SecureCentos.com http://www.securecentos.com Howto secure your centos Wed, 11 Apr 2012 17:21:58 +0000 en hourly 1 How to install CSF firewall on centos linux http://www.securecentos.com/how-to-install-csf-firewall-on-centos-linux/ http://www.securecentos.com/how-to-install-csf-firewall-on-centos-linux/#comments Tue, 12 Oct 2010 09:44:46 +0000 admin http://www.securecentos.com/?p=557 CSF Firewall Logo
Product Name: CSF (ConfigServer Security & Firewall)
Product Version: 5.12 (using download link, will give you the latest version)
Homepage: http://www.configserver.com/cp/csf.html
Description: Advanced Policy Firewall (APF) is an iptables(netfilter) based firewall system designed around the essential needs of todays Internet deployed servers and the unique needs of custom deployed Linux installations. The configuration of APF is designed to be very informative and present the user with an easy to follow process, from top to bottom of the configuration file. The management of APF on a day-to-day basis is conducted from the command line with the apf command, which includes detailed usage information and all the features one would expect from a current and forward thinking firewall solution.
Links: CSF Readme – Install – Changelog – License

Pre Setup: Make sure perl modules are installed

yum install -y perl-libwww-perl

Step 1: Download, unpack, install of APF from source.

cd /usr/local/src
wget http://www.configserver.com/free/csf.tgz
tar -zxvf csf.tgz
cd csf
./install.sh

Step 1.1: Cleanup source install files.

rm -Rf /usr/local/src/csf* && cd

Step 2: Backup orginal CSF config

cp /etc/csf/csf.conf /etc/csf/csf.conf.bak

Step 3: Edit current CSF config

nano -w /etc/csf/csf.conf
]]> http://www.securecentos.com/how-to-install-csf-firewall-on-centos-linux/feed/ 2 Howto configure OSSEC for APF http://www.securecentos.com/howto-configure-ossec-for-apf/ http://www.securecentos.com/howto-configure-ossec-for-apf/#comments Wed, 16 Sep 2009 08:33:26 +0000 admin http://www.securecentos.com/?p=480 A quick howto configure your OSSEC installation for APF Iptables firewall frontend




Step 1: Open OSSEC config for editing

nano -w /var/ossec/etc/ossec.conf

Step 1.1: Locate “Files/directories to ignore”, And add new lines

    <ignore>/etc/prelink.cache</ignore>
    <ignore>/etc/apf/internals/.last.full</ignore>
    <ignore>/etc/apf/internals/.apf.restore</ignore>

Step 2: Restart OSSEC when your done editing

/var/ossec/bin/ossec-control restart
]]> http://www.securecentos.com/howto-configure-ossec-for-apf/feed/ 0 Howto configure OSSEC for CSF http://www.securecentos.com/howto-configure-ossec-for-csf/ http://www.securecentos.com/howto-configure-ossec-for-csf/#comments Wed, 16 Sep 2009 08:25:11 +0000 admin http://www.securecentos.com/?p=474 A quick howto configure your OSSEC installation for CSF Iptables firewall frontend




Step 1: Open OSSEC config for editing

nano -w /var/ossec/etc/ossec.conf

Step 1.1: Locate “Files/directories to ignore”, And add new lines

    <ignore>/etc/prelink.cache</ignore>
    <ignore>/etc/csf/csf.temppids</ignore>
    <ignore>/etc/csf/csf.tempban</ignore>
    <ignore>/etc/csf/csf.tempint</ignore>
    <ignore>/etc/csf/stats/iptables_log</ignore>
    <ignore>/etc/csf/csf.dshield</ignore>
    <ignore>/etc/csf/csf.tempip</ignore>
    <ignore>/etc/csf/csf.deny</ignore>
    <ignore>/etc/csf/csf.tempfiles</ignore>
    <ignore>/etc/csf/csf.spamhaus</ignore>

This one is optional, might be nice if someone is sneaking their ip in.

    <ignore>/etc/csf/csf.allow</ignore>

Step 2: Restart OSSEC when your done editing

/var/ossec/bin/ossec-control restart
]]> http://www.securecentos.com/howto-configure-ossec-for-csf/feed/ 5 Howto configure OSSEC for Directadmin http://www.securecentos.com/howto-configure-ossec-for-directadmin/ http://www.securecentos.com/howto-configure-ossec-for-directadmin/#comments Wed, 16 Sep 2009 08:10:30 +0000 admin http://www.securecentos.com/howto-configure-ossec-for-directadmin/ A quick howto configure your OSSEC installation for Directadmin web hosting panel




Step 1: Open OSSEC config for editing

nano -w /var/ossec/etc/ossec.conf

Step 1.1: Locate “Files/directories to ignore”, And add new lines

    <ignore>/etc/httpd/conf/extra/directadmin-vhosts.conf</ignore>
    <ignore>/etc/httpd/conf/extra/directadmin-vhosts.conf.back</ignore>
    <ignore>/etc/virtual/domains</ignore>
    <ignore>/etc/virtual/domainowners</ignore>
    <ignore>/etc/proftpd.passwd</ignore>
    <ignore>/etc/proftpd.vhosts.conf</ignore>
    <ignore>/etc/named.conf</ignore>

Direct Admin also uses these files when creating users, but i do not recommend you adding these files to the ignore list:

/etc/group
/etc/group-
/etc/passwd
/etc/passwd- 
/etc/gshadow
/etc/shadow
/etc/shadow-
/etc/gshadow-

Step 2: Restart OSSEC when your done editing

/var/ossec/bin/ossec-control restart
]]> http://www.securecentos.com/howto-configure-ossec-for-directadmin/feed/ 1