Install mod_spamhaus Apache module to fight comment spam
mod_spamhaus is an Apache module for DNS Block Listing that protects web services by denying access to particular IP addresses. It can stop spam relaying via web form URL injection, and block HTTP DDoS attacks from bot-nets.
It queries sbl-xbl.spamhaus.org, taking advantage of the Spamhaus Block List (SBL) and the Exploits Block List (XBL).
1. Install the package
apt-get install libapache2-mod-spamhaus
Installing ionCube
ionCube protects software written using the PHP programming language from being viewed, changed, and run on unlicensed computers.
1. Download ionCube loaders
sudo wget http://downloads.ioncube.com/loader_downloads/ioncube_loaders_lin_x86.tar.gz
Installing Zend Optimizer
The Zend Optimizer enables you to run Zend Guard encoded files.
1. Download a copy of Zend Optimizer / Guard from the location below and put it into /tmp
http://www.zend.com/en/products/guard/downloads
Disable root login to SSH
Allowing root logins to your SSH damon is a big security threat. If the SSH port is open, hackers will probably at some time attempt to brute force your root password. It's a good idea to disable root logins to SSH and instead use a normal user to login and use sudo to perform tasks that require root privileges.
1. Open the SSH daemon config file and change this line: (sudo pico /etc/ssh/sshd_config)
PermitRootLogin no
Installing PowerDNS on Karmic Koala
The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database.
1. Install the PowerDNS server and MySql backend using apt
sudo apt-get install pdns-server pdns-backend-mysql
Add a sudoer (user allowed to use sudo)
Sudo allows a system administrator to delegate authority to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while providing an audit trail of the commands and their arguments.
1. Create a new user (optional)
adduser user1
Upgrade Ubuntu 9.04 to 9.10 (Jaunty to Karmic)
Ubuntu has just released the final version of Ubuntu 9.10 (Karmic Koala). If you're running the previous version Ubuntu 9.04 (Jaunty Jackalope), you can easily upgrade using the terminal.
If you have a desktop environment installed you can just click the upgrade button in the Update Manager accessible from System -> Administration -> Update Manager but on server systems without desktop environment you may need to upgrade using the terminal.
1. Install the update manager
sudo apt-get install update-manager-core
Increasing screen resolution in VNC on X
When connecting to a server without a monitor by VNC, X won't allow you to select screen resolution higher than 640x480 on next restart. This can be easily fixed:
Open /etx/X11/xorg.conf using a text editor (pico /etx/X11/xorg.conf) and add these two lines in the Monitor section of the config file:
HorizSync 31-95
VertRefresh 50-60
Installing vsftpd using text file for virtual users
vsftpd is a secure, fast and stable FTP server. In this tutorial we'll install the server and make it check in a flat text file for virtual users allowed to login.
1. Install required packages
sudo apt-get install vsftpd libpam-pwdfile
Installing VMware tools
1. Install kernel headers and some tools used to install VMware tools:
sudo apt-get install build-essential linux-headers-$(uname -r)
2. Mount the cdrom drive. Make sure you have mounted the VMware tools virtual cd from the host before moving on.
sudo mount /dev/cdrom /mnt/