatch
logsurfer
Logcheck is recommended. Logcheck will work under Linux, BSD, Sun, and HP-UX. It is easy to install and
make clear reports. To install logcheck type the following from the logcheck root after you have untar’d the
file:
[ root @server logcheck-1. 1. 1]# make linux
To run it automatically, you must add a line to your crontab file. Under RedHat, it is /etc/crontab. Open the
file and add the following line:
00 * * * * root /bin/sh /usr/local/etc/logcheck.sh
Edit the logcheck shell script to add the recipient to the log report. The recipient is the value of the
SYSADMIN variable in the script.
[root@egroupware logcheck-1.1.1]# vi /usr/local/etc/logcheck.sh
To receive better detailed reports, advanced users can also edit the follow files:
logcheck.violations
logcheck.violations.ignore
logcheck.hacking
logcheck.ignore
Reiner Jung Install and Secure eGroupWare Page 27 of 67