Debian Standard Packages to install afterwards: Difference between revisions
No edit summary |
No edit summary |
||
| Line 2: | Line 2: | ||
<pre> | <pre> | ||
apt-get install vim mc iproute hal atsar sysstat systune snmpd ncftp fail2ban nscd needrestart | apt-get install vim mc iproute hal atsar sysstat systune snmpd ncftp fail2ban nscd needrestart ntpdate ntp pdnsd | ||
</pre> | </pre> | ||
| Line 8: | Line 8: | ||
<pre> | <pre> | ||
postfix | postfix openssh-server zip unzip bzip2 arj ncftp | ||
</pre> | </pre> | ||
Notes: | Notes: | ||
nscd is a bit buggy, so we install pdnsd | |||
vim-tiny is installed by debian by default. This is horrible, and which is why we install vim first! | vim-tiny is installed by debian by default. This is horrible, and which is why we install vim first! | ||
Revision as of 06:54, 1 April 2019
After a standard install of debian, these packages still need installing.
apt-get install vim mc iproute hal atsar sysstat systune snmpd ncftp fail2ban nscd needrestart ntpdate ntp pdnsd
maybe need installing
postfix openssh-server zip unzip bzip2 arj ncftp
Notes: nscd is a bit buggy, so we install pdnsd
vim-tiny is installed by debian by default. This is horrible, and which is why we install vim first!
/etc/default/sysstat: turn ENABLED="true"
/etc/default/snmpd: get rid of 127.0.0.1 from SNMPDOPTS
vi /etc/snmp/snmpd.conf: change the community names
nscd is only usefull for servers not running bind themselves
fail2ban
vi /etc/fail2ban/jail.local
[DEFAULT] ignoreip = 127.0.0.1/8 92.109.193.251 bantime = 6000 [proftpd] enabled = true [dovecot] enabled = true logpath = /var/log/auth.log [postfix] enabled = true logpath = /var/log/mail/mail.log
maybe destemail too
NB don't edit jail.conf
might need apt-get install resolvconf but I don't like it much
obsolete
vi /etc/denyhosts.com
set PURGE_DENY = 1w and ADMIN_EMAIL = red@email.com and SMTP_FROM = Denyhosts $machinename <nobody@localhost>
Also, if a host keeps getting denied, you can stop it from going in the /etc/hosts.deny file by putting the IP address into a line in /var/lib/denyhosts/allowed-hosts