• Mengamankan server lab dari serangan brute-force, unauthorized access, dan sniffing.
• Menerapkan firewall stateful berbasis UFW (Uncomplicated Firewall) dan iptables.
• Menerapkan penguatan konfigurasi SSH (SSH Key-Based Authentication & Port Hardening).

Konfigurasi kebijakan default drop dan hanya mengizinkan port yang dibutuhkan:

# Reset aturan dan set kebijakan default
sudo ufw default deny incoming
sudo ufw default allow outgoing

# Izinkan port SSH (custom port), Web Server (HTTP/HTTPS)
sudo ufw allow 2222/tcp comment 'SSH Custom Port'
sudo ufw allow 80/tcp comment 'HTTP DokuWiki'
sudo ufw allow 443/tcp comment 'HTTPS DokuWiki'
sudo ufw allow 8080/tcp comment 'Docker Compose DokuWiki'

# Aktifkan UFW
sudo ufw enable
sudo ufw status verbose

Edit konfigurasi /etc/ssh/sshd_config:

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
MaxAuthTries 3
ClientAliveInterval 300
ClientAliveCountMax 2

Reload SSH service:

sudo systemctl restart sshd

sudo apt install -y fail2ban
sudo systemctl enable fail2ban
sudo systemctl start fail2ban
sudo fail2ban-client status sshd

Kembali ke Halaman Utama