The Jolly Penguin

A Linux Users Social Network

Mark Powell

Mark Powell's Blog (3)

HOW-TO: Implement ModSecurity for Apache

ModSecurity is an Apache module that serves as an application layer firewall. It is especially needful for those who run LAMP (Linux/Apache/mySQL/PHP) servers, because of the many SQL injection attacks and problems with PHP code in software such as WordPress and Horde. The following is a step-by-step implementation How-To. Download the ModSecurity tarball: wget http://www.modsecurity.org/download/modsecurity-apache_2.5.7.tar.gz Un-archive the tarball and cd to the source directory: $ tar -x… Continue

Added by Mark Powell on June 26, 2009 at 11:45am — No Comments

HOW-TO: Generate a cert and key using openssl for Apache on Linux or Mac OSX

These are the actual steps I went through to generate the cert and key for my Apache 2 web server on the Mac. I then start Apache. openssl genrsa -des3 -rand file1:file2:file3:file4:file5 -out server.key 1024 openssl rsa -in server.key -out server.pem openssl req -new -key server.key -out server.csr openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt sudo mkdir /usr/local/apache2/conf/ssl.crt sudo mkdir /usr/local/apache2/conf/ssl.key sudo cp server.crt /… Continue

Added by Mark Powell on June 25, 2009 at 7:44pm — No Comments

HOW-TO: Build SASL2 support into sendmail and make it AUTH to your ISP

BUILD GDBM LIBRARY: ncftpget ftp://ftp.gnu.org/gnu/gdbm/gdbm-1.8.3.tar.gz tar -xvzf gdbm-1.8.3.tar.gz cd gdbm* ./configure && make sudo make install BUILD CYRUS SASL2 LIBRARY: ncftpget ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.22.tar.gz tar -xvzf cd cyrus-sasl-2.1.22.tar.gz ./configure --without-pam --enable-login --with-dblib=gdbm make sudo make install MAKE SASL LOOK AT THE SHADOW FILE FOR USERS: cat /usr/lib/sasl2/Sendmail.conf pwcheck_method: shadow PUT THESE LINES… Continue

Added by Mark Powell on June 25, 2009 at 7:39pm — No Comments

About

Ceri Shaw Ceri Shaw created this Ning Network.

© 2009   Created by Ceri Shaw on Ning.   Create a Ning Network!

Badges  |  Report an Issue  |  Privacy  |  Terms of Service

Sign in to chat!