nuy

1.Obtain SSL Certificate ( Let's Encrypt )Install the latest open ssl# dnf install openssl-devel2. Apache SSLInstall the following just in case# dnf -y install mod_ssl3.Mail SSL/TLS(Let's Encrypt)3.1 Obtaining a certificate for the mail serverObtain a certificate for the mail server, but it cannot be obtained in the same way as above, so the following with the "--standalone" option fails.

SNORT Installation1.advance preparation①Add the CodeReady Red Hat repository and install the required software# dnf -y install bison flex libpcap-devel pcre-devel openssl-devel libdnet-devel libtirpc-devel libtool nghttp2 libnghttp2-devel# mkdir /var/src②Installing DAQ# cd /var/srcTripwire Installation1.Install# dnf -y install tripwire

Install Clamav ( anti-virus software )1.Install Clam AntiVirus# dnf -y install clamav clamd clamav-update2.Edit Clam AntiVirus configuration file# vi /etc/clamd.d/scan.confMail Server Install1. Install Postfix1.1 InstallInstall Postfix and build an SMTP serverMail Server : Postfix + Clamav + Amavisd+SpamAssassin1.Real-time scanning of E-mails①Install Amavisd and Clamav Server# dnf -y install amavisd-new clamd perl-Digest-SHA1 perl-IO-stringy

1.FTP Server Installation1. 1 Vsftpd Install# dnf -y install vsftpd1.2 Vsftpd configurationSave the unedited vsftpd.conf with .bak2. vsftpd SSL/TLSConfigure Vsftpd to use SSL/TLS2.1 Create self-signed certificates3. File server installation with SambaBuild a file server with access rights that requires user authentication with Samba.Installation Procedure① Create shared folders with access rights that require user authentication②Creation of accessible groups③Creation of users belonging to groups that can be accessed④Configuration File Editing

SSH public key cipher settingCreate an SSH private key on Windows and an SSH public key on the server to allow login by key pair authentication.1.Create key pair with ECDSABecome an ordinary user and create a key pair in ECDSA# su – $ ssh-keygen -t ecdsaGenerating public/private ecdsa key pair.Enter file in which to save the key (/home/huong/.ssh/id_ecdsa):Created directory '/home/huong/.ssh'.Enter passphrase (empty for no passphrase): 　←　Enter any password

1.Remote connection by SSHSSH is a service for connecting remotely to a server, basically running immediately after OS installation, but the default settings are somewhat insecure.Configure the default settings to increase the security of ssh connections.1.1 SSH service configuration file changesThe SSH service configuration file is "/etc/ssh/sshd_config".Open the configuration file in a vi editor.# vi /etc/ssh/sshd_config

1. SELinux DisableFirst, disable selinux. selinux is a feature that improves auditing and security in Linux, but when enabled, it can limit the behavior of services and the configuration considerably.Therefore, it is basically invalidated in many cases.You can disable it by doing the following2. System modernization & Services suspended due to security measures3.Network Settings3.1 Set host nameSet the hostname to "Lepard" since the hostname was not set during OS installation.4.Install NTP server and set up time synchronization service4.1 Chrony Install5.Set server time zoneSet time zone to Japan (Tokyo)

What is Fedora?Fedora is an open source operating system software, a Linux distribution.The project started as a successor to Red Hat Linux, whose development was terminated at the end of 2003.It is unique in that it is community-driven, proactively incorporates feedback from the field, and introduces advanced, flexible, and advanced features.The most obvious difference when compared to popular Linux distributions such as "Ubuntu" is the balance between "advanced" and "stable".However, its stability has now been greatly improved, and it is gaining a reputation as an OS that can be used regularly, not just for functional testing purposes.For those who want to incorporate new and useful features as soon as possible, Fedora will be the best choice.However, it should not be used as a production environment or corporate need.In this case, we will use the latest Fedora 36 Server, released May 10, 2022.

1.Website data backupBackup under /var/www/html①Create backu...

Chkrootkit①Download , Install➁Create /root/bin directory and...

SNORTSnort is an open source network intrusion detection sys...

Mysql8 Install①Install➁MySQL Server start➂Check mysql versio...

1.Obtain an SSL certificate ( Let's Encrypt )Install the lat...

Clamav1.Clam AntiVirus Install2.Edit Clam AntiVirus configur...

1.FTP Server Installation1. 1 vsftpd Install2. vsftpd SSL/TLSConfigure Vsftpd to use SSL/TLS2.1 Create self-signed certificatesThis work is not required if you are using a trusted, legitimate certificate such as Let's Encrypt.3. File server installation with SambaBuild a file server with access rights that requires user authentication with Samba.Installation Procedure① Create shared folders with access rights that require user authentication②Creation of accessible groups③Creation of users belonging to groups that can be accessed④Configuration File Editing