nuy

SNORT Installation 1.advance preparation ①Add the CodeReady Red Hat repository and install the required software # dnf -y install bison flex libpcap-devel pcre-devel openssl-devel libdnet-devel libtirpc-devel libtool nghttp2 libnghttp2-devel # mkdir /var/src ②Installing DAQ # cd /var/src Tripwire Installation 1.Install # dnf -y install tripwire

Install Clamav ( anti-virus software ) 1.Install Clam AntiVirus # dnf -y install clamav clamd clamav-update 2.Edit Clam AntiVirus configuration file # vi /etc/clamd.d/scan.conf Mail Server Install 1. Install Postfix 1.1 Install Install Postfix and build an SMTP server Mail Server : Postfix + Clamav + Amavisd+SpamAssassin 1.Real-time scanning of E-mails ①Install Amavisd and Clamav Server # dnf -y install amavisd-new clamd perl-Digest-SHA1 perl-IO-stringy

Apache2 installation and virtual host configuration 1.Apache2 Install ①httpd install # dnf -y install httpd Version Check # httpd -v erver version: Apache/2.4.54 (Fedora Linux) Server built: Jun 17 2022 00:00:00 3.Virtual Host Settings Assign and configure the [FQDN] to be operated on the virtual host in the document root [/var/www/html/FQDN] directory Confirmation of CGI Script Usage ①CGI availability check PHP installation and configuration 1.PHP Installation ①Install # dnf -y install php php-mbstring php-pear

1.FTP Server Installation 1. 1 Vsftpd Install # dnf -y install vsftpd 1.2 Vsftpd configuration Save the unedited vsftpd.conf with .bak 2. vsftpd SSL/TLS Configure Vsftpd to use SSL/TLS 2.1 Create self-signed certificates 3. File server installation with Samba Build a file server with access rights that requires user authentication with Samba. Installation Procedure ① Create shared folders with access rights that require user authentication ②Creation of accessible groups ③Creation of users belonging to groups that can be accessed ④Configuration File Editing

SSH public key cipher setting Create an SSH private key on Windows and an SSH public key on the server to allow login by key pair authentication. 1.Create key pair with ECDSA Become an ordinary user and create a key pair in ECDSA # su – $ ssh-keygen -t ecdsa Generating public/private ecdsa key pair. Enter file in which to save the key (/home/huong/.ssh/id_ecdsa): Created directory '/home/huong/.ssh'. Enter passphrase (empty for no passphrase): 　←　Enter any password

1.Remote connection by SSH SSH is a service for connecting remotely to a server, basically running immediately after OS installation, but the default settings are somewhat insecure. Configure the default settings to increase the security of ssh connections. 1.1 SSH service configuration file changes The SSH service configuration file is "/etc/ssh/sshd_config". Open the configuration file in a vi editor. # vi /etc/ssh/sshd_config

Web configuration file (under html) backup ①Create backup script file # cd /var/www/system/ # vi html_backup.sh Contents of html_backup.sh MySQL database backup ①Create backup script file Web configuration file (under html) restored ① Copy the HTML backup file to the "/ (root)" directory of the server to be used for restoration Restore MySQL data ① Save database backup file to any directory

Obtain SSL Certificate (Let's Encrypt) Install the latest open ssl # dnf install openssl-devel 1.Certificate Installation # dnf -y install certbot # certbot certonly --webroot -w /var/www/html/[domain name] -d [domain name] # Registration of e-mail address and agreement to terms of use are required for the first time only. # Specify an email address to receive

Mysql8 installation ＃dnf module -y install mysql:8.0 ＃vi /etc/my.cnf.d/charset.cnf Create a new charset.cnf with the following contents # Set default character encoding # To handle 4-byte characters such as pictographs, use [utf8mb4]. [mysqld] character-set-server = utf8mb4 [client] default-character-set = utf8mb4

SNORT Installation 1.advance preparation ①Add the CodeReady Red Hat repository and install the required software # dnf -y install bison flex libpcap-devel pcre-devel openssl-devel libdnet-devel libtirpc-devel libtool nghttp2 libnghttp2-devel # mkdir /var/src ②Installing DAQ # cd /var/src

Install Clamav ( anti-virus software ) 1.Install Clam AntiVirus # dnf -y install clamav clamd clamav-update 2.Edit Clam AntiVirus configuration file # vi /etc/clamd.d/scan.conf ●Line 14. # Default: disabled LogFile /var/log/clamd.scan　←　Uncomment ●Line 77.

Apache2 installation and virtual host configuration 1.Apache2 installed ①Install httpd # dnf -y install httpd Version Check # httpd -v Server version: Apache/2.4.53 (Fedora Linux) Server built: Mar 17 2022 00:00:00

FTP Server Installation 1. Vsftpd installation # dnf -y install vsftpd 2.Vsftpd configuration Save the unedited vsftpd.conf with .bak # cp /etc/vsftpd/vsftpd.conf /home/huong/vsftpd.conf.bak ①Edit configuration file # vi /etc/vsftpd/vsftpd.conf ●Line 12: Anonymous login prohibited (confirmation)

SSH public key cipher setting Create an SSH private key on Windows and an SSH public key on the server to allow login by key pair authentication. 1.Create key pair with ECDSA Become an ordinary user and create a key pair in ECDSA # su – $ ssh-keygen -t ecdsa Generating public/private ecdsa key pair. Enter file in which to save the key (/home/huong/.ssh/id_ecdsa): Created directory '/home/huong/.ssh'. Enter passphrase (empty for no passphrase): 　←　Enter any password

1.Remote connection by SSH SSH is a service for connecting remotely to a server, basically running immediately after OS installation, but the default settings are somewhat insecure. Configure the default settings to increase the security of ssh connections. 1.1 SSH service configuration file changes The SSH service configuration file is "/etc/ssh/sshd_config". Open the configuration file in a vi editor. # vi /etc/ssh/sshd_config