Stunnel on Debian/Ubuntu with Squid

What’s Stunnel

The Stunnel program is designed to work as an SSL encryption wrapper between remote client and local (inetd-startable) or remote server. It can be used to add SSL functionality to commonly used inetd daemons like POP2, POP3, and IMAP servers without any changes in the program’s code.

What Stunnel basically does is that it turns any insecure TCP port into a secure encrypted port using OpenSSL package for cryptography. It’s somehow like a small secure VPN that runs on specific ports.

Step 1: Create an Ubuntu Droplet

So far I have tested it on Ubuntu 12.04 x32/x64, Ubuntu 12.10 x32/x64, Ubuntu 13.04 x32/x64.

Step 2: Update and Upgrade Ubuntu

Using these commands update your Ubuntu’s package list and also upgrade the existing packages to the latest version:

apt-get update
apt-get upgrade

Read more

Share

Creating PPTP on Pfsense 2.2.4

If you want to build a PPTP server graphically build using pfsense nice looking interface, then please do follow the steps below. Here I assume, a proper NAT firewall is already running in the pfsense configuration.

Step-1

  1. Go to VPN > PPTP from top menu
  2. Under “Configuration” tab-
    1. PPTP redirection > Enable PPTP server
    2. Define “No of user”
    3. Server Address- type 1.2.3.4 (trust me, it works no matter whatever your WAN or LAN IP is!)
    4. Remote Address Range- <your LAN IP>
    5. PPTP DNS Server- I used- 114.130.5.5 and 8.8.8.8
    6. Place a ‘tick’ “Require 128-bit encryption”
    7. Save
    8. Read more

Share

Install Openmediavault on Debian Wheezy/7

First Install Debian minimal

Configure your Debian repositories

Update the repository sources and add the contrib and non-free repositories.

nano /etc/apt/sources.list

It should look something like this:

deb http://ftp.us.debian.org/debian/ wheezy main contrib non-free
deb-src http://ftp.us.debian.org/debian/ wheezy main contrib non-free
deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free
# wheezy-updates, previously known as 'volatile'
deb http://ftp.us.debian.org/debian/ wheezy-updates main contrib non-free
deb-src http://ftp.us.debian.org/debian/ wheezy-updates main contrib non-free

Read more

Share

Install Zenoss on CentOS 6 64bit

zenoss-3Minimal Hardware Requirements:

Small Deployments (1 to 250 Monitored Devices)

  • 4GB RAM
  • 2 CPU Cores
  • 1x 300GB, 10K RPM Drive

Medium Deployments (250 to 500 Monitored Devices)

  • 8GB RAM
  • 4 CPU Cores
  • 1x 300GB, 10K RPM Drive

Large Deployments (500 to 1000 Monitored Devices)

  • 16GB – 32GB RAM
  • 8 CPU Cores
  • 1x 300GB, 15K RPM Drive

Disable SELinux and IPtables

For this guide SELinux and IPtables were completely disabled and CentOS 6 was up-to-date!

Add DNS FQDN Entry and NTP Sync

To ensure proper resolving FQDN entries in DNS or /etc/hosts must exist and please configure NTP time synchronization for services to run properly.

Read more

Share

Add windows client to zenoss monitoring

Allow ICMP Through Firewall

Firstly you need to allow incoming ICMP ping request since this is the way Zenoss checks if the system is online.

Go to:

Server Manager -> Configuration -> Windows Firewall with Advanced Security -> Inbound Rules

Do the following:

Enable rule “File and Printer Sharing (Echo Request – ICMPv4-In)”.

Read more

Share

NFS Firewall

Dynamic ports cannot be protected by port filtering firewalls such as iptables. First, you need to configure NFS services to use fixed ports. Open /etc/sysconfig/nfs, enter:

# vi /etc/sysconfig/nfs

Modify config directive as follows to set TCP/UDP unused ports:

# TCP port rpc.lockd should listen on.
LOCKD_TCPPORT=lockd-port-number
# UDP port rpc.lockd should listen on.
LOCKD_UDPPORT=lockd-port-number 
# Port rpc.mountd should listen on.
MOUNTD_PORT=mountd-port-number
# Port rquotad should listen on.
RQUOTAD_PORT=rquotad-port-number
# Port rpc.statd should listen on.
STATD_PORT=statd-port-number
# Outgoing port statd should used. The default is port is random
STATD_OUTGOING_PORT=statd-outgoing-port-number

Read more

Share