PUBLIC MARKS with tags install & debian

The Debian project has published updated installation media for Debian 8 “Jessie”. The new media includes security updates and fixes that have been made available since Debian 8 was first released, but is not a new version of the Debian distribution.

Configuration complète de Netflow sous Debian

Untangle delivers an integrated family of applications that simplify and consolidate the network and security products that businesses need at the network gateway. * Pre-configured to work right away * Downloadable for rapid deployment * Integrated with a common GUI, logging & reporting * Designed to run on generic Intel/AMD hardware Open Source & Free * Web Filter * Spam Blocker * Spyware Blocker * Protocol Control * Virus Blocker * Phish Blocker * IPS * Attack Blocker * Firewall * OpenVPN * Untangle Reports * Routing & QoS

Xen is a GPLed virtualization solution available in Debian 4.0 Etch repositories. This article help you to create a coherent Xen installation, with backups and minimum security enhancements. This guide fits my vision of a Xen setup. If it does not fit yours, you are free to adapt it to your needs, or to not use it. For information In this guide, i use the term "virtual host". Be aware that Xen use its own terminology. In a Xen setup, instanciated (aka. started) virtual hosts are called "Domains". Once your computer configured for Xen, all the operating systems run in "domains". The original operating system, where the Xen's control tools are installed, is called "dom0" (for domain No zero). All the guest operating systems are said to be installed in a "domU" (for User domain). As i'm a little lazy (well, yeah... very lazy), i don't want to endure this mind twisting, and i will mainly use the "virtual host" term in this guide. So, if you read this guide, don't by angry at me because of the terms i use.

GreenSQL (or greensql-fw) is a firewall for MySQL databases that filters SQL injection attacks. It works as a reverse proxy, i.e., it takes the SQL queries, checks them, passes them on to the MySQL database and delivers back the result from the MySQL database. It comes with a web interface (called greensql-console) so that you can manage GreenSQL through a web browser. This guide shows how you can install GreenSQL and its web interface on a Debian Etch server.

AWStats (pour Advanced Web statistics) est un outil très performant d'analyse de fichiers logs. Il est capable de traiter les logs de vos serveurs HTTP, FTP, SMTP, etc. Je l'aime beaucoup car sa présentation est simple, et ses statistiques pertinentes. Ce guide vous aide à l'installer proprement sur Debian 4.0 Etch.

aptitude install apache2-mpm-worker php5-cgi libapache2-mod-fastcgi libapache2-mod-fcgid

This article explains how you can install and configure apache2-mpm-peruser on a Debian Etch server. apache2-mpm-peruser is an MPM (Multi-Processing Module) for the Apache 2 web server, very similar to apache2-mpm-itk, but faster (almost as fast as apache2-mpm-prefork). mpm-peruser allows you to run each of your vhosts under a separate UID and GID - in short, the scripts and configuration files for one vhost no longer have to be readable for all the other vhosts. It is based on metuxmpm, a working implementation of the perchild MPM. The result is a sane and secure web server environment for your users, without kludges like PHP's safe_mode.

This article shows how to install and configure ModSecurity (version 2) for use with Apache2 on a Debian Etch system. ModSecurity is an Apache module that provides intrusion detection and prevention for web applications. It aims at shielding web applications from known and unknown attacks, such as SQL injection attacks, cross-site scripting, path traversal attacks, etc. I want to say first that this is not the only way of setting up such a system. There are many ways of achieving this goal but this is the way I take. I do not issue any guarantee that this will work for you!

mod_defensible is an Apache 2.x module intended to block spammers/hackers/script kiddies using DNSBL servers. It will look at the client IP and check it in one or several DNSBL servers and return a 403 Forbidden page to the client. This guide shows how to install and use it with Apache 2 on a Debian Etch server.

Cela a été testé sur une Ubuntu "Hardy 08.04" & Debian "Testing/Lenny". Les utilisateurs d'Ubuntu rajouteront un sudo aux endroits qui vont bien

The Server is the computer you want to connect to. This is the computer where the FreeNX server will need to be installed. The name of the Ubuntu package providing the server is “freenx”. For the example used here, the home computer is the server. The Client is the computer from which you want to be able to access the Server. The name of the Ubuntu package providing the client is “nxclient”. For the example used here, the work computer is the client.

djbdns is a very secure suite of DNS tools that consists out of multiple parts: dnscache, a DNS cache that can be used in /etc/resolv.conf instead of your ISP's name servers and that tries to sort out wrong (malicious) DNS answers; axfrdns, a service that runs on the master DNS server and to which the slaves connect for zone transfers; and tinydns, the actual DNS server, a very secure replacement for BIND.

This Script is coded to install the latest Nagios-Version (CVS) and the Nagios Plugins 1.4.11 automatically! It's meant to be a help for testing, searching bugs or simply to install Nagios and the Plugins without harking back to the Ubuntu-Package. First the dependencies will be fixed, missing packages will be installed via apt. The next step is adding the groups and user which are necessary for Nagios. After that the latest Nagios Tarball will be downloaded and installed. If errors occur while the installation process you have to kill the script (Ctrl c) and fix it manually. After that you can run the script again. Then the standard-user (named "nagios") for the Frontend will be created and you will be asked to set a password for it. Done, Nagios is installed. Now the plugins are going to be installed. Same procedure, downloading, configuring, installing. I tried to meet all requirements, so that every plugin will be compiled, but i did'nt check it. Have fun.

If you get this "4gb seg fixup" message on tty and/or in your /var/log/messages after the reboot to the Xen Hypervisor on Etch, you should check if you installed libc6-xen on your system. If not, install it, and reboot the system again.

This how-to provides step-by-step instructions on how to install Xen on an already working Debian Etch system. You can find all the software used here in the Etch repository, so no external files or compilation are needed.

Lighttpd is a secure, fast, standards-compliant web server designed for speed-critical environments. This tutorial shows how you can install Lighttpd on a Debian Etch server with PHP5 support (through FastCGI) and MySQL support.

Lighttpd, sometimes pronounced "Lighty", is a lightweight HTTP server that can help alleviate Apache's load by serving static content. Since Lighttpd uses less resources per request than Apache, it generally serves most static content faster than Apache. This tutorial shows how to install Lighttpd behind Apache via Apache´s proxy module.

djbdns is a very secure suite of DNS tools that consists out of multiple parts: dnscache, a DNS cache that can be used in /etc/resolv.conf instead of your ISP's name servers and that tries to sort out wrong (malicious) DNS answers; axfrdns, a service that runs on the master DNS server and to which the slaves connect for zone transfers; and tinydns, the actual DNS server, a very secure replacement for BIND.

This short guide describes how to install Windows XP or Windows 2003 Server on Xen. It provides an overview of the Debian Linux Etch installation, and detailed steps for installing and configuring Xen and starting the Windows XP or Windows 2003 Server installation.

If you have a server with more than 4GB RAM and want to install a 32bit Debian Etch on it (following this tutorial: Debian Etch And Xen From The Debian Repository), you'd expect the Xen-PAE kernel to see all your RAM because the Xen-PAE kernel supports up to 64GB RAM. In fact, it recognizes only about 3.3GB RAM due to a bug in the GRUB bootloader. This article explains how you can fix GRUB so that all your RAM gets recognized. I do not issue any guarantee that this will work for you!

This guide shows how to install and configure Smokeping on Debian Etch to monitor network latency. From the Smokeping web site: "SmokePing is a deluxe latency measurement tool. It can measure, store and display latency, latency distribution and packet loss. SmokePing uses RRDtool to maintain a longterm data-store and to draw pretty graphs, giving up to the minute information on the state of each network connection."