Difference between revisions of "Server cesurity"
(→LAMP) |
(→mail) |
||
Line 62: | Line 62: | ||
== mail == | == mail == | ||
+ | apt-get install postfix postfix-mysql dovecot-core dovecot-imapd dovecot-lmtpd dovecot-mysql | ||
+ | mysqladmin -p create servermail | ||
+ | |||
+ | GRANT SELECT ON servermail.* TO 'usermail'@'127.0.0.1' IDENTIFIED BY 'mailpassword' | ||
+ | |||
+ | FLUSH PRIVILIGES; | ||
+ | |||
+ | CREATE TABLE `virtual_domains` ( | ||
+ | `id` INT NOT NULL AUTO_INCREMENT, | ||
+ | `name` VARCHAR(50) NOT NULL, | ||
+ | PRIMARY KEY (`id`) | ||
+ | ) ENGINE=InnoDB DEFAULT CHARSET=utf8; | ||
+ | |||
+ | CREATE TABLE `virtual_users` ( | ||
+ | `id` INT NOT NULL AUTO_INCREMENT, | ||
+ | `domain_id` INT NOT NULL, | ||
+ | `password` VARCHAR(106) NOT NULL, | ||
+ | `email` VARCHAR(120) NOT NULL, | ||
+ | PRIMARY KEY (`id`), | ||
+ | UNIQUE KEY `email` (`email`), | ||
+ | FOREIGN KEY (domain_id) REFERENCES virtual_domains(id) ON DELETE CASCADE | ||
+ | ) ENGINE=InnoDB DEFAULT CHARSET=utf8; | ||
fail2ban | fail2ban |
Revision as of 12:40, 12 July 2014
Contents
set locales
dpkg-reconfigure locales
Деактивиране на root
може да се ползва sudo или да махнем ssh root login
vi /etc/ssh/sshd_config
#LoginGraceTime 2m #PermitRootLogin no #StrictModes yes #MaxAuthTries 6
Make the line look like this to disable logging in through ssh as root.
PermitRootLogin no
Now you’ll need to restart the sshd service:
/etc/init.d/sshd restart
pozwolqvane na xxx
AllowUsers username
Вход с ключ
LAMP
apt-get install mysql-server
heirloom-mailx libaio1 libclass-isa-perl libdbd-mysql-perl libdbi-perl libhtml-template-perl libmysqlclient18 libnet-daemon-perl libplrpc-perl libswitch-perl mysql-client-5.5 mysql-common mysql-server mysql-server-5.5 mysql-server-core-5.5 perl perl-modules psmisc
apt-get install apache2
apache2 apache2-mpm-worker apache2-utils apache2.2-bin apache2.2-common file
libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap libcap2 libmagic1 mime-support openssl ssl-cert
apt-get install php5
apache2-mpm-prefork libapache2-mod-php5 libonig2 libqdbm14 libxml2 php5 php5-cli php5-common sgml-base xml-core
apt-get install phpmyadmin
dbconfig-common fontconfig-config libfontconfig1 libgd2-xpm libjpeg8 libltdl7 libmcrypt4 php5-gd php5-mcrypt php5-mysql phpmyadmin ttf-dejavu-core
check version
apt-cache policy openssl ......
LAMP
apt-get update apt-get install apache2 apt-get install mysql-server libapache2-mod-auth-mysql php5-mysql apt-get install php5 libapache2-mod-php5 php5-mcrypt
apt-get install postfix postfix-mysql dovecot-core dovecot-imapd dovecot-lmtpd dovecot-mysql
mysqladmin -p create servermail
GRANT SELECT ON servermail.* TO 'usermail'@'127.0.0.1' IDENTIFIED BY 'mailpassword'
FLUSH PRIVILIGES;
CREATE TABLE `virtual_domains` (
`id` INT NOT NULL AUTO_INCREMENT, `name` VARCHAR(50) NOT NULL, PRIMARY KEY (`id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
CREATE TABLE `virtual_users` ( `id` INT NOT NULL AUTO_INCREMENT, `domain_id` INT NOT NULL, `password` VARCHAR(106) NOT NULL, `email` VARCHAR(120) NOT NULL, PRIMARY KEY (`id`), UNIQUE KEY `email` (`email`), FOREIGN KEY (domain_id) REFERENCES virtual_domains(id) ON DELETE CASCADE ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
fail2ban