I have found the following two sites helpful in finding issues with the configuration of SSL secured web sites https://ssltools.digicert.com/checker/ https://www.ssllabs.com/ssltest/analyze.html Test which ciphers (TLS, SSL, etc) are enabled nmap -sV –script ssl-enum-ciphers -p 443 www.yourdomain.com Ref: https://nmap.org/nsedoc/scripts/ssl-enum-ciphers.html
Continue reading →I found the following entries in my /var/log/messages file Feb 21 03:50:01 vm1 systemd: Created slice user-0.slice. Feb 21 03:50:01 vm1 systemd: Starting Session 6642 of user root. Feb 21 03:50:01 vm1 systemd: Started Session 6642 of user root. These … Continue reading →
To view current sessions sh vpn-sessiondb remote (IPSec Remote VPN Clients) sh vpn-sessiondb l2l (L2L Tunnels) sh vpn-sessiondb svc (SSL VPN / Anyconnect Clients) sh vpn-sessiondb webvpn (Clientless sessions) sh ssh sessions (show users connected to ASA via SSH) To … Continue reading →
Firewalld is a pain to set up. To switch to iptables: yum -y install iptables-services If you would like to save the firewall rules you need to run the following command iptables-save > /root/iptables-rules.txt These rules can be added to … Continue reading →
You start AnyConnect on Centos 7 using the shortcut and the application flashes on the screen and disappears. So you try running it from the bash prompt and you get: [user@mymachine ~]$ /opt/cisco/anyconnect/bin/vpnui /opt/cisco/anyconnect/bin/vpnui: error while loading shared libraries: libpangox-1.0.so.0: … Continue reading →
To make sure VSFTPD plays nicely with IPTABLES Make sure the following is set in /etc/vsftpd/vsftpd.conf # Turn on SSL ssl_enable=no # Allow anonymous users to use secured SSL connections allow_anon_ssl=NO # All non-anonymous logins are forced to use a … Continue reading →
first – determine the dev of the hard drive – as in /dev/sda /dev/sdb etc Then excute shred -vz -n 3 /dev/XXX where XXX is the identifier of the hard drive Increase 3 to a larger value for higher security … Continue reading →
I changed the port for sshd on my servers to reduce the number of attacks against the sshd server. In the following example, I am changing the port from the default of 22 to 43231 First – backup your sshd_config … Continue reading →
semanage is used in configuring selinux. If it is not installed you need to run yum -y install policycoreutils-python
Continue reading →Centos 7 yum -y install epel-release yum -y groupinstall “GNOME Desktop” yum -y install xrdp xorg-x11-xinit firewall-cmd –permanent –zone=public –add-port=3389/tcp firewall-cmd –reload systemctl start xrdp.service systemctl enable xrdp.service Centos 6 rpm -Uvh http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm wget -O epel6.key.txt ‘http://keys.gnupg.net:11371/pks/lookup?search=0x0608B895&op=get’ rpm –import epel6.key.txt … Continue reading →