document/TranslateProject
2
0
Fork 0
mirror of https://github.com/LCTT/TranslateProject.git synced 2025-01-25 23:11:02 +08:00
Code Issues Packages Projects Releases Wiki Activity

translated

Browse Source
This commit is contained in:
theo-l 2015-03-12 21:22:46 -03:00
parent e89e7c26b6
commit 8703f2f617
1 changed files with 8 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
sources/tech/20150310 How To Get Email Alerts for SSH Login on Linux Server.md → translated/tech/20150310 How To Get Email Alerts for SSH Login on Linux Server.md
View File

@ -1,32 +1,27 @@
theo-l translating
How To Get Email Alerts for SSH Login on Linux Server
在Linux服务器上如何为SSH登陆获取Email警告
================================================================================
![](http://www.ehowstuff.com/wp-content/uploads/2015/03/fail2ban-security.jpg)
Enable SSH server on a virtual private server (VPS) will expose the server to the internet and provide opportunities for hacking activities, especially when VPS still using root as a primary access. VPS should be configured with a email alert automatically to each successful login attempts via SSH server . VPS server owner shall be notified of any SSH server access log, such as who, when and which source IP address. This is an important security concern for server owners to protect the server from unknown login attempts. This is because if hackers use brute force to log into your VPS via ssh then it can be very dangerous. In this article, I will explain how to set up an email alert to all SSH login users on linux CentOS 6, CentOS 7, RHEL 6 and RHEL 7.
让SSH服务器在虚拟私有服务器(VPS)上生效会使得该服务器暴露到互联网中并为黑客活动提供了机会,尤其时当VPS还将root作为主要访问时. VPS应该为每次通过SSH服务器成功登陆尝试配置一个自动的email警告. VPS的服务器所有者应该在任何的SSH服务器访问时得到通知,例如登陆者,登陆时间以及IP地址等信息.这是一个对于服务器拥有者保护服务器避免未知登陆尝试的非常重要的安全关注点.因为如果黑客使用暴力破解方式通过SSH来登陆你的VPS,那么后果很严重.在本文中,我会解释如何在CentOS 6, CentOS 7, RHEL 6 和 RHEL 7上为所有的SSH用户登陆设置一个email警告.
1. Login to your server as root user :
1. 使用root用户登陆到你的服务器:
2. Configure at alert from source global definitions (/etc/bashrc). This will enabled for root and normal users :
2. 在全局源定义处配置警告（/etc/bashrc），这样就会对跟用户以及普通用户都生效：
[root@vps ~]# vi /etc/bashrc
Add the following at the bottom of the files.
将下面的内容加入到上述文件的尾部。
echo 'ALERT - Root Shell Access (vps.ehowstuff.com) on:' `date` `who` | mail -s "Alert: Root Access from `who | cut -d'(' -f2 | cut -d')' -f1`" recipient@gmail.com
3. Optionally you can enable alert for root only :
3.你也可以选择性地让警告只对跟用户生效：
[root@vps ~]# vi .bashrc
Add the following at the bottom of /root/.bashrc :
将下面的内容添加到/root/.bashrc的为尾部：
echo 'ALERT - Root Shell Access (vps.ehowstuff.com) on:' `date` `who` | mail -s "Alert: Root Access from `who | cut -d'(' -f2 | cut -d')' -f1`" recipient@gmail.com
Full Configuration file example :
整个配置文件样例：
# .bashrc
@ -42,11 +37,11 @@ Full Configuration file example :
fi
echo 'ALERT - Root Shell Access (vps.ehowstuff.com) on:' `date` `who` | mail -s "Alert: Root Access from `who | cut -d'(' -f2 | cut -d')' -f1`" recipient@gmail.com
4. Optionally you can enable alert for specify normal user (e.g skytech ) :
4.你也可以选择性地让警告只对特定的普通用户生效（例如 skytech）：
[root@vps ~]# vi /home/skytech/.bashrc
Add the following at the bottom of /home/skytech/.bashrc :
将下面的内容加入到/home/skytech/.bashrc文件尾部：
echo 'ALERT - Root Shell Access (vps.ehowstuff.com) on:' `date` `who` | mail -s "Alert: Root Access from `who | cut -d'(' -f2 | cut -d')' -f1`" recipient@gmail.com
@ -55,7 +50,7 @@ Add the following at the bottom of /home/skytech/.bashrc :
via: http://www.ehowstuff.com/how-to-get-email-alerts-for-ssh-login-on-linux-server/
作者：[skytech][a]
译者：[译者ID](https://github.com/译者ID)
译者：[theo-l](https://github.com/theo-l)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创翻译，[Linux中国](http://linux.cn/) 荣誉推出