1471 lines
21 KiB
HTML
1471 lines
21 KiB
HTML
<HTML
|
|
><HEAD
|
|
><TITLE
|
|
>Software -Networking</TITLE
|
|
><META
|
|
NAME="GENERATOR"
|
|
CONTENT="Modular DocBook HTML Stylesheet Version 1.60"><LINK
|
|
REL="HOME"
|
|
TITLE="Securing and Optimizing Linux"
|
|
HREF="index.html"><LINK
|
|
REL="PREVIOUS"
|
|
TITLE="Test fire your PortSentry"
|
|
HREF="chap14sec118.html"><LINK
|
|
REL="NEXT"
|
|
TITLE="Software -Securities"
|
|
HREF="soft-netsecured.html"></HEAD
|
|
><BODY
|
|
CLASS="part"
|
|
BGCOLOR="#FFFFFF"
|
|
TEXT="#000000"
|
|
LINK="#0000FF"
|
|
VLINK="#840084"
|
|
ALINK="#0000FF"
|
|
><DIV
|
|
CLASS="NAVHEADER"
|
|
><TABLE
|
|
WIDTH="100%"
|
|
BORDER="0"
|
|
CELLPADDING="0"
|
|
CELLSPACING="0"
|
|
><TR
|
|
><TH
|
|
COLSPAN="3"
|
|
ALIGN="center"
|
|
>Securing and Optimizing Linux: RedHat Edition -A Hands on Guide</TH
|
|
></TR
|
|
><TR
|
|
><TD
|
|
WIDTH="10%"
|
|
ALIGN="left"
|
|
VALIGN="bottom"
|
|
><A
|
|
HREF="chap14sec118.html"
|
|
>Prev</A
|
|
></TD
|
|
><TD
|
|
WIDTH="80%"
|
|
ALIGN="center"
|
|
VALIGN="bottom"
|
|
></TD
|
|
><TD
|
|
WIDTH="10%"
|
|
ALIGN="right"
|
|
VALIGN="bottom"
|
|
><A
|
|
HREF="soft-netsecured.html"
|
|
>Next</A
|
|
></TD
|
|
></TR
|
|
></TABLE
|
|
><HR
|
|
ALIGN="LEFT"
|
|
WIDTH="100%"></DIV
|
|
><DIV
|
|
CLASS="PART"
|
|
><A
|
|
NAME="AEN7867"
|
|
></A
|
|
><DIV
|
|
CLASS="TITLEPAGE"
|
|
><H1
|
|
CLASS="title"
|
|
>6. Software -Networking</H1
|
|
><DIV
|
|
CLASS="PARTINTRO"
|
|
><A
|
|
NAME="AEN7869"
|
|
></A
|
|
><DIV
|
|
CLASS="mediaobject"
|
|
><P
|
|
><IMG
|
|
SRC="./Annimals/Chapter16.gif"
|
|
ALT="Two ducks!"
|
|
></IMG
|
|
></P
|
|
></DIV
|
|
><BLOCKQUOTE
|
|
CLASS="ABSTRACT"
|
|
><DIV
|
|
CLASS="abstract"
|
|
><A
|
|
NAME="AEN7875"
|
|
></A
|
|
><P
|
|
></P
|
|
><P
|
|
> Linux being a product of the net revolution is a natural choice for a web server, mail server, a file and print server; if it is a part of your intranet environement, among various other roles it can perform superbly well.
|
|
In this part we take a look at various avatars it can assume and serve your organisation for a long time to come. All distributions of linux whether be it RedHat or SuSe do provide in binary format tools/software for your linux to
|
|
act as a Web server or a Mail server to mention a few, but the amount of advancements which happen in linux world are beyond the grasp of these companies for it to catch up. The situation is if something can be achieved, it will be done
|
|
in shortest possible time hence we have used always source tarballs downloaded from the respective websites of the software(s) used as example in this book. This affords us the capability to configure, choose and optimise according
|
|
to our needs. This part attempts to highlight the capablities of linux to act as a full fledged Web server, Mail server, a file and print server, as a B2B e-commerce point where the need of the hour is secure environement, <SPAN
|
|
CLASS="abbrev"
|
|
>etc.</SPAN
|
|
> <EM
|
|
>Enjoy!</EM
|
|
>
|
|
</P
|
|
><P
|
|
></P
|
|
></DIV
|
|
></BLOCKQUOTE
|
|
></DIV
|
|
><DIV
|
|
CLASS="TOC"
|
|
><DL
|
|
><DT
|
|
><B
|
|
>Table of Contents</B
|
|
></DT
|
|
><DT
|
|
>15. <A
|
|
HREF="soft-netsecured.html"
|
|
>Software -Securities</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>15.1. <A
|
|
HREF="chap15sec119.html"
|
|
>OpenSSH</A
|
|
></DT
|
|
><DT
|
|
>15.2. <A
|
|
HREF="chap15sec120.html"
|
|
>Configure and optimise Openssh</A
|
|
></DT
|
|
><DT
|
|
>15.3. <A
|
|
HREF="chap15sec121.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/ssh/ssh_config file</TT
|
|
></A
|
|
></DT
|
|
><DT
|
|
>15.4. <A
|
|
HREF="chap15sec122.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/ssh/sshd_config file</TT
|
|
></A
|
|
></DT
|
|
><DT
|
|
>15.5. <A
|
|
HREF="chap15sec123.html"
|
|
>Configure OpenSSH to use TCP-Wrappers/inetd super server</A
|
|
></DT
|
|
><DT
|
|
>15.6. <A
|
|
HREF="chap15sec124.html"
|
|
>OpenSSH Per-User Configuration</A
|
|
></DT
|
|
><DT
|
|
>15.7. <A
|
|
HREF="chap15sec125.html"
|
|
>OpenSSH Users Tools</A
|
|
></DT
|
|
><DT
|
|
>15.8. <A
|
|
HREF="chap15sec126.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>16. <A
|
|
HREF="softsec-com.html"
|
|
>Software -Securties(commercial)</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>16.1. <A
|
|
HREF="chap16sec127.html"
|
|
>Linux SSH2 Client/Server</A
|
|
></DT
|
|
><DT
|
|
>16.2. <A
|
|
HREF="chap16sec128.html"
|
|
>Configure and Optimise SSH2</A
|
|
></DT
|
|
><DT
|
|
>16.3. <A
|
|
HREF="chap16sec129.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/ssh2/ssh2_config</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>16.4. <A
|
|
HREF="chap16sec130.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/ssh2/sshd2_config</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>16.5. <A
|
|
HREF="chap16sec131.html"
|
|
>Configure sshd2 to use tcp-wrappers/inetd super server</A
|
|
></DT
|
|
><DT
|
|
>16.6. <A
|
|
HREF="chap16sec132.html"
|
|
>Configuration of the <TT
|
|
CLASS="filename"
|
|
>/etc/pam.d/ssh</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>16.7. <A
|
|
HREF="chap16sec133.html"
|
|
>Ssh2 Per-User Configuration</A
|
|
></DT
|
|
><DT
|
|
>16.8. <A
|
|
HREF="chap16sec134.html"
|
|
>SSH2 Users Tools</A
|
|
></DT
|
|
><DT
|
|
>16.9. <A
|
|
HREF="chap16sec135.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>17. <A
|
|
HREF="sysintegrity.html"
|
|
>Software -Securities/System Integrity</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>17.1. <A
|
|
HREF="chap17sec136.html"
|
|
>Linux Tripwire 2.2.1</A
|
|
></DT
|
|
><DT
|
|
>17.2. <A
|
|
HREF="chap17sec137.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/var/tmp/install.cfg</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>17.3. <A
|
|
HREF="chap17sec138.html"
|
|
>Configuration files</A
|
|
></DT
|
|
><DT
|
|
>17.4. <A
|
|
HREF="chap17sec139.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/usr/TSS/policy/twpol.txt</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>17.5. <A
|
|
HREF="chap17sec140.html"
|
|
>Securing Tripwire for Linux</A
|
|
></DT
|
|
><DT
|
|
>17.6. <A
|
|
HREF="chap17sec141.html"
|
|
>Integrity or Interactive Check Mode</A
|
|
></DT
|
|
><DT
|
|
>17.7. <A
|
|
HREF="chap17sec142.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>18. <A
|
|
HREF="tripwireASR.html"
|
|
>Linux Tripwire ASR 1.3.1</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>18.1. <A
|
|
HREF="chap18sec143.html"
|
|
>Install, Compile and Optimize</A
|
|
></DT
|
|
><DT
|
|
>18.2. <A
|
|
HREF="chap18sec145.html"
|
|
>Configurations</A
|
|
></DT
|
|
><DT
|
|
>18.3. <A
|
|
HREF="chap18sec146.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/tw.config</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>18.4. <A
|
|
HREF="chap18sec147.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/cron.daily/tripwire.verify</TT
|
|
> script</A
|
|
></DT
|
|
><DT
|
|
>18.5. <A
|
|
HREF="chap18sec148.html"
|
|
>Tripwire in <TT
|
|
CLASS="literal"
|
|
>Interactive Checking Mode</TT
|
|
></A
|
|
></DT
|
|
><DT
|
|
>18.6. <A
|
|
HREF="chap18sec149.html"
|
|
>Run Tripwire in <I
|
|
CLASS="wordasword"
|
|
>Database Update Mode</I
|
|
></A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>19. <A
|
|
HREF="soft-limits.html"
|
|
>Software -Securities/Management & Limitation</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>19.1. <A
|
|
HREF="chap19sec152.html"
|
|
>Linux GnuPG</A
|
|
></DT
|
|
><DT
|
|
>19.2. <A
|
|
HREF="chap19sec153.html"
|
|
>Often used Commands</A
|
|
></DT
|
|
><DT
|
|
>19.3. <A
|
|
HREF="chap19sec154.html"
|
|
>Importing keys</A
|
|
></DT
|
|
><DT
|
|
>19.4. <A
|
|
HREF="chap19sec155.html"
|
|
>Encrypt and decrypt</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>20. <A
|
|
HREF="quota.html"
|
|
>Set Limits using Qouta</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>20.1. <A
|
|
HREF="chap20sec156.html"
|
|
>Qouta</A
|
|
></DT
|
|
><DT
|
|
>20.2. <A
|
|
HREF="chap20sec157.html"
|
|
>Create of the <TT
|
|
CLASS="filename"
|
|
>quota.user</TT
|
|
> and <TT
|
|
CLASS="filename"
|
|
>quota.group</TT
|
|
></A
|
|
></DT
|
|
><DT
|
|
>20.3. <A
|
|
HREF="chap20sec158.html"
|
|
>edquota</A
|
|
></DT
|
|
><DT
|
|
>20.4. <A
|
|
HREF="chap20sec159.html"
|
|
>Assign quota for a particular group</A
|
|
></DT
|
|
><DT
|
|
>20.5. <A
|
|
HREF="chap20sec161.html"
|
|
>Often used Commands</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>21. <A
|
|
HREF="soft-netwrkng.html"
|
|
>Software -Networking</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>21.1. <A
|
|
HREF="chap21sec162.html"
|
|
>Linux <SPAN
|
|
CLASS="acronym"
|
|
>DNS</SPAN
|
|
> and <SPAN
|
|
CLASS="acronym"
|
|
>BIND</SPAN
|
|
> Server</A
|
|
></DT
|
|
><DT
|
|
>21.2. <A
|
|
HREF="chap21sec163.html"
|
|
>Configure</A
|
|
></DT
|
|
><DT
|
|
>21.3. <A
|
|
HREF="chap21sec164.html"
|
|
><TT
|
|
CLASS="literal"
|
|
>Caching-only</TT
|
|
> name Server</A
|
|
></DT
|
|
><DT
|
|
>21.4. <A
|
|
HREF="chap21sec165.html"
|
|
>Primary <TT
|
|
CLASS="literal"
|
|
>master</TT
|
|
> name Server</A
|
|
></DT
|
|
><DT
|
|
>21.5. <A
|
|
HREF="chap21sec166.html"
|
|
><TT
|
|
CLASS="literal"
|
|
>Secondary</TT
|
|
> slave name Server</A
|
|
></DT
|
|
><DT
|
|
>21.6. <A
|
|
HREF="chap21sec167.html"
|
|
>Run <SPAN
|
|
CLASS="acronym"
|
|
>ISC</SPAN
|
|
> <SPAN
|
|
CLASS="acronym"
|
|
>BIND</SPAN
|
|
>/<SPAN
|
|
CLASS="acronym"
|
|
>DNS</SPAN
|
|
> in a chroot jail</A
|
|
></DT
|
|
><DT
|
|
>21.7. <A
|
|
HREF="chap21sec168.html"
|
|
>The syslog daemon</A
|
|
></DT
|
|
><DT
|
|
>21.8. <A
|
|
HREF="chap21sec169.html"
|
|
>Clean-up and Test the new chrooted jail</A
|
|
></DT
|
|
><DT
|
|
>21.9. <A
|
|
HREF="chap21sec170.html"
|
|
>DNS Administrative Tools</A
|
|
></DT
|
|
><DT
|
|
>21.10. <A
|
|
HREF="chap21sec171.html"
|
|
><SPAN
|
|
CLASS="acronym"
|
|
>DNS</SPAN
|
|
> Users Tools</A
|
|
></DT
|
|
><DT
|
|
>21.11. <A
|
|
HREF="chap21sec172.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>22. <A
|
|
HREF="soser-mailn.html"
|
|
>Software -Server/Mail Network</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>22.1. <A
|
|
HREF="chap22sec173.html"
|
|
>Linux Sendmail Server</A
|
|
></DT
|
|
><DT
|
|
>22.2. <A
|
|
HREF="chap22sec174.html"
|
|
>Compile and optimize</A
|
|
></DT
|
|
><DT
|
|
>22.3. <A
|
|
HREF="chap22sec175.html"
|
|
>Configurations</A
|
|
></DT
|
|
><DT
|
|
>22.4. <A
|
|
HREF="chap22sec176.html"
|
|
>The <TT
|
|
CLASS="filename"
|
|
>/etc/sendmail.mc</TT
|
|
> file /Central Mail Hub</A
|
|
></DT
|
|
><DT
|
|
>22.5. <A
|
|
HREF="chap22sec177.html"
|
|
>Build and Tweak Sendmail</A
|
|
></DT
|
|
><DT
|
|
>22.6. <A
|
|
HREF="chap22sec178.html"
|
|
>The <TT
|
|
CLASS="filename"
|
|
>/etc/mail/access</TT
|
|
> and <TT
|
|
CLASS="filename"
|
|
>access.db</TT
|
|
> files</A
|
|
></DT
|
|
><DT
|
|
>22.7. <A
|
|
HREF="chap22sec179.html"
|
|
>The <TT
|
|
CLASS="filename"
|
|
>/etc/mail/aliases</TT
|
|
> and <TT
|
|
CLASS="filename"
|
|
>aliases.db</TT
|
|
> files</A
|
|
></DT
|
|
><DT
|
|
>22.8. <A
|
|
HREF="chap22sec180.html"
|
|
>The <TT
|
|
CLASS="filename"
|
|
>/etc/mail/local-host-names</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>22.9. <A
|
|
HREF="chap22sec181.html"
|
|
>The <TT
|
|
CLASS="filename"
|
|
>/etc/rc.d/init.d/sendmail</TT
|
|
> script file</A
|
|
></DT
|
|
><DT
|
|
>22.10. <A
|
|
HREF="chap22sec182.html"
|
|
>Secure Sendmail using <B
|
|
CLASS="command"
|
|
>smrsh</B
|
|
></A
|
|
></DT
|
|
><DT
|
|
>22.11. <A
|
|
HREF="chap22sec183.html"
|
|
>The <TT
|
|
CLASS="filename"
|
|
>/etc/mail/aliases</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>22.12. <A
|
|
HREF="chap22sec184.html"
|
|
>Limit queue processing to <TT
|
|
CLASS="literal"
|
|
>root</TT
|
|
></A
|
|
></DT
|
|
><DT
|
|
>22.13. <A
|
|
HREF="chap22sec185.html"
|
|
>Sendmail Administrative Tools</A
|
|
></DT
|
|
><DT
|
|
>22.14. <A
|
|
HREF="chap22sec186.html"
|
|
>Installed files: Sendmail -Central Mail Hub</A
|
|
></DT
|
|
><DT
|
|
>22.15. <A
|
|
HREF="chap22sec187.html"
|
|
>Installed files: Sendmail -Local server/client</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>23. <A
|
|
HREF="imapop.html"
|
|
>Linux <SPAN
|
|
CLASS="acronym"
|
|
>IMAP</SPAN
|
|
> & <SPAN
|
|
CLASS="acronym"
|
|
>POP</SPAN
|
|
> Server</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>23.1. <A
|
|
HREF="chap23sec188.html"
|
|
>Configure and Compile</A
|
|
></DT
|
|
><DT
|
|
>23.2. <A
|
|
HREF="chap23sec189.html"
|
|
>Configure to tweak</A
|
|
></DT
|
|
><DT
|
|
>23.3. <A
|
|
HREF="chap23sec190.html"
|
|
>Enable <SPAN
|
|
CLASS="acronym"
|
|
>IMAP</SPAN
|
|
> or <SPAN
|
|
CLASS="acronym"
|
|
>POP</SPAN
|
|
> via the tcp-wrappers inetd super server</A
|
|
></DT
|
|
><DT
|
|
>23.4. <A
|
|
HREF="chap23sec191.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>24. <A
|
|
HREF="netencrypt.html"
|
|
>Software -Networking/Encryption</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>24.1. <A
|
|
HREF="opssl.html"
|
|
>Linux OPENSSL Server</A
|
|
></DT
|
|
><DT
|
|
>24.2. <A
|
|
HREF="chap24sec192.html"
|
|
>Compile and Optimize</A
|
|
></DT
|
|
><DT
|
|
>24.3. <A
|
|
HREF="chap24sec193.html"
|
|
>Configure OpenSSL to optimise</A
|
|
></DT
|
|
><DT
|
|
>24.4. <A
|
|
HREF="chap24sec194.html"
|
|
>The <TT
|
|
CLASS="filename"
|
|
>/etc/ssl/openssl.cnf</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>24.5. <A
|
|
HREF="chap24sec195.html"
|
|
>Create the <TT
|
|
CLASS="filename"
|
|
>/usr/bin/sign.sh</TT
|
|
> program file</A
|
|
></DT
|
|
><DT
|
|
>24.6. <A
|
|
HREF="chap24sec196.html"
|
|
>Commands -often used</A
|
|
></DT
|
|
><DT
|
|
>24.7. <A
|
|
HREF="chap24sec197.html"
|
|
>Securing OpenSSL</A
|
|
></DT
|
|
><DT
|
|
>24.8. <A
|
|
HREF="chap24sec198.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>25. <A
|
|
HREF="fSWAn.html"
|
|
>Linux FreeS/WAN VPN</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>25.1. <A
|
|
HREF="chap25sec199.html"
|
|
>IPSEC/VPN -FreeS/WAN</A
|
|
></DT
|
|
><DT
|
|
>25.2. <A
|
|
HREF="chap25sec200..html"
|
|
>Compile, insert FreeS/WAN into the kernel</A
|
|
></DT
|
|
><DT
|
|
>25.3. <A
|
|
HREF="chap25sec201.html"
|
|
>Reconfigure and install the kernel with FreeS/WAN VPN support</A
|
|
></DT
|
|
><DT
|
|
>25.4. <A
|
|
HREF="chap25sec202.html"
|
|
>Configure to optimise</A
|
|
></DT
|
|
><DT
|
|
>25.5. <A
|
|
HREF="chap25sec203.html"
|
|
>Automatic or Manual Key connections</A
|
|
></DT
|
|
><DT
|
|
>25.6. <A
|
|
HREF="chap25sec203e.html"
|
|
>The <TT
|
|
CLASS="filename"
|
|
>/etc/ipsec.conf</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>25.7. <A
|
|
HREF="chap25sec204.html"
|
|
>The <TT
|
|
CLASS="filename"
|
|
>/etc/ipsec.secrets</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>25.8. <A
|
|
HREF="chap25sec205.html"
|
|
>Configure <SPAN
|
|
CLASS="acronym"
|
|
>RSA</SPAN
|
|
> private keys secrets</A
|
|
></DT
|
|
><DT
|
|
>25.9. <A
|
|
HREF="chap25sec206.html"
|
|
>Required network setup for IPSec</A
|
|
></DT
|
|
><DT
|
|
>25.10. <A
|
|
HREF="chap25sec207.html"
|
|
>Testing the installation</A
|
|
></DT
|
|
><DT
|
|
>25.11. <A
|
|
HREF="chap25sec208.html"
|
|
>Further documentation</A
|
|
></DT
|
|
><DT
|
|
>25.12. <A
|
|
HREF="chap25sec209.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>26. <A
|
|
HREF="net-oLDAP.html"
|
|
>Linux OpenLDAP Server</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>26.1. <A
|
|
HREF="chap26sec210.html"
|
|
>Compile ans Install</A
|
|
></DT
|
|
><DT
|
|
>26.2. <A
|
|
HREF="chap26sec211.html"
|
|
>Compile and Optimize</A
|
|
></DT
|
|
><DT
|
|
>26.3. <A
|
|
HREF="chap26sec212.html"
|
|
>Configurations</A
|
|
></DT
|
|
><DT
|
|
>26.4. <A
|
|
HREF="chap26sec213.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/ldap/slapd.conf</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>26.5. <A
|
|
HREF="chap26sec214.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/rc.d/init.d/ldap</TT
|
|
> script file</A
|
|
></DT
|
|
><DT
|
|
>26.6. <A
|
|
HREF="chap26sec215.html"
|
|
>Securing OpenLDAP</A
|
|
></DT
|
|
><DT
|
|
>26.7. <A
|
|
HREF="chap26sec216.html"
|
|
>OpenLDAP Creation and Maintenance Tools</A
|
|
></DT
|
|
><DT
|
|
>26.8. <A
|
|
HREF="chap26sec217.html"
|
|
>Create the LDMB backend database on-line</A
|
|
></DT
|
|
><DT
|
|
>26.9. <A
|
|
HREF="chap26sec218.html"
|
|
>OpenLDAP Users Tools</A
|
|
></DT
|
|
><DT
|
|
>26.10. <A
|
|
HREF="chap26sec219.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>27. <A
|
|
HREF="datab-pSQL.html"
|
|
>Linux PostgreSQL Database Server</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>27.1. <A
|
|
HREF="chap27sec220.html"
|
|
>Install PostgreSQL</A
|
|
></DT
|
|
><DT
|
|
>27.2. <A
|
|
HREF="chap27sec221.html"
|
|
>Compile and Optimize</A
|
|
></DT
|
|
><DT
|
|
>27.3. <A
|
|
HREF="chap27sec222.html"
|
|
>Database installation using superuser account</A
|
|
></DT
|
|
><DT
|
|
>27.4. <A
|
|
HREF="chap27sec223.html"
|
|
>Configuration files</A
|
|
></DT
|
|
><DT
|
|
>27.5. <A
|
|
HREF="chap27sec224.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/rc.d/init.d/postgresql</TT
|
|
> script file</A
|
|
></DT
|
|
><DT
|
|
>27.6. <A
|
|
HREF="chap27sec225.html"
|
|
>Commands often used</A
|
|
></DT
|
|
><DT
|
|
>27.7. <A
|
|
HREF="chap27sec226.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>28. <A
|
|
HREF="netproxy-squid.html"
|
|
>Software -Server/Proxy Network</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>28.1. <A
|
|
HREF="chap28sec227.html"
|
|
>Linux Squid Proxy Server</A
|
|
></DT
|
|
><DT
|
|
>28.2. <A
|
|
HREF="chap28sec228.html"
|
|
>Configure and Optimize</A
|
|
></DT
|
|
><DT
|
|
>28.3. <A
|
|
HREF="gnumaloc.html"
|
|
>Improve performance Using GNU malloc library</A
|
|
></DT
|
|
><DT
|
|
>28.4. <A
|
|
HREF="chap28sec229.html"
|
|
>Compile and Optimize</A
|
|
></DT
|
|
><DT
|
|
>28.5. <A
|
|
HREF="chap28sec230.html"
|
|
>Configurations</A
|
|
></DT
|
|
><DT
|
|
>28.6. <A
|
|
HREF="chap28sec231.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/squid/squid.conf</TT
|
|
> file -in <TT
|
|
CLASS="literal"
|
|
>httpd-accelerator mode</TT
|
|
></A
|
|
></DT
|
|
><DT
|
|
>28.7. <A
|
|
HREF="chap28sec232.html"
|
|
>Configure of the <TT
|
|
CLASS="filename"
|
|
>/etc/squid/squid.conf</TT
|
|
> file -/proxy-caching mode</A
|
|
></DT
|
|
><DT
|
|
>28.8. <A
|
|
HREF="chap28sec233.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/rc.d/init.d/squid</TT
|
|
> script file -/all configurations</A
|
|
></DT
|
|
><DT
|
|
>28.9. <A
|
|
HREF="chap28sec234.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/logrotate.d/squid</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>28.10. <A
|
|
HREF="chap28sec235.html"
|
|
>Optimizing Squid</A
|
|
></DT
|
|
><DT
|
|
>28.11. <A
|
|
HREF="chap28sec236.html"
|
|
>Netscape Proxies Configuration</A
|
|
></DT
|
|
><DT
|
|
>28.12. <A
|
|
HREF="chap28sec237.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>29. <A
|
|
HREF="netweb-Apache.html"
|
|
>Software -Network Server, web/Apache</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>29.1. <A
|
|
HREF="shrdmemlib.html"
|
|
>Linux MM Shared Memory Library</A
|
|
></DT
|
|
><DT
|
|
>29.2. <A
|
|
HREF="chap29sec238.html"
|
|
>Compile</A
|
|
></DT
|
|
><DT
|
|
>29.3. <A
|
|
HREF="chap29sec239.html"
|
|
>Linux Apache Web Server</A
|
|
></DT
|
|
><DT
|
|
>29.4. <A
|
|
HREF="chap29sec240.html"
|
|
>Compile and Optimize</A
|
|
></DT
|
|
><DT
|
|
>29.5. <A
|
|
HREF="chap29sec241.html"
|
|
>Configure and apply <SPAN
|
|
CLASS="acronym"
|
|
>PHP4</SPAN
|
|
> to Apache source</A
|
|
></DT
|
|
><DT
|
|
>29.6. <A
|
|
HREF="chap29sec242.html"
|
|
>Apply mod_perl to Apache source tree</A
|
|
></DT
|
|
><DT
|
|
>29.7. <A
|
|
HREF="chap29sec243.html"
|
|
>Install Apache</A
|
|
></DT
|
|
><DT
|
|
>29.8. <A
|
|
HREF="chap29sec244.html"
|
|
>Post install Configuration</A
|
|
></DT
|
|
><DT
|
|
>29.9. <A
|
|
HREF="chap29sec245.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/httpd/conf/httpd.conf</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>29.10. <A
|
|
HREF="chap29sec246.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/logrotate.d/apache</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>29.11. <A
|
|
HREF="chap29sec247.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/rc.d/init.d/httpd</TT
|
|
> script file</A
|
|
></DT
|
|
><DT
|
|
>29.12. <A
|
|
HREF="chap29sec248.html"
|
|
><SPAN
|
|
CLASS="acronym"
|
|
>PHP4</SPAN
|
|
> server-side scripting</A
|
|
></DT
|
|
><DT
|
|
>29.13. <A
|
|
HREF="chap29sec249.html"
|
|
>Perl module Devel::Symdump</A
|
|
></DT
|
|
><DT
|
|
>29.14. <A
|
|
HREF="chap29sec250.html"
|
|
>CGI.pm Perl library</A
|
|
></DT
|
|
><DT
|
|
>29.15. <A
|
|
HREF="chap29sec251.html"
|
|
>Securing Apache</A
|
|
></DT
|
|
><DT
|
|
>29.16. <A
|
|
HREF="chap29sec252.html"
|
|
>users authentication with <TT
|
|
CLASS="filename"
|
|
>.dbmpasswd</TT
|
|
> password file</A
|
|
></DT
|
|
><DT
|
|
>29.17. <A
|
|
HREF="chap29sec254.html"
|
|
>Apache in a chroot jail</A
|
|
></DT
|
|
><DT
|
|
>29.18. <A
|
|
HREF="chap29sec255.html"
|
|
>Apache to use shared libraries</A
|
|
></DT
|
|
><DT
|
|
>29.19. <A
|
|
HREF="chap29sec256.html"
|
|
>The <TT
|
|
CLASS="filename"
|
|
>/chroot/etc</TT
|
|
> directory</A
|
|
></DT
|
|
><DT
|
|
>29.20. <A
|
|
HREF="chap29sec257.html"
|
|
>Test the new chrooted jail</A
|
|
></DT
|
|
><DT
|
|
>29.21. <A
|
|
HREF="chap29sec258.html"
|
|
>Configure the new <TT
|
|
CLASS="filename"
|
|
>/etc/logrotate.d/apache</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>29.22. <A
|
|
HREF="chap29sec259.html"
|
|
>Optimizing Apache</A
|
|
></DT
|
|
><DT
|
|
>29.23. <A
|
|
HREF="chap29sec260.html"
|
|
>Installed files for Apache Web Server</A
|
|
></DT
|
|
><DT
|
|
>29.24. <A
|
|
HREF="chap29sec261.html"
|
|
>Installed files /PHP4</A
|
|
></DT
|
|
><DT
|
|
>29.25. <A
|
|
HREF="chap29sec262.html"
|
|
>Installed files by mod_perl</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>30. <A
|
|
HREF="opt-Apache.html"
|
|
>Optional component to install with Apache</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>30.1. <A
|
|
HREF="webalizer.html"
|
|
>Linux Webalizer</A
|
|
></DT
|
|
><DT
|
|
>30.2. <A
|
|
HREF="chap29sec263.html"
|
|
>Compile</A
|
|
></DT
|
|
><DT
|
|
>30.3. <A
|
|
HREF="chap29sec265.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/webalizer.conf</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>30.4. <A
|
|
HREF="chap29sec266.html"
|
|
>Make Apache aware of Webalizer output directory</A
|
|
></DT
|
|
><DT
|
|
>30.5. <A
|
|
HREF="chap29sec267.html"
|
|
>Run Webalizer automatically with a cron job</A
|
|
></DT
|
|
><DT
|
|
>30.6. <A
|
|
HREF="faqomqtic.html"
|
|
>Linux FAQ-O-Matic</A
|
|
></DT
|
|
><DT
|
|
>30.7. <A
|
|
HREF="chap29sec269.html"
|
|
>Compile and install FAQ-O-Matic</A
|
|
></DT
|
|
><DT
|
|
>30.8. <A
|
|
HREF="chap29sec270.html"
|
|
>Make Apache aware Faq-O-Matic file's location</A
|
|
></DT
|
|
><DT
|
|
>30.9. <A
|
|
HREF="chap29sec271.html"
|
|
>Configure your FAQ-O-Matic</A
|
|
></DT
|
|
><DT
|
|
>30.10. <A
|
|
HREF="chap29sec272.html"
|
|
>Installed files</A
|
|
></DT
|
|
><DT
|
|
>30.11. <A
|
|
HREF="webmlimp.html"
|
|
>Linux Webmail IMP</A
|
|
></DT
|
|
><DT
|
|
>30.12. <A
|
|
HREF="chap29sec274.html"
|
|
>Set up PHPLib</A
|
|
></DT
|
|
><DT
|
|
>30.13. <A
|
|
HREF="chap29sec275.html"
|
|
>Compile to install Webmail IMP</A
|
|
></DT
|
|
><DT
|
|
>30.14. <A
|
|
HREF="chap29sec276.html"
|
|
>Configure and create Webmail IMP SQL database</A
|
|
></DT
|
|
><DT
|
|
>30.15. <A
|
|
HREF="chap29sec277.html"
|
|
>Configure your <TT
|
|
CLASS="filename"
|
|
>php.ini</TT
|
|
> from PHP4</A
|
|
></DT
|
|
><DT
|
|
>30.16. <A
|
|
HREF="chap29sec279.html"
|
|
>Configure Webmail <SPAN
|
|
CLASS="acronym"
|
|
>IMP</SPAN
|
|
> via your web browser</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>31. <A
|
|
HREF="soft-fileshrng.html"
|
|
>Software -Server/File Sharing-Network</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>31.1. <A
|
|
HREF="chap29sec280.html"
|
|
>Linux Samba Server</A
|
|
></DT
|
|
><DT
|
|
>31.2. <A
|
|
HREF="chap29sec281.html"
|
|
>Configure Samba</A
|
|
></DT
|
|
><DT
|
|
>31.3. <A
|
|
HREF="chap29sec282.html"
|
|
>Compile and optimize</A
|
|
></DT
|
|
><DT
|
|
>31.4. <A
|
|
HREF="chap29sec283.html"
|
|
>Configurations</A
|
|
></DT
|
|
><DT
|
|
>31.5. <A
|
|
HREF="chap29sec284.html"
|
|
>Configuration of the <TT
|
|
CLASS="filename"
|
|
>/etc/smb.conf</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>31.6. <A
|
|
HREF="chap29sec285.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/lmhosts</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>31.7. <A
|
|
HREF="chap29sec286.html"
|
|
>Encrypted Samba password file for clients</A
|
|
></DT
|
|
><DT
|
|
>31.8. <A
|
|
HREF="chap29sec287.html"
|
|
>Optimizing Samba</A
|
|
></DT
|
|
><DT
|
|
>31.9. <A
|
|
HREF="chap29sec289.html"
|
|
>Tuning the buffermem</A
|
|
></DT
|
|
><DT
|
|
>31.10. <A
|
|
HREF="chap29sec290.html"
|
|
>Further documentation</A
|
|
></DT
|
|
><DT
|
|
>31.11. <A
|
|
HREF="chap29sec291.html"
|
|
>Samba Administrative Tools</A
|
|
></DT
|
|
><DT
|
|
>31.12. <A
|
|
HREF="chap29sec292.html"
|
|
>The <TT
|
|
CLASS="filename"
|
|
>/etc/rc.d/init.d/smb</TT
|
|
> script file</A
|
|
></DT
|
|
><DT
|
|
>31.13. <A
|
|
HREF="chap29sec293.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
><DT
|
|
>32. <A
|
|
HREF="ftpd.html"
|
|
>Linux <TT
|
|
CLASS="literal"
|
|
>FTP</TT
|
|
> Server</A
|
|
></DT
|
|
><DD
|
|
><DL
|
|
><DT
|
|
>32.1. <A
|
|
HREF="chap29sec294.html"
|
|
>chroot'd Guest FTP access</A
|
|
></DT
|
|
><DT
|
|
>32.2. <A
|
|
HREF="chap29sec295.html"
|
|
>Setup an <TT
|
|
CLASS="literal"
|
|
>FTP</TT
|
|
> user account minus shells</A
|
|
></DT
|
|
><DT
|
|
>32.3. <A
|
|
HREF="chap29sec296.html"
|
|
>Setup a chroot user environment</A
|
|
></DT
|
|
><DT
|
|
>32.4. <A
|
|
HREF="chap29sec297.html"
|
|
>Configurations</A
|
|
></DT
|
|
><DT
|
|
>32.5. <A
|
|
HREF="chap29sec298.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/ftphosts</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>32.6. <A
|
|
HREF="chap29sec299.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/ftpconversions</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>32.7. <A
|
|
HREF="chap29sec300.html"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/logrotate.d/ftpd</TT
|
|
> file</A
|
|
></DT
|
|
><DT
|
|
>32.8. <A
|
|
HREF="chap29sec301.html"
|
|
><SPAN
|
|
CLASS="acronym"
|
|
>FTP</SPAN
|
|
> Administrative Tools</A
|
|
></DT
|
|
><DT
|
|
>32.9. <A
|
|
HREF="chap29sec301.html"
|
|
>Securing <TT
|
|
CLASS="literal"
|
|
>FTP</TT
|
|
></A
|
|
></DT
|
|
><DT
|
|
>32.10. <A
|
|
HREF="chap29sec302.html"
|
|
>The special file <TT
|
|
CLASS="filename"
|
|
>.notar</TT
|
|
></A
|
|
></DT
|
|
><DT
|
|
>32.11. <A
|
|
HREF="chap29sec303.html"
|
|
>Installed files</A
|
|
></DT
|
|
></DL
|
|
></DD
|
|
></DL
|
|
></DIV
|
|
></DIV
|
|
></DIV
|
|
><DIV
|
|
CLASS="NAVFOOTER"
|
|
><HR
|
|
ALIGN="LEFT"
|
|
WIDTH="100%"><TABLE
|
|
WIDTH="100%"
|
|
BORDER="0"
|
|
CELLPADDING="0"
|
|
CELLSPACING="0"
|
|
><TR
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="left"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="chap14sec118.html"
|
|
>Prev</A
|
|
></TD
|
|
><TD
|
|
WIDTH="34%"
|
|
ALIGN="center"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="index.html"
|
|
>Home</A
|
|
></TD
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="right"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="soft-netsecured.html"
|
|
>Next</A
|
|
></TD
|
|
></TR
|
|
><TR
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="left"
|
|
VALIGN="top"
|
|
>Test fire your PortSentry</TD
|
|
><TD
|
|
WIDTH="34%"
|
|
ALIGN="center"
|
|
VALIGN="top"
|
|
> </TD
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="right"
|
|
VALIGN="top"
|
|
>Software -Securities</TD
|
|
></TR
|
|
></TABLE
|
|
></DIV
|
|
></BODY
|
|
></HTML
|
|
> |