August 2012
M T W T F S S
 12345
6789101112
13141516171819
20212223242526
2728293031  

Categories

August 2012
M T W T F S S
 12345
6789101112
13141516171819
20212223242526
2728293031  

CentOS 6 as a production LAMP server

LAMP (Linux, Apache, MySQL, PHP) server from the scratch in an virtualized environment. There are many articles, but neither of them cover all the required steps. So far after each I had to troubleshoot many issues that weren’t even mentioned in the articles and that involves lot of searching and playing around. One of many […]

PCI Audits often reveal TRACE & TRACK : Apache Hardening

PCI Audits often reveal TRACE & TRACK as issues that must be handled before the website can be considered PCI compliant.

If you are running apache 2.x, the following directives will disable TRACE & TRACK functionality.

This change needs to be made in /etc/httpd/conf/httpd.conf: ServerTokens OS TraceEnable OFF

The Mod_rewrite directives below need to be […]

Hardening Linux Web Servers

Security is a process, not a result. It is a process which is difficult to adopt under normal conditions; the problem is compounded when it spans several job descriptions. All the system level security in the world is rendered useless by insecure web-applications. The converse is also true—programming best practices, such as always verifying user […]

SSH Hardening

 

SSH Hardening Top 20 OpenSSH Server Best Security Practices OpenSSH is the implementation of the SSH protocol. OpenSSH is recommended for remote login, making backups, remote file transfer via scp or sftp, and much more. SSH is perfect to keep confidentiality and integrity for data exchanged between two networks and systems. However, the main […]

Linux Server Hardening TIPS

Securing your Linux server is important to protect your data, intellectual property, and time, from the hands of crackers (hackers). The system administrator is responsible for security Linux box. In this first part of a Linux server security series, I will provide 20 hardening tips for default installation of Linux system.

#1: Encrypt Data Communication […]

Linux Commands – Not Usual

Check Validity of a Certificate File (PEM File) # openssl x509 -in Certificates.pem -inform PEM -text -noout -enddate Certificate: Data:

Version: 3 (0x2)

Serial Number:

5b:84:3e:8f:d3:1e:fc:67

Signature Algorithm: sha1WithRSAEncryption

Issuer: C=US, O=Sabe Inc., OU=Sabe Relations, CN=Sabe Certification Authority

Validity

Not Before: Oct 1 11:56:10 2011 GMT Not After : Sep 30 11:56:10 2012 GMT

Sometime […]

Qmail Handle Admin

Qmail Handle Admin

 

QmHandle, a perl script which gives you greater functionality – allows you to view and manage the ‘qmail’ message queue.

It can be install by excuting the following commands cd /usr/bin wget -O – “http://easynews.dl.sourceforge.net/sourceforge/qmhandle/qmhandle-1.2.0.tar.gz” | tar xzf

Following commands are useful to manage the queue

# List emails by subject […]

Qmail : How does it work ?

Qmail : How does it work ?

Qmail programs & configuration files Qmail works using about 15 small programs. It also uses a pretty large number of configuration files. At the beginning, this may appear as quite confusing. Once you are familiarised with these configuration files & programs, qmail administration will be easier.

Qmail programs

[…]

qmail: queue wrong owner # 4.3.5 error

qmail: queue wrong owner # 4.3.5 error

 

1. download and run queue-repair to fix the queue http://pyropus.ca/software/queue-repair/ 2. make sure qmail-queue is owned by qmailq # chown -Rf qmailq qmail-queue 3. set qmail-queue’s user id bit (to run qmail-queue as qmailq user) # chmod u+s qmail-queue

don’t go playing with your qmail files if […]

How to check mail queue in qmail?

/var/qmail/bin/qmail-qstat

# nice find /var/qmail/queue/mess/ -type f | xargs grep ‘^From: ‘ | awk ‘{print $2}’ | sort | uniq -c | sort -n | tail

# nice -20 find /var/qmail/queue/mess/ -type f |xargs egrep ‘^From|^To’ |sort -k1 |uniq |sort -k2 |uniq -c -f 1 |sort -n |tail