Psad: Instalasi: Difference between revisions
From OnnoCenterWiki
Jump to navigationJump to search
Onnowpurbo (talk | contribs) No edit summary |
Onnowpurbo (talk | contribs) |
||
| Line 29: | Line 29: | ||
psad --sig-update | psad --sig-update | ||
psad -H | psad -H | ||
Setelah psad --sig-update signature akan di letakan di | |||
/etc/psad/signatures | |||
Cek status | Cek status | ||
psad --Status | psad --Status | ||
==Referensi== | ==Referensi== | ||
Revision as of 10:14, 2 June 2015
Install
apt-get update apt-get install psad
Edit File Konfigurasi
vi /etc/psad/psad.conf
Edit
EMAIL_ADDRESSES HOSTNAME ENABLE_AUTO_IDS - set ke Y jika anda ingin PSAD men-set firewall automatis. ENABLE_AUTO_IDS_EMAILS - set ke Y jika anda ingin menerima email notifikasi.
Tambahkan LOG rules ke iptables
iptables -A INPUT -j LOG iptables -A FORWARD -j LOG ip6tables -A INPUT -j LOG ip6tables -A FORWARD -j LOG
Reload & update PSAD
psad -R psad --sig-update psad -H
Setelah psad --sig-update signature akan di letakan di
/etc/psad/signatures
Cek status
psad --Status
