Archive for the ‘unix’ Category.

Rate limiting ssh brute force attacks using iptables

I found this great page whilst looking for something else. It gives some ideas about how to block brute force attacks using recent iptables.

backspace not working in xterms

Add the following to /etc/X11/Xresources and restart X / [gkx]dm

xterm*VT100.Translations: #override
BackSpace: string(0x7F)n
Delete:    string("
Home:      string("
End:       string("
*ttyModes: erase ^?

Tested on RHEL3.

Thanks to Justin for this

Daemontools run scripts collection

Found this nice collection of daemontools run scripts. Will find that useful someday

Monitoring Apache

Found this nice page with scripts and configs for parsing the apache server-status page and using mrtg to graph them

Screen information

Ells posted a nice site which details some of the features of screen, here

amanda disk only backups

I’ve just found this quite usefull in setting up amanda to do disk only backups.

ssh2 keys howto

Found this page, has some usefull information wrt single use keys

Setting up Spam Assassin with qmail

Rather than using the qmail-queue patch and qmail-scanner to get Spam Assassin working with qmail this page suggests replacing qmail-queue with a simple sh script.

Seems to work on our internal work server, but of course you would need to put qmail-scanner in to check for viri.

SuSE Proxy-Suite

I have been having awful troubles with connections to our ftp servers hanging. Something I suspect is caused by the netfilter firewall box. I’ve managed to side step the problem with this.

Courier imap/pop SSL Certificates

I’ve created my own CA on towel and used it to sign the webmail certificate and the courier imap/pop certificates. Finding the information to create Courier certificates was non-trivial so I’ve documents how to do it
here