<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    opa gracco,<br>
    <br>
    hoje eu jah monitoro ele via zabbix mais ele soh me informa quando
    arquivos tipo passwd e alterado.<br>
    <br>
    Ou se o servi&ccedil;o esta fora do ar etc... <br>
    <br>
    ele n&atilde;o me fala quando um site esta sendo usado para phishing.<br>
    <br>
    att,<br>
    <br>
    Gabriel<br>
    <div class="moz-cite-prefix">Em 13-08-2013 11:11, Gracco Guimar&atilde;es
      escreveu:<br>
    </div>
    <blockquote
cite="mid:CAM-mzFcR8scenuacKZ-Pmampu0jANLF8D6TdAoZiX1x9FPS1+g@mail.gmail.com"
      type="cite">
      <div dir="ltr">Eu faria um hardening no SO tamb&eacute;m, n&atilde;o s&oacute; claro
        manter as aplica&ccedil;&otilde;es atualizadas, como da uma olhada no
        permissonamento do banco, das aplica&ccedil;&otilde;es que voc&ecirc; roda, e at&eacute;
        mesmo em regras de firewall para bloquear o acesso a alguns
        servi&ccedil;os externos.
        <div>
          <br>
          Quanto a monitoramento, n&atilde;o sei se voc&ecirc; quer ser pontual
          (apenas esse servidor), mas creio que um zabbix ou nagios
          possa te ajudar.</div>
        <div><br>
          Abra&ccedil;o e boa sorte ae.</div>
      </div>
      <div class="gmail_extra"><br>
        <br>
        <div class="gmail_quote">
          Em 13 de agosto de 2013 11:07, Wiliam Freitas <span dir="ltr">&lt;<a
              moz-do-not-send="true" href="mailto:wiliamjf@yahoo.com.br"
              target="_blank">wiliamjf@yahoo.com.br</a>&gt;</span>
          escreveu:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <table border="0" cellpadding="0" cellspacing="0">
              <tbody>
                <tr>
                  <td valign="top">
                    <p dir="ltr">Vc pode usar o mod_security por
                      exemplo.</p>
                    <p dir="ltr">Enviado do Yahoo! Mail no Android</p>
                  </td>
                </tr>
              </tbody>
            </table>
            <div>
              <div> <br>
                <div>
                  <div style="font-size:0.9em">
                    <hr size="1"> <b> <span style="font-weight:bold">From:</span>
                    </b> raphaelmirc24 . &lt;<a moz-do-not-send="true"
                      href="mailto:raphaelmirc@gmail.com"
                      target="_blank">raphaelmirc@gmail.com</a>&gt;; <br>
                    <b> <span style="font-weight:bold">To:</span> </b>
                    Portuguese (Brazilian) CentOS mailing list &lt;<a
                      moz-do-not-send="true"
                      href="mailto:centos-pt-br@centos.org"
                      target="_blank">centos-pt-br@centos.org</a>&gt;; <br>
                    <b> <span style="font-weight:bold">Subject:</span>
                    </b> Re: [CentOS-pt-br] RES: Seguran&ccedil;a no Servidor
                    web Apache <br>
                    <b> <span style="font-weight:bold">Sent:</span> </b>
                    Tue, Aug 13, 2013 1:27:38 PM <br>
                  </div>
                  <br>
                  <table border="0" cellpadding="0" cellspacing="0">
                    <tbody>
                      <tr>
                        <td valign="top">
                          <div dir="ltr">
                            <div>
                              <div>
                                <div>Bom Dia a Todos!!<br>
                                  <br>
                                </div>
                                &nbsp;&nbsp;&nbsp; O problema e que essa vers&atilde;o do
                                Joomla 1.5 ou inferior tem essas falhas
                                e pode ser explorada por<b> Sql
                                  Injection</b>, se voc&ecirc; atualizar a
                                vers&atilde;o do joomla para 2.5 ou superior
                                voc&ecirc; n&atilde;o tera mais problemas de invas&atilde;o
                                ok? <br>
                                <br>
                              </div>
                              att;<br>
                              <br>
                            </div>
                            Raphael de Assis.<br>
                          </div>
                          <div class="gmail_extra"><br>
                            <br>
                            <div class="gmail_quote">Em 13 de agosto de
                              2013 10:18, Gabriel O. Franca <span
                                dir="ltr">&lt;<a moz-do-not-send="true"
                                  rel="nofollow">gabriel.franca@gmail.com</a>&gt;</span>
                              escreveu:<br>
                              <blockquote class="gmail_quote"
                                style="margin:0 0 0 .8ex;border-left:1px
                                #ccc solid;padding-left:1ex">Sql
                                Injection foi o metodo usado.<br>
                                <br>
                                E um detalhe essa versao do joomla e
                                muito antiga e jah n&atilde;o tem mais<br>
                                suporte solicitei pro responsavel pelo
                                site para atualizar o mesmo pra<br>
                                versao 3.x do joomla pra tentar
                                minimizar.<br>
                                <br>
                                agora o que eu quero e saber se tem
                                algum programa que fique rodando e<br>
                                monitorando altera&ccedil;&otilde;es nas pastas afim
                                de que quando mudar ou detectar<br>
                                algo ele me informar por email.<br>
                                <br>
                                att,,<br>
                                <br>
                                Gabriel<br>
                                Em 13-08-2013 09:49, lscrlstld escreveu:<br>
                                <div>
                                  <div>&gt;&gt; Boa Noite Galera,<br>
                                    &gt;&gt;<br>
                                    &gt;&gt; Seguinte estou tendo
                                    problemas com invas&atilde;o em alguns
                                    sites que tenho<br>
                                    &gt;&gt; mantido no meu servidor.<br>
                                    &gt;&gt;<br>
                                    &gt;&gt; no caso o bendito joomla
                                    1.5.26.<br>
                                    &gt; Identificou o m&eacute;todo de
                                    invas&atilde;o?<br>
                                    &gt;<br>
                                    &gt;
                                    _______________________________________________<br>
                                    &gt; CentOS-pt-br mailing list<br>
                                    &gt; <a moz-do-not-send="true"
                                      rel="nofollow">CentOS-pt-br@centos.org</a><br>
                                    &gt; <a moz-do-not-send="true"
                                      rel="nofollow"
                                      href="http://lists.centos.org/mailman/listinfo/centos-pt-br"
                                      target="_blank">http://lists.centos.org/mailman/listinfo/centos-pt-br</a><br>
                                    <br>
_______________________________________________<br>
                                    CentOS-pt-br mailing list<br>
                                    <a moz-do-not-send="true"
                                      rel="nofollow">CentOS-pt-br@centos.org</a><br>
                                    <a moz-do-not-send="true"
                                      rel="nofollow"
                                      href="http://lists.centos.org/mailman/listinfo/centos-pt-br"
                                      target="_blank">http://lists.centos.org/mailman/listinfo/centos-pt-br</a><span
                                      class="HOEnZb"><font
                                        color="#888888"><br>
                                      </font></span></div>
                                </div>
                              </blockquote>
                            </div>
                            <span class="HOEnZb"><font color="#888888"><br>
                                <br clear="all">
                                <br>
                                -- <br>
                                <br>
                                Att; <br>
                                Um Forte Abra&ccedil;o, <br>
                                <br>
                                <br>
                                <i style="color:rgb(255,0,0)"><font
                                    size="4"><b>Raphael de Assis</b></font></i><br>
                                Recife/PE <br>
                                <a moz-do-not-send="true" rel="nofollow">raphaelmirc@gmail.com</a><br>
                                Cel:&nbsp;&nbsp; Oi: &nbsp; (81)<b> 8796 - 7081&nbsp; &nbsp; </b><br>
                              </font></span></div>
                        </td>
                      </tr>
                    </tbody>
                  </table>
                </div>
              </div>
            </div>
            <br>
            _______________________________________________<br>
            CentOS-pt-br mailing list<br>
            <a moz-do-not-send="true"
              href="mailto:CentOS-pt-br@centos.org">CentOS-pt-br@centos.org</a><br>
            <a moz-do-not-send="true"
              href="http://lists.centos.org/mailman/listinfo/centos-pt-br"
              target="_blank">http://lists.centos.org/mailman/listinfo/centos-pt-br</a><br>
            <br>
          </blockquote>
        </div>
        <br>
        <br clear="all">
        <div><br>
        </div>
        -- <br>
        <div dir="ltr">Gracco Guimar&atilde;es - +55 (11) 98229-7272<br>
          <br>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
CentOS-pt-br mailing list
<a class="moz-txt-link-abbreviated" href="mailto:CentOS-pt-br@centos.org">CentOS-pt-br@centos.org</a>
<a class="moz-txt-link-freetext" href="http://lists.centos.org/mailman/listinfo/centos-pt-br">http://lists.centos.org/mailman/listinfo/centos-pt-br</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>