Brute Force Detection

Brute Force Detection

BFD -- Brute Force Detection

BFD is a shell script which parses security logs and detects authentication failures. It is a brute force implementation without much complexity, and it works in conjunction with a APF (Advanced Policy-based Firewall).

## Get the latest source and untar.
# cd /usr/src/utils
# wget http://rfxnetworks.com/downloads/bfd-current.tar.gz
# tar xfz bfd-current.tar.gz
# cd bfd-*
# ./install.sh

Read the README file, and edit the configuration file located in /usr/local/bfd/conf.bfd.
Find ALERT="0" and replace it with ALERT="1"
Find EMAIL_USR="root" and replace it with EMAIL_USR="username@yourdomain.com"

Edit /usr/local/bfd/ignore.hosts file, and add your own trusted IPs. BFD uses APF and hence it orverrides allow_hosts.rules, so it is important that you add trusted IP addresses to prevent yourself from being locked out.

## Start the program.
#  /usr/local/sbin/bfd -s

    • Related Articles

    • Howto Install B.F.D Brute Force Detection

      wget http://oratoronline.com/how2/BFD/bfd-current.tar.gz tar -xvzf bfd-current.tar.gz cd bfd-0.7 ./install.sh
    • How can I Improve Spam Detection?

      VMA have made some pretty major changes to our spam filtering system recently we are now running emails through various systems (like Barracuda, SpamCop & SpamHaus etc) that will facilitate the removal of spam. To improve the filtering of your ...
    • How to increase your subscriber engagement

      Follow this strategy to improve your engagement rates. One misconception that is prevalent among email marketers is that overall volume is the most important part of an email campaign. The thinking is that "the more emails I send - the more people ...
    • Mysql Basic Commands

      [mysql dir]/bin/mysql -h hostname -u root -p Create a database on the sql server. create database [databasename]; List all databases on the sql server. show databases; Switch to a database. use [db name]; To see all the tables in the db. show tables; ...
    • IMAP Synchronisation Issues in Office 365 and Outlook 2013

      The problem might not be in the way you have configured your IMAP account on Outlook 2013, but it might be in some update or plug-in installed recently. Microsoft frequently releases updates for its products, aiming for enhanced the user experience. ...