nuy | Page 8 | Linux Server Construction

FreeBSD14.2 ; Jail Install

JailIt is a mechanism that allows multiple virtual FreeBSD environments to be created on a FreeBSD environment.A jail is an extension of chroot, and a jail environment (called a prisoners) built on a host ring (called a jailer) behaves as a FreeBSD machine running separately from the host environment.The prisoner cannot directly attach to the jailer or another parallel prisoner.Features of JAIL・High speed operation because it is not emulation.・Each prisoner can be assigned an IP address different from that of the jailer.・Since the same file system is used for a jailer and a prisoner, it is necessary to be careful about the assignment of UID/GID.This time, build two prisoners (prisoner1 and prisoner2) in jailer (FreeBSD14.2)Building Jail1.Creation of PRISONER base directoryCreate a directory (jail) that will be the root directory for prisoner1 and prisoner2. In this case, we will create them in /home, but you can create them anywhere you like.

2024.12.08

FreeBSD14.2_en

FreeBSD14.1 ; Mail Server(Postfix,Dovecot) , SSL/TLS

1. Obtaining a certificate for the mail serverObtain a certificate for the mail server to convert the mail server to SSL/TLS.Use the certbot that was used when the web server was converted to SSL.Stop the web server and execute the following command

2024.06.06

FreeBSD14.1_en

FreeBSD14.1 ; Web Server SSL、Webmin

1. Web server (Apache) SSL conversionThe ports can be further updated with FreeBSD's periodic job settings.Install certbot via pkg, and include a plugin for apache to update in webroot mode.1.1 Installing the Certbot tool for Let's EncryptRun the following command to install the Certbot package and the Apache HTTP plug-in

2024.06.06

FreeBSD14.1_en

FreeBSD14.1 ; Postfix ClamAV + Amavis + SpamassAssin

Install ClamAV on FreeBSD 14.1 and link it with Amavis against Postfix.ClamAV is anti-virus software.We will proceed on the assumption that you have already implemented Postfix.Before proceeding, update the Ports Collection.1. ClamAV1.1 Install# cd /usr/ports/security/clamav# make install cleanEach option is installed by default for nowclamav version check

2024.06.07

FreeBSD14.1_en

FreeBSD13.2 ; Postfix ClamAV + Amavis + SpamassAssin

Install ClamAV on FreeBSD 13 and link it with Amavis against Postfix.ClamAV is anti-virus software.We will proceed on the assumption that you have already implemented Postfix.Before proceeding, update the Ports Collection.

2023.08.01

FreeBSD13.2_en

FreeBSD14 ; Postfix ClamAV + Amavis + SpamassAssin

Install ClamAV on FreeBSD 14 and link it with Amavis against Postfix.ClamAV is anti-virus software.We will proceed on the assumption that you have already implemented Postfix.Before proceeding, update the Ports Collection.1. ClamAV1.1 Install# cd /usr/ports/security/clamav# make install cleanEach option is installed by default for nowclamav version check

2023.11.19

FreeBSD14_en

FreeBSD14.1 ; WEB Server(Apache2) , MySQL8

1. Apache21.1 Install# cd /usr/ports/www/apache24# make configThere are many options, but we will proceed wit1. Apache21.1 Install# cd /usr/ports/www/apache24# make configThere are many options, but we will proceed wit

2024.06.05

FreeBSD14.1_en

OracleLinux9.5 ; SSH Remote connection , Firewalld , NTP Server

1. Setting up a remote connection via SSHSSH is a service for connecting remotely to a server and is basically running immediately after the OS is installed, but the default settings are somewhat insecure.Here we will configure the default settings to increase the security of SSH connections.1.1 SSH service configuration file changesThe SSH service configuration file is "/etc/ssh/sshd_config".

2024.11.29

OracleLinux9.5_en

OracleLinux9.5 ; SSH with public key

SSH connection with authentication using public key Creation of public and private key pairsCreate a public/private key pair for a user connecting to the Linux server using OpenSSH.Use ssh-keygen to create key pairs.Creation of public/private key pairs is performed with remote login user privileges.If you do not specify the destination and file name, id_ed25519 and id_ed25519.pub will be created in /home/(user name)/.ssh/. On the way, enter the password for the key.

2024.11.29

OracleLinux9.5_en

OracleLinux9.5 ; FTP Server , Samba FileServer Install

1. FTP Server1.1 Vsftpd Install# dnf -y install vsftpd1.2 Vsftpd configurationSave vsftpd.conf with .bak# cp /etc/vsftpd/vsftpd.conf /home/huong/vsftpd.conf.bak2. vsftpd SSL/TLSConfigure Vsftpd to use SSL/TLS2.1 Create self-signed certificatesThis work is not required if you are using a trusted, legitimate certificate such as Let's Encrypt.3. File server installation with SambaBuild a file server with access rights that requires user authentication with Samba.Installation Procedure①Create shared folders with access rights that require user authentication②Accessible group creation③Creation of users belonging to accessible groups④Configuration File Edit

2024.11.29

OracleLinux9.5_en

OracleLinux9.5 ; WEB server ,PHP ,virtual host

1.Apache2 Install1.1 httpd Install# dnf -y install httpd1.3 Virtual Host SettingsAssign and configure the domain name [FQDN] to the document root [/var/www/html/[FQDN]] directory for virtual host operation2. Confirmation of CGI Script Usage①Confirmation of CGI availability3. PHP installation and configuration①Install# dnf -y install php php-mbstring php-pear4. Digest authentication with Apache2Since Basic Authentication, a well-known authentication authorization method for http, sends authentication information in plain text, there is a risk of ID and password leakage if the packet is intercepted.On the other hand, Digest Authentication encrypts and transmits authentication information, so there is almost no risk of information leakage.

2024.11.29

OracleLinux9.5_en

OracleLinux9.5 ; MySQL8 , WordPress

MySQL8 Install＃ dnf -y install mysql-servercharset.cnf Create a new one with the fWordPress Install1. Create database for Word PressAs an example, assume database [wp_db] database user [wp_user] password [?W123456]

2024.11.29

OracleLinux9.5_en

OracleLinux9.5 ; Suricata Install

SuricataSURICATA IDS/IPS is an open source IDS that monitors communications on the network and detects suspicious traffic.The basic mechanism is signature-based, so it can detect predefined unauthorized communications. Suricata is also characterized by its ability to provide protection as well as detection.

2024.11.29

OracleLinux9.5_en

OracleLinux9.5 ; System Backup and Restore

1.Website data backup1-1.Backup under /var/www/html①Create backup script file2.MySQL database backup①Create backup script file# cd /var/www/system# vi db_my_backup.sh3.Restore backup files under html① Store HTML backup files in "/ (root)" directory# cd /var/www/backup/html_bak# cp html_back_20220610.tar.gz / ←Specify the backup file with the latest date4.Restore Mysql backup file①Save the database backup file to any directory and（In the example, the directory is "/var/www/backup/db_bak".）Extracting data# cd /var/www/backup/db_bak

2024.11.29

OracleLinux9.5_en

OracleLinux9.4 ; Tripwire , Chkrootkit , Logwatch , Disk Usage Check Script

Tripwire1.Download and installation# cd /usr/local/src# wget https://rpmfind.net/linux/epel/9/Everything/x86_64/Packages/t/tripwire-2.4.3.7-13.el9.x86_64.rpm# rpm -Uvh tripwire-2.4.3.7-13.el9.x86_64.rpmChkrootkit①Download and install chkrootkit# cd /usr/local/src# wget https://launchpad.net/chkrootkit/main/0.55/+download/chkrootkit-0.55.tar.gz# tar xvf chkrootkit-0.55.tar.gzLogwatch①Install# dnf install logwatchIntroduce disk usage check script1. Script Creation# cd /var/www/system# vi disk_capacity_check.sh

2024.09.03

OracleLinux9.4_en