Archive

Archive for the ‘Linux’ Category

Setting up exim with AUTH LOGIN, AUTH PLAIN and AUTH CRAM-MD5 with Debian

November 23rd, 2010 3 comments

Hello everyone,

I faced recently lots of trouble while setting up a Debian box with exim.

Obviously, the documentation was outdated or incomplete on some aspect, and I lost so many time searching “WTF my exim4 is not making AUTH PLAIN, AUTH LOGIN and/or AUTH CRAM-MD5″ that I though it would be good to share the solution with you guys.

I know some of you would say “Damn dude, this is insecure to do it!” and you are right (except perhaps for CRAM-MD5 which add little more complexity than LOGIN), but anyway, here is a 1st shot on “how to make it work simple” before you finally set SSL on it.

Also, some people might use port with authentication, because their lossy client / provider don’t support SSL. (This is probably the case with some mobile phone… I believe)

Read more…

Categories: Linux, Mail, Security Tags: , ,

Checking for rootkit using rkhunter

November 18th, 2010 No comments

It’s pretty common nowadays to have linux server and linux boxes at home, or at work, for hosting website and even more.

It’s also true that linux offer a high level of security, because most of the source codes are open (means everyone have access to it) but also because most linux distro check and provide solution for all kind of security flaws in their product.

Read more…

Categories: Linux, Security Tags:

Using htaccess to redirect domain to www

August 26th, 2010 No comments

Welcome back!!

Today, I’ll show you an easy rule to redirect domain.com to www.domain.com to help you prevent your site from duplicate content. I know it has been said thousand of time on other site about it, but I still meet persons/companies that doesn’t properly configure their address…

Read more…

Categories: Apache, Linux, seo, Web Tags: ,

Using iptables to reject w00tw00t.at.ISC.SANS.DFind scanners

June 10th, 2010 3 comments

Hello people,

I found recently in my apache log thousands of “w00tw00t.at.ISC.SANS.DFind” requests coming from all parts of the world.

I’ve been searching for solutions to remove their hits because they consume resources on my servers and they doesn’t help when computing my visitors stats…

Read more…

Categories: Apache, Linux, Security Tags: , , ,

Setting up a permanent SSH tunnel between 2 servers

May 20th, 2010 4 comments

Greeting everyone,

Today, I’ll show you how to setup an easy and permanent SSH tunnel that auto reconnect in case of failure between two linux servers.

Read more…

Categories: Linux, Security Tags: ,

How to secure your webserver against SYN flooding and DoS attack

April 24th, 2010 7 comments

Hello,

It has become popular nowdays to receive incoming attack from foreign server, with the only goal to discard all access / connections to your server. Those attack are generally call “DoS” or “Denial of Service” attack.

Today, I’ll give you a few tricks to reduce impact of such impact on your linux server. Keep in mind that there are no solutions to discard those types of attack, and the tricks I give you today only reduce impact it can have on your server…

Read more…

Using iptables to secure your webserver

April 22nd, 2010 1 comment

Greeting everyone,

Today, I’ll show you how you can protect your Linux web server freely and easily using iptables (linux software firewall)

Read more…

Categories: Linux, Security Tags: , , ,

Setting up PHP 5.3 with a Debian Lenny

April 16th, 2010 3 comments

Greeting people !

Today I’ll show you how it’s simple to setup PHP 5.3 on a Debian Lenny.

Read more…

Categories: Debian, Linux, MySQL, PHP Tags: , ,

Testing your knowledge on linux using Red Hat Training Pre-assessment Questionnaires

April 12th, 2010 No comments

Greeting everyone,

As you all seem concern about Linux, this is a little exercise that I made yesterday, because I was wondering if I could pass my RHCE exams (which cost at least 2600 euros for a week).

Read more…

Categories: Linux, Redhat, RHCE, Training Tags: , , ,

Benchmarking web application using cache

April 11th, 2010 2 comments

Hi,

Yesterday, we saw how important it was to use cache on your web application.But if you are like me, you have faced many different ways or applications for making cache.

Today, I will show you different type of cache and how to benchmark them.

PS: keep in mind those result are experimental, and are true for my web application. This doesn’t mean your web will have the same benchmark attitude.
Read more…
Categories: Linux, Performance, PHP, Web Tags: ,