RHEL / CentOS / Debian Linux Detecting Rootkits

A rootkit is a program designed to take fundamental control of a computer system, without authorization by the system’s owners and legitimate managers. Most rootkits use the power of the kernel to hide themselves, they are only visible from within the kernel....

Linux: Get Information About Your BIOS / Server Hardware From a Shell Without...

biosdecode is a command line utility to parses the BIOS memory and prints information about all structures (or entry points) it knows of. The DMI table doesn’t only describe what the system is currently made of, it also can report the possible evolutions such as the...

Restrict Users to SCP and SFTP and Block SSH Shell Access with rssh Chrooted ...

FTP is insecure protocol, but file-transfer is required all time. You can use OpenSSH Server to transfer file using SCP and SFTP (secure ftp) without setting up an FTP server. However, this feature also grants ssh shell access to a user. In this article series we will...

Find out DNS Server Version With DNS Server Fingeprinting Tool

By hiding out DNS server version number you can improve server security. fpdns is a program that remotely determines DNS server versions. It does this by sending a series of borderline DNS queries which are compared against a table of responses and server versions. (just...

Ubuntu / Debian Linux: Services Configuration Tool

Your Debian / Ubuntu Linux box security depends upon access to system services (one of many aspects). For example, you may need to provide a web server (Apache service) to serve web pages. However, if you do not need use a service, you should always turn off all unused...

How to: Linux Demilitarized Zone (DMZ) Firewall

Demilitarized zone, used to secure an internal network from external access. You can use Linux firewall to create DMZ easily. There are many different ways to design a network with a DMZ. The basic method is to use a single Linux firewall with 3 Ethernet cards. The...

How to: Linux configure pound reverse proxy

Pound is a reverse-proxy load balancing server. It accepts requests from HTTP / HTTPS clients and distributes them to one or more Web servers. The HTTPS requests are decrypted and passed to the back-ends as plain HTTP. It will act as: a) Server load balancer b)...

Linux PDF editor for manipulating PDF documents

Adobe Acrobat is a commercial tool for manipulating PDF files. Earlier I was using CUPs - printing system, to export PDF files. I’ve also tried out gv for the same purpose. However, I needed complete editing of pdf documents. My search ended with PDFedit software, which...

How to: Install and manage iSCSI Volume under Linux

Internet SCSI (iSCSI) is a network protocol that allows you to use of the SCSI protocol over TCP/IP networks. It is good alternative to Fibre Channel-based SANs. You can easily manage, mount and format iSCSI Volume under Linux. It allows access to SAN storage over...

Restricting zone transfers with IP addresses in BIND DNS Server

DNS server can be attacked using various techniques such as: [a] DNS spoofing [b] Cache poisoning [c] Registration hijacking One of the simplest ways to defend is limit zone transfers between nameservers by defining ACL. I see many admin allows BIND to...

Linux Monitor hard disks temperature with hddtemp to save your data

The problem of cooling the computer is not new. The more powerful and faster computers become, the "hotter" they get. Coolers inside computer cases, video card and power supply units are quite common nowadays. However, hard disk has no additional means to cool them. Most...

Linux configure point to point tunneling PPTP VPN client for Microsoft PPTP v...

With this tip you will be able to work from home using VPN and that too from Linux / FreeBSD system for the proprietary Microsoft Point-to-Point vpn server. Different organization uses different VPN connection options such as SSL, PPTP or IPSEC. When you need to access...

Pimp your shell prompt – Add colors and themes in Linux terminal

Most of us work with a shell prompt. By default most Linux distro displays hostname and current working directory as a prompt. You can easily customize your prompt to display information important to you. You change look and feel by adding colors. In this small howto I...

Howto Setup a Lighttpd Chroot Jail Web Server under Debian Linux

Security, speed, compliance, and flexibility--all of these describe LightTPD which is rapidly redefining efficiency of a webserver; as it is designed and optimized for high performance environments. A chroot on Linux or Unix OS is an operation that changes the root directory....