November 2024
M T W T F S S
 123
45678910
11121314151617
18192021222324
252627282930  

Categories

November 2024
M T W T F S S
 123
45678910
11121314151617
18192021222324
252627282930  

Puppet 3.7.1 on CentOS 6.5

Puppet 3.7.1 on CentOS 6.5 quick start – I

All below doc is from or based on https://docs.puppetlabs.com/

1. Basic Install

1.1 install OS and prepare the node

1.1.1 Network Layout and install OS

Name IP OS Desc puppet01 192.168.1.10 CentOS 6.5 puppet master puppet02 192.168.1.20 CentOS 6.5 puppet client puppet03 192.168.1.30 CentOS 5.10 puppet […]

BIND CHROOT CENTOS 7

BIND (Berkeley Internet Name Daemon) also known as NAMED is the most widely used DNS server in the internet. This tutorial will descibes how we can run BIND in a chroot jail, the process is simply unable to see any part of the filesystem outside the jail. For example, in this post, i will setting […]

hostnamectl and timedatectl and date and HWCLOCK

Modify CentOS 7 hostname

In CentOS, there are three definitions hostname: static (static), transient (transient), and flexible (pretty). “Static” host name is also called kernel hostname, is the system at boot time from /etc/hostname automatic initialization of the host name. “Transient” host name is in the system is running temporarily assigned host name, for example, […]

MBR vs GPT

MBR is the standard partitioning scheme that’s been used on hard disks since the PC first came out. It supports 4 primary partitions per hard drive, and a maximum partition size of 2TB.

GPT disks are new, and are readable only by Windows Server 2003 SP1, Windows Vista (all versions), and Windows XP x64 Edition. […]

Removing Linux BASH SHELLSHOCKER MALWARE

unknow processes dsfref, gfhddsfew, dsfref etc are starting automatically in centos 6.5

Virus mainly present in /etc/init.d/. Virus will run automatic on the time system start, so remove entry from /etc/init.d. These are virus and its locations

/etc/dsfref,

/etc/gfhddsfew

/etc/dsfref

To Remove Virus from linux

Note: I used chattr -i to change permissions and deleted […]

Centos 7 SYSTEMCTL && Run level && hostname

Centos 7 SYSTEMCTL && Run level && hostname

Centos 7 SYSTEMCTL && Run level && hostname

systemctl start httpd.service (service httpd start)

systemctl stop httpd.service ( service httpd stop)

systemctl restart httpd.service ( service httpd stop)

systemctl status httpd.service ( service httpd status)

systemctl enable httpd.service (chkconfig httpd on)

systemctl disable httpd.service (chkconfig httpd […]

Centos 7 Samba

Centos 7 Samba

FILEDOC /samba/docs LEARDOCS /samba/tech

rpm -qi samba

mkdir -p /samba/docs mkdir -p /samba/tech

ulimit -n 16384

vi /etc/security/limits.conf * – nofile 16384

cd /etc/samba/

cp smb.conf smb.conf.origin

[global] workgroup=FILESERVER netbios name=SERVER1 server string=Samba Server #security=share security=user map to guest = Bad User [SHAREDOCS] path=/samba/tech readonly=yes browseable=yes guest ok=yes [TECHDOCS] path =/samba/tech public […]

POODLE = Padding Oracle On Downgraded Legacy Encryption

POODLE = Padding Oracle On Downgraded Legacy Encryption

B.E.A.S.T (Browser Exploit Against SSL TLS) Affected systems: Netscape 3.0 ssl tls Netscape affected system: tls Netscape 1.2 Netscape 1.1 tls tls Netscape 1.0 Description: CVE (CAN) ID: CVE-2014-3566

SSL3.0 is obsolete and no security protocol, has been TLS 1.0, TLS 1.1, TLS 1.2 substitution, for compatibility […]

Logical Volume Manager

Server: Centos Logical Volume diskserver.rmohan.com (Centos 6.5) = 192.168.1.6

Disk to use: Disk /dev/sdb: 50GB DISK A Disk /dev/sdc: 50GB DISK B Disk /dev/sdd: 50GB DISK C

 

 

 

Disk /dev/sdb: 53.7 GB, 53687091200 bytes 255 heads, 63 sectors/track, 6527 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size […]

ZIMBRA IMPROVEMENT : RESTRICTED SENDER/SENDER MUST LOGIN ON ZIMBRA 8

powerful mail server, Zimbra has some system security features applied by default. We can also applying some additional security policy to increase mail server protection, such as applying PolicyD and Fail2Ban

All the above security rule may be sufficient, but there are some additional security tips should be considered, especially in the case of SMTP […]