fedora35_en

Logwatch Introduction①Install# dnf install logwatch②Edit configuration file# cat /usr/share/logwatch/default.conf/logwatch.conf >> /etc/logwatch/conf/logwatch.conf# vi /etc/logwatch/conf/logwatch.conf

What is Fedora?Fedora is an open source operating system software, a Linux distribution.The project started as a successor to Red Hat Linux, whose development was terminated at the end of 2003.It is unique in that it is community-driven, proactively incorporates feedback from the field, and introduces advanced, flexible, and advanced features.The most obvious difference when compared to popular Linux distributions such as "Ubuntu" is the balance between "advanced" and "stable".However, its stability has now been greatly improved, and it is gaining a reputation as an OS that can be used regularly, not just for functional testing purposes.For those who want to incorporate new and useful features as soon as possible, Fedora will be the best choice.However, it should not be used as a production environment or corporate need.In this case, we will use the latest Fedora 35 Server, released November 02, 2021

Web configuration file (under html) backup①Create backup script file# cd /var/www/system/# vi html_backup.shContents of html_backup.shMySQL database backup①Create backup script fileWeb configuration file (under html) restored① Copy the HTML backup file to the "/ (root)" directory of the server to be used for restorationRestore MySQL data① Save database backup file to any directory

Obtain SSL Certificate (Let's Encrypt)Install the latest open ssl# dnf install openssl-devel1.Certificate Installation# dnf -y install certbot# certbot certonly --webroot -w /var/www/html/[domain name] -d [domain name]# Registration of e-mail address and agreement to terms of use are required for the first time only.# Specify an email address to receive

Mysql8 installation＃dnf module -y install mysql:8.0＃vi /etc/my.cnf.d/charset.cnfCreate a new charset.cnf with the following contents# Set default character encoding# To handle 4-byte characters such as pictographs, use [utf8mb4].[mysqld]character-set-server = utf8mb4[client]default-character-set = utf8mb4

SNORT Installation1.advance preparation①Add the CodeReady Red Hat repository and install the required software# dnf -y install bison flex libpcap-devel pcre-devel openssl-devel libdnet-devel libtirpc-devel libtool nghttp2 libnghttp2-devel# mkdir /var/src②Installing DAQ# cd /var/src

Install Clamav ( anti-virus software )1.Install Clam AntiVirus# dnf -y install clamav clamd clamav-update2.Edit Clam AntiVirus configuration file# vi /etc/clamd.d/scan.conf●Line 14.# Default: disabledLogFile /var/log/clamd.scan　←　Uncomment●Line 77.

Apache2 installation and virtual host configuration1.Apache2 installed①Install httpd# dnf -y install httpdVersion Check# httpd -vServer version: Apache/2.4.53 (Fedora Linux)Server built: Mar 17 2022 00:00:00

FTP Server Installation1. Vsftpd installation# dnf -y install vsftpd2.Vsftpd configurationSave the unedited vsftpd.conf with .bak# cp /etc/vsftpd/vsftpd.conf /home/huong/vsftpd.conf.bak①Edit configuration file# vi /etc/vsftpd/vsftpd.conf●Line 12: Anonymous login prohibited (confirmation)

SSH public key cipher settingCreate an SSH private key on Windows and an SSH public key on the server to allow login by key pair authentication.1.Create key pair with ECDSABecome an ordinary user and create a key pair in ECDSA# su – $ ssh-keygen -t ecdsaGenerating public/private ecdsa key pair.Enter file in which to save the key (/home/huong/.ssh/id_ecdsa):Created directory '/home/huong/.ssh'.Enter passphrase (empty for no passphrase): 　←　Enter any password

1.Remote connection by SSHSSH is a service for connecting remotely to a server, basically running immediately after OS installation, but the default settings are somewhat insecure.Configure the default settings to increase the security of ssh connections.1.1 SSH service configuration file changesThe SSH service configuration file is "/etc/ssh/sshd_config".Open the configuration file in a vi editor.# vi /etc/ssh/sshd_config

1. SELinux DisableFirst, disable selinux. selinux is a feature that improves auditing and security in Linux, but when enabled, it can limit the behavior of services and the configuration considerably.Therefore, it is basically invalidated in many cases.You can disable it by doing the following