Czy mam firewalla / anitiwirasa na tym serwerze?

[gryzzy 0]

Witam. Mam serwer VPS. Direct Admin. Ale mam wrażenie że coś jest nie tak...

 

Nie znam wszystkich firewalli i ważnych kwestii dt bezpieczenstwa. Postanowiłem "wziąć" się za serwer i go odpowiednio zabezpieczyć itp. Podaje liste zainstalowanych pakietów. Czy jest wsród nich firewall ? Czy sa jakieś pakiety które warto zainstalować w waszej opinii ? Dzięki za wszelką pomoc dla laika. System to DEBIAN Jesse.

 

+++-==============-============-============-=================================

ii acl 2.2.51-8 amd64 Access control list utilities

ii adduser 3.113+nmu3 all add and remove users and groups

ii apache2-doc 2.2.22-13+de all Apache HTTP Server documentation

ii apache2-utils 2.2.22-13+de amd64 utility programs for webservers

rc apache2.2-comm 2.2.22-13+de amd64 Apache HTTP Server common files

ii apt 0.9.7.9+deb7 amd64 commandline package manager

ii apt-transport- 0.9.7.9+deb7 amd64 https download transport for APT

ii apt-utils 0.9.7.9+deb7 amd64 package managment related utility

ii apt-xapian-ind 0.45 all maintenance and search tools for

ii aptitude 0.6.8.2-1 amd64 terminal-based package manager

ii aptitude-commo 0.6.8.2-1 all architecture indepedent files for

ii aptitude-doc-e 0.6.8.2-1 all English manual for aptitude, a te

ii autoconf 2.69-1 all automatic configure script builde

ii automake 1:1.11.6-1 all Tool for generating GNU Standards

ii autotools-dev 20120608.1 all Update infrastructure for config.

ii base-files 7.1wheezy4 amd64 Debian base system miscellaneous

ii base-passwd 3.5.26 amd64 Debian base system master passwor

ii bash 4.2+dfsg-0.1 amd64 GNU Bourne Again SHell

ii bind9 1:9.8.4.dfsg amd64 Internet Domain Name Server

ii bind9-host 1:9.8.4.dfsg amd64 Version of 'host' bundled with BI

ii bind9utils 1:9.8.4.dfsg amd64 Utilities for BIND

ii binutils 2.22-8 amd64 GNU assembler, linker and binary

ii bison 1:2.5.dfsg-2 amd64 YACC-compatible parser generator

ii bsd-mailx 8.1.2-0.2011 amd64 simple mail user agent

ii bsdmainutils 9.0.3 amd64 collection of more utilities from

ii bsdtar 3.0.4-3+whee amd64 Implementation of the 'tar' progr

ii bsdutils 1:2.20.1-5.3 amd64 Basic utilities from 4.4BSD-Lite

ii build-essentia 11.5 amd64 Informational list of build-essen

ii bzip2 1.0.6-4 amd64 high-quality block-sorting file c

ii ca-certificate 20130119+deb all Common CA certificates

ii chrpath 0.13-2 amd64 Tool to edit the rpath in ELF bin

ii cifs-utils 2:5.5-1 amd64 Common Internet File System utili

ii clamav 0.99.2+dfsg- amd64 anti-virus utility for Unix - com

ii clamav-base 0.99.2+dfsg- all anti-virus utility for Unix - bas

ii clamav-daemon 0.99.2+dfsg- amd64 anti-virus utility for Unix - sca

ii clamav-freshcl 0.99.2+dfsg- amd64 anti-virus utility for Unix - vir

ii cmake 2.8.9-1 amd64 cross-platform, open-source make

ii cmake-data 2.8.9-1 all CMake data files (modules, templa

ii comerr-dev 2.1-1.42.5-1 amd64 common error description library

ii console-common 0.7.87 all basic infrastructure for text con

ii console-data 2:1.12-2 all keymaps, fonts, charset maps, fal

ii coreutils 8.13-3.5 amd64 GNU core utilities

ii cpio 2.11+dfsg-0. amd64 GNU cpio -- a program to manage a

ii cpp 4:4.7.2-1 amd64 GNU C preprocessor (cpp)

ii cpp-4.7 4.7.2-5 amd64 GNU C preprocessor

ii cracklib-runti 2.8.19-3 amd64 runtime support for password chec

ii cron 3.0pl1-124 amd64 process scheduling daemon

ii curl 7.26.0-1+whe amd64 command line tool for transferrin

ii cvs 2:1.12.13+re amd64 Concurrent Versions System

ii cvsps 2.1-6 amd64 Tool to generate CVS patch set in

ii dash 0.5.7-3 amd64 POSIX-compliant shell

ii db-util 5.1.6 all Berkeley Database Utilities

ii db5.1-util 5.1.29-5 amd64 Berkeley v5.1 Database Utilities

ii dconf-gsetting 0.12.1-3 amd64 simple configuration storage syst

ii dconf-service 0.12.1-3 amd64 simple configuration storage syst

ii debconf 1.5.49 all Debian configuration management s

ii debconf-i18n 1.5.49 all full internationalization support

ii debconf-utils 1.5.49 all debconf utilities

ii debhelper 9.20120909 all helper programs for debian/rules

ii debian-archive 2012.4 all GnuPG archive keys of the Debian

ii debian-keyring 2013.04.21 all GnuPG keys of Debian Developers

ii debianutils 4.3.2 amd64 Miscellaneous utilities specific

ii debootstrap 1.0.48+deb7u all Bootstrap a basic Debian system

ii dialog 1.1-20120215 amd64 Displays user-friendly dialog box

ii diffutils 1:3.2-6 amd64 File comparison utilities

ii dirmngr 1.1.0-3 amd64 server for managing certificate r

ii dpkg 1.16.12 amd64 Debian package management system

ii dpkg-dev 1.16.12 all Debian package development tools

ii dselect 1.16.12 amd64 Debian package management front-e

ii e2fslibs:amd64 1.42.5-1.1 amd64 ext2/ext3/ext4 file system librar

ii e2fsprogs 1.42.5-1.1 amd64 ext2/ext3/ext4 file system utilit

ii ed 1.6-2 amd64 classic UNIX line editor

ii emacs 45.0 all GNU Emacs editor (metapackage)

ii emacs23 23.4+1-4 amd64 The GNU Emacs editor (with GTK+ u

ii emacs23-bin-co 23.4+1-4 amd64 The GNU Emacs editor's shared, ar

ii emacs23-common 23.4+1-4 all The GNU Emacs editor's shared, ar

ii emacsen-common 2.0.5 all Common facilities for all emacsen

ii esound-common 0.2.41-10 all Enlightened Sound Daemon - Common

ii exim 4.80.1-1 amd64 Exim with the exiscan patch

ii expat 2.1.0-1+deb7 amd64 XML parsing C library - example a

ii fetchmail 6.3.21-4 amd64 SSL enabled POP3, APOP, IMAP mail

ii fftw-dev 2.1.5-1 amd64 library for computing Fast Fourie

ii fftw2 2.1.5-1 amd64 library for computing Fast Fourie

ii fgetty 0.6-5 amd64 very small, efficient, console-on

ii file 5.11-2+deb7u amd64 Determines file type using "magic

ii findutils 4.4.2-4 amd64 utilities for finding files--find

ii finger 0.17-15 amd64 user information lookup program

ii flex 2.5.35-10.1 amd64 A fast lexical analyzer generator

ii fontconfig 2.9.0-7.1 amd64 generic font configuration librar

ii fontconfig-con 2.9.0-7.1 all generic font configuration librar

ii fonts-freefont 20120503-1 all Freefont Serif, Sans and Mono Tru

ii freeglut3:i386 2.6.0-4 i386 OpenGL Utility Toolkit

ii ftp 0.17-27 amd64 classical file transfer client

ii g++ 4:4.7.2-1 amd64 GNU C++ compiler

ii g++-4.7 4.7.2-5 amd64 GNU C++ compiler

ii gawk 1:4.0.1+dfsg amd64 GNU awk, a pattern scanning and p

ii gcc 4:4.7.2-1 amd64 GNU C compiler

ii gcc-4.7 4.7.2-5 amd64 GNU C compiler

ii gcc-4.7-base:a 4.7.2-5 amd64 GCC, the GNU Compiler Collection

ii gcc-4.7-base:i 4.7.2-5 i386 GCC, the GNU Compiler Collection

ii gconf-service 3.2.5-1+buil amd64 GNOME configuration database syst

ii gconf2-common 3.2.5-1+buil all GNOME configuration database syst

ii geoip-bin 1.4.8+dfsg-3 amd64 IP lookup command line tools that

ii geoip-database 1.8 all GeoLite binary database (download

ii gettext 0.18.1.1-9 amd64 GNU Internationalization utilitie

ii gettext-base 0.18.1.1-9 amd64 GNU Internationalization utilitie

ii ghostscript 9.05~dfsg-6. amd64 interpreter for the PostScript la

ii gir1.2-freedes 1.32.1-1 amd64 Introspection data for some FreeD

ii gir1.2-gdkpixb 2.26.1-1 amd64 GDK Pixbuf library - GObject-Intr

ii gir1.2-glib-2. 1.32.1-1 amd64 Introspection data for GLib, GObj

ii gir1.2-pango-1 1.30.0-1 amd64 Layout and rendering of internati

ii gir1.2-rsvg-2. 2.36.1-2 amd64 gir files for renderer library fo

ii git 1:1.7.10.4-1 amd64 fast, scalable, distributed revis

ii git-all 1:1.7.10.4-1 all fast, scalable, distributed revis

ii git-arch 1:1.7.10.4-1 all fast, scalable, distributed revis

ii git-cvs 1:1.7.10.4-1 all fast, scalable, distributed revis

ii git-daemon-run 1:1.7.10.4-1 all fast, scalable, distributed revis

ii git-doc 1:1.7.10.4-1 all fast, scalable, distributed revis

ii git-el 1:1.7.10.4-1 all fast, scalable, distributed revis

ii git-email 1:1.7.10.4-1 all fast, scalable, distributed revis

ii git-gui 1:1.7.10.4-1 all fast, scalable, distributed revis

ii git-man 1:1.7.10.4-1 all fast, scalable, distributed revis

ii git-svn 1:1.7.10.4-1 all fast, scalable, distributed revis

ii gitk 1:1.7.10.4-1 all fast, scalable, distributed revis

ii gitweb 1:1.7.10.4-1 all fast, scalable, distributed revis

ii gnupg 1.4.12-7+deb amd64 GNU privacy guard - a free PGP re

ii gpgv 1.4.12-7+deb amd64 GNU privacy guard - signature ver

ii graphicsmagick 1.3.16-1.1 amd64 collection of image processing to

ii graphicsmagick 1.3.16-1.1 all image processing tools providing

ii grep 2.12-2 amd64 GNU grep, egrep and fgrep

ii groff-base 1.21-9 amd64 GNU troff text-formatting system

ii gsfonts 1:8.11+urwcy all Fonts for the Ghostscript interpr

ii gzip 1.5-1.1 amd64 GNU compression utilities

ii hardening-wrap 2.2 amd64 Compiler wrapper to enable securi

ii hicolor-icon-t 0.12-1 all default fallback theme for FreeDe

ii hostname 3.11 amd64 utility to set/show the host name

ii html2text 1.3.2a-15 amd64 advanced HTML to text converter

ii htop 1.0.1-1 amd64 interactive processes viewer

ii ifupdown 0.7.8 amd64 high level tools to configure net

ii info 4.13a.dfsg.1 amd64 Standalone GNU Info documentation

ii initramfs-tool 0.109.1 all generic modular initramfs generat

ii initscripts 2.88dsf-41+d amd64 scripts for initializing and shut

ii insserv 1.14.0-5 amd64 boot sequence organizer using LSB

ii install-info 4.13a.dfsg.1 amd64 Manage installed documentation in

ii intltool-debia 0.35.0+20060 all Help i18n of RFC822 compliant con

ii iproute 20120521-3+b amd64 networking and traffic control to

ii iptables 1.4.14-3.1 amd64 administration tools for packet f

ii iputils-arping 3:20101006-1 amd64 Tool to send ICMP echo requests t

ii iputils-ping 3:20101006-1 amd64 Tools to test the reachability of

ii iputils-tracep 3:20101006-1 amd64 Tools to trace the network path t

ii isc-dhcp-clien 4.2.2.dfsg.1 amd64 ISC DHCP client

ii isc-dhcp-commo 4.2.2.dfsg.1 amd64 common files used by all the isc-

ii iso-codes 3.41-1 all ISO language, territory, currency

ii kbd 1.15.3-9 amd64 Linux console font and keytable u

ii klibc-utils 2.0.1-3.1 amd64 small utilities built with klibc

ii kmod 9-3 amd64 tools for managing Linux kernel m

ii krb5-multidev 1.10.1+dfsg- amd64 Development files for MIT Kerbero

ii ldap-utils 2.4.31-1+nmu amd64 OpenLDAP utilities

ii less 444-4 amd64 pager program similar to more

ii lesstif2:i386 1:0.95.2-1.1 i386 OSF/Motif 2.1 implementation rele

ii libacl1:amd64 2.2.51-8 amd64 Access control list shared librar

ii libacl1:i386 2.2.51-8 i386 Access control list shared librar

ii libaio-dev 0.3.109-3 amd64 Linux kernel AIO access library -

ii libaio1:amd64 0.3.109-3 amd64 Linux kernel AIO access library -

ii libaio1:i386 0.3.109-3 i386 Linux kernel AIO access library -

ii libapr1 1.4.6-3+deb7 amd64 Apache Portable Runtime Library

ii libaprutil1 1.4.1-3 amd64 Apache Portable Runtime Utility L

ii libaprutil1-db 1.4.1-3 amd64 Apache Portable Runtime Utility L

ii libaprutil1-ld 1.4.1-3 amd64 Apache Portable Runtime Utility L

ii libapt-inst1.5 0.9.7.9+deb7 amd64 deb package format runtime librar

ii libapt-pkg4.12 0.9.7.9+deb7 amd64 package managment runtime library

ii libarchive12:a 3.0.4-3+whee amd64 Multi-format archive and compress

ii libasound2:amd 1.0.25-4 amd64 shared library for ALSA applicati

ii libasound2:i38 1.0.25-4 i386 shared library for ALSA applicati

ii libasprintf0c2 0.18.1.1-9 amd64 GNU library to use fprintf and fr

ii libassuan0:amd 2.0.3-1 amd64 IPC library for the GnuPG compone

ii libasyncns0:i3 0.8-4 i386 Asynchronous name service query l

ii libatk1.0-0:am 2.4.0-2 amd64 ATK accessibility toolkit

ii libatk1.0-data 2.4.0-2 all Common files for the ATK accessib

ii libattr1:amd64 1:2.4.46-8 amd64 Extended attribute shared library

ii libattr1:i386 1:2.4.46-8 i386 Extended attribute shared library

ii libaudio2:i386 1.9.3-5wheez i386 Network Audio System - shared lib

ii libaudiofile1: 0.3.4-2 i386 Open-source version of SGI's audi

ii libauthen-sasl 2.1500-1 all Authen::SASL - SASL Authenticatio

ii libavahi-clien 0.6.31-2 amd64 Avahi client library

ii libavahi-clien 0.6.31-2 i386 Avahi client library

ii libavahi-commo 0.6.31-2 amd64 Avahi common data files

ii libavahi-commo 0.6.31-2 i386 Avahi common data files

ii libavahi-commo 0.6.31-2 amd64 Avahi common library

ii libavahi-commo 0.6.31-2 i386 Avahi common library

ii libbind9-80 1:9.8.4.dfsg amd64 BIND9 Shared Library used by BIND

ii libbison-dev:a 1:2.5.dfsg-2 amd64 YACC-compatible parser generator

ii libblkid1:amd6 2.20.1-5.3 amd64 block device id library

ii libboost-iostr 1.49.0-3.2 amd64 Boost.Iostreams Library

ii libbsd0:amd64 0.4.2-1 amd64 utility functions from BSD system

ii libbsd0:i386 0.4.2-1 i386 utility functions from BSD system

ii libbz2-1.0:amd 1.0.6-4 amd64 high-quality block-sorting file c

ii libbz2-dev:amd 1.0.6-4 amd64 high-quality block-sorting file c

ii libc-bin 2.13-38+deb7 amd64 Embedded GNU C Library: Binaries

ii libc-client200 8:2007f~dfsg amd64 c-client library for mail protoco

ii libc-client200 8:2007f~dfsg amd64 c-client library for mail protoco

ii libc-dev-bin 2.13-38+deb7 amd64 Embedded GNU C Library: Developme

ii libc6:amd64 2.13-38+deb7 amd64 Embedded GNU C Library: Shared li

ii libc6:i386 2.13-38+deb7 i386 Embedded GNU C Library: Shared li

ii libc6-dev:amd6 2.13-38+deb7 amd64 Embedded GNU C Library: Developme

ii libcaca0:i386 0.99.beta18- i386 colour ASCII art library

ii libcairo-gobje 1.12.2-3 amd64 The Cairo 2D vector graphics libr

ii libcairo-scrip 1.12.2-3 amd64 The Cairo 2D vector graphics libr

ii libcairo2:amd6 1.12.2-3 amd64 The Cairo 2D vector graphics libr

ii libcairo2-dev 1.12.2-3 amd64 Development files for the Cairo 2

ii libcap-dev:amd 1:2.22-1.2 amd64 development libraries and header

ii libcap2:amd64 1:2.22-1.2 amd64 support for getting/setting POSIX

ii libcap2:i386 1:2.22-1.2 i386 support for getting/setting POSIX

ii libcap2-bin 1:2.22-1.2 amd64 basic utility programs for using

ii libclamav7 0.99.2+dfsg- amd64 anti-virus utility for Unix - lib

ii libclass-acces 0.34-1 all Perl module that automatically ge

ii libclass-isa-p 0.36-3 all report the search path for a clas

ii libcolord1:amd 0.1.21-1 amd64 system service to manage device c

ii libcomerr2:amd 1.42.5-1.1 amd64 common error description library

ii libcomerr2:i38 1.42.5-1.1 i386 common error description library

ii libcrack2 2.8.19-3 amd64 pro-active password checker libra

ii libcroco3:amd6 0.6.6-2 amd64 Cascading Style Sheet (CSS) parsi

ii libcups2:amd64 1.5.3-5+deb7 amd64 Common UNIX Printing System -

ii libcups2:i386 1.5.3-5+deb7 i386 Common UNIX Printing System -

ii libcupsimage2: 1.5.3-5+deb7 amd64 Common UNIX Printing System -

ii libcurl3:amd64 7.26.0-1+whe amd64 easy-to-use client-side URL trans

rc libcurl3:i386 7.26.0-1+whe i386 easy-to-use client-side URL trans

ii libcurl3-gnutl 7.26.0-1+whe amd64 easy-to-use client-side URL trans

ii libcwidget3 0.5.16-3.4 amd64 high-level terminal interface lib

ii libdatrie1:amd 0.2.5-3 amd64 Double-array trie library

ii libdb-dev:amd6 5.1.6 amd64 Berkeley Database Libraries [deve

ii libdb5.1:amd64 5.1.29-5 amd64 Berkeley v5.1 Database Libraries

ii libdb5.1:i386 5.1.29-5 i386 Berkeley v5.1 Database Libraries

ii libdb5.1-dev 5.1.29-5 amd64 Berkeley v5.1 Database Libraries

ii libdbd-sqlite3 1.37-1 amd64 Perl DBI driver with a self-conta

ii libdbi-perl 1.622-1+deb7 amd64 Perl Database Interface (DBI)

ii libdbus-1-3:am 1.6.8-1+deb7 amd64 simple interprocess messaging sys

ii libdbus-1-3:i3 1.6.8-1+deb7 i386 simple interprocess messaging sys

ii libdbus-glib-1 0.100.2-1 amd64 simple interprocess messaging sys

ii libdconf0:amd6 0.12.1-3 amd64 simple configuration storage syst

ii libdigest-hmac 1.03+dfsg-1 all module for creating standard mess

ii libdirectfb-1. 1.2.10.0-5 i386 direct frame buffer graphics - sh

ii libdjvulibre-d 3.5.25.3-1 amd64 Development files for the DjVu im

ii libdjvulibre-t 3.5.25.3-1 all Linguistic support files for libd

ii libdjvulibre21 3.5.25.3-1 amd64 Runtime support for the DjVu imag

ii libdns88 1:9.8.4.dfsg amd64 DNS Shared Library used by BIND

ii libdpkg-perl 1.16.12 all Dpkg perl modules

ii libdrm-intel1: 2.4.40-1~deb amd64 Userspace interface to intel-spec

ii libdrm-intel1: 2.4.40-1~deb i386 Userspace interface to intel-spec

ii libdrm-nouveau 2.4.40-1~deb i386 Userspace interface to nouveau-sp

ii libdrm-radeon1 2.4.40-1~deb amd64 Userspace interface to radeon-spe

ii libdrm-radeon1 2.4.40-1~deb i386 Userspace interface to radeon-spe

ii libdrm2:amd64 2.4.40-1~deb amd64 Userspace interface to kernel DRM

ii libdrm2:i386 2.4.40-1~deb i386 Userspace interface to kernel DRM

ii libedit2:amd64 2.11-2008061 amd64 BSD editline and history librarie

ii libedit2:i386 2.11-2008061 i386 BSD editline and history librarie

ii libelf1 0.152-1+whee amd64 library to read and write ELF fil

ii libemail-valid 0.190-1 all Perl module for checking the vali

ii libencode-loca 1.03-1 all utility to determine the locale e

ii libept1.4.12 1.0.9 amd64 High-level library for managing D

ii liberror-perl 0.17-1 all Perl module for error/exception h

ii libesd0:i386 0.2.41-10+b1 i386 Enlightened Sound Daemon - Shared

ii libexif-dev 0.6.20-3 amd64 library to parse EXIF files (deve

ii libexif12:amd6 0.6.20-3 amd64 library to parse EXIF files

ii libexif12:i386 0.6.20-3 i386 library to parse EXIF files

ii libexpat1:amd6 2.1.0-1+deb7 amd64 XML parsing C library - runtime l

ii libexpat1:i386 2.1.0-1+deb7 i386 XML parsing C library - runtime l

ii libexpat1-dev 2.1.0-1+deb7 amd64 XML parsing C library - developme

ii libffi5:amd64 3.0.10-3 amd64 Foreign Function Interface librar

ii libffi5:i386 3.0.10-3 i386 Foreign Function Interface librar

ii libfile-copy-r 0.38-1 all Perl extension for recursively co

ii libfile-listin 6.04-1 all module to parse directory listing

ii libflac8:i386 1.2.1-6 i386 Free Lossless Audio Codec - runti

ii libfltk1.1:i38 1.1.10-14 i386 Fast Light Toolkit - shared libra

ii libfont-afm-pe 1.20-1 all Font::AFM - Interface to Adobe Fo

ii libfontconfig1 2.9.0-7.1 amd64 generic font configuration librar

ii libfontconfig1 2.9.0-7.1 i386 generic font configuration librar

ii libfontconfig1 2.9.0-7.1 amd64 generic font configuration librar

ii libfreetype6:a 2.4.9-1.1 amd64 FreeType 2 font engine, shared li

ii libfreetype6:i 2.4.9-1.1 i386 FreeType 2 font engine, shared li

ii libfreetype6-d 2.4.9-1.1 amd64 FreeType 2 font engine, developme

ii libfribidi0:am 0.19.2-3 amd64 Free Implementation of the Unicod

ii libgcc1:amd64 1:4.7.2-5 amd64 GCC support library

ii libgcc1:i386 1:4.7.2-5 i386 GCC support library

ii libgconf-2-4:a 3.2.5-1+buil amd64 GNOME configuration database syst

ii libgcrypt11:am 1.5.0-5+deb7 amd64 LGPL Crypto library - runtime lib

ii libgcrypt11:i3 1.5.0-5+deb7 i386 LGPL Crypto library - runtime lib

ii libgcrypt11-de 1.5.0-5+deb7 amd64 LGPL Crypto library - development

ii libgd2-noxpm:a 2.0.36~rc1~d amd64 GD Graphics Library version 2 (wi

rc libgd2-xpm:i38 2.0.36~rc1~d i386 GD Graphics Library version 2

ii libgdbm3:amd64 1.8.3-11 amd64 GNU dbm database routines (runtim

ii libgdbm3:i386 1.8.3-11 i386 GNU dbm database routines (runtim

ii libgdk-pixbuf2 2.26.1-1 amd64 GDK Pixbuf library

ii libgdk-pixbuf2 2.26.1-1 all GDK Pixbuf library - data files

ii libgdk-pixbuf2 2.26.1-1 amd64 GDK Pixbuf library (development f

ii libgeoip-dev 1.4.8+dfsg-3 amd64 Development files for the GeoIP l

ii libgeoip1 1.4.8+dfsg-3 amd64 non-DNS IP-to-country resolver li

ii libgettextpo0: 0.18.1.1-9 amd64 GNU Internationalization library

ii libgfortran3:a 4.7.2-5 amd64 Runtime library for GNU Fortran a

ii libgif4 4.1.6-10+deb amd64 library for GIF images (library)

ii libgirepositor 1.32.1-1 amd64 Library for handling GObject intr

ii libgl1-mesa-dr 8.0.5-4+deb7 i386 free implementation of the OpenGL

ii libgl1-mesa-gl 8.0.5-4+deb7 i386 free implementation of the OpenGL

ii libglapi-mesa: 8.0.5-4+deb7 i386 free implementation of the GL API

ii libglib2.0-0:a 2.33.12+real amd64 GLib library of C routines

ii libglib2.0-bin 2.33.12+real amd64 Programs for the GLib library

ii libglib2.0-dat 2.33.12+real all Common files for GLib library

ii libglib2.0-dev 2.33.12+real amd64 Development files for the GLib li

ii libglu1-mesa:i 8.0.5-4+deb7 i386 Mesa OpenGL utility library (GLU)

ii libgmp10:amd64 2:5.0.5+dfsg amd64 Multiprecision arithmetic library

ii libgnutls26:am 2.12.20-8+de amd64 GNU TLS library - runtime library

ii libgnutls26:i3 2.12.20-8+de i386 GNU TLS library - runtime library

ii libgomp1:amd64 4.7.2-5 amd64 GCC OpenMP (GOMP) support library

ii libgpg-error-d 1.10-3.1 amd64 library for common error values a

ii libgpg-error0: 1.10-3.1 amd64 library for common error values a

ii libgpg-error0: 1.10-3.1 i386 library for common error values a

rc libgphoto2-2:i 2.4.14-2 i386 gphoto2 digital camera library

ii libgphoto2-por 2.4.14-2 i386 gphoto2 digital camera port libra

ii libgpm2:amd64 1.20.4-6 amd64 General Purpose Mouse - shared li

ii libgraphicsmag 1.3.16-1.1 amd64 format-independent image processi

ii libgs9 9.05~dfsg-6. amd64 interpreter for the PostScript la

ii libgs9-common 9.05~dfsg-6. all interpreter for the PostScript la

ii libgssapi-krb5 1.10.1+dfsg- amd64 MIT Kerberos runtime libraries -

ii libgssapi-krb5 1.10.1+dfsg- i386 MIT Kerberos runtime libraries -

ii libgssglue1:am 0.4-2 amd64 mechanism-switch gssapi library

ii libgssrpc4:amd 1.10.1+dfsg- amd64 MIT Kerberos runtime libraries -

ii libgtk-3-0:amd 3.4.2-7 amd64 GTK+ graphical user interface lib

ii libgtk-3-commo 3.4.2-7 all common files for the GTK+ graphic

ii libgtk2.0-0:am 2.24.10-2 amd64 GTK+ graphical user interface lib

ii libgtk2.0-bin 2.24.10-2 amd64 programs for the GTK+ graphical u

ii libgtk2.0-comm 2.24.10-2 all common files for the GTK+ graphic

ii libhtml-form-p 6.03-1 all module that represents an HTML fo

ii libhtml-format 2.10-1 all module for transforming HTML into

ii libhtml-parser 3.69-2 amd64 collection of modules that parse

ii libhtml-tagset 3.20-2 all Data tables pertaining to HTML

ii libhtml-templa 2.91-1 all module for using HTML templates w

ii libhtml-tree-p 5.02-1 all Perl module to represent and crea

ii libhttp-cookie 6.00-2 all HTTP cookie jars

ii libhttp-daemon 6.01-1 all simple http server class

ii libhttp-date-p 6.02-1 all module of date conversion routine

ii libhttp-messag 6.03-1 all perl interface to HTTP style mess

ii libhttp-negoti 6.00-2 all implementation of content negotia

ii libibverbs1 1.1.6-1 amd64 Library for direct userspace use

ii libice-dev:amd 2:1.0.8-2 amd64 X11 Inter-Client Exchange library

ii libice6:amd64 2:1.0.8-2 amd64 X11 Inter-Client Exchange library

ii libice6:i386 2:1.0.8-2 i386 X11 Inter-Client Exchange library

ii libidn11:amd64 1.25-2 amd64 GNU Libidn library, implementatio

ii libidn11:i386 1.25-2 i386 GNU Libidn library, implementatio

ii libieee1284-3: 0.2.11-10 i386 cross-platform library for parall

ii libijs-0.35 0.35-8 amd64 IJS raster image transport protoc

ii libilmbase-dev 1.0.1-4 amd64 development files for IlmBase

ii libilmbase6 1.0.1-4 amd64 several utility libraries from IL

ii libio-socket-i 0.16-2 all module for using IPv4 and IPv6 so

ii libio-socket-s 1.76-2 all Perl module implementing object o

ii libio-string-p 1.08-2 all Emulate IO::File interface for in

ii libisc84 1:9.8.4.dfsg amd64 ISC Shared Library used by BIND

ii libisccc80 1:9.8.4.dfsg amd64 Command Channel Library used by B

ii libisccfg82 1:9.8.4.dfsg amd64 Config File Handling Library used

ii libitm1:amd64 4.7.2-5 amd64 GNU Transactional Memory Library

ii libjack-jackd2 1.9.8~dfsg.4 i386 JACK Audio Connection Kit (librar

ii libjasper-dev 1.900.1-13 amd64 Development files for the JasPer

ii libjasper1:amd 1.900.1-13 amd64 JasPer JPEG-2000 runtime library

ii libjbig-dev:am 2.0-2 amd64 JBIGkit development files

ii libjbig0:amd64 2.0-2 amd64 JBIGkit libraries

ii libjbig0:i386 2.0-2 i386 JBIGkit libraries

ii libjbig2dec0 0.11+2012012 amd64 JBIG2 decoder library - shared li

ii libjpeg62:i386 6b1-3 i386 Independent JPEG Group's JPEG run

ii libjpeg8:amd64 8d-1 amd64 Independent JPEG Group's JPEG run

ii libjpeg8:i386 8d-1 i386 Independent JPEG Group's JPEG run

ii libjpeg8-dev:a 8d-1 amd64 Development files for the IJG JPE

ii libjs-jquery 1.7.2+dfsg-1 all JavaScript library for dynamic we

ii libjson0:amd64 0.10-1.2 amd64 JSON manipulation library - share

ii libjson0:i386 0.10-1.2 i386 JSON manipulation library - share

ii libk5crypto3:a 1.10.1+dfsg- amd64 MIT Kerberos runtime libraries -

ii libk5crypto3:i 1.10.1+dfsg- i386 MIT Kerberos runtime libraries -

ii libkadm5clnt-m 1.10.1+dfsg- amd64 MIT Kerberos runtime libraries -

ii libkadm5srv-mi 1.10.1+dfsg- amd64 MIT Kerberos runtime libraries -

ii libkdb5-6:amd6 1.10.1+dfsg- amd64 MIT Kerberos runtime libraries -

ii libkeyutils1:a 1.5.5-3 amd64 Linux Key Management Utilities (l

ii libkeyutils1:i 1.5.5-3 i386 Linux Key Management Utilities (l

ii libklibc 2.0.1-3.1 amd64 minimal libc subset for use with

ii libkmod2:amd64 9-3 amd64 libkmod shared library

ii libkrb5-3:amd6 1.10.1+dfsg- amd64 MIT Kerberos runtime libraries

ii libkrb5-3:i386 1.10.1+dfsg- i386 MIT Kerberos runtime libraries

ii libkrb5-dev 1.10.1+dfsg- amd64 Headers and development libraries

ii libkrb5support 1.10.1+dfsg- amd64 MIT Kerberos runtime libraries -

ii libkrb5support 1.10.1+dfsg- i386 MIT Kerberos runtime libraries -

ii libksba8:amd64 1.2.0-2+deb7 amd64 X.509 and CMS support library

ii liblcms1:amd64 1.19.dfsg-1. amd64 Little CMS color management libra

ii liblcms1:i386 1.19.dfsg-1. i386 Little CMS color management libra

ii liblcms2-2:amd 2.2+git20110 amd64 Little CMS 2 color management lib

ii liblcms2-dev:a 2.2+git20110 amd64 Little CMS 2 color management lib

ii libldap-2.4-2: 2.4.31-1+nmu amd64 OpenLDAP libraries

ii libldap-2.4-2: 2.4.31-1+nmu i386 OpenLDAP libraries

ii libllvm3.0:amd 3.0-10 amd64 Low-Level Virtual Machine (LLVM),

ii liblocale-gett 1.05-7+b1 amd64 module using libc functions for i

ii liblockfile-bi 1.09-5 amd64 support binaries for and cli util

ii liblockfile1:a 1.09-5 amd64 NFS-safe locking library

ii liblqr-1-0:amd 0.4.1-2 amd64 converts plain array images into

ii liblqr-1-0-dev 0.4.1-2 amd64 converts plain array images into

ii libltdl-dev:am 2.4.2-1.1 amd64 A system independent dlopen wrapp

ii libltdl7:amd64 2.4.2-1.1 amd64 A system independent dlopen wrapp

ii libltdl7:i386 2.4.2-1.1 i386 A system independent dlopen wrapp

ii liblwp-mediaty 6.02-1 all module to guess media type for a

ii liblwp-protoco 6.03-1 all HTTPS driver for LWP::UserAgent

ii liblwres80 1:9.8.4.dfsg amd64 Lightweight Resolver Library used

ii liblzma-dev:am 5.1.1alpha+2 amd64 XZ-format compression library - d

ii liblzma5:amd64 5.1.1alpha+2 amd64 XZ-format compression library

ii liblzma5:i386 5.1.1alpha+2 i386 XZ-format compression library

ii liblzo2-2:i386 2.06-1 i386 data compression library

ii libm17n-0 1.6.3-2 amd64 multilingual text processing libr

ii libmagic1:amd6 5.11-2+deb7u amd64 File type determination library u

ii libmail-spf-pe 2.8.0-1 all Perl implementation of Sender Pol

ii libmailtools-p 2.09-1 all Manipulate email in perl programs

ii libmount1 2.20.1-5.3 amd64 block device id library

ii libmpc2:amd64 0.9-4 amd64 multiple precision complex floati

ii libmpfr4:amd64 3.1.0-5 amd64 multiple precision floating-point

ii libmpg123-0:i3 1.14.4-1 i386 MPEG layer 1/2/3 audio decoder (s

ii libncurses5:am 5.9-10 amd64 shared libraries for terminal han

ii libncurses5-de 5.9-10 amd64 developer's libraries for ncurses

ii libncursesw5:a 5.9-10 amd64 shared libraries for terminal han

ii libncursesw5:i 5.9-10 i386 shared libraries for terminal han

ii libneon27-gnut 0.29.6-3 amd64 HTTP and WebDAV client library (G

ii libnet-dns-per 0.66-2+b2 amd64 Perform DNS queries from a Perl s

ii libnet-domain- 1.69-1 all Perl module for retrieving a list

ii libnet-http-pe 6.03-2 all module providing low-level HTTP c

ii libnet-ip-perl 1.25-3 all Perl extension for manipulating I

ii libnet-smtp-ss 1.01-3 all Perl module providing SSL support

ii libnet-ssleay- 1.48-1+b1 amd64 Perl module for Secure Sockets La

ii libnetaddr-ip- 4.062+dfsg-1 amd64 IP address manipulation module

ii libnettle4:amd 2.4-3 amd64 low level cryptographic library (

ii libnfnetlink0 1.0.0-1.1 amd64 Netfilter netlink library

ii libnih-dbus1 1.0.3-4.1 amd64 NIH D-Bus Bindings Library

ii libnih1 1.0.3-4.1 amd64 NIH Utility Library

ii libnl-3-200:am 3.2.7-4 amd64 library for dealing with netlink

ii libnl-genl-3-2 3.2.7-4 amd64 library for dealing with netlink

ii libnspr4:i386 2:4.9.2-1+de i386 NetScape Portable Runtime Library

ii libnspr4-0d:i3 2:4.9.2-1+de i386 NetScape Portable Runtime Library

ii libnss3:i386 2:3.14.5-1 i386 Network Security Service librarie

ii libnss3-1d:i38 2:3.14.5-1 i386 Network Security Service librarie

ii libnuma1 2.0.8~rc4-1 amd64 Libraries for controlling NUMA po

ii libodbc1:amd64 2.2.14p2-5 amd64 ODBC library for Unix

ii libodbc1:i386 2.2.14p2-5 i386 ODBC library for Unix

ii libogg0:i386 1.3.0-4 i386 Ogg bitstream library

ii libopenal-data 1:1.14-4 all Software implementation of the Op

ii libopenal1:i38 1:1.14-4 i386 Software implementation of the Op

ii libopenexr-dev 1.6.1-6 amd64 development files for the OpenEXR

ii libopenexr6 1.6.1-6 amd64 runtime files for the OpenEXR ima

ii libopenmpi1.3 1.4.5-1 amd64 high performance message passing

ii libotf0 0.9.12-2 amd64 Library for handling OpenType Fon

ii libp11-kit0:am 0.12-3 amd64 Library for loading and coordinat

ii libp11-kit0:i3 0.12-3 i386 Library for loading and coordinat

ii libpam-cap:amd 1:2.22-1.2 amd64 PAM module for implementing capab

ii libpam-modules 1.1.3-7.1 amd64 Pluggable Authentication Modules

ii libpam-modules 1.1.3-7.1 amd64 Pluggable Authentication Modules

ii libpam-runtime 1.1.3-7.1 all Runtime support for the PAM libra

ii libpam0g:amd64 1.1.3-7.1 amd64 Pluggable Authentication Modules

ii libpam0g:i386 1.1.3-7.1 i386 Pluggable Authentication Modules

ii libpam0g-dev:a 1.1.3-7.1 amd64 Development files for PAM

ii libpango1.0-0: 1.30.0-1 amd64 Layout and rendering of internati

ii libpango1.0-de 1.30.0-1 amd64 Development files for the Pango

ii libpaper1:amd6 1.1.24+nmu2 amd64 library for handling paper charac

ii libparse-debia 1.2.0-1 all parse Debian changelogs and outpu

ii libpcap0.8:amd 1.3.0-1 amd64 system interface for user-level p

ii libpciaccess0: 0.13.1-2 amd64 Generic PCI access library for X

ii libpciaccess0: 0.13.1-2 i386 Generic PCI access library for X

ii libpcre3:amd64 1:8.30-5 amd64 Perl 5 Compatible Regular Express

ii libpcre3-dev 1:8.30-5 amd64 Perl 5 Compatible Regular Express

ii libpcrecpp0:am 1:8.30-5 amd64 Perl 5 Compatible Regular Express

ii libperl-dev 5.14.2-21+de amd64 Perl library: development files

ii libperl5.14 5.14.2-21+de amd64 shared Perl library

ii libpipeline1:a 1.2.1-1 amd64 pipeline manipulation library

ii libpixman-1-0: 0.26.0-4+deb amd64 pixel-manipulation library for X

ii libpixman-1-de 0.26.0-4+deb amd64 pixel-manipulation library for X

ii libpng12-0:amd 1.2.49-1 amd64 PNG library - runtime

ii libpng12-0:i38 1.2.49-1 i386 PNG library - runtime

ii libpng12-dev 1.2.49-1 amd64 PNG library - development

ii libpopt0:amd64 1.16-7 amd64 lib for parsing cmdline parameter

ii libpopt0:i386 1.16-7 i386 lib for parsing cmdline parameter

ii libprocps0:amd 1:3.3.3-3 amd64 library for accessing process inf

ii libpth20 2.0.7-16 amd64 The GNU Portable Threads

ii libpthread-stu 0.3-3 amd64 pthread stubs not provided by nat

ii libpthread-stu 0.3-3 amd64 pthread stubs not provided by nat

ii libpulse0:i386 2.0-6.1 i386 PulseAudio client libraries

ii libquadmath0:a 4.7.2-5 amd64 GCC Quad-Precision Math Library

ii libreadline6:a 6.2+dfsg-0.1 amd64 GNU readline and history librarie

ii librsvg2-2:amd 2.36.1-2 amd64 SAX-based renderer library for SV

ii librsvg2-bin 2.36.1-2 amd64 command-line and graphical viewer

ii librsvg2-commo 2.36.1-2 amd64 SAX-based renderer library for SV

ii librsvg2-dev 2.36.1-2 amd64 SAX-based renderer library for SV

ii librtmp0:amd64 2.4+20111222 amd64 toolkit for RTMP streams (shared

ii librtmp0:i386 2.4+20111222 i386 toolkit for RTMP streams (shared

ii libsamplerate0 0.1.8-5 i386 Audio sample rate conversion libr

rc libsane:i386 1.0.22-7.4 i386 API library for scanners

ii libsane-common 1.0.22-7.4 amd64 API library for scanners -- docum

ii libsasl2-2:amd 2.1.25.dfsg1 amd64 Cyrus SASL - authentication abstr

ii libsasl2-2:i38 2.1.25.dfsg1 i386 Cyrus SASL - authentication abstr

ii libsasl2-dev 2.1.25.dfsg1 amd64 Cyrus SASL - development files fo

ii libsasl2-modul 2.1.25.dfsg1 amd64 Cyrus SASL - pluggable authentica

ii libsdl1.2debia 1.2.15-5 i386 Simple DirectMedia Layer

ii libselinux1:am 2.1.9-5 amd64 SELinux runtime shared libraries

ii libselinux1:i3 2.1.9-5 i386 SELinux runtime shared libraries

ii libsemanage-co 2.1.6-6 all Common files for SELinux policy m

ii libsemanage1:a 2.1.6-6 amd64 SELinux policy management library

ii libsensors4:am 1:3.3.2-2+de amd64 library to read temperature/volta

ii libsepol1:amd6 2.1.4-3 amd64 SELinux library for manipulating

ii libsigc++-2.0- 2.2.10-0.2 amd64 type-safe Signal Framework for C+

ii libsigc++-2.0- 2.2.10-0.2 i386 type-safe Signal Framework for C+

ii libsigsegv2 2.9-4 amd64 Library for handling page faults

ii libslang2:amd6 2.2.4-15 amd64 S-Lang programming library - runt

ii libslang2:i386 2.2.4-15 i386 S-Lang programming library - runt

ii libsm-dev:amd6 2:1.2.1-2 amd64 X11 Session Management library (d

ii libsm6:amd64 2:1.2.1-2 amd64 X11 Session Management library

ii libsm6:i386 2:1.2.1-2 i386 X11 Session Management library

ii libsndfile1:i3 1.0.25-5 i386 Library for reading/writing audio

ii libsnmp-base 5.4.3~dfsg-2 all SNMP (Simple Network Management P

ii libsnmp15 5.4.3~dfsg-2 amd64 SNMP (Simple Network Management P

ii libsocket-perl 2.002-1 amd64 networking constants and support

ii libsocket6-per 0.23-1+b2 amd64 Perl extensions for IPv6

ii libsqlite3-0:a 3.7.13-1+deb amd64 SQLite 3 shared library

ii libsqlite3-0:i 3.7.13-1+deb i386 SQLite 3 shared library

ii libss2:amd64 1.42.5-1.1 amd64 command-line interface parsing li

ii libssh2-1:amd6 1.4.2-1.1 amd64 SSH2 client-side library

ii libssh2-1:i386 1.4.2-1.1 i386 SSH2 client-side library

ii libssh2-1-dev 1.4.2-1.1 amd64 SSH2 client-side library (develop

ii libssl-dev 1.0.1e-2+deb amd64 SSL development libraries, header

ii libssl-doc 1.0.1e-2+deb all SSL development documentation doc

ii libssl1.0.0:am 1.0.1e-2+deb amd64 SSL shared libraries

ii libssl1.0.0:i3 1.0.1e-2+deb i386 SSL shared libraries

ii libstdc++5:i38 1:3.3.6-25 i386 The GNU Standard C++ Library v3

ii libstdc++6:amd 4.7.2-5 amd64 GNU Standard C++ Library v3

ii libstdc++6:i38 4.7.2-5 i386 GNU Standard C++ Library v3

ii libstdc++6-4.7 4.7.2-5 amd64 GNU Standard C++ Library v3 (deve

ii libsub-name-pe 0.05-1+b2 amd64 module for assigning a new name t

ii libsvga1:i386 1:1.4.3-33 i386 console SVGA display libraries

ii libsvn-perl 1.6.17dfsg-4 amd64 Perl bindings for Subversion

ii libsvn1:amd64 1.6.17dfsg-4 amd64 Shared libraries used by Subversi

ii libswitch-perl 2.16-2 all switch statement for Perl

ii libsysfs2:amd6 2.1.0+repack amd64 interface library to sysfs

ii libsysfs2:i386 2.1.0+repack i386 interface library to sysfs

ii libtalloc2:amd 2.0.7+git201 amd64 hierarchical pool based memory al

ii libtasn1-3:amd 2.13-2 amd64 Manage ASN.1 structures (runtime)

ii libtasn1-3:i38 2.13-2 i386 Manage ASN.1 structures (runtime)

ii libtdb1:amd64 1.2.10-2 amd64 Trivial Database - shared library

ii libtdb1:i386 1.2.10-2 i386 Trivial Database - shared library

ii libterm-readke 2.30-4+b2 amd64 A perl module for simple terminal

ii libtext-charwi 0.04-7+b1 amd64 get display widths of characters

ii libtext-iconv- 1.7-5 amd64 converts between character sets i

ii libtext-wrapi1 0.06-7 all internationalized substitute of T

ii libthai-data 0.1.18-2 all Data files for Thai language supp

ii libthai0:amd64 0.1.18-2 amd64 Thai language support library

ii libtidy-0.99-0 20091223cvs- amd64 HTML syntax checker and reformatt

ii libtidy-dev 20091223cvs- amd64 HTML syntax checker and reformatt

ii libtiff4:amd64 3.9.6-11 amd64 Tag Image File Format (TIFF) libr

ii libtiff4:i386 3.9.6-11 i386 Tag Image File Format (TIFF) libr

ii libtiff4-dev 3.9.6-11 amd64 Tag Image File Format (TIFF) libr

ii libtiffxx0c2:a 3.9.6-11 amd64 Tag Image File Format (TIFF) libr

ii libtimedate-pe 1.2000-1 all collection of modules to manipula

ii libtinfo-dev:a 5.9-10 amd64 developer's library for the low-l

ii libtinfo5:amd6 5.9-10 amd64 shared low-level terminfo library

ii libtinfo5:i386 5.9-10 i386 shared low-level terminfo library

ii libtirpc1:amd6 0.2.2-5 amd64 transport-independent RPC library

ii libtool 2.4.2-1.1 amd64 Generic library support script

ii libtorque2 2.4.16+dfsg- amd64 shared library for Torque client

ii libts-0.0-0:i3 1.0-11 i386 touch screen library

ii libudev0:amd64 175-7.2 amd64 libudev shared library

ii libunistring0: 0.9.3-5 amd64 Unicode string library for C

ii liburi-perl 1.60-1 all module to manipulate and access U

ii libusb-0.1-4:a 2:0.1.12-20+ amd64 userspace USB programming library

ii libusb-0.1-4:i 2:0.1.12-20+ i386 userspace USB programming library

ii libustr-1.0-1: 1.0.4-3 amd64 Micro string library: shared libr

ii libutempter0 1.1.5-4 amd64 A privileged helper for utmp/wtmp

ii libuuid1:amd64 2.20.1-5.3 amd64 Universally Unique ID library

ii libuuid1:i386 2.20.1-5.3 i386 Universally Unique ID library

ii libv4l-0:i386 0.8.8-3 i386 Collection of video4linux support

ii libv4lconvert0 0.8.8-3 i386 Video4linux frame format conversi

ii libvorbis0a:i3 1.3.2-1.3 i386 The Vorbis General Audio Compress

ii libvorbisenc2: 1.3.2-1.3 i386 The Vorbis General Audio Compress

ii libvorbisfile3 1.3.2-1.3 i386 The Vorbis General Audio Compress

ii libwbclient0:a 2:3.6.6-6+de amd64 Samba winbind client library

ii libwmf-dev 0.2.8.4-10.3 amd64 Windows metafile conversion devel

ii libwmf0.2-7:am 0.2.8.4-10.3 amd64 Windows metafile conversion libra

ii libwrap0:amd64 7.6.q-24 amd64 Wietse Venema's TCP wrappers libr

ii libwrap0:i386 7.6.q-24 i386 Wietse Venema's TCP wrappers libr

ii libwww-perl 6.04-1 all simple and consistent interface t

ii libwww-robotru 6.01-1 all database of robots.txt-derived pe

ii libx11-6:amd64 2:1.5.0-1+de amd64 X11 client-side library

ii libx11-6:i386 2:1.5.0-1+de i386 X11 client-side library

ii libx11-data 2:1.5.0-1+de all X11 client-side library

ii libx11-dev:amd 2:1.5.0-1+de amd64 X11 client-side library (developm

ii libx11-xcb1:i3 2:1.5.0-1+de i386 Xlib/XCB interface library

ii libx86-1:i386 1.1+ds1-10 i386 x86 real-mode library

ii libxapian22 1.2.12-2 amd64 Search engine library

ii libxau-dev:amd 1:1.0.7-1 amd64 X11 authorisation library (develo

ii libxau6:amd64 1:1.0.7-1 amd64 X11 authorisation library

ii libxau6:i386 1:1.0.7-1 i386 X11 authorisation library

ii libxaw7:amd64 2:1.0.10-2 amd64 X11 Athena Widget library

ii libxaw7:i386 2:1.0.10-2 i386 X11 Athena Widget library

ii libxcb-glx0:i3 1.8.1-2+deb7 i386 X C Binding, glx extension

ii libxcb-render- 0.3.8-1.1 i386 utility libraries for X C Binding

ii libxcb-render0 1.8.1-2+deb7 amd64 X C Binding, render extension

ii libxcb-render0 1.8.1-2+deb7 i386 X C Binding, render extension

ii libxcb-render0 1.8.1-2+deb7 amd64 X C Binding, render extension, de

ii libxcb-shm0:am 1.8.1-2+deb7 amd64 X C Binding, shm extension

ii libxcb-shm0-de 1.8.1-2+deb7 amd64 X C Binding, shm extension, devel

ii libxcb1:amd64 1.8.1-2+deb7 amd64 X C Binding

ii libxcb1:i386 1.8.1-2+deb7 i386 X C Binding

ii libxcb1-dev:am 1.8.1-2+deb7 amd64 X C Binding, development files

ii libxcomposite1 1:0.4.3-2 amd64 X11 Composite extension library

ii libxcomposite1 1:0.4.3-2 i386 X11 Composite extension library

ii libxcursor1:am 1:1.1.13-1+d amd64 X cursor management library

ii libxcursor1:i3 1:1.1.13-1+d i386 X cursor management library

ii libxdamage1:am 1:1.1.3-2 amd64 X11 damaged region extension libr

ii libxdamage1:i3 1:1.1.3-2 i386 X11 damaged region extension libr

ii libxdmcp-dev:a 1:1.1.1-1 amd64 X11 authorisation library (develo

ii libxdmcp6:amd6 1:1.1.1-1 amd64 X11 Display Manager Control Proto

ii libxdmcp6:i386 1:1.1.1-1 i386 X11 Display Manager Control Proto

ii libxext-dev:am 2:1.3.1-2+de amd64 X11 miscellaneous extensions libr

ii libxext6:amd64 2:1.3.1-2+de amd64 X11 miscellaneous extension libra

ii libxext6:i386 2:1.3.1-2+de i386 X11 miscellaneous extension libra

ii libxfixes3:amd 1:5.0-4+deb7 amd64 X11 miscellaneous 'fixes' extensi

ii libxfixes3:i38 1:5.0-4+deb7 i386 X11 miscellaneous 'fixes' extensi

ii libxft-dev 2.3.1-1 amd64 FreeType-based font drawing libra

ii libxft2:amd64 2.3.1-1 amd64 FreeType-based font drawing libra

ii libxft2:i386 2.3.1-1 i386 FreeType-based font drawing libra

ii libxi6:amd64 2:1.6.1-1+de amd64 X11 Input extension library

ii libxi6:i386 2:1.6.1-1+de i386 X11 Input extension library

ii libxinerama1:a 2:1.1.2-1+de amd64 X11 Xinerama extension library

ii libxinerama1:i 2:1.1.2-1+de i386 X11 Xinerama extension library

ii libxml-namespa 1.09-3 all Perl module for supporting simple

ii libxml-parser- 2.41-1+b1 amd64 Perl module for parsing XML files

ii libxml-sax-bas 1.07-1 all base class for SAX drivers and fi

ii libxml-sax-exp 0.40-2 all Perl module for a SAX2 driver for

ii libxml-sax-per 0.99+dfsg-2 all Perl module for using and buildin

ii libxml-simple- 2.20-1 all Perl module for reading and writi

ii libxml2:amd64 2.8.0+dfsg1- amd64 GNOME XML library

ii libxml2:i386 2.8.0+dfsg1- i386 GNOME XML library

ii libxml2-dev:am 2.8.0+dfsg1- amd64 Development files for the GNOME X

ii libxmlrpc-core 1.16.33-3.2 amd64 lightweight RPC library based on

ii libxmu6:amd64 2:1.1.1-1 amd64 X11 miscellaneous utility library

ii libxmu6:i386 2:1.1.1-1 i386 X11 miscellaneous utility library

ii libxmuu1:i386 2:1.1.1-1 i386 X11 miscellaneous micro-utility l

ii libxp6:i386 1:1.0.1-2+de i386 X Printing Extension (Xprint) cli

ii libxpm4:amd64 1:3.5.10-1+d amd64 X11 pixmap library

ii libxpm4:i386 1:3.5.10-1+d i386 X11 pixmap library

ii libxrandr2:amd 2:1.3.2-2+de amd64 X11 RandR extension library

ii libxrandr2:i38 2:1.3.2-2+de i386 X11 RandR extension library

ii libxrender-dev 1:0.9.7-1+de amd64 X Rendering Extension client libr

ii libxrender1:am 1:0.9.7-1+de amd64 X Rendering Extension client libr

ii libxrender1:i3 1:0.9.7-1+de i386 X Rendering Extension client libr

ii libxslt1.1:i38 1.1.26-14.1 i386 XSLT 1.0 processing library - run

ii libxss1:amd64 1:1.2.2-1 amd64 X11 Screen Saver extension librar

ii libxss1:i386 1:1.2.2-1 i386 X11 Screen Saver extension librar

ii libxt-dev:amd6 1:1.1.3-1+de amd64 X11 toolkit intrinsics library (d

ii libxt6:amd64 1:1.1.3-1+de amd64 X11 toolkit intrinsics library

ii libxt6:i386 1:1.1.3-1+de i386 X11 toolkit intrinsics library

ii libxtst6:i386 2:1.2.1-1+de i386 X11 Testing -- Record extension l

ii libxv1:i386 2:1.0.7-1+de i386 X11 Video extension library

ii libxxf86vm1:i3 1:1.1.2-1+de i386 X11 XFree86 video mode extension

ii libyaml-libyam 0.38-3+deb7u amd64 Perl interface to libyaml, a YAML

ii libyaml-perl 0.81-1 all YAML Ain't Markup Language

ii linux-libc-dev 3.2.54-2 amd64 Linux support headers for userspa

ii locales 2.13-38+deb7 all Embedded GNU C Library: National

ii locales-all 2.13-38+deb7 amd64 Embedded GNU C Library: Precompil

ii login 1:4.1.5.1-1 amd64 system login tools

ii logrotate 3.8.1-4 amd64 Log rotation utility

ii lsb-base 4.1+Debian8+ all Linux Standard Base 4.1 init scri

ii lsb-release 4.1+Debian8+ all Linux Standard Base version repor

ii lsof 4.86+dfsg-1 amd64 Utility to list open files

ii lxc 0.8.0~rc1-8+ amd64 Linux Containers userspace tools

ii lynx 2.8.8dev.12- all Text-mode WWW Browser (transition

ii lynx-cur 2.8.8dev.12- amd64 Text-mode WWW Browser with NLS su

ii lzma 9.22-2 amd64 Compression and decompression in

ii m17n-contrib 1.1.13-2 all multilingual text processing libr

ii m17n-db 1.6.3-2 all multilingual text processing libr

ii m4 1.4.16-3 amd64 a macro processing language

ii make 3.81-8.2 amd64 An utility for Directing compilat

ii makedev 2.3.1-92 all creates device files in /dev

ii man-db 2.6.2-1 amd64 on-line manual pager

ii manpages 3.44-1 all Manual pages about using a GNU/Li

ii manpages-dev 3.44-1 all Manual pages about using GNU/Linu

ii mc 3:4.8.3-10 amd64 Midnight Commander - a powerful f

ii mc-data 3:4.8.3-10 all Midnight Commander - a powerful f

ii memtester 4.2.2-1 amd64 Utility for testing the memory su

ii mime-support 3.52-1 all MIME files 'mime.types' & 'mailca

ii mktemp 8.13-3.5 all coreutils mktemp transitional pac

ii mlocate 0.23.1-1 amd64 quickly find files on the filesys

ii mlock 8:2007f~dfsg amd64 mailbox locking program

ii module-init-to 9-3 all transitional dummy package (modul

ii mount 2.20.1-5.3 amd64 Tools for mounting and manipulati

ii mountall 2.46 amd64 filesystem mounting tool

ii mtools 4.0.17-1 amd64 Tools for manipulating MSDOS file

ii multiarch-supp 2.13-38+deb7 amd64 Transitional package to ensure mu

ii nano 2.2.6-1+b1 amd64 small, friendly text editor inspi

ii ncurses-base 5.9-10 all basic terminal type definitions

ii ncurses-bin 5.9-10 amd64 terminal-related programs and man

ii ncurses-term 5.9-10 all additional terminal type definiti

ii net-tools 1.60-24.2 amd64 The NET-3 networking toolkit

ii netbase 5.0 all Basic TCP/IP networking system

ii odbcinst 2.2.14p2-5 amd64 Helper program for accessing odbc

ii odbcinst1debia 2.2.14p2-5 amd64 Support library for accessing odb

ii odbcinst1debia 2.2.14p2-5 i386 Support library for accessing odb

ii openssh-blackl 0.4.1+nmu1 all list of default blacklisted OpenS

ii openssh-client 1:6.0p1-4 amd64 secure shell (SSH) client, for se

ii openssh-server 1:6.0p1-4 amd64 secure shell (SSH) server, for se

ii openssl 1.0.1e-2+deb amd64 Secure Socket Layer (SSL) binary

ii openssl-blackl 0.5-3 all Blacklists for OpenSSL RSA keys

ii passwd 1:4.1.5.1-1 amd64 change and administer password an

ii patch 2.6.1-3 amd64 Apply a diff file to an original

ii perl 5.14.2-21+de amd64 Larry Wall's Practical Extraction

ii perl-base 5.14.2-21+de amd64 minimal Perl system

ii perl-modules 5.14.2-21+de all Core Perl modules

ii pkg-config 0.26-1 amd64 manage compile and link flags for

ii plymouth 0.8.5.1-5 amd64 Graphical Boot Animation and Logg

ii po-debconf 1.0.16+nmu2 all tool for managing templates file

ii poppler-data 0.4.5-10 all encoding data for the poppler PDF

ii procinfo 1:2.0.304-1 amd64 reporter for system information f

ii procmail 3.22-20 amd64 Versatile e-mail processor

ii procps 1:3.3.3-3 amd64 /proc file system utilities

ii proftpd 1.3.4c amd64 proftpd ftp daemon

ii psmisc 22.19-1+deb7 amd64 utilities that use the proc file

ii psutils 1.17.dfsg-1 amd64 PostScript document handling util

ii pwgen 2.06-1+b2 amd64 Automatic Password generation

ii python 2.7.3-4+deb7 all interactive high-level object-ori

ii python-apt 0.8.8.2 amd64 Python interface to libapt-pkg

ii python-apt-com 0.8.8.2 all Python interface to libapt-pkg (l

ii python-chardet 2.0.1-2 all universal character encoding dete

ii python-debian 0.1.21 all Python modules to work with Debia

ii python-gnupgin 0.3.2-9.1 all Python interface to GnuPG (GPG)

ii python-minimal 2.7.3-4+deb7 all minimal subset of the Python lang

ii python-pycurl 7.19.0-5 amd64 Python bindings to libcurl

ii python-softwar 0.82.7.1debi all manage the repositories that you

ii python-support 1.0.15 all automated rebuilding support for

ii python-xapian 1.2.12-2 amd64 Xapian search engine interface fo

ii python2.7 2.7.3-6 amd64 Interactive high-level object-ori

ii python2.7-mini 2.7.3-6 amd64 Minimal subset of the Python lang

ii quota 4.00-4+deb7u amd64 disk quota management tools

ii readline-commo 6.2+dfsg-0.1 all GNU readline and history librarie

ii rpcbind 0.2.0-8 amd64 converts RPC program numbers into

ii rsync 3.0.9-4 amd64 fast, versatile, remote (and loca

ii rsyslog 5.8.11-3 amd64 reliable system and kernel loggin

ii runit 2.1.1-6.2 amd64 system-wide service supervision

ii samba 2:3.6.6-6+de amd64 SMB/CIFS file, print, and login s

ii samba-common 2:3.6.6-6+de all common files used by both the Sam

ii sasl2-bin 2.1.25.dfsg1 amd64 Cyrus SASL - administration progr

ii screen 4.1.0~201203 amd64 terminal multiplexer with VT100/A

ii sed 4.2.1-10 amd64 The GNU sed stream editor

ii sendmail-base 8.14.4-4 all powerful, efficient, and scalable

pc sendmail-bin 8.14.4-4 amd64 powerful, efficient, and scalable

ii sendmail-cf 8.14.4-4 all powerful, efficient, and scalable

ii sendmail-doc 8.14.4-4 all powerful, efficient, and scalable

ii sensible-mda 8.14.4-4 amd64 Mail Delivery Agent wrapper

ii sensible-utils 0.0.7 all Utilities for sensible alternativ

ii shared-mime-in 1.0-1+b1 amd64 FreeDesktop.org shared MIME datab

ii sharutils 1:4.11.1-1 amd64 shar, unshar, uuencode, uudecode

ii shtool 2.0.8-6 all portable shell tool from the GNU

ii snmp 5.4.3~dfsg-2 amd64 SNMP (Simple Network Management P

ii spf-tools-perl 2.8.0-1 all SPF tools (spfquery, spfd) based

ii ssl-cert 1.0.32 all simple debconf wrapper for OpenSS

ii sudo 1.8.5p2-1+nm amd64 Provide limited super user privil

ii syslinux 2:4.05+dfsg- amd64 collection of boot loaders

ii syslinux-commo 2:4.05+dfsg- all collection of boot loaders (commo

ii sysv-rc 2.88dsf-41+d all System-V-like runlevel change mec

ii sysvinit-utils 2.88dsf-41+d amd64 System-V-like utilities

ii tar 1.26+dfsg-0. amd64 GNU version of the tar archiving

ii tcl 8.5.0-2.1 all The Tool Command Language (defaul

ii tcl8.5 8.5.11-2 amd64 Tcl (the Tool Command Language) v

ii tcpdump 4.3.0-1 amd64 command-line network traffic anal

ii tcsh 6.18.01-2 amd64 TENEX C Shell, an enhanced versio

ii telnet 0.17-36 amd64 The telnet client

ii tk 8.5.0-2.1 all The Tk toolkit for Tcl and X11 (d

ii tk8.5 8.5.11-2 amd64 Tk toolkit for Tcl and X11, v8.5

ii tla 1.3.5+dfsg-1 amd64 GNU Arch revision control system

ii tla-doc 1.3.5+dfsg-1 all GNU Arch revision control system

ii tofrodos 1.7.9.debian amd64 Converts DOS <-> Unix text files,

ii traceroute 1:2.0.18-3 amd64 Traces the route taken by packets

ii tsconf 1.0-11 all touch screen library common files

ii ttf-dejavu 2.33-3 all Metapackage to pull in ttf-dejavu

ii ttf-dejavu-cor 2.33-3 all Vera font family derivate with ad

ii ttf-dejavu-ext 2.33-3 all Vera font family derivate with ad

ii ttf-freefont 20120503-1 all transitional dummy package

ii tzdata 2014a-0wheez all time zone and daylight-saving tim

ii ucf 3.0025+nmu3 all Update Configuration File: preser

ii udev 175-7.2 amd64 /dev/ and hotplug management daem

ii unattended-upg 0.79.5+wheez all automatic installation of securit

ii unixodbc 2.2.14p2-5 amd64 Basic ODBC tools

ii unzip 6.0-8 amd64 De-archiver for .zip files

ii update-inetd 4.43 all inetd configuration file updater

ii upstart 1.6.1-1 amd64 event-based init daemon

ii util-linux 2.20.1-5.3 amd64 Miscellaneous system utilities

ii uuid-runtime 2.20.1-5.3 amd64 runtime components for the Univer

ii vim 2:7.3.547-7 amd64 Vi IMproved - enhanced vi editor

ii vim-common 2:7.3.547-7 amd64 Vi IMproved - Common files

ii vim-runtime 2:7.3.547-7 all Vi IMproved - Runtime files

ii vnstat 1.11-1 amd64 console-based network traffic mon

ii wget 1.13.4-3+deb amd64 retrieves files from the web

ii whois 5.1.1~deb7u1 amd64 intelligent WHOIS client

ii wide-dhcpv6-cl 20080615-11. amd64 DHCPv6 client for automatic IPv6

ii x11-common 1:7.7+3~deb7 all X Window System (X.Org) infrastru

ii x11proto-core- 7.0.23-1 all X11 core wire protocol and auxili

ii x11proto-input 2.2-1 all X11 Input extension wire protocol

ii x11proto-kb-de 1.0.6-2 all X11 XKB extension wire protocol

ii x11proto-rende 2:0.11.1-2 all X11 Render extension wire protoco

ii x11proto-xext- 7.2.1-1 all X11 various extension wire protoc

ii xaw3dg:i386 1.5+E-18.2 i386 Xaw3d widget set

ii xbitmaps 1.1.1-1 all Base X bitmaps

ii xinetd 1:2.3.14-7.1 amd64 replacement for inetd with many e

ii xorg-sgml-doct 1:1.10-1 all Common tools for building X.Org S

ii xterm 278-4 amd64 X terminal emulator

ii xtrans-dev 1.2.7-1 all X transport library (development

ii xz-utils 5.1.1alpha+2 amd64 XZ-format compression utilities

ii zlib1g:amd64 1:1.2.7.dfsg amd64 compression library - runtime

ii zlib1g:i386 1:1.2.7.dfsg i386 compression library - runtime

ii zlib1g-dev:amd 1:1.2.7.dfsg amd64 compression library - development

[Qwinto 413]

Jedynie co widać to:

 

ii iptables 1.4.14-3.1 amd64 administration tools for packet f

Pewnie nie masz tego skonfigurowanego. Popatrz na ten opis oraz ten. Poczytaj o UFW czyli Uncomplicated Firewall.

[januzi 24]

Ważna sprawa. Przy konfigurowaniu firewalla nie waż się zablokować dostępu dla każdego. Zrób to dopiero, gdy dopiszesz siebie (czyli swoje stałe ip) do listy dozwolonych, albo zainstalujesz knockd i ustawisz w nim otwieranie portów dla pukającego w odpowiedni sposób. I pod żadnym pozorem nie dopisuj regułek firewalla do autostartu przed poprawnym skonfigurowaniem pod dostęp dla siebie. W przeciwnym wypadku nawet restart maszyny nie pomoże i będziesz musiał prosić obsługę o KVM (o ile udostępniają).

 

 

A teraz, do rzeczy. Co znaczy, że "masz wrażenie, że coś jest nie tak"?

[Fisz 0]

Dodatkowo zainstalowany jest antywirus - ClamAV.

[gryzzy 0]

Dzięki Panowie za przydatne infromacje. Dobra to teraz po kolei:

 

Jedynie co widać to:

 

ii iptables 1.4.14-3.1 amd64 administration tools for packet f

Pewnie nie masz tego skonfigurowanego. Popatrz na ten opis oraz ten. Poczytaj o UFW czyli Uncomplicated Firewall.

 

Czyli rozumiem że Twoja rada jest taka aby pozbyć się tego IpTables (odinstalować) i zainstalowac UFW czy zostawić go i nie usuwać ? (będe miał dwa ? )

Btw jak sprawdzić czy jest on skonfigurowany ?

 

Ważna sprawa. Przy konfigurowaniu firewalla nie waż się zablokować dostępu dla każdego. Zrób to dopiero, gdy dopiszesz siebie (czyli swoje stałe ip) do listy dozwolonych, albo zainstalujesz knockd i ustawisz w nim otwieranie portów dla pukającego w odpowiedni sposób. I pod żadnym pozorem nie dopisuj regułek firewalla do autostartu przed poprawnym skonfigurowaniem pod dostęp dla siebie. W przeciwnym wypadku nawet restart maszyny nie pomoże i będziesz musiał prosić obsługę o KVM (o ile udostępniają).

 

"Zrób to dopiero, gdy dopiszesz siebie (czyli swoje stałe ip)" No dobra ale tu pojawia się problem bo nie mam stałego IP i korzystam z mobilnego internetu, co wówczas?

"zainstalujesz knockd i ustawisz w nim otwieranie portów dla pukającego w odpowiedni sposób" . Możesz wyjaśnić ? To znaczy co to jest to pukanie i jak mam to zrobić ?

 

 

 

 

Dodatkowo zainstalowany jest antywirus - ClamAV.

Czy ten antywirus jest włączony ? Czy jest wystarczający ?

[Qwinto 413]

Czyli rozumiem że Twoja rada jest taka aby pozbyć się tego IpTables (odinstalować) i zainstalowac UFW czy zostawić go i nie usuwać ? (będe miał dwa ? )

Btw jak sprawdzić czy jest on skonfigurowany ?

Widzę, że nawet nie przeczytałeś tego co podlinkowałem. Są tam informacje, dzięki którym byś nie zadał tych pytań. W skrócie: "UFW, or Uncomplicated Firewall, is a front-end to iptables." Więc iptables zostaje, natomiast żeby sprawdzić aktualny jego stan wydajesz polecenie iptables -L.

 

Co do zabezpieczenia zdalnego dostępu o którym pisał januzi, to po pierwsze zmień domyślny port usługi ssh, zablokuj logowanie się na roota (uprzednio tworząc dodatkowe konto, którym będziesz się logował), włącz logowanie się kluczem, zainstaluj fail2ban (przykład).

[januzi 24]

https://www.digitalocean.com/community/tutorials/how-to-use-port-knocking-to-hide-your-ssh-daemon-from-attackers-on-ubuntu

 

komunikatem na różowym polu się nie przejmuj, przeskocz do akapitu "Configure Knockd to Use Port Knocking" i poczytaj co to robi (w zależności od dystrybucji położenie plików może się trochę różnić)

[Fisz 0]

Port knocking fajna rzecz, a działa następująco. Konfigurujesz sobie kilka wybranych przez siebie portów, które po "zapukaniu" (połączeniu się z nimi w odpowiedniej kolejności np. port 6000, 5000, 9000) otwiera na FW port do innej usługi np. SSH, dzięki czemu możesz się zalogować do konsoli. Również można skonfigurować port knocking w drugą stronę (tzn. zamykanie portów).

 

Dodatkowo w SSH możesz skonfigurować, tak aby logować się tylko certyfikatem, nie musisz wpisywać loginu, hasła i można ten sposób uwierzytelniania wyłączyć.

 

Co do ClamAV bardzo słaby antywirus, jednak często używany z serwerem pocztowym, aby nieco odsiał szkodliwych załączników.

Czy jest włączony, możesz sobie sprawdzić przez: top, htop (szukaj usługi clamd) czy systemctl status clamd

[gryzzy 0]

Przyznam nie miałem czasu zapoznać się ze wszystkim co podsyłacie. Nie mniej dzięki wielkie. Widzę że trafiłem na forum poważnych ludzi bo z tym różnie..

Zacznę trochę od tyłu. Czy te wszystie rady zadziałają "wstecz" . Mam tu na myśli to że do tej pory moje pojęcie o bezpieczeństwie było znikome. I teraz mam wrażenie że na stronach/serwerze mam straszny syf...Jakie dziwne rzeczy się dzieją. Np przywracając kompletny backup konta użytkownika przywraca wszystko prócz bazy danych.. Normalne to ??

 

Ale do rzeczy. Czy narzędziami które podajecie mogę teraz jakoś "przeskanować" ten syf ? Czy może najlepiej będzie zresetować serwer i od nowa postawić strony, zrobic zabezpieczniea ktore podajecie ? Ma to sens ? Wówczasz od razu pomyślę o serwisach typu cloudfire żeby zamaskować te dsny ii certyfikaty darmowe. To chyba też ważne ??

 

Port knocking fajna rzecz, a działa następująco. Konfigurujesz sobie kilka wybranych przez siebie portów, które po "zapukaniu" (połączeniu się z nimi w odpowiedniej kolejności np. port 6000, 5000, 9000) otwiera na FW port do innej usługi np. SSH, dzięki czemu możesz się zalogować do konsoli. Również można skonfigurować port knocking w drugą stronę (tzn. zamykanie portów).

 

Dodatkowo w SSH możesz skonfigurować, tak aby logować się tylko certyfikatem, nie musisz wpisywać loginu, hasła i można ten sposób uwierzytelniania wyłączyć.

 

Co do ClamAV bardzo słaby antywirus, jednak często używany z serwerem pocztowym, aby nieco odsiał szkodliwych załączników.

Czy jest włączony, możesz sobie sprawdzić przez: top, htop (szukaj usługi clamd) czy systemctl status clamd

 

I tutaj nasuwa mi się jeszcze jedna kwestia. Czy to że serwer jest dziurawy ( a co za tym idzie może mieć jakiś syf ) moze być powodem że maile z każdej domeny trafiają do spamu ? Dziwne to również ? Może trzeba jakoś odpowiednio skonfigurować serwer pocztowy czy coś ? sprawdzałem tymi narzędziami "black" ale domeny wyswieltaja sie na zielono wiec to problem od strony serwera..

[januzi 24]

jak to wordpress albo joomla, to oczywiste, że dzieją się cuda na stronach

w takim wypadku np. w konsoli wstukujesz polecenia: man sed, man find, man grep i czytasz manuala (podmiana treści, szukanie plików, szukanie treści w ciągu znaków)

 

do wirusów wordpressowych najczęściej przydaje się szukanie eval, base64_decode, popen, system, exec, ale również ciągu losowych znaków oraz zlepka ?><?php na początku plików php.

[Fisz 0]

Przyznam nie miałem czasu zapoznać się ze wszystkim co podsyłacie. Nie mniej dzięki wielkie. Widzę że trafiłem na forum poważnych ludzi bo z tym różnie..

Zacznę trochę od tyłu. Czy te wszystie rady zadziałają "wstecz" . Mam tu na myśli to że do tej pory moje pojęcie o bezpieczeństwie było znikome. I teraz mam wrażenie że na stronach/serwerze mam straszny syf...Jakie dziwne rzeczy się dzieją. Np przywracając kompletny backup konta użytkownika przywraca wszystko prócz bazy danych.. Normalne to ??

 

Ale do rzeczy. Czy narzędziami które podajecie mogę teraz jakoś "przeskanować" ten syf ? Czy może najlepiej będzie zresetować serwer i od nowa postawić strony, zrobic zabezpieczniea ktore podajecie ? Ma to sens ? Wówczasz od razu pomyślę o serwisach typu cloudfire żeby zamaskować te dsny ii certyfikaty darmowe. To chyba też ważne ??

 

 

 

I tutaj nasuwa mi się jeszcze jedna kwestia. Czy to że serwer jest dziurawy ( a co za tym idzie może mieć jakiś syf ) moze być powodem że maile z każdej domeny trafiają do spamu ? Dziwne to również ? Może trzeba jakoś odpowiednio skonfigurować serwer pocztowy czy coś ? sprawdzałem tymi narzędziami "black" ale domeny wyswieltaja sie na zielono wiec to problem od strony serwera..

A jakie lokalizacje z serwera backupujesz? Bo przykładowo domyślna lokalizacja bazy danych (MySQL/MariaDB) to /var/lib/mysql, a jeśli mówisz, że backupujesz konta użyszkodników (czyli prawdopodobnie /home) to oczywiste, że nie będzie tam backupu bazy danych (chyba, że pozmieniałeś ścieżki).

 

Ja bym zaczął od posprawdzania plików stron, jak wcześniej @januzi wspomniał. I dopiero później restart serwera -> odpalenie z płytki/pendrive jakiegoś dobrego AV (np. Avira Rescue System).

 

Odnośnie maili - zła konfiguracja serwera mailowego może robić cuda. Jeśli używasz standardowego sendmaila, to polecałbym zmianę np. na postfix'a (dużo większe możliwości). Ogólnie zarządzanie serwerem mailowym jest upierdliwe i czasochłonne (aktualizacja sygnatur AV, blacklist, stałe grzebanie przy filtrach antyspamowych etc.) - więc chyba dużo prościej będzie coś kupić (MS Exchange Online lub inne podobne)

[doman18 37]

Przede wszystkim co skłania ciebie do myślenia że coś jest nie tak? Jeżeli wydajność to zapewniam cię że nie trzeba wirusa żeby Wordpress zachowywał się jak ślimak. Wiele pluginów jest tak masakrycznie napisanych że szkoda gadać. Kod też do najbardziej optymalnych nie należy, nie mówiąc już o bazie danych. Jeżeli chodzi o ilość spamu w komentarzach - wyłącz pingbacki albo ustaw jakiś dobry filtr.

Do tego jeżeli ktoś "mondry" używał dość popularnego kiedyś PHP Code Widget to już w ogóle nie wiem czy jest co w ogóle ratować i bardzo współczuję konieczności odsyfiania takiej strony.

 

Zakładam że domeny sprawdzałeś na https://mxtoolbox.com/blacklists.aspx ? Bo to chyba najlepsze narzędzie. Jeżeli wszędzie jest ok no to jak poprzednicy - coś masz nie tak z konfiguracją i rozwiązywanie tego zawsze jest bólem tyłka bo np. google nie raz ma co innego w FAQ a co innego mają pozakładane w rzeczywistości. I komunikacja z nimi czasem trwa tygodniami zanim ustalisz co trzeba na twoim serwie ustawić żeby nie gmail nie odbijał poczty z twoich domen.