CentOS 6 Linux Server Cookbook电子书

CentOS 6 Linux Server Cookbook

Table of Contents

CentOS 6 Linux Server Cookbook

Credits

About the Author

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers and more

Why Subscribe?

Free Access for Packt account holders

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. Installing CentOS

Introduction

Downloading CentOS and confirming the checksum on a Windows desktop

Getting ready

How to do it...

How it works…

See also

Performing an installation of CentOS using the graphical installer

Getting ready

How to do it...

How it works…

See also

Running a netinstall over HTTP

Getting ready

How to do it...

How it works...

See also

Installing CentOS in Text Mode and building a minimal installation

Getting ready

How to do it...

How it works...

See also

Re-installing the boot loader

Getting ready

How to do it...

How it works...

Updating the installation and enhancing the minimal install with additional administration and development tools

Getting ready

How to do it...

How it works...

See also

Finishing the installation process with Firstboot

Getting ready

How to do it...

How it works...

There's more...

Adding the GNOME desktop environment, changing the runlevel, and installing additional software

Getting ready

How to do it...

How it works...

2. Configuring CentOS

Introduction

Changing the time zone and updating the hardware clock

Getting ready

How to do it...

How it works...

There's more...

Linking time and location

Synchronizing the system clock with NTP

Getting ready

How to do it...

How it works...

There's more...

Synchronizing multiple machines

Modifying the logfile's location

Fudging time

See also

Setting a static IP address

Getting ready

How to do it...

How it works...

There's more...

Substituting the Netmask value with a prefix

Finding your HWADDR/MAC address

Binding multiple IP addresses to a single Ethernet device

Getting ready

How to do it...

How it works...

There's more...

Bonding two Ethernet devices to increase bandwidth and provide redundancy

Getting ready

How to do it...

How it works...

There's more...

Changing the hostname and resolving a fully qualified domain name

Getting ready

How to do it...

How it works...

There's more...

Switching SELinux off

Getting ready

How to do it...

How it works...

See also

Disabling the IPv6 module

Getting ready

How to do it...

How it works...

There's more...

3. Working with CentOS

Introduction

Creating an administrative user and becoming root with the switch user command

Getting ready

How to do it...

How it works...

There's more...

Introducing mailx and forwarding the root's e-mail to an external e-mail address

Getting ready

How to do it...

How it works...

There's more...

Automating tasks with cron

Getting ready

How to do it...

How it works...

There's more...

See also

Synchronizing files and directories with rsync and working towards a full system backup with cron

Getting ready

How to do it...

How it works...

There's more...

See also

Issuing customized e-mail reports with Mutt

Getting ready

How to do it...

How it works...

There's more...

See also

Using logrotate to manage logfiles

Getting ready

How to do it...

How it works...

There's more...

Extending log rotation by adding NTP to logrotate

Getting ready

How to do it...

How it works...

Using chkconfig to enable a custom service at boot

Getting ready

How to do it...

How it works...

There's more...

Evaluating current memory usage with the free and top commands and clearing the memory cache

Getting ready

How to do it...

How it works...

There's more...

4. Managing Packages with Yum

Introduction

Updating the system with YUM

Getting ready

How to do it...

How it works...

There's more...

See also

Cleaning the YUM cache

Getting ready

How to do it...

How it works...

There's more...

See also

Automating Yum updates with Yum-cron

Getting ready

How to do it...

How it works...

See also

Installing packages with YUM

Getting ready

How to do it...

How it works...

There's more...

See also

Removing packages with YUM

Getting ready

How to do it...

How it works...

There's more...

See also

Finding packages with YUM

Getting ready

How to do it...

How it works...

There's more...

See also

Installing Yum Priorities to support additional repositories

Getting ready

How to do it...

How it works...

See also

Enhancing CentOS with the EPEL and Remi repositories

Getting ready

How to do it...

How it works...

See also

5. Securing CentOS

Introduction

Escalating user privilege with sudo

Getting ready

How to do it...

How it works...

There's more...

Change the default timeout

Hardening the secure shell environment

Getting ready

How to do it...

How it works...

There's more...

Changing the SSH port number of your server

Limiting SSH access by user or group

See also

Configuring a firewall and working with IPTables

Getting ready

How to do it...

How it works...

There's more...

Allowing an IP address

Banning an IP address

See also

Protecting SSH with fail2ban

Getting ready

How to do it...

How it works...

There's more...

See also

Preventing dictionary-based attacks with DenyHosts

Getting ready

How to do it...

How it works...

There's more...

Unblocking an IP address

See also

Running antivirus scans with ClamAV

Getting ready

How to do it...

How it works...

There's more...

See also...

6. Working with Samba

Introduction

Configuring Samba as a standalone server and enabling home directories

Getting ready

How to do it...

How it works...

There's more...

Disable printing support in Samba

Relaxing the rules for SELinux

Opening the firewall

Assigning the master browser

See also

Adding, deleting, and disabling a Samba user

Getting ready

How to do it...

How it works...

There's more...

Providing a network recycle bin for Samba

Getting ready

How to do it...

How it works...

There's more...

Hiding folders and files with Samba

Getting ready

How to do it...

How it works...

There's more...

Creating a custom share folder for a specific user or a group of users

Getting ready

How to do it...

How it works...

There's more...

Controlling access and enabling a write list for specific users or groups

Enabling guest-only access to a custom share folder

See also

7. Working with Domains

Introduction

Building a caching-only nameserver with BIND

Getting ready

How to do it...

How it works...

There's more...

Enabling access to a DNS server from behind a firewall

Cleaning expired records

See also

Writing zone files for BIND

Getting ready

How to do it...

How it works...

See also

Adding zones to BIND and configuring a nameserver

Getting ready

How to do it...

How it works...

There's more...

See also

Deploying a local nameserver with dnsmasq

Getting ready

How to do it...

How it works...

See also

Logging events with dnsmasq and combining this with logrotate

Getting ready

How to do it...

How it works...

See also

Enabling domain name wildcards with dnsmasq

Getting ready

How to do it...

How it works...

See also

Hardening BIND with chroot and providing better security measures

Getting ready

How to do it...

How it works...

See also

8. Working with Databases

Introduction

Installing and hardening MySQL server with mysql_secure_installation

Getting ready

How to do it...

How it works...

There's more...

See also

Creating a MySQL database, adding a MySQL user, and assigning user privilege from the command line

Getting ready

How to do it...

How it works...

There's more...

Reviewing and revoking permissions or dropping a user

See also

Installing PostgreSQL, adding a user, and creating your first database

Getting ready

How to do it...

How it works...

There's more...

Connecting to PostgreSQL

Accessing a PostgreSQL database using psql

Creating a copy of a database in PostgreSQL

See also

Configuring remote access to PostgreSQL

Getting ready

How to do it...

How it works...

See also

9. Providing Mail Services

Introduction

Enabling a domain-wide Mail Transport Agent (MTA) and testing your SMTP configuration with Telnet

Getting ready

How to do it...

How it works...

There's more...

See also

Building a local POP3/SMTP server with Postfix and Dovecot

Getting ready

How to do it...

How it works...

There's more...

Setting up e-mail software

See also

Closing the open relay, enabling SMTP authentication and dealing with Spam by configuring SASL, and enabling Postfix header and body checks

Getting ready

How to do it...

How it works...

There's more...

Setting up e-mail software with SMTP authentication

See also

Using Postfix and Dovecot to serve e-mails across virtual domains

Getting ready

How to do it...

How it works...

There's more...

Setting up a catch-all e-mail address for a virtual domain

See also

10. Working with Apache

Introduction

Installing the Apache web server with CGI/Perl, PHP, configuring mod_perl, and preparing httpd for a production environment

Getting ready

How to do it...

How it works...

There's more...

Running a CGI/Perl script

Activating ModPerl::PerlRun

See also

Adding a secure connection to the Apache web server by creating a self-signed SSL certificate using OpenSSL

Getting ready

How to do it...

How it works...

See also

Hosting peers by enabling user directories on the Apache web server and troubleshooting suexec

Getting ready

How to do it...

How it works...

There's more...

Reinstating suexec

See also

Configuring Apache name-based virtual hosting

Getting ready

How to do it...

How it works...

There's more...

See also

Working with publishing directories, vhosts.d, error documents, directives, and the rewrite rule for virtual hosting with the Apache web server

Getting ready

How to do it...

How it works...

See also

11. Working with FTP

Introduction

Building a basic FTP service by installing and configuring VSFTP

Getting ready

How to do it...

How it works...

There's more...

Changing the default time-out

Banning a user from the FTP service

Customizing the banner

See also

Providing a secure connection to VSFTP with SSL/TLS using OpenSSL encryption

Getting ready

How to do it...

How it works...

See also

Implementing virtual users and directories in standalone mode on VSFTP

Getting ready

How to do it...

How it works...

There's more...

Providing an anonymous upload and download or download only FTP server with VSFTP

Getting ready

How to do it...

How it works...

There's more...

Index