Erinevus lehekülje "Kasutaja:Jj" redaktsioonide vahel
(→NB Mitte puududa) |
|||
| 52. rida: | 52. rida: | ||
# clamscan -ri /kataloog | # clamscan -ri /kataloog | ||
| + | |||
| + | ServerName "ftp.zoo.tartu.ee" | ||
| + | ServerType standalone | ||
| + | DefaultServer on | ||
| + | RequireValidShell off | ||
| + | AuthPAM on | ||
| + | AuthPAMConfig ftp | ||
| + | Port 21 | ||
| + | |||
| + | PassivePorts 49152 65535 | ||
| + | |||
| + | #punktiga failidele | ||
| + | ListOptions "-a" | ||
| + | |||
| + | # Umask 022 is a good standard umask to prevent new dirs and files | ||
| + | # from being group and world writable. | ||
| + | Umask 022 | ||
| + | |||
| + | MaxInstances 30 | ||
| + | |||
| + | # Set the user and group under which the server will run. | ||
| + | User ftp | ||
| + | Group ftp | ||
| + | |||
| + | DebugLevel 5 | ||
| + | DefaultRoot ~ | ||
| + | |||
| + | # Autendi nii mysql-ist kui ka systeemitabelitest | ||
| + | AuthOrder mod_sql.c mod_auth_unix.c | ||
| + | |||
| + | # MySQL conf | ||
| + | SQLAuthTypes Crypt | ||
| + | SQLAuthenticate users | ||
| + | SQLConnectInfo andmebaas@db.zoo.tartu.ee kasutaja parool | ||
| + | SQLDefaultUID 20000 | ||
| + | SQLDefaultGID 20000 | ||
| + | SQLMinUserUID 20000 | ||
| + | SQLMinUserGID 20000 | ||
| + | SQLUserInfo koolielu_users username passwd uid gid ftpdir homedir | ||
| + | |||
| + | # Normally, we want files to be overwriteable. | ||
| + | <Directory /> | ||
| + | AllowOverwrite on | ||
| + | </Directory> | ||
| + | |||
===Proftp failide kontroll läbi ClamAv viirusetõrje.=== | ===Proftp failide kontroll läbi ClamAv viirusetõrje.=== | ||
| − | + | ||
Paigalda Clamav op-süsteemi töövahenditega. | Paigalda Clamav op-süsteemi töövahenditega. | ||
Paigalda samamoodi Proftp server koos mod_clamav toega | Paigalda samamoodi Proftp server koos mod_clamav toega | ||
Redaktsioon: 8. detsember 2010, kell 12:50
Personaalne jj arendusnurk ehk sodinurk kuutõrvajas
Mõte! Kuutõrvaja keskendunud liiga internetile
NB Mitte puududa
Must materjal
- jj sodinurk testimiseks ja kiireteks ideedeks
- pppoe kiire
- Haldustarkvara
- terminal server FreeBSD näitel
- atacontrol
- apache ssl täiendust vajav
- vinum gvinum ja geom
- rrdool snmp ja süsteemse info alusel graafikute joonistamine
Probleem spamassassini uuendamisega
_die can t locate mail spamassassin compiledregexps body_0 pm
# sa-compile # sa-update -D
Dec 6 20:44:57 muheleja amavis[14891]: extra modules loaded after daemonizing/chrooting: Mail/SpamAssassin/CompiledRegexps/body_0.pm, Mail/SpamAssassin/Plugin/FreeMail.pm
568 mergemaster -p 569 mergemaster -a
http://forum.nginx.org/read.php?23,41517 openssl freebsd baasi ülekirjutamine
http://www.cyberls.com/forum/Thread-HOWTO-ProFTPD-Antivirus-using-CLAMAV
http://www.ibm.com/developerworks/linux/library/l-linux-kernel/index.html?S_TACT=105AGX03&S_CMP=ART
http://www.ibm.com/developerworks/linux/library/l-linux-filesystem/index.html S_TACT=105AGX03&S_CMP=ART
http://selectparks.net/~julian/levelhead/install.html
# freshclam ClamAV update process started at Mon Nov 29 16:06:25 2010 main.cld is up to date (version: 53, sigs: 846214, f-level: 53, builder: sven) daily.cld is up to date (version: 12333, sigs: 6732, f-level: 54, builder: ccordes) bytecode.cld is up to date (version: 93, sigs: 16, f-level: 54, builder: edwin)
Kataloogi kontrollimiseks
# clamscan -ri /kataloog
ServerName "ftp.zoo.tartu.ee" ServerType standalone DefaultServer on RequireValidShell off AuthPAM on AuthPAMConfig ftp Port 21 PassivePorts 49152 65535 #punktiga failidele ListOptions "-a" # Umask 022 is a good standard umask to prevent new dirs and files # from being group and world writable. Umask 022 MaxInstances 30 # Set the user and group under which the server will run. User ftp Group ftp DebugLevel 5 DefaultRoot ~ # Autendi nii mysql-ist kui ka systeemitabelitest AuthOrder mod_sql.c mod_auth_unix.c # MySQL conf SQLAuthTypes Crypt SQLAuthenticate users SQLConnectInfo andmebaas@db.zoo.tartu.ee kasutaja parool SQLDefaultUID 20000 SQLDefaultGID 20000 SQLMinUserUID 20000 SQLMinUserGID 20000 SQLUserInfo koolielu_users username passwd uid gid ftpdir homedir # Normally, we want files to be overwriteable. <Directory /> AllowOverwrite on </Directory>
Proftp failide kontroll läbi ClamAv viirusetõrje.
Paigalda Clamav op-süsteemi töövahenditega. Paigalda samamoodi Proftp server koos mod_clamav toega
clamd.conf tuleb teha järgnevad muudatused, ehk tuleb lahti kommenteerida rida kus öeldakse, et ta töötaks deemonina ja kuulaks 3310 porti
# TCP port address. # Default: no TCPSocket 3310
proftpd.conf tuleks lisada <global></blobal> markerite vahele lõpuossa järgnev blokk
<IfModule mod_clamav.c> ClamAV on ClamServer localhost ClamPort 3310 ClamMaxSize 5 Mb </IfModule>
5 Mb tähendab mis on maksimaalne failisuurus millest üle enam faile ei kontrollita.
Mõlemad teenused restartida.
Testimiseks võib üritada ühte Eicar signatuuri sisaldavat faili üles laadida http://www.eicar.org/anti_virus_test_file.htm
# ftp zoo.tartu.ee Connected to zoo.tartu.ee. 220 ProFTPD 1.3.3c Server (zoo.tartu.ee) [::ffff:192.168.1.22] Name (zoo.tartu.ee:ants): ants 331 Password required for ants Password: 230 User ants logged in Remote system type is UNIX. Using binary mode to transfer files. ftp> put test local: test remote: test 200 PORT command successful 150 Opening BINARY mode data connection for test 550 Virus Detected and Removed: Eicar-Test-Signature 71 bytes sent in 0.00 secs (745.5 kB/s)
