OpenVZ On Debian Etch For Webservers

November 15th, 2010 by jennyamy 
Introduction Virtualization is nice! A good practice for servers, since it makes things more secure, scalable, replacable, and replicable. All this at the cost of little added complexity. This guide is written during an install of a Supermicro machine with 2 dual-core opterons (64-bit), 2 identical disks (for RAID) and a load of memory. Why OpenVZ and not XEN or the recent KVM kernel module? Well,...

Virtual Hosting With Proftpd And MySQL (Incl. Quota) On Debian Etch

November 15th, 2010 by jennyamy 
This document describes how to install a Proftpd server that uses virtual users from a MySQL database instead of real system users. This is much more performant and allows to have thousands of ftp users on a single machine. In addition to that I will show the use of quota with this setup. For the administration of the MySQL database you can use web based tools like phpMyAdmin which will also be installed...

Preventing Brute Force Attacks With Fail2ban On Debian Etch

November 15th, 2010 by jennyamy 
In this article I will show how to install and configure fail2ban on a Debian Etch system. Fail2ban is a tool that observes login attempts to various services, e.g. SSH, FTP, SMTP, Apache, etc., and if it finds failed login attempts again and again from the same IP address or host, fail2ban stops further login attempts from that IP address/host by blocking it with an iptables firewall rule. This document...

Virtual Hosting With PureFTPd And MySQL (Incl. Quota And Bandwidth Management) On Debian Etch

November 15th, 2010 by jennyamy 
This document describes how to install a PureFTPd server that uses virtual users from a MySQL database instead of real system users. This is much more performant and allows to have thousands of ftp users on a single machine. In addition to that I will show the use of quota and upload/download bandwidth limits with this setup. Passwords will be stored encrypted as MD5 strings in the database. For the...

Server Monitoring With munin And monit On Debian Etch

November 15th, 2010 by jennyamy 
In this article I will describe how you can monitor your Debian Etch server with munin and monit. munin produces nifty little graphics about nearly every aspect of your server (load average, memory usage, CPU usage, MySQL throughput, eth0 traffic, etc.) without much configuration, whereas monit checks the availability of services like Apache, MySQL, Postfix and takes the appropriate action such as...

Using Ruby On Rails With Apache2 On Debian Etch

November 15th, 2010 by jennyamy 
This article shows how you can install Ruby on Rails (RoR) and integrate it in Apache2 on a Debian Etch system (including a short section at the end showing how to use RoR in a web site created with ISPConfig). Ruby on Rails is a web application framework which is rapidly gaining popularity among web programmers. It aims to increase the speed and ease with which database-driven web sites can be created...

Virtual Hosting With vsftpd And MySQL On Debian Etch

November 15th, 2010 by jennyamy 
Vsftpd is one of the most secure and fastest FTP servers for Linux. Usually vsftpd is configured to work with system users. This document describes how to install a vsftpd server that uses virtual users from a MySQL database instead of real system users. This is much more performant and allows to have thousands of ftp users on a single machine. For the administration of the MySQL database you can...

Postfix Monitoring With Mailgraph And pflogsumm On Debian Etch

November 15th, 2010 by jennyamy 
This article describes how you can monitor your Postfix mailserver with the tools Mailgraph and pflogsumm. Mailgraph creates daily, weekly, monthly, and yearly graphs of sent, received, bounced, and rejected emails and also of spam and viruses, if SpamAssassin and ClamAV are integrated into Postfix (e.g. using amavisd-new). These graphs can be accessed with a browser, whereas pflogsumm (“Postfix...

Installing ModSecurity2 On Debian Etch

November 15th, 2010 by jennyamy 
This article shows how to install and configure ModSecurity (version 2) for use with Apache2 on a Debian Etch system. ModSecurity is an Apache module that provides intrusion detection and prevention for web applications. It aims at shielding web applications from known and unknown attacks, such as SQL injection attacks, cross-site scripting, path traversal attacks, etc. I want to say first that this...

Installing Zabbix (Server And Agent) On Debian Etch

November 15th, 2010 by jennyamy 
Zabbix is a solution for monitoring applications, networks, and servers. With Zabbix, you can monitor multiple servers at a time, using a Zabbix server that comes with a web interface (that is used to configure Zabbix and holds the graphs of your systems) and Zabbix agents that are installed on the systems to be monitored. The Zabbix agents deliver the desired data to the Zabbix server. This tutorial...

Installing Lighttpd With PHP5 And MySQL Support On Debian Etch

November 15th, 2010 by jennyamy 
Lighttpd is a secure, fast, standards-compliant web server designed for speed-critical environments. This tutorial shows how you can install Lighttpd on a Debian Etch server with PHP5 support (through FastCGI) and MySQL support. I do not issue any guarantee that this will work for you! 1 Preliminary Note In this tutorial I use the hostname server1.example.com with the IP address 192.168.0.100. These...

Installing Simple Invoices On Debian Etch

November 15th, 2010 by jennyamy 
This tutorial describes how to install Simple Invoices on a Debian Etch server. Simple Invoices is a web-based, basic invoicing system that lets you create and manage your invoices, export them as PDF or Excel files, email them to your customers, etc. It is intended for small businesses/organizations and home users. This document comes without warranty of any kind! I do not issue any guarantee that...