>
Currently Browsing: Configuration

Unix: Tracking down ghost accounts

Unix: Tracking down ghost accounts
IT World: Are you confident that all the accounts you manage are still required and still current? Or might some of them be ghost accounts that you should have blocked five years ago? Here’s how to check for last activity. Visit Website
read more

CentOS: Need to change your timezone?

CentOS: Need to change your timezone?
Problems with your system time? So, you just got your new remote server setup, but something seems off? Oh, it’s the time. The times listed in your log files seem wrong, or maybe the modification time on your files. Perhaps your server is using the wrong time zone for your tastes. You can check by running the “date” command. $ date Wed Dec 5 05:59:11 UTC 2012 UTC? That’s not what I want! There’s a good chance the /etc/localtime is linked to the wrong timezone, or worse maybe it’s not linked at all. Maybe it’s a copy of the wrong time zone file? Well the fix is...
read more

Securing SSH

Securing SSH
Sometimes you have servers hanging out in the public internet in ways that you have little control over the network and hardware firewalls. Setting up a hosted server, such as a Virtual Private Server (VPS) or “node” in the cloud can be scary. Fortunately software firewalls, such as iptables, can add a little to piece of mind. But, in these days of automated attacks, it is still not enough. Usually the primary means of access to these servers is SSH. There are a couple really simple things can be done to make SSH more secure. I recently setup a new node on Linode. In the first hour there...
read more

Fun with iptables

Fun with iptables
I recently setup a CentOS 6.3 server on Linode.com. One of the first things I wanted to do was lock it down with iptables. Unfortunately iptables was not starting cleanly. Specifically, It was failing here: Iptables Error – Setting Chains To Policy ACCEPT: Security Raw Nat Mangle Filter [FAILED] It turns out that was happening due to the paravirt kernel having a “security” chain compiled into it, and the default “iptables” init script included with CentOS does not know how to handle it. After a bit of searching I found a patch for the init script, posted by one of the...
read more

Using Gmail as a smartrelay on Ubuntu

Using Gmail as a smartrelay on Ubuntu
Once Nagios was setup on the little Minecraft server, it needed to be configured to send email. These days I prefer to relay through one of my Google Apps accounts, so I set forth to setup GMail as a relay using Postfix, which was already installed, but not really doing anything. Using Postfix always seems to be an issue with me, since I have more experience with Sendmail. However, having done this recently on a few Macs, I figured what the heck. Here’s a quick overview of the process: Install Postfix (if not already installed). Configure Postfix (if no main.cf exists). Use: sudo...
read more

Next Entries »