業務用エアコン関連の技術情報、エラーコード、環境問題対策に関する別サイト「エアコンの安全な修理・適切なフロン回収」

nuy

OpenSUSE15.6_en

OpenSUSE15.6 ; Suricata , SNORT2 Install

SuricataSURICATA IDS/IPS is an open source IDS that monitors communications on the network and detects suspicious traffic.The basic mechanism is signature-based, so it can detect predefined unauthorized communications. Suricata is also characterized by its ability to provide protection as well as detection.SNORT2Snort is a network-based IDS (Intrusion Detection System). It captures packets flowing over a network and detects suspicious packets.The source file is used directly from https://snort.org/.
OpenSUSE15.5_en

OpenSUSE15.5 ; WEB Server (Apache) Install

1. Web Server (Apache)1.1 apache2 Install2. Apache2 : Using Perl Scripts Configure Perl scripts to be used as CGI3. Apache2 : Virtual Host SettingsConfigure both domains sample1.korodes.com sample2.korodes.com to be displayed on one server4. Apache2 : Using PHP ScriptsInstall and configure PHP so that PHP scripts are available
OpenSUSE15.6_en

OpenSUSE15.6 ; WEB Server (Apache) Install

1. Web Server (Apache)1.1 apache2 Install2. Apache2 : Using Perl Scripts Configure Perl scripts to be used as CGI3. Apache2 : Virtual Host SettingsConfigure both domains sample1.korodes.com sample2.korodes.com to be displayed on one server4. Apache2 : Using PHP ScriptsInstall and configure PHP so that PHP scripts are available
Almalinux9.4_en

AlmaLinux9.4 ; OS Install , Various settings

1.AlmaLinux 9.4AlmaLinux OS is a project launched by CloudLinux in the US as an alternative to CentOS. Currently, the AlmaLinux OS Foundation is the development parent organization.Following the general availability of Red Hat Enterprise Linux 9.0, AlmaLinux 9.0 was released on May 26, 2022.Like Red Hat Enterprise Linux 9, AlmaLinux 9 utilizes the same package versions as the Linux 5.14 kernel, GCC 11, Python 3.9, and RHEL9.Cockpit web management interface, enhanced kernel live patching, improved container and cloud integration, OpenSSL 3, and other security improvements.This time we will install AlmaLinux 9.4 with a minor upgrade on May 4, 2024.1.1 AlmaLinux 9.4 DownloadFor the AlmaLinux 9.4 installation image, go to the following site and download "AlmaLinux-9.4-x86_64-dvd.iso".https://ftp.jaist.ac.jp/pub/Linux/almalinux/9.4/isos/x86_64/
Rocky Linux8.6_en

Rocky Linux8.6 : WEB Server

1. Install Apache2  & Virtual Host1.1 Install Apache2①Install httpd# dnf -y install httpdVersion Check# httpd -vServer version: Apache/2.4.37 (rocky)Server built: May 10 2022 18:05:142. Use of CGI Scripts①Confirmation of CGI availability# grep -n "^ *ScriptAlias" /etc/httpd/conf/httpd.conf3. PHP installation and configuration1.Install PHP①install4. Digest authentication with Apache2Since Basic Authentication, a well-known authentication authorization method for http, sends authentication information in plain text, there is a risk of ID and password leakage if the packet is intercepted.On the other hand, Digest Authentication encrypts and transmits authentication information, so there is almost no risk of information leakage.
Rocky Linux9.1_en

RockyLinux 9.1 ; SSH connection with public key

SSH connection with authentication using public key cryptographyCreation of public and private key pairsCreate a public/private key pair for a user connecting to the Linux server using OpenSSH.Use ssh-keygen to create key pairs.Creation of public/private key pairs is performed with remote login user privileges。If you do not specify the destination and file name, id_ed25519 and id_eed25519.pub will be created in /home/(user name)/.ssh/. On the way, enter the password for the key.
Rocly Linux8.8_en

RockyLinux8.8 ; FTP Server , Samba FileServer Install

2. Vsftpd over SSL/TLSLS2.1 Create self-signed certificatesThis work is not required if you are using a trusted, legitimate certificate such as Let's Encrypt.3. File server installation with SambaBuild a file server with access rights that requires user authentication with Samba.Installation Procedure①Create shared folders with access rights that require user authentication②Accessible group creation③Creation of users belonging to accessible groups④Configuration File Editing
Rocly Linux8.8_en

RockyLinux8.8 ; SSH connection using public key cryptography

SSH public key cipher setting1.Create a key pairCreate a public/private key pair for a user connecting to a Linux server using OpenSSH.Use ssh-keygen to create the key pair.The creation of a public/private key pair must be done as a user with remote login privileges.If you do not specify the destination and file name, id_ed25519 and id_ed25519.pub will be created in /home/(user name)/.ssh/. On the way, enter the password for the key.
Rocly Linux8.8_en

RockyLinux8.8 ; OS Install

Rocky Linux Install1.Rocky Linux 8.8 DownloadRocky Linux 8.8 installation image can be downloaded from the following sitehttps://rockylinux.org/download2.Rocky Linux 8.8 InstallイInstall USB media Change BIOS settings to boot from USB media.2.1 Installation initial screenPress the [tab] key, enter "resolution=1024x768" and press the [Enter] key.This way, the right edge of the installation screen is displayed without being cut off.
Rocky Linux9.4_en

Rocky Linux9.4 ; Anti-virus(Clamav) , Mail Server

clamav (anti-virus software] Install1.Clam AntiVirus install# dnf -y install clamav clamd clamav-update2.Clam AntiVirus  Configuration File EditMail Server Install1. Postfix1.1 InstallInstall Postfix and build an SMTP serverMail : Postfix + Clamav + clamav-milter+SpamAssassin1.Real-time scanning of e-mails①clamav-milter InstallVirus checks are performed on the mail server side using Clam AntiVirus.The mail server and Clam AntiVirus are linked using clamav-milter.
Debian11.5_en

Debian11.5 ; Initialization

1. Installing and configuring the vim editorDebian has "nano" as the default editor. nano is somewhat difficult to use, and there are few environments where it is used, so we will introduce the procedure for changing the editor to "vim".。1.1 Check vim packageDebian has vim installed by default, but it is a package called "vim-tiny", which is a less functional version. Let's check the installed vim package.Debian uses the "dpkg" command to check packages. The "-l" option displays a list of packages.Since the "dpkg" command as is will show all packages installed on the system, we will use the "grep" command to extract only those packages that contain the string "vim". Execute as follows
Debian11.5_en

Debian11.5 ; OS Install

1.Debian11 OverviewIn this article, we will explain how to build a server with Debian, the basis of the user-friendly Linux distribution UBUNTU.The latest release is Debian 11.5 (codenamed "bullseye").Released on August 14, 2021 with an update (point release11.5) on September 10, 2022.2.Download Debian installation imageDebian11 download site https://www.debian.org/Access the above official website and download "debian-11.5.0-amd64-netinst.iso." which is convenient for setup in an environment connected to the Internet.(Fits on a single CD)NETINST allows you to download and install the necessary packages from the Internet, so you can use a smaller installer (approximately 391 MB for v11.5.0) than a full installer.Click through the following screens in order.
Debian12.8_en

Debian12.8 ; Logwatch , Chkrootkit , Disk Usage Check Script

LogwatchLogwatch compiles various logs together and delivers them as a report via email on a regular daily basis. This is a useful tool for detecting unauthorized access and problems and monitoring servers.Chkrootkitchkrootkit is a tool to detect the presence of rootkits.Note that chkrootkit is meaningless after it has already been tampered with, so consideration must be given when introducing it. In addition, chkrootkit has no function to automatically deal with a rootkit even if it detects it, so it must be dealt with manually after detection.
Debian12.8_en

Debian12.8 ; MariaDB , WordPress Install

1. MariaDB1.1 Install# apt install mariadb-serverMariaDB version confirmation# mariadb -Vmariadb Ver 15.1 Distrib 10.11.6-MariaDB, for debian-linux-gnu (x86_64) using EditLine wrapper1.2 MariaDB Server Security SettingsMariaDB comes with a default security script, mariadb-secure-installation, which can be used to improve the security of your MariaDB installation, includingSet a password for the root account (if necessary).Disable remote root login to the database.Delete anonymous user accounts.Delete the test database to which anonymous users have access by default.2.WordPress2.1 Database CreationCreate a database for Word Press (for example, in this case, the database name is "wp_db", the user name is "wp_user", and the password is "?Y123456y")
Debian12.8_en

Debian12.8 ; Anti-virus(Clamav) 、Mail Server

1.Antivirus software Clamav installedInstall Clam AntiVirus, a free anti-virus software for Linux, as an anti-virus measure.By installing this anti-virus software, you can not only scan the entire server for viruses, but also scan incoming and outgoing mail for viruses if you build and configure a mail server.2. Mail server installationPostfix was developed as a Mail Transport Agent (MTA) to replace sendmail, and is a mail server that is highly compatible with sendmail, secure, easy to maintain, and fast.In addition, since Postfix only functions as an SMTP server for sending mail, the POP server Dovecot for receiving mail will be installed separately in the latter half.3 Applied ClamAV to mail server PostfixSet up Postfix and Clamav to work together to scan incoming and outgoing mail in real time.4 Apply spam checks to the mail server4.1 Spam checking using spamassassin and procmail①spamassassin and procmail installation