Mounting NFS Filesystems

(1)掛載 /etc/fstab
#vi /etc/fstab

%add
#server1:/var/ftp/pub/RHEL5 /mnt/server1 nfs defaults,noauto 0 0
%remount
#mount -a

(Read More...)

Securing Data

Openssl

*generating digital certificates
#openssl genrsa -out server1.key.pem 1024
#openssl req -new -key server1.key.pem -out server1.csr.pem
#openssl req -new -key server1.key.pem -out server1.crt.pem


(Read More...)

Network Resource Access Controls

*Netfilter
#iptables

#chkconfig --list iptables
iptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off

(1)Rule Targets
DROP, ACCEPT, LOG, REJECT, custom chain
(Read More...)

System Service Access Controls

*chkconfig控制服務在開機後是否自動啟動
(1)
#chkconfig --list

#chkconfig name {on|off}
#chkconfi vsftpd on

#chkconfig --level levels name {on|off}
(Read More...)

LAB

*Logging to a centralized loghost

%server1的log複寫一份到server118


(1) server1
#vi /etc/syslog.conf
加入 user,* @server118
(Read More...)