PUBLIC MARKS from falko

In this howto I will show you step-by-step how to successfully set up a long distance calls service in your Cybercafé, using open source software. The main element is *starShop-OSS, an open source application designed to monitor and bill, in real time, calls made via Asterisk PBX. This service is commonly called callshop or taxiphone.

This howto will illustrate a way to install and configure Subversion and websvn on a Debian server. With Subversion you have a powerful version control system for your software development, and websvn is an easy-to-use webinterface to your SVN repositories written in PHP.

This document describes how to install a mail server with Postfix that is based on virtual users and domains, i.e. users and domains that are in a MySQL database. I will also demonstrate the installation and configuration of Courier (Courier-POP3, Courier-IMAP), so that Courier can authenticate against the same MySQL database Postfix uses. In addition to that, this tutorial covers the installation of Amavisd, SpamAssassin and ClamAV so that emails will be scanned for spam and viruses.

In this guide you will learn how to tweak your virtual Postfix setup to better combat SPAM by stopping the mail before it hits SpamAssassin, using RBL (Realtime Blacklists) and RHBL (slightly different), greylistings and Helo Checks.

This howto will show you how to store your users in LDAP and authenticate some of the services against it. It will not show how to install particular packages, as it is distribution/system dependant, instead it will focus on pure configuration of all componenets needed to have LDAP authentication/storage of users. The howto assumes that you are migrating from a regular passwd/shadow authentication, but it is also suitable for people who do it from scratch.

This guide shows how to configure internet access through GPRS/EDGE, using bluetooth connection with your GSM phone. The article is using gentoo and Nokia 6310i phone, but this will work with any distribution and any bluetooth capable phone.

In this tutorial two Bind DNS servers will be installed, one as the master and the other as a slave server. For security reasons Bind9 will be chrooted in its own jail. Using two servers for a domain is a commonly used setup and in order to host your own domain you are required to have at least two domain servers. If one breaks, the other can continue to serve your domain.

This article shows how to secure a CentOS server using psad, Bastille, and some other tweaks. psad is a tool that helps detect port scans and other suspicious traffic, and the Bastille hardening program locks down an operating system, proactively configuring the system for increased security and decreasing its susceptibility to compromise.

A common task for system administrators is to monitor and care for a server. That's fairly easy to do at a moment's notice, but how to keep a record of this information over time? One way to monitor your server is to use the Sysstat package. Sysstat is actually a collection of utilities designed to collect information about the performance of a linux installation, and record them over time. This article shows how to use Sysstat.

As neither human nor computers are perfect (humans err / computers may fail) it is quite obvious that a good backup system will prevent from too much damage once the computer may go down. This could be either because the harddrive is failing or because of hackers or because you accidentally deleted something important. This tutorial will show you how to automate backups automatically in an incremental snapshot-style way by using rsync.

This tutorial will show you how to set up the free web server security scanner tool, Nikto. This tool will probe your Apache set-up for vulnerabilities, so you can get an idea of what holes may exist in your configuration. This tutorial will get you so far as installing the tool, and running your first scan.

This tutorial is meant for Linux newbies who want to try and build a Ubuntu server box as a webserver and torrent client. It is a step by step instruction on how to do this in VMware on Windows XP to get the feel of it.

OpenNMS is an opensource enterprise network management tool. It helps network administrators to monitor critical services on remote machines and collects the information of remote nodes by using SNMP. Normally openNMS installation and configuration takes time, but this guide tries to cover the installation and configuration part in a few steps.

This article shows how to install a LAMP system with Ubuntu 6.06 LTS (Dapper Drake) from the perspective of an absolute newbie. It was written with hopes of aiding other Linux newbies on the steps necessary to create such a basic Linux, Apache2, MySQL5 and PHP5 system with FTP.

Enlightenment 17 or E17 as it is generally called, is a cool Window Manager for X. The latest stable version of Enlightenment is E16 (0.16.8.1). In this article we will talk about the latest CVS build available (0.16.999.023).

This tutorial provides step-by-step instructions on how to install the free VMware Server (version 1.0) on Ubuntu 6.06 LTS (Dapper Drake). VMware has just released version 1.0 of its free VMware Server. With VMware Server you can create and run guest operating systems ("virtual machines") such as Linux, Windows, FreeBSD, etc. under a host operating system. This has the benefit that you can run multiple operating systems on the same hardware which saves a lot of money, and you can move virtual machines from one VMware Server to the next one (or to a system that has the VMware Player which is also free). In this article we use Ubuntu 6.06 LTS (Dapper Drake) as the host operating system.

This article shows how to install and configure mod_security. mod_security is an Apache module (for Apache 1 and 2) that provides intrusion detection and prevention for web applications. It aims at shielding web applications from known and unknown attacks, such as SQL injection attacks, cross-site scripting, path traversal attacks, etc.

This tutorial shows how to install and configure BASE (Basic Analysis and Security Engine) and the Snort intrusion detection system (IDS) on a Debian Sarge system. BASE provides a web front-end to query and analyze the alerts coming from a Snort IDS system. With BASE you can perform analysis of intrusions that Snort has detected on your network.

This article describes how you can monitor your Postfix mailserver with the tools Mailgraph and pflogsumm. Mailgraph creates daily, weekly, monthly, and yearly graphs of sent, received, bounced, and rejected emails and also of spam and viruses, if SpamAssassin and ClamAV are integrated into Postfix. These graphs can be accessed with a browser, whereas pflogsumm ("Postfix Log Entry Summarizer") can be used to send reports of Postfix activity per email.

This tutorial will show you how to setup greylisting with Postgrey and Postfix on Debian. Greylisting will not replace spam filtering software like SpamAssassin but it will serve as a powerful first hurdle for spam thus reducing the amount of spam entering the system at all.

Mandriva Postfix Anti-Spam, Anti-Virus Relay Server for Exchange Server 2000/2003 There are a couple of linux howtos floating on the Internet that deal with this very subject. As a matter of fact, those guides are what inspired to write this one. In the spirit of keeping it simple, let me recommend the Mandrake or as it’s currently known Mandriva Linux distro. This guide has been written with this distro in mind.

This HowTo is about creating a user-session-safe directory which offers security on- and offline. This is done with PAM, a module named pam_script and EncFS ("Encrypted Filesystem"). This safe directory is used to store credentials and other sensitive information during a session. When a usersession is ended, in the worst case an encrypted directory remains on the harddrive. In the best case everything is removed. This construction is only meant to store information during a session, not for documents or any other valid information.

BixData is a system, application, and network monitoring tool which allows you to easily monitor nearly every aspect of your servers. It can be used for general reporting, for sending notifications when problems arise, or for automatic maintenance and repairs - by executing scripts when errors or particular conditions arise. The BixData system is made of three separate parts. The BixAgent runs on any machine you want to monitor. The BixServer is used to monitor machines remotely and to keep track of many different machines. The BixDesktop is a graphical interface that is used to setup and interact with the rest of the system.

This tutorial contains step-by-step instructions for installing Xen 3.0 from precompiled binaries in Ubuntu Dapper Drake. Xen lets you create guest operating systems (*nix operating systems like Linux and FreeBSD), so called "virtual machines" or domUs, under a host operating system (dom0). Using Xen you can separate your applications into different virtual machines that are totally independent from each other (e.g. a virtual machine for a mail server, a virtual machine for a high-traffic web site, another virtual machine that serves your customers' web sites, a virtual machine for DNS, etc.), but still use the same hardware. This saves money, and what is even more important, it's more secure. If the virtual machine of your DNS server gets hacked, it has no effect on your other virtual machines. Plus, you can move virtual machines from one Xen server to the next one.

This tutorial shows how you can run your own name servers for domains that you register with GoDaddy. Of course, this works with every other registrar as well, although the procedure might differ a little bit. To do this, you need two servers with two different public IP addresses and with ISPConfig installed, and of course a GoDaddy account.