Month: October 2017

FTP (File Transfer Protocol) is a traditional and widely used standard tool for transferring files between a server and clients over a network, especially where no authentication is necessary (permits anonymous users to connect to a server). We must understand that FTP is unsecure by default, because it transmits user credentials and data…

Synopsis Naxsi also known as Nginx Anti XSS & SQL Injection is an open-source web application firewall module for Nginx web server and reverse-proxy. Naxsi is used to protect Nginx web server against attacks like SQL Injections, Cross Site Scripting, Cross Site Request Forgery, Local & Remote file inclusions. Naxsi…

Installation from pkg pkg install nginx-naxsi Installation from source Naxsi should be working with all Nginx versions superior to 0.8.X. To install it from source, we need to fetch both nginx and naxsi sources. wget http://nginx.org/download/nginx-x.x.xx.tar.gz or /usr/port/www/nginx-naxsi/ make config make install Install manual wget https://github.com/nbs-system/naxsi/archive/xxx.tar.gz tar xvzf nginx-x.x.xx.tar.gz tar…

TUN/TAP provides packet reception and transmission for user space programs. It can be viewed as a simple Point-to-Point or Ethernet device, which instead of receiving packets from a physical media, receives them from user space program and instead of sending packets via physical media writes them to the user space…

I decided to try out installing snort on FreeBSD since the snort package was part of the pkgng repos (and part of ports as well). The install was pretty easy: elatov@moxz:~$sudo pkg install snort Password: Updating FreeBSD repository catalogue... FreeBSD repository is up-to-date. All repositories are up-to-date. The following 26 packages will be affected (of 0…

Apache, MySQL and PHP already installed and configured. In /usr/local/etc/php.ini file configure the  following lines: error_reporting = E_ALL & ~E_NOTICE date.timezone = 'Asia/Baku' include_path = ".:/usr/local/share/pear:/usr/local/share/fpdf" cd /usr/ports/security/snort make config                         # Choose modules make -DBATCH install                # Install mkdir /root/snortrules # create folder which we will download the rules cd /root/snortrules           # Enter the…

Prepare the system Update the system pkg update && pkg upgrade portsnap fetch extract Install portmaster: cd /usr/ports/ports-mgmt/portmaster make install clean pkg2ng Install Snort Install Snort portmaster security/snort security/barnyard2 security/pulledpork NOTE: Enable [X]MYSQL during the config of security/barnyard2 Create the following directories: mkdir -p /usr/local/etc/snort/so_rules mkdir -p /usr/local/etc/snort/rules/iplists mkdir -p…

How do I install an Nginx webserver under a FreeBSD Unix operating system? nginx [engine x] is a HTTP server, reverse proxy and mail proxy server written by Igor Sysoev. It is a lightweight web server, licensed under a BSD-like license. It the fastest growing and one of the most…

This tutorial by techtipz.biz shows us how to install Nano/Pico on FreeBSD from the ports collection. I’ve  never got to grips with using ‘vi’ to edit files from the command line. So one of the first things I need to do is configure the nano/pico text editor so I can…

We can make PHP 7 work in Apache2 through PHP-FPM and Apache's mod_fastcgi module which we install as follows: apt-get -y install libapache2-mod-fastcgi php7.0-fpm php7.0 PHP-FPM is a daemon process (with the systemd unit php7.0-fpm.service) that runs a FastCGI server on the socket /var/run/php/php7.0-fpm.sock. Next, enable the following Apache modules... a2enmod actions…

If you’re on a 64-bit version (likely)... wget https://dl-ssl.google.com/dl/linux/direct/mod-pagespeed-stable_current_amd64.deb If you’re on a 32-bit version (less likely)... wget https://dl-ssl.google.com/dl/linux/direct/mod-pagespeed-stable_current_i386.deb sudo dpkg -i mod-pagespeed-*.deb apt-get -f install Remove the downloaded package rm mod-pagespeed-*.deb Note: Installing from source is outside the scope of this article. You can find detailed instructions from Google…

PHP 7.0.23 has been released on PHP.net on 31st August 2017, and is also available for CentOS/RHEL 6.9 and 7.4 at Webtatic via Yum. Source - Issues PEAR installer now supports PHP 7.0, however most pecl libraries will not support it as well without their maintainers adding compatibility, so only pecl libraries…