Articles & Guides
Useful resources for web developers and system administrators
Found 68 · Security · Reset
Security
Fail2ban Configuration: jail.local, bantime, maxretry, SSH
Configure fail2ban on Debian and Ubuntu: jail.local not jail.conf, bantime, findtime, maxretry, the sshd jail with backend = systemd, unbanning.
Security
Website and IP Blacklist Check: Find Lists and Get Delisted
Website or IP blacklisted? Check Safe Browsing, SmartScreen, email DNSBLs and AbuseIPDB: dig commands, 127.0.0.x return codes and the delisting order.
Security
Website Privacy Policy: What It Must Contain
Website privacy policy: who needs one, which sections it must contain, how to publish it, how to run a compliant cookie consent banner under GDPR and ePrivacy, and what fines you risk without one.
Security
Website Security Check: The Complete Checklist
Website security check: the complete checklist. How to test any website online in 5 minutes — HTTPS, security headers, CSP, cookies, malware — plus a full owner's checklist with curl examples and a layer-by-layer summary table.
Security
Website Hacked: What to Do in the First Hour
Website hacked — what to do in the first hour: a minute-by-minute plan. Isolate the site, rotate all credentials, preserve logs, find the web shell and entry point, restore from a clean backup, and close the vulnerability. With commands, a 10-step checklist, and FAQ.
Security
152-FZ Website Compliance Checklist (Russian Data Law)
Does your site comply with Russia's 152-FZ personal data law? Check the privacy policy, consent checkbox, cookie notice, data localization, RKN notice.
Security
Blocked by Content Security Policy: How to Fix CSP Errors
Blocked by CSP? Read the console error by directive (script-src, connect-src), then allow the source or use a nonce or hash, not unsafe-inline.
Security
DDoS Protection: How to Defend Your Site Before an Attack
The layers of DDoS protection: filtering proxy/CDN, WAF, rate limiting, hidden IP, capacity headroom. How defense differs for volumetric vs application attacks.
Security
How to Check a Website for Fraud: 12 Signs of a Phishing Site
12 technical and behavioral signs of a fraudulent site: domain age, address spoofing, SSL details, legal info. A two-minute check with free browser tools.
Security
DDoS Attack: How to Tell and What to Do in the First Hour
Signs of a DDoS attack, a first-hour action plan, how to tell an attack from an outage, and how to prepare in advance. Log triage, anti-DDoS, rate limiting.