Network security is a crucial factor in protecting important data and information in an organization. One methodto secure a web server is to implement an iptables-based Intrusion Prevention System (IPS). This study aims tooptimize the security of an Ubuntu web server using iptables-based IPS technology. Iptables functions not only as afirewall, but also as an effective intrusion detection and prevention system (IDS/IPS) to protect Linux-based servers.In this study, Snort is used as an intrusion detection tool integrated with iptables to monitor and mitigate potentialattacks on the local network. The research methodology includes system requirements analysis, operating system andweb server installation, and iptables configuration as an IPS to detect and prevent attacks that threaten serverintegrity. Testing is done by identifying its vulnerabilities and testing the effectiveness of IPS implementation on theUbuntu web server. The results of the study show that iptables successfully performs its function as an IPS in securingthe web server from DDoS attacks. Iptables is effective in blocking attacks that enter the web server. This system alsosuccessfully detects attacks carried out using Snort which functions as an IDS. Snort is able to detect incoming attacksand provide warnings that are useful in strengthening the security layer on the web server.
Baca artikel lengkap dalam format PDF.