nuy | Page 25 | Linux Server Construction

AlmaLinux9.2 ; SSH、Firewalld、NTP Server

1.SSH remote connection SSH is a service for connecting remotely to a server and is basically running immediately after the OS is installed, but the default settings are somewhat insecure. Here we will configure the default settings to increase the security of ssh connections. 1.1 SSH service configuration file changes

2023.05.17

Almalinux9.2_en

OpenSUSE15.3 ; Tripwire Chkrootkit Logwatch DiCE

1. Tripwire Install Tripwire is a host-based intrusion detection system (IDS) that monitors files and directories and notifies the user of any changes. 1.1 Installation and configuration ① Download and install 2. Chkrootkit Install ①Download and install chkrootkit 3. Logwatch Install ① Install # zypper -n install logwatch ② Edit the configuration file 4. DiCE Install Every time the global IP is changed, which happens when the Internet is disconnected or the router is disconnected and rebooted, the dynamic DNS must be accessed to notify the change in global IP. DiCE does that work for you automatically.

2022.01.18

openSUSE_15.3_en

Fedora35 : Logwatch , DiCE

Logwatch Introduction ①Install # dnf install logwatch ②Edit configuration file # cat /usr/share/logwatch/default.conf/logwatch.conf >> /etc/logwatch/conf/logwatch.conf # vi /etc/logwatch/conf/logwatch.conf

2022.05.13

fedora35_en

Fedora36 ; Logwatch , DiCE Install

Logwatch Introduction ①Install # dnf install logwatch ②Edit configuration file Installing DiCE Whenever the global IP changes, which happens when the network is disconnected or the router is disconnected and rebooted, the dynamic DNS must be accessed to inform the user that the global IP has changed. DiCE does this automatically! ①Download and install Dice

2022.10.19

fedora36_en

AlmaLinux 9.1 ; Logwatch , DiCe , Disk Usage Check Script

1. Logwatch ①Install # dnf install logwatch ②Edit configuration file 2. DiCE Whenever the global IP changes, which happens when the network is disconnected or the router is disconnected and rebooted, the dynamic DNS must be accessed to inform the user that the global IP has changed. DiCE does this automatically! 3.Introduce disk usage check script 3.1 Script Creation # cd /var/www/system # vi disk_capacity_check.sh

2023.01.04

Almalinux9.1_en

AlmaLinux9.2 ; Logwatch , DiCe , Disk Usage Check Script

Logwatch , DiCe , Disk Usage Check Script

2023.05.22

Almalinux9.2_en

RockyLinux 9.1 ; Logwatch , DiCE , Disk Usage Check Script

1. Logwatch ①Install # dnf install logwatch ②Edit configuration file 2. DiCE Whenever the global IP changes, which happens when the network is disconnected or the router is disconnected and rebooted, the dynamic DNS must be accessed to inform the user that the global IP has changed. DiCE does this automatically! 3.Introduce disk usage check script 3.1 Script Creation # cd /var/www/system # vi disk_capacity_check.sh

2022.11.11

Rocky Linux9.1_en

Rocky Linux9.2 ; Logwatch , DiCE , Disk Usage Check Script

1. Logwatch ①Install # dnf install logwatch ②Edit configuration file 2. DiCE Whenever the global IP changes, which happens when the network is disconnected or the router is disconnected and rebooted, the dynamic DNS must be accessed to inform the user that the global IP has changed. DiCE does this automatically! 3.Introduce disk usage check script 3.1 Script Creation # cd /var/www/system # vi disk_capacity_check.sh

2023.05.28

Rocky Linux9.2_en

MiracleLinux8.4 ; SNORT ，Tripwire , Checkrootkit

Install SNORT 1.Preliminary preparations ①Add the CodeReady...

2022.01.27

miracle8.4_en

OracleLinux9.2 ; SSL Certificate Acquisition( Let's Encrypt ) , WEB/Mail server SSL

1.SSL Certificate Acquisition ( Let's Encrypt ) Install the latest open ssl # dnf install openssl-devel 1.1 advance preparation 1.Package management system Snappy installation Since the SSL certificate issuing tool "certbot" of Let's Encrypt is recommended to be installed using "snap" after 2021, install Snapd first.(Can also be installed the traditional way with dnf or yum) 2. Converting Apache to https Install the following # dnf -y install mod_ssl 3. SSL/TLS (Let's Encrypt) settings on the mail server 3.1 Obtaining a certificate for the mail server Obtain a certificate for the mail server, but it cannot be obtained in the same way as above, so the following with the "--standalone" option fails.

2023.08.14

OracleLinux9.2-en

MiracleLinux8.4 ; Initial Setup

1. Disable SELinux selinux is a feature that improves auditing and security in Linux, but when it is enabled, it can be quite restrictive in how services work and what settings are available. Therefore, in many cases, it is basically invalidated. If you build a server while looking at a website and it doesn't work as expected, it may be because this selinux is enabled. Therefore, remember to disable it after installation. 3. Adding Repositories 3.1 PowerTools / HighAvailability This is a repository that has been newly provided with MIRACLE LINUX 8.4. Utilization Method PowerTools and HighAvailability can be used by updating miraclelinux-repos and enabling the repositories. Update miraclelinux-repos to 8.4-3.el8 or later. After the update, the following repository files will be added to /etc/yum.repos.d. miraclelinux-powertools.repo miraclelinux-highavailability.repo

2022.01.24

miracle8.4_en

Ubuntu Server23.04 ; SSH , Firewall configuration

1. SSH Service Security Settings The SSH service allows the root user to log in by default, and since the root user already knows the user name and can log in to the server with administrative privileges once the password is known, we will deny this setting. 1.1 Creating a General User If you have created a general user when installing Ubuntu 23, this procedure is not necessary. If you have already created a user at the time of OS installation, this procedure is not necessary. If you have already created a user during OS installation, this procedure is not necessary. 2. Firewall Settings Ubuntu often uses software called "ufw" to configure the firewall UFW is installed when the OS is installed. Here are the steps to configure minimal filter settings after installation.

2023.10.01

Ubuntu23.04_en

Ubuntu Server23.04 ; SSH connection with public key cryptography

SSH connection with authentication using public key cryptography Creation of public and private key pairs Create a public/private key pair for a user connecting to the Linux server using OpenSSH. Use ssh-keygen to create key pairs. This time, we will create a key set using the RSA cipher used in the SSH protocol Version 2. Creation of public/private key pairs is performed with remote login user privileges (huong). If you do not specify the destination and file name, id_ed25519,id_ed25519.pub will be created in /home/huong/.ssh/. On the way, enter the password for the key.

2023.10.01

Ubuntu23.04_en

Ubuntu Server23.04 ; NTP , FTP(Vsftpd) , Samba Install

1.Install NTP server 2. Install FTP server vsftpd 2.1Installation and configuration ①Install 2.2 Vsftpd Over SSL/TLS ①Create a self-signed certificate. If you are using a trusted, legitimate certificate such as Let's Encrypt, you do not need to do this work. 3. File server installation with Samba Build a file server with access rights that requires user authentication with Samba. Installation Procedure (1) Create a shared folder with access rights that requires user authentication. (2) Create a group with access rights (3)Create users belonging to groups that can be accessed (4)Edit configuration file

2023.10.02

Ubuntu23.04_en

Ubuntu Server23.04 ; Anti-Virus(Clamav) , Mail Server

1.Anti-virus software Clamav installed 1.1 Install # apt install clamav clamav-daemon The clamav-related configuration files are installed in the "/etc/clamav/" folder. 2. Email software installation 2.1 Postfix : Installation/Configuration Install Postfix and build an SMTP server. 25/TCP is used for SMTP. To prevent unauthorized mail relay, use the SASL function of Dovecot (see below), and configure Postfix so that authentication is required even for outgoing mail. 2.2 Dovecot : Installation/Configuration Install Dovecot and build a POP/IMAP server, using 110/TCP for POP and 143/TCP for IMAP 2.7 Applied ClamAV to mail server Postfix Set up Postfix and Clamav to work together to scan incoming and outgoing mail in real time. ①Install Amavisd and Clamav Daemon and start Clamav Daemon 2.7 Applied ClamAV to mail server Postfix Set up Postfix and Clamav to work together to scan incoming and outgoing mail in real time. ①Install Amavisd and Clamav Daemon and start Clamav Daemon 2.7 Applied ClamAV to mail server Postfix Set up Postfix and Clamav to work together to scan incoming and outgoing mail in real time. ①Install Amavisd and Clamav Daemon and start Clamav Daemon 2.8Applied spamassassin to mail server Postfix 2.5.1 spamassassin install ①Install

2023.10.03

Ubuntu23.04_en