Download Debian Wheezy Convenience image for web-hosting

Post Reply
elemental
Posts: 83
Joined: Mon Apr 22, 2013 7:54 pm
languages_spoken: english
ODROIDs: Odroid U2 running on micro-sd
Contact:

Download Debian Wheezy Convenience image for web-hosting

Unread post by elemental » Tue Mar 10, 2015 5:28 am

Hi,

So I got the idea of releasing this image for the odroid community.

Hope you all find it useful. You can read about it on my blog, on the article My Debian Wheezy Web Hosting Image for the odroid u2 and download it as well, of course.

To list what all you get on this image (but I recommend reading the blog if you plan to use this image ):
What remains is , I was not able to judge if I should shutdown ipv6 altogeher or not. Shorewall seemed to offer another package for ipv6 firewall. So no sure if we are protected on that front.
Wanted also Snort or Suricata as well for security purposes. But if I waited to get that done, you might have not seen this image so early on. So follow me on google or facebook. Might get it done some where along the line.

If you find anything wrong, or if you have any suggestions or if something is not working and your stuck or need help or something, holler at my facebook or google plus page. I only very randomly visit the forums here.

Enjoy and Regards
Ahsan Fayyaz

elemental
Posts: 83
Joined: Mon Apr 22, 2013 7:54 pm
languages_spoken: english
ODROIDs: Odroid U2 running on micro-sd
Contact:

Re: Download Debian Wheezy Convenience image for web-hosting

Unread post by elemental » Thu Apr 02, 2015 9:18 pm

Hi,

So quick update, if your using this image than you might want to look at these articles for some updates:

Updates in tar backup and aide tool script :
http://www.ahsanscorner.com/content/201 ... ackupninja

Updates to custom.conf file adding some more rules, useful for maybe drupal (or wordpress but remember to remove the wordpress login page I put in here.)
http://www.ahsanscorner.com/content/201 ... odsecurity

As always let me know of any problems.

Also let me know if you think fail2ban is functioning properly. Before I was seeing ban actions in monitorix, now I see none anymore, which is good, but there are still ssh cracking attempts. Maybe it doesn't go as far so fail2ban isn't registering these attemps as root is an invalid ssh user (I disabled ssh for root on this image). Preivously with root ssh access enabled fail2ban graph in monitorix was always showing banned count. (Maybe I'll enable root access sometime and find out myself)

By the way memcache graph and php-apc graphs are also excellent monitored via monitorix. I'll publish the php-apc setting soon for monitorix so that locally it is accessible.

Regards,

elemental
Posts: 83
Joined: Mon Apr 22, 2013 7:54 pm
languages_spoken: english
ODROIDs: Odroid U2 running on micro-sd
Contact:

Re: Download Debian Wheezy Convenience image for web-hosting

Unread post by elemental » Sun Apr 12, 2015 5:30 am

Hi ,

Just wanted to post an update to the ipv6 question and firewall I mentioned in my first post. An update to that can be read here :

http://www.ahsanscorner.com/content/201 ... all-active

Additionally the issue with fail2ban is that not all the jails seem to be monitored correctly, leave only the ssh and ssh-dos jails in /etc/monitorix and it should start to show you the ssh break in attempts.

Regards

elemental
Posts: 83
Joined: Mon Apr 22, 2013 7:54 pm
languages_spoken: english
ODROIDs: Odroid U2 running on micro-sd
Contact:

Re: Download Debian Wheezy Convenience image for web-hosting

Unread post by elemental » Sun Apr 12, 2015 5:37 am

Hi,

And also here is the way to monitor php-apc via monitorix I mentioned before I would post.

http://www.ahsanscorner.com/content/201 ... x-securely

Memcache monitoring is as simple as turning the flag of the graph on in monitorix.

Regards,

Regards

Post Reply

Return to “Other OS”

Who is online

Users browsing this forum: No registered users and 51 guests