I have found the following two sites helpful in finding issues with the configuration of SSL secured web sites https://ssltools.digicert.com/checker/ https://www.ssllabs.com/ssltest/analyze.html Test which ciphers (TLS, SSL, etc) are enabled nmap -sV –script ssl-enum-ciphers -p 443 www.yourdomain.com Ref: https://nmap.org/nsedoc/scripts/ssl-enum-ciphers.html
Continue reading →To make sure VSFTPD plays nicely with IPTABLES Make sure the following is set in /etc/vsftpd/vsftpd.conf # Turn on SSL ssl_enable=no # Allow anonymous users to use secured SSL connections allow_anon_ssl=NO # All non-anonymous logins are forced to use a … Continue reading →
first – determine the dev of the hard drive – as in /dev/sda /dev/sdb etc Then excute shred -vz -n 3 /dev/XXX where XXX is the identifier of the hard drive Increase 3 to a larger value for higher security … Continue reading →
I changed the port for sshd on my servers to reduce the number of attacks against the sshd server. In the following example, I am changing the port from the default of 22 to 43231 First – backup your sshd_config … Continue reading →
semanage is used in configuring selinux. If it is not installed you need to run yum -y install policycoreutils-python
Continue reading →Centos 7 yum -y install epel-release yum -y groupinstall “GNOME Desktop” yum -y install xrdp xorg-x11-xinit firewall-cmd –permanent –zone=public –add-port=3389/tcp firewall-cmd –reload systemctl start xrdp.service systemctl enable xrdp.service Centos 6 rpm -Uvh http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm wget -O epel6.key.txt ‘http://keys.gnupg.net:11371/pks/lookup?search=0x0608B895&op=get’ rpm –import epel6.key.txt … Continue reading →
Revised: How to migrate a kvm guest from one host to another. These instructions are for moving a guest machine from one host to another host where the storage is on the host (instead of external storage that can be … Continue reading →
ProjectLibre is an alternative software to microsoft office project. It can be downloaded from sourceforge here http://sourceforge.net/projects/projectlibre/files/ProjectLibre/ in this case we are going to install/wget the RPM installer wget http://sourceforge.net/projects/projectlibre/files/ProjectLibre/1.5.9/projectlibre-1.5.9-1.rpm/download install with the simple yum -y command and the installation … Continue reading →
Install needed packages: yum -y install vsfptd fail2ban Create ssl certificate /usr/bin/openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout /etc/vsftpd/vsftpd.pem -out /etc/vsftpd/vsftpd.pem Edit the /etc/vsftpd/vsftpd.conf file # Turn on SSL ssl_enable=YES # Allow anonymous users to use secured SSL … Continue reading →
You need to edit the file at /etc/gdm/custom.conf su – vi /etc/gdm/custom.conf You need to edit the daemon section of the file and add or change these: [daemon] AutomaticLoginEnable=true AutomaticLogin=username Where username is the name of the user you want … Continue reading →