Hack The Sec-Leading Resource Of Linux Tutorial: Debian

Installing HAProxy For Load Blancing And Protecting Apache From DDos

<div dir="ltr" style="text-align: left;" trbidi="on">
HAProxy For Load Blancing And Protecting Apache 
HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world's most visited ones. Over the years it has become the de-facto standard opensource load balancer, is now shipped with most mainstream Linux distributions, and is often deployed by default in cloud platforms.  
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgPa7Usd4c8YIVUD4JNC30RhJVlkhu9vYhOMa1pF6q2-pKyCbDfhAB_kSKelVuBM10VGpjA3DR0A3F7scFBYZUjAwEe-I1s3UE9n_3Ia-V7fFmwaF2ttWFsjAKi3lCEdkY0TPWvAFBx6L7/s1600/HAProxy-hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgPa7Usd4c8YIVUD4JNC30RhJVlkhu9vYhOMa1pF6q2-pKyCbDfhAB_kSKelVuBM10VGpjA3DR0A3F7scFBYZUjAwEe-I1s3UE9n_3Ia-V7fFmwaF2ttWFsjAKi3lCEdkY0TPWvAFBx6L7/s1600/HAProxy-hackthesec.co.in.jpg" /></a></div>
 
Its mode of operation makes its integration into existing architectures very easy and riskless, while still offering the possibility not to expose fragile web servers to the net, such as below : 
<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.haproxy.org/img/haproxy-pmode.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://www.haproxy.org/img/haproxy-pmode.png" /></a></div>
 
version 1.5 : the most featureful version, supports SSL, IPv6, keep-alive, DDoS protection, etc... 
version 1.4 : the most stable version for people who don't need SSL. Still provides client-side keep-alive 
 
version 1.3 : the old stable version for companies who cannot upgrade for internal policy reasons. <a href="http://www.haproxy.org/#desc" target="_blank">More Info Here</a> 
INSTALLATION 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">wget http://haproxy.1wt.eu/download/1.5/src/devel/haproxy-1.5-dev7.tar.gz
tar xvfz haproxy-1.5-dev7.tar.gz
$ cd haproxy-1.5-dev7</pre>
Now we have to compile the installation file, we are taking example of centos. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">make install</pre>
Now make a new directory and copy haproxy configuration file there 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">mkdir /etc/haproxy
cd /etc/haproxy
vi haproxy.cfg</pre>
change the ip address below and copy it to haproxy.cfg 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">global
daemon
maxconn 20000 # count about 1 GB per 20000 connections
pidfile /var/run/haproxy.pid
stats socket /var/run/haproxy.stat mode 600

defaults
mode http
maxconn 19500        # Should be slightly smaller than global.maxconn.
timeout client 60s   # Client and server timeout must match the longest
timeout server 60s   # time we may wait for a response from the server.
timeout queue  60s   # Don't queue requests too long if saturated.
timeout connect 4s   # There's no reason to change this one.
timeout http-request 5s    # A complete request may never take that long.
# Uncomment the following one to protect against nkiller2. But warning!
# some slow clients might sometimes receive truncated data if last
# segment is lost and never retransmitted :
# option nolinger
option http-server-close
option abortonclose
balance roundrobin
option forwardfor    # set the client's IP in X-Forwarded-For.
option tcp-smart-accept
option tcp-smart-connect
retries 2

frontend public
bind 192.168.1.1:80
bind 192.168.1.2:80
bind 192.168.1.3:80
bind 192.168.1.4:80

# table used to store behaviour of source IPs
stick-table type ip size 200k expire 5m store gpc0,conn_rate(10s)

# IPs that have gpc0 > 0 are blocked until the go away for at least 5 minutes
acl source_is_abuser src_get_gpc0 gt 0
tcp-request connection reject if source_is_abuser

# connection rate abuses get blocked
acl conn_rate_abuse  sc1_conn_rate gt 30
acl mark_as_abuser   sc1_inc_gpc0  gt 0
tcp-request connection track-sc1 src
tcp-request connection reject if conn_rate_abuse mark_as_abuser

default_backend apache

backend apache
# set the maxconn parameter below to match Apache's MaxClients minus
# one or two connections so that you can still directly connect to it.
stats uri /haproxy?stats
server srv 0.0.0.0:8181 maxconn 254

# Enable the stats page on a dedicated port (8811). Monitoring request errors
# on the frontend will tell us how many potential attacks were blocked.
listen stats
# Uncomment "disabled" below to disable the stats page :
# disabled
bind :8811
stats uri /
</pre>
<div>
In the above file replace 192.168.1.1 to 192.168.1.4 with your server ip address.</div>
Change your Apache port to 8181 as in configuration file we are using that server srv 0.0.0.0:8181 maxconn 254. 
In WHM goto Tweak Settings and find Apache non-SSL IP/port and change it to 8181. 
Restart apache 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">/etc/init.d/apache2 restart</pre>
Start haproxy 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">haproxy -f /etc/haproxy/haproxy.cfg</pre>
Now we have to check if its working. Go to your stats page to see 
serverip:8811 
 
 
Replace serverip with your server ip used in configuration file and you will see full result generated by haproxy 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
<div style="text-align: center;">
 </div>
</div>

Installing HAProxy For Load Blancing And Protecting Apache From DDos

HAProxy For Load Blancing And Protecting Apache HAProxy is a free, very fast and reliable solution offering high availability, load balanc...

How to Use NODEQUERY to monitor server performance

<div dir="ltr" style="text-align: left;" trbidi="on">
Using NODEQUERY to monitor server performance 
NodeQuery provides a lightweight and easy to use linux server monitoring service. Get alerts and actively monitor the performance of your servers. 
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBPeO61jkpM4xkCY9tAsp-p2HdWaUthMexdD27tFjhnlqkqTKb1rgamFBzZDOU469CqaQs7y0wBvddYRbok4cfr0okUD808vlTwH8fY61bKUm02EHo8d1Sd191im1dnbHa4Aq5ttyCvV8i/s1600/nodequery.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="412" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBPeO61jkpM4xkCY9tAsp-p2HdWaUthMexdD27tFjhnlqkqTKb1rgamFBzZDOU469CqaQs7y0wBvddYRbok4cfr0okUD808vlTwH8fY61bKUm02EHo8d1Sd191im1dnbHa4Aq5ttyCvV8i/s640/nodequery.jpg" width="640" /></a></div>
 
Anyway, I really like the simplicity of NodeQuery’s user interface and the way its display the data. 
How to setup NodeQuery monitoring agent on your server? 
 
SETUP USER AGENT 
 
Step 1 – Of course, you have to firstly signup for an account at NodeQuery website. <a href="https://nodequery.com/signup" target="_blank">Visit this link to go to their signup page</a>. 
Step 2 – Choose Beta Account, and then fill in your Full Name, Email Address and Password. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiC3GEfFWCifMoiEVHP2k5aw1T9U3uxVse-BQZW1Itln7qkQunv8YJAZBGyhagg3gu5AEUb2gvclCvuUOQNGEHWQmHRPmJIEvRwFeTejSCRMdzDmV7fQby-2EQ1Jw43XP7qDWR5Y4vmYEnN/s1600/nodequery.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiC3GEfFWCifMoiEVHP2k5aw1T9U3uxVse-BQZW1Itln7qkQunv8YJAZBGyhagg3gu5AEUb2gvclCvuUOQNGEHWQmHRPmJIEvRwFeTejSCRMdzDmV7fQby-2EQ1Jw43XP7qDWR5Y4vmYEnN/s1600/nodequery.png" /></a></div>
Just click on the blue Sign Up button. You'll be then asked to enter a challenge code. Just enter it, tick mark the "I agree to ToS," and click the Confirm button. 
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMm_ByUt0C3uepQVc4EtQhyphenhyphenqVQSSanOF8qOdpD73l0YO6l1hPA7H8eiAxtkarsnGzyiHjWsES2F3jaBTcIKlFADGsh2EXOxZMZ8RlLXgYUe0dwz6niui9BTcp935VbrOwNf3-zk4mlLokt/s1600/registration_done_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMm_ByUt0C3uepQVc4EtQhyphenhyphenqVQSSanOF8qOdpD73l0YO6l1hPA7H8eiAxtkarsnGzyiHjWsES2F3jaBTcIKlFADGsh2EXOxZMZ8RlLXgYUe0dwz6niui9BTcp935VbrOwNf3-zk4mlLokt/s1600/registration_done_hackthesec.co.in.png" /></a></div>
 
Then Goto your mail box and active the registration link after that login your account you will see the bellow dashboard.. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbQjPpnV1y-T1MkaWQ2RBOX6-MTJK9-scK43uXdr-52y2rel2sqw_469AohbU-UlmhbEWounXegKrXE3DQ7PCicWlIr_r2i-xbctlx24QJl1coYF_C4mrXcB4Rz7vu1nZVfvNDyQ5DR-rs/s1600/nodequery_dashboard.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbQjPpnV1y-T1MkaWQ2RBOX6-MTJK9-scK43uXdr-52y2rel2sqw_469AohbU-UlmhbEWounXegKrXE3DQ7PCicWlIr_r2i-xbctlx24QJl1coYF_C4mrXcB4Rz7vu1nZVfvNDyQ5DR-rs/s1600/nodequery_dashboard.png" /></a></div>
 
Step 5 – Let's add your first server to monitor. Click on the New Server button / link. 
Step 6 – Now define your server name. It is strongly recommended to use your valid FQDN. 
You have to also decide how the system will send you alert when your server goes down. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuHNd6lY-FjLB1yGCiFB27IAtIG7y052jv3cCk6L6ybQ4Pm3ccYLhu3EsQLQBVO78uz40B61UWJTxg5xKQPdLvkF4rE_oek1rgV1_H0KmYYcKYrsDs1a_qZiOPbaZ4G4SppgAnAhXC-dbo/s1600/nodequery_serveradd_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuHNd6lY-FjLB1yGCiFB27IAtIG7y052jv3cCk6L6ybQ4Pm3ccYLhu3EsQLQBVO78uz40B61UWJTxg5xKQPdLvkF4rE_oek1rgV1_H0KmYYcKYrsDs1a_qZiOPbaZ4G4SppgAnAhXC-dbo/s1600/nodequery_serveradd_hackthesec.co.in.png" /></a></div>
Setup minimum threshold of when NodePing should send you alert. There are three major sections you can setup the threshold for system resource usage alert : System load, RAM usage, and Disk usage. 
 
Step 7 -After that You'll be given a command to install monitoring agent on your server. Just copy that command : 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6CU8ZiTDfSxKXTgpd2iAyXtNpiMw34mWcRNRatCfyX2OIrLJQFfWRJsUo_7UC7LimjasTXC4O2xLUrrhmje11v7U08o3rTFVNtGYSiiTcZA7iiQcCRoaDnboeZCkJzP3aXAtoRqYC9Naw/s1600/nodequery_agentinstall_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6CU8ZiTDfSxKXTgpd2iAyXtNpiMw34mWcRNRatCfyX2OIrLJQFfWRJsUo_7UC7LimjasTXC4O2xLUrrhmje11v7U08o3rTFVNtGYSiiTcZA7iiQcCRoaDnboeZCkJzP3aXAtoRqYC9Naw/s1600/nodequery_agentinstall_hackthesec.co.in.png" /></a></div>
Step 8 - Open up putty and login to your server as a user with sudo privilege. Issue the coped command there : 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpre6oah_6cnIhUpT3wIjVDmsW5eaS26l5vqzAS_QEzo5NjoWxIcZji2LMuUjjE4nUFtHzwdLHsdnGduHaHkcsU1CJLtj58sfj_tNJ0vshmBTuG8fX6Q28TQHWLITcF7-ocKtpn5g67PlH/s1600/nodequery_agent_install_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpre6oah_6cnIhUpT3wIjVDmsW5eaS26l5vqzAS_QEzo5NjoWxIcZji2LMuUjjE4nUFtHzwdLHsdnGduHaHkcsU1CJLtj58sfj_tNJ0vshmBTuG8fX6Q28TQHWLITcF7-ocKtpn5g67PlH/s1600/nodequery_agent_install_hackthesec.co.in.png" /></a></div>
Step 9 – Go back to NodeQuery dashboard and click on the Manage Servers button.  You’ll then notice your newly added server is there. However, the status would be Awaiting Data It's need some to for syncing.. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNa3XQfKUW32YBrVxINXZ6DKOKcl6znX4TGTuNBgVnXaR2ES3Z6Gjz6UM5aBQhMKEi7Sjd9aYogQr35FXce3NGuZ7YDyolqkc8SX_4CT0fHrR5MabmEsuLb00SOVuFqC4YLEgb0RRnbF8p/s1600/nodequery_serveradd_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNa3XQfKUW32YBrVxINXZ6DKOKcl6znX4TGTuNBgVnXaR2ES3Z6Gjz6UM5aBQhMKEi7Sjd9aYogQr35FXce3NGuZ7YDyolqkc8SX_4CT0fHrR5MabmEsuLb00SOVuFqC4YLEgb0RRnbF8p/s1600/nodequery_serveradd_hackthesec.co.in.png" /></a></div>
 
Just wait for approximately 3 minutes and refresh that page. You’ll then see a page similar to this one : 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQTGXK8oNGEcBNpCxjoFJJhL8zDJxfS0QlbGnxanAJjm7htw4mZF12cmlF0tJ7dofNNwqcNgv664oazR1-WEtGuaVXAviQYAz1qp1JwqWOpv79qe8yZK6KKcV7JcmC-5hDfet2PbQv27Pu/s1600/nodequery_active_node_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQTGXK8oNGEcBNpCxjoFJJhL8zDJxfS0QlbGnxanAJjm7htw4mZF12cmlF0tJ7dofNNwqcNgv664oazR1-WEtGuaVXAviQYAz1qp1JwqWOpv79qe8yZK6KKcV7JcmC-5hDfet2PbQv27Pu/s1600/nodequery_active_node_hackthesec.co.in.png" /></a></div>
Step 10 – You can then browse around to see detailed server performance stats monitored by NodeQuery : 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8NjxNlI1pTidb9iDydIbcp0uIyGBIt6ZGlzfZ4URfGowwTEXCQgqO9rOhnpOMNnt8_FpZyn2rHhbGXMTJbeQKF6X3sVIcBctv6VFUdUBQh2IjDmFDdU8J5rasZjfZNUjEplXOo1azSeCK/s1600/processes_manager_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8NjxNlI1pTidb9iDydIbcp0uIyGBIt6ZGlzfZ4URfGowwTEXCQgqO9rOhnpOMNnt8_FpZyn2rHhbGXMTJbeQKF6X3sVIcBctv6VFUdUBQh2IjDmFDdU8J5rasZjfZNUjEplXOo1azSeCK/s1600/processes_manager_hackthesec.co.in.png" /></a></div>
Network usage 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK0vut85MZeaJtjL3ZXuf2Y4YaFr8oj1UNPZL97wStbtg7vz4BYR82WmLBkiQ95TkDmE9v8f6zeB80DRHPC1QaS9xRdsYQ-n5NYmJEgDusnd5FlJxxXXy853vR5LexhV4g32gvevJmb36h/s1600/network_usage.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK0vut85MZeaJtjL3ZXuf2Y4YaFr8oj1UNPZL97wStbtg7vz4BYR82WmLBkiQ95TkDmE9v8f6zeB80DRHPC1QaS9xRdsYQ-n5NYmJEgDusnd5FlJxxXXy853vR5LexhV4g32gvevJmb36h/s1600/network_usage.png" /></a></div>
Network latency 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSPNvmiA3b6pomSU3_-PWxhZa55PctM3Pd2r7ZVRRi802JR935AO2PkymvjkPcZzYJxTTB98ht9RlLHe7Otr2bKsxujS713WvQTJXCQFzItXE-CqYs7dnT-x3JWOj0uWlDJp_xqlIc3Z-k/s1600/network_latency.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSPNvmiA3b6pomSU3_-PWxhZa55PctM3Pd2r7ZVRRi802JR935AO2PkymvjkPcZzYJxTTB98ht9RlLHe7Otr2bKsxujS713WvQTJXCQFzItXE-CqYs7dnT-x3JWOj0uWlDJp_xqlIc3Z-k/s1600/network_latency.png" /></a></div>
Average Load (CPU and Disk I/O) 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBtmf5uBER4qjvWeDSOyc0wm_mtr8w10j7rwMUyTGM_Yayx4GfSoMoeoi2XCr7kHJUTb6Hb_obVOYIy5PB8qd57k3p_CwSi7589yRCZ2E4eqEQw4ckulEcK9govPNFJxNiB2mZvfU1P1TN/s1600/average_load_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBtmf5uBER4qjvWeDSOyc0wm_mtr8w10j7rwMUyTGM_Yayx4GfSoMoeoi2XCr7kHJUTb6Hb_obVOYIy5PB8qd57k3p_CwSi7589yRCZ2E4eqEQw4ckulEcK9govPNFJxNiB2mZvfU1P1TN/s1600/average_load_hackthesec.co.in.png" /></a></div>
RAM Usage Stats 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJ27kWlhDewsMXvCc2lSJDbGx_0wN-2rIpmMdfbrYIjPuNZWnPOktlCKvCBPPxKyQDu5b8hd5e5oQPq3kRJtf0RUXRbl38gyhmHe7IhVZDT3FjJipKoqpTXYo_AnKkLJrOgZ6IotCE7dIq/s1600/ram_and_swap_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJ27kWlhDewsMXvCc2lSJDbGx_0wN-2rIpmMdfbrYIjPuNZWnPOktlCKvCBPPxKyQDu5b8hd5e5oQPq3kRJtf0RUXRbl38gyhmHe7IhVZDT3FjJipKoqpTXYo_AnKkLJrOgZ6IotCE7dIq/s1600/ram_and_swap_hackthesec.co.in.png" /></a></div>
Disk Usage 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3ijlrM7gpyNTe8QZMoUCvW30VNvK3yvhDnFTzwUJd51xDlIcVdbtXinDMX8SeGANf7Z0vYTZKI3S8UOSAgjsOFs3bc0rRKtYAmKMJfMP00JeyK_FM6lUmFj8E5-4iuV21-IsEoGqdQ8NH/s1600/disk_usage_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3ijlrM7gpyNTe8QZMoUCvW30VNvK3yvhDnFTzwUJd51xDlIcVdbtXinDMX8SeGANf7Z0vYTZKI3S8UOSAgjsOFs3bc0rRKtYAmKMJfMP00JeyK_FM6lUmFj8E5-4iuV21-IsEoGqdQ8NH/s1600/disk_usage_hackthesec.co.in.png" /></a></div>
 
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a> 
 </div>

How to Use NODEQUERY to monitor server performance

Using NODEQUERY to monitor server performance NodeQuery provides a lightweight and easy to use linux server monitoring service. Get alerts...

How to Protect Apache Server From Denial-of-Service (Dos) Attack

<div dir="ltr" style="text-align: left;" trbidi="on">
Protecting Apache Server From Denial-of-Service (Dos) Attack 
A denial-of-service (DoS) attack is an attempt to make a machine or network resource unavailable to its intended users, such as to temporarily or indefinitely interrupt or suspend services of a host connected to the Internet. A distributed denial-of-service (DDoS) is where the attack source is more than one, often thousands of, unique IP addresses. It is analogous to a group of people crowding the entry door or gate to a shop or business, and not letting legitimate parties enter into the shop or business, disrupting normal operations. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbvXzbAIVFMdclQaDCSCILQQsJG_oW-jSzbDmSZnd57RAIJ5NuLhrkUjrxXBFx6QNR4K1oia4tvxSmx_7rK5S_50_zR6YwMnhZd7C834Cfq4Z-4-GWZ1HoFotAEJQJeecaIF-G5WN9P3Hx/s1600/ddos_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbvXzbAIVFMdclQaDCSCILQQsJG_oW-jSzbDmSZnd57RAIJ5NuLhrkUjrxXBFx6QNR4K1oia4tvxSmx_7rK5S_50_zR6YwMnhZd7C834Cfq4Z-4-GWZ1HoFotAEJQJeecaIF-G5WN9P3Hx/s1600/ddos_hackthesec.co.in.png" /></a></div>
 
Criminal perpetrators of DoS attacks often target sites or services hosted on high-profile web servers such as banks, credit card payment gateways; but motives of revenge, blackmail or activism can be behind other attacks. 
 
The scale of DDOS attacks has continued to rise over recent years; web security company, CloudFlare, reported in 2016 they consistently mitigated attacks of 400Gbps. 
What is mod_evasive? 
 
mod_evasive is an evasive maneuvers module for Apache to provide evasive action in the event of an HTTP DoS or DDoS attack or brute force attack. It is also designed to be a detection and network management tool, and can be easily configured to talk to ipchains, firewalls, routers, and etcetera. mod_evasive presently reports abuses via email and syslog facilities. 
Installing mod_evasive 
Server Distro: Debian 8 jessie 
Apache Version: Apache/2.4.10 
 
mod_evasive appears to be in the Debian official repository, we will need to install using apt 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># apt-get update
# apt-get install libapache2-mod-evasive</pre>
Setting up mod_evasive 
 
We have mod_evasive installed but not configured, mod_evasive config is located at /etc/apache2/mods-available/evasive.conf. We will be editing that which should look similar to this 
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><IfModule mod_evasive20.c>
 #DOSHashTableSize 3097
 #DOSPageCount 2
 #DOSSiteCount 50
 #DOSPageInterval 1
 #DOSSiteInterval 1
 #DOSBlockingPeriod 10

#DOSEmailNotify you@yourdomain.com
 #DOSSystemCommand "su - someuser -c '/sbin/... %s ...'"
 #DOSLogDir "/var/log/mod_evasive"
 </IfModule></pre>
mod_evasive Configuration Directives 
 
<ul style="text-align: left;">
<li>DOSHashTableSize</li>
<li>DOSPageCount</li>
<li>DOSSiteCount</li>
<li>DOSPageInterval</li>
<li>DOSSiteInterval</li>
<li>DOSBlockingPeriod</li>
<li>DOSEmailNotify</li>
<li>DOSSystemCommand</li>
<li>DOSLogDir</li>
</ul>
 
 
This configuration is what I’m using which is working well and I recommend it if you don’t know how to go about the configuration 
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><IfModule mod_evasive20.c>
 DOSHashTableSize 2048
 DOSPageCount 5
 DOSSiteCount 100
 DOSPageInterval 1
 DOSSiteInterval 2
 DOSBlockingPeriod 10

DOSEmailNotify you@yourdomain.com
 #DOSSystemCommand "su - someuser -c '/sbin/... %s ...'"
 DOSLogDir "/var/log/mod_evasive"
</IfModule></pre>
As you’ll replace you@yourdomain.com with your email. Since mod_evasive doesn’t create the log directory automatically, we are to create it for it: 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># mkdir /var/log/mod_evasive
# chown :www-data /var/log/mod_evasive
# chmod 771 /var/log/mod_evasive</pre>
Once setup is done, make sure mod_evasive is enabled by typing: 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># a2enmod evasive</pre>
Restart Apache for changes to take effect 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># systemctl restart apache2</pre>
Testing mod_evasive Setup 
 
mod_evasive set up correctly,  now we are going to test if our web server has protection again DoS attack using ab (Apache Benchmark). Install ab if you don’t have it by typing: 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># apt-get install apache2-utils</pre>
Current stat of our /var/log/mod_evasive 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">root@hackthesec:/var/log/mod_evasive# ls -l
 total 0
root@hackthesec:/var/log/mod_evasive#</pre>
We will now send bulk requests to the server, causing a DoS attack  by typing: 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># ab -n 100 -c 10 http://serverip/</pre>
Sending 100 request on 10 concurrent requests per request, the current stat of my /var/log/mod_evasive directory is now 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">root@hackthesec:/var/log/mod_evasive# ls -l
 total 4
 -rw-r--r-- 1 www-data www-data 18 May 16 22:10 dos-10.42.0.1</pre>
Checking Apache access logs at /var/log/apache2/access.log we can see all connections from ApacheBench/2.3 were dropped to 403: 
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>

How to Protect Apache Server From Denial-of-Service (Dos) Attack

Protecting Apache Server From Denial-of-Service (Dos) Attack A denial-of-service (DoS) attack is an attempt to make a machine or network r...

Configure vsftpd SSL/TLS and Jail for Any User Writing as www-data to Web Server

<div dir="ltr" style="text-align: left;" trbidi="on">
Configure vsftpd SSL/TLS and Jail for Any User Writing as www-data to Web Server 
 
<a href="http://www.hackthesec.co.in/search/label/vsftp">vsftpd</a>, (or very secure FTP daemon), is an <a href="http://www.hackthesec.co.in/search/label/ftp">FTP</a> server for Unix-like systems, including Linux. It is licensed under the GNU General Public License. It supports IPv6 and SSL. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4DuFEKA7uUfUyq3NjeiqEJRsKfjRKEhgoqMczS8lnDImAetVPJDFKrFZBqXmvnIqSTcGW1Eu_1ZXgnxBItoUatI4cACW4RhWhC5mF0e7AkpqaFjbQx4-a7q59cZLWqYOc4HzZXW68ubfU/s1600/vsftpd_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4DuFEKA7uUfUyq3NjeiqEJRsKfjRKEhgoqMczS8lnDImAetVPJDFKrFZBqXmvnIqSTcGW1Eu_1ZXgnxBItoUatI4cACW4RhWhC5mF0e7AkpqaFjbQx4-a7q59cZLWqYOc4HzZXW68ubfU/s1600/vsftpd_hackthesec.co.in.png" /></a></div>
 
vsftpd supports explicit (since 2.0.0) and implicit (since 2.1.0) FTPS. 
 
vsftpd is the default FTP server in the Ubuntu, CentOS, Fedora, NimbleX, Slackware and RHEL Linux distributions. 
INSTALL VSFTPD 
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
Debian <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># apt-get install vsftpd</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
RedHat <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># yum -y install vsftpd</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Arch Linux <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># pacman -S vsftpd</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
FreeBSD <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># pkg install vsftpd</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
FreeBSD to enable vsftpd you would enter: <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># vim /etc/rc.conf</div>
Add line below to enable and start vsftpd during startup: 
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">vsftpd_enable="YES"</pre>
Start vsftpd: 
<div style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
<span class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;">$ sudo /usr/local/etc/rc.d/vsftpd start</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Some settings in FreeBSD vsftpd.conf are a little different. I'll create a article specifically for FreeBSD vsftpd.</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
Gentoo <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># emerge vsftpd</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Adding and starting Gentoo vsftpd at startup:</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
OpenRC <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># rc-update add vsftpd default # /etc/init.d/vsftpd start</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
systemd <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># systemctl enable vsftpd # systemctl start vsftpd</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
Add user to login to the vsftpd server <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># adduser ftpuser</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Change password: <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># passwd ftpuser</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Create a folder for the user we just created in the root or your web server: <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># mkdir /var/www/html/ftpuser</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Add rights to the directory for the user: <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># chmod -R ftpuser:ftpuser /var/www/html/ftpuser</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Add the following in: <span class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># vim /etc/vsftpd.conf</div>
Add the following lines: 
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">listen=YES
anonymous_enable=NO
local_enable=YES
virtual_use_local_privs=YES
write_enable=YES
connect_from_port_20=YES
secure_chroot_dir=/var/run/vsftpd
pam_service_name=vsftpd
guest_enable=YES
ftp_username=www-data
chmod_enable=YES
chown_uploads=YES
chown_username=www-data
guest_username=www-data
force_dot_files=YES
pasv_enable=YES
pasv_promiscuous=YES
pasv_min_port=1024
pasv_max_port=65535
syslog_enable=YES
max_clients=10
max_per_ip=10
port_promiscuous=YES
port_enable=YES
listen_port=21
ftp_data_port=20
user_sub_token=$USER
hide_ids=YES
user_config_dir=/etc/vsftpd
chroot_local_user=YES
allow_writeable_chroot=YES
seccomp_sandbox=NO</pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">SSL lines
ssl_enable=YES
rsa_cert_file=/etc/ssl/linuxsecrets-bundle.crt
rsa_private_key_file=/etc/ssl/linuxsecrets_com.key
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO
require_ssl_reuse=NO
ssl_ciphers=HIGH</pre>
Save the file if using vi or vim hit : then x. 
Change Default vsftpd Port 
 
If you like you can change the vsftpd default ports to non-standard to listen on 1234 
<div class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin-bottom: 5px; margin-top: 5px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;">
# vim /etc/vsftpd.conf</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Set this to NO:</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">connect_from_port_20=NO
ftp_data_port=1233
listen_port=1234</pre>
Custom vsftpd Logs 
<div class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin-bottom: 5px; margin-top: 5px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;">
# vim /etc/vsftpd.conf</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Default log – enable and change for custom location/name</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">xferlog_file=/var/log/vsftpd.log</pre>
Make sure you disable syslog_enable=NO 
 
This will show all files moving through the webserver, but if you want to view all the activity, including connections and commands you need to add: 
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">log_ftp_protocol=YES</pre>
</div>
After making changes to the ports you need to restart the service 
<div style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
<span class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># service vsftpd restart</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Verify port:</div>
<div style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
<span class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># netstat -nuptl | grep ftp</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Output:</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">tcp 0 0 0.0.0.0:1234 0.0.0.0:* LISTEN 4136/vsftpd</pre>
<div style="background-color: white; margin-bottom: 20px;">
Options Defined Bellow:-</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">listen - vsftpd itself will take care of listening and handling incoming connections. Default setting is NO.
anonymous_enable - Allow anonymous FTP? (Beware - allowed by default if you comment this out). Set this to NO
local_enable - Controls whether local logins are permitted or not. If enabled, normal user accounts in /etc/passwd (or wherever your PAM config references) may be used to log in.
virtual_use_local_privs - If enabled, virtual users will use the same privileges as local users. By default, virtual users will use the same privileges as anonymous users, which tends to be more restrictive (especially in terms of write access).
write_enable - This controls whether any FTP commands which change the filesystem are allowed or not. These commands are: STOR, DELE, RNFR, RNTO, MKD, RMD, APPE and SITE.
connect_from_port_20 - This controls whether PORT style data connections use port 20 (ftp-data) on the server machine. 
secure_chroot_dir - This option should be the name of a directory which is empty. Also, the directory should not be writable by the ftp user. This directory is used as a secure chroot() jail at times vsftpd does not require filesystem access.
pam_service_name - PAM (pluggable authentication modules). A virtual user is a user login which does not exist as a real login on the system in /etc/passwd and /etc/shadow file.
guest_enable - If enabled, all non-anonymous logins are classed as "guest" logins. A guest login is remapped to the user specified in the guest_username setting.
ftp_username - This is the name of the user we use for handling anonymous FTP. The home directory of this user is the root of the anonymous FTP area. Default is ftp.
chmod_enable - When enabled, allows use of the SITE CHMOD command. NOTE! This only applies to local users. Anonymous users never get to use SITE CHMOD.
chown_uploads - If enabled, all anonymously uploaded files will have the ownership changed to the user specified in the setting chown_username. This is useful from an administrative, and perhaps security, standpoint.
chown_username - This is the name of the user who is given ownership of anonymously uploaded files. This option is only relevant if another option, chown_uploads, is set.
guest_username - See the boolean setting guest_enable for a description of what constitutes a guest login. This setting is the real username which guest users are mapped to.
force_dot_files - If activated, files and directories starting with . will be shown in directory listings even if the "a" flag was not used by the client. This override excludes the "." and ".." entries.
pasv_enable - Set to NO if you want to disallow the PASV method of obtaining a data connection.
pasv_promiscuous - Set to YES if you want to disable the PASV security check that ensures the data connection originates from the same IP address as the control connection. Only enable if you know what you are doing! The only legitimate use for this is in some form of secure tunnelling scheme, or perhaps to facilitate FXP support.
pasv_min_port - The minimum port to allocate for PASV style data connections. Can be used to specify a narrow port range to assist firewalling.
pasv_max_port - The maximum port to allocate for PASV style data connections. Can be used to specify a narrow port range to assist firewalling.
syslog_enable - If enabled, then any log output which would have gone to /var/log/vsftpd.log goes to the system log instead. Logging is done under the FTPD facility.
max_clients - If vsftpd is in standalone mode, this is the maximum number of clients which may be connected. Any additional clients connecting will get an error message.
max_per_ip - If vsftpd is in standalone mode, this is the maximum number of clients which may be connected from the same source internet address. A client will get an error message if they go over this limit.
port_promiscuous - Set to YES if you want to disable the PORT security check that ensures that outgoing data connections can only connect to the client. Only enable if you know what you are doing!
port_enable - Set to NO if you want to disallow the PORT method of obtaining a data connection.
listen_port - If vsftpd is in standalone mode, this is the port it will listen on for incoming FTP connections.
ftp_data_port - The port from which PORT style connections originate (as long as the poorly named connect_from_port_20 is enabled).
user_sub_token - This option is useful is conjunction with virtual users. It is used to automatically generate a home directory for each virtual user, based on a template. For example, if the home directory of the real user specified via guest_username is /home/virtual/$USER, and user_sub_token is set to $USER, then when virtual user fred logs in, he will end up (usually chroot()'ed) in the directory /home/virtual/fred. This option also takes affect if local_root contains user_sub_token.
hide_ids - If enabled, all user and group information in directory listings will be displayed as "ftp".
user_config_dir - This powerful option allows the override of any config option specified in the manual page, on a per-user basis. Usage is simple, and is best illustrated with an example. If you set user_config_dir to be /etc/vsftpd_user_conf and then log on as the user "chris", then vsftpd will apply the settings in the file /etc/vsftpd_user_conf/chris for the duration of the session. The format of this file is as detailed in this manual page! PLEASE NOTE that not all settings are effective on a per-user basis. For example, many settings only prior to the user's session being started. Examples of settings which will not affect any behviour on a per-user basis include listen_address, banner_file, max_per_ip, max_clients, xferlog_file, etc.
chroot_local_user - If set to YES, local users will be (by default) placed in a chroot() jail in their home directory after login. Warning: This option has security implications, especially if the users have upload permission, or shell access. Only enable if you know what you are doing. Note that these security implications are not vsftpd specific. They apply to all FTP daemons which offer to put local users in chroot() jails.
allow_writeable_chroot - Writeable enabled to specificed location by setting to = YES
seccomp_sandbox - is a computer security facility that provides an application sandboxing mechanism in the Linux kernel. Setting to NO resolves some errors. </pre>
<div style="background-color: white; margin-bottom: 20px;">
SSL Lines Defined Bellow:-</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">sl_enable - Enables SSL support
rsa_cert_file - Specify localtion of you webserver crt like: /etc/ssl/bundle.crt
rsa_private_key_file - Specify location to /etc/ssl/linuxsecrets.key from webserver.
allow_anon_ssl - Disallow anaymous logins set to NO
force_local_data_ssl - Only applies if ssl_enable is activated. If activated, all non-anonymous logins are forced to use a secure SSL connection in order to send and receive data on data connections.
force_local_logins_ssl - Only applies if ssl_enable is activated. If activated, all non-anonymous logins are forced to use a secure SSL connection in order to send the password.
ssl_tlsv1 - Only applies if ssl_enable is activated. If enabled, this option will permit TLS v1 protocol connections. TLS v1 connections are preferred.
ssl_sslv2 - Only applies if ssl_enable is activated. If enabled, this option will permit SSL v2 protocol connections. TLS v1 connections are preferred.
ssl_sslv3 - Only applies if ssl_enable is activated. If enabled, this option will permit SSL v3 protocol connections. TLS v1 connections are preferred.
require_ssl_reuse - If set to yes, all SSL data connections are required to exhibit SSL session reuse (which proves that they know the same master secret as the control channel). Although this is a secure default, it may break many FTP clients, so you may want to disable it.
ssl_ciphers - This option can be used to select which SSL ciphers vsftpd will allow for encrypted SSL connections. See the ciphers man page for further details. Note: that restricting ciphers can be a useful security precaution as it prevents malicious remote parties forcing a cipher which they have found problems with. </pre>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
Start the vsftpd service<span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># service vsftpd start</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Verify you have the correct port or custom port assigned and working. <span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># netstat -nuptl | grep ftp</div>
<div style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Output:</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 4136/vsftpd</pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></pre>
</div>

Configure vsftpd SSL/TLS and Jail for Any User Writing as www-data to Web Server

Configure vsftpd SSL/TLS and Jail for Any User Writing as www-data to Web Server vsftpd , (or very secure FTP daemon), is an FTP server ...

How To Install Zabbix Agent on Ubuntu 14.04 LTS and Debian 8/7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="title single-title title20" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Install Zabbix Agent on Ubuntu and Debian</h1>
<div>
<div>
Zabbix Agent is required to install on all remote systems needs to monitor through Zabbix server. The Zabbix Agent collects resource utilization and applications data on client system and provide such information to Zabbix server on their requests.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPBpFz6mi7Ph9T-ueEs9p7NJkHEVe-fhHr-f4Gdjj_XAx6wjdYJvvZIpV6Ujxm0PgfAcy9N4yUxGjqiMlg5wKSIgrzf7zNb0YAO6hZwld-f95HNK0CYuqSS4tktoLrTEtELndvlCAByzxg/s1600/Zabbix_agent_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPBpFz6mi7Ph9T-ueEs9p7NJkHEVe-fhHr-f4Gdjj_XAx6wjdYJvvZIpV6Ujxm0PgfAcy9N4yUxGjqiMlg5wKSIgrzf7zNb0YAO6hZwld-f95HNK0CYuqSS4tktoLrTEtELndvlCAByzxg/s1600/Zabbix_agent_hackthesec.co.in.png" /></a></div>
<div>
There are two types of checks can be configured between Zabbix Server and Client.</div>
<div>
<a href="http://www.hackthesec.co.in/2016/05/how-to-install-zabbix-server-30-on-ubuntu-and-debian.html" itemprop="url" style="background-color: white; display: block; font-family: 'Open Sans', serif, sans-serif; font-size: 18.6px; font-weight: 600; text-decoration: none;"></a><ul style="font-size: 18.6px; text-align: left;"><a href="http://www.hackthesec.co.in/2016/05/how-to-install-zabbix-server-30-on-ubuntu-and-debian.html" itemprop="url" style="background-color: white; display: block; font-family: 'Open Sans', serif, sans-serif; font-size: 18.6px; font-weight: 600; text-decoration: none;"></a>
<li><a href="http://www.hackthesec.co.in/2016/05/how-to-install-zabbix-server-30-on-ubuntu-and-debian.html" itemprop="url" style="background-color: white; display: block; font-family: 'Open Sans', serif, sans-serif; font-size: 18.6px; font-weight: 600; text-decoration: none;"></a><a href="http://www.hackthesec.co.in/2016/05/how-to-install-zabbix-server-30-on-ubuntu-and-debian.html" itemprop="url" style="display: inline !important; font-size: 18.6px; text-decoration: none;">How to Install Zabbix Server 3.0 on Ubuntu 14.04 LTS and Debian 8/7</a></li>
<li style="color: #333333;"><a href="http://www.hackthesec.co.in/2016/04/how-to-install-zabbix-30-monitoring.html" style="color: #999999; text-decoration: none;">How to install Zabbix 3.0 (Monitoring Server) on CentOS 7.x / RHEL 7.x</a></li>
</ul>
</div>
<div>
Passive Check : Zabbix Agent only sent data to server on their request.</div>
<div>
Active Check : Zabbix Agent sends data periodically to Server.</div>
</div>
<div>
Install Zabbix Agent</div>
<div>
Add Apt Repository</div>
<div>
Zabbix apt repositories are available on zabbix official website. Add repository to install required packages for zabbix agent using following command. Ubuntu 12.04 LTS have zabbix agent version 2.2.</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><orange>For Ubuntu 14.04 LTS:</orange>

$ wget http://repo.zabbix.com/zabbix/3.0/ubuntu/pool/main/z/zabbix-release/zabbix-release_3.0-1+trusty_all.deb
$ sudo dpkg -i zabbix-release_3.0-1+trusty_all.deb
$ sudo apt-get update

<orange style="color: orange;">For Ubuntu 12.04 LTS:</orange>

$ wget http://repo.zabbix.com/zabbix/2.2/ubuntu/pool/main/z/zabbix-release/zabbix-release_2.2-1+precise_all.deb
$ sudo dpkg -i zabbix-release_2.2-1+precise_all.deb
$ sudo apt-get update

<orange style="color: orange;">For Debian 8:</orange>

$ wget http://repo.zabbix.com/zabbix/3.0/debian/pool/main/z/zabbix-release/zabbix-release_3.0-1+jessie_all.deb
$ sudo dpkg -i zabbix-release_3.0-1+jessie_all.deb
$ sudo apt-get update

<orange style="color: orange;">For Debian 7:</orange>

$ http://repo.zabbix.com/zabbix/3.0/debian/pool/main/z/zabbix-release/zabbix-release_3.0-1+wheezy_all.deb
$ sudo dpkg -i zabbix-release_3.0-1+wheezy_all.deb
$ sudo apt-get update</pre>
</div>
<div>
<div style="font-size: 15px;">
Install Zabbix Agent</div>
<div style="font-size: 15px;">
As we have successfully added zabbix apt repositories in our system let's use following command to install Zabbix agent using following command</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">$ sudo apt-get install <orange style="color: orange;">zabbix-agent</orange></pre>
</div>
</div>
<div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Edit Zabbix Agent Configuration</div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
After installing completed of Zabbix aget. Edit zabbix agent configuration file /etc/zabbix/zabbix_agentd.conf and update Zabbix server ip</div>
<div>
<pre style="background-color: whitesmoke; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">#Server=[zabbix server ip]
#Hostname=[Hostname of client system ]

Server=192.168.2.11
Hostname=zabbizagentserver</pre>
</div>
</div>
<div>
<div style="color: #333333; font-size: 15px;">
Restarting Zabbix Agent</div>
<div style="color: #333333; font-size: 15px;">
After adding zabbix server ip in configuration file, now restart agent service using below command.</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># /etc/init.d/zabbix-agent restart</pre>
</div>
</div>
<div>
To start and stop zabbix-agent service anytime use following commands.</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># /etc/init.d/zabbix-agent start
# /etc/init.d/zabbix-agent stop</pre>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></pre>
</div>
</div>