Full Monitoring _ Some services Like SSH and Telnet

iArash · 08-24-2011, 01:41 PM

Hello .
we have a server, there are some users out of our company which can login to our server and do their own stuff .
SSH and Telnet are responsible for their remote connection establishment .
In our server, (a debian box) how Can we monitor their full activity ?, we like to know which commands they issued and also like to have the full tracking of their activity around our server .
I need a reliable way .

(Monitoring their step by step walks on the server)

EricTRA · 08-25-2011, 01:38 AM

Hello,

Have a look at this site. The way explained there takes care of reliability, full logging and security. The only thing is you'll need to set it up with key authentication but that shouldn't be a problem.

This is for SSH of course, not for Telnet. I advice you to just disable telnet and only allow SSH access. Telnet is very insecure, not to be used outside of your local LAN and should be avoided in your situation, allowing access from outside your company.

Kind regards,

Eric

rodrifra · 08-25-2011, 04:03 AM

~/.bash_history keeps track of all commands executed.

EricTRA · 08-25-2011, 07:04 AM

Quote:

Originally Posted by rodrifra

~/.bash_history keeps track of all commands executed.

Hi,

And is easily modified by the user himself, enabling him to erase whatever he wants if no 'extra security' is put in place.

Kind regards,

Eric