Hack The Sec-Leading Resource Of Linux Tutorial: centos6

How to install squid proxy on centos

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 style="clear: both; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 30px; height: auto; line-height: 31px; margin: 0px; padding: 0px; width: 614px;">
<u><span style="color: #990000;">Install squid proxy on centos</span></u></h1>
<div>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Squid is a caching and forwarding web proxy. It has a wide variety of uses, from speeding up a web server by caching repeated requests; to caching web, <a href="http://www.hackthesec.co.in/search/label/DNS">DNS</a> and other computer network lookups for a group of people sharing network resources; to aiding security by filtering traffic. Although primarily used for HTTP and <a href="http://www.hackthesec.co.in/search/label/ftp">FTP</a>, Squid includes limited support for several other protocols including TLS, SSL, Internet Gopher and HTTPS</span></span><span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtuLbkofJ_zaadojyg-kg2TTym3Z1SblRiTiwNCaRRxvNfwE7UGzMyriv33EkqCKKK-PNDNIrXMTxl633f8uUdiToe_67H4UK77mB5VOLK7hTbxGaSICl3pNA6navN1-2mqAmMYhmcMrOT/s1600/squid_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtuLbkofJ_zaadojyg-kg2TTym3Z1SblRiTiwNCaRRxvNfwE7UGzMyriv33EkqCKKK-PNDNIrXMTxl633f8uUdiToe_67H4UK77mB5VOLK7hTbxGaSICl3pNA6navN1-2mqAmMYhmcMrOT/s1600/squid_www.hackthesec.co.in.png" /></a></div>
<div>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"><br /></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Update yum repositories and packages by typing the below command</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# yum update</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 1:- Install squid package and dependencies using the below command</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# yum install squid</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">By default squid configuration file "<b>/etc/squid/squid.conf</b>" will contains recommended minimum configuration  and squid caching feature will work without making any changes . Recommended minimum configuration will looks like the below</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">#
# Recommended minimum configuration:
#
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
acl localnet src 10.0.0.0/8     # RFC1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src fc00::/7       # RFC 4193 local private network range
acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines

acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT

#
# Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager

# Deny requests to certain unsafe ports
http_access deny !Safe_ports

# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports

# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost

#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#
# Example rule allowing access from your local networks.
# Adapt localnet in the ACL section to list your (internal) IP networks
# from where browsing should be allowed
http_access allow localnet
http_access allow localhost

# And finally deny all other access to this proxy
http_access deny all

# Squid normally listens to port 3128
http_port 3128

# We recommend you to use at least the following line.
hierarchy_stoplist cgi-bin ?

# Uncomment and adjust the following to add a disk cache directory.
#cache_dir ufs /var/spool/squid 100 16 256

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|?) 0     0%      0
refresh_pattern .               0       20%     4320</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Now start squid service</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# service squid start</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and type this below command to start squid service automatically while booting.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# chkconfig --levels 235 squid on</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 3:- Setup your web browser to access Internet through proxy server on port 3128</span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">
<div>
<br /></div>
<div>
IE : Tools » Internet options »Connections » LAN settings » Choose "Use a proxy server for your LAN" » Type your Proxy server ip (192.168.1.11 ) and port no 3128</div>
<div>
<br /></div>
<div>
Firefox : Options / Preferences » Advanced » Network » Settings » Choose "Manual proxy configuration " » Type your Proxy server ip (192.168.1.11 ) and port no 3128</div>
<div>
<br /></div>
<div>
Step 4:- Browse some sites and check the access log file on proxy server</div>
</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">[root@hackthesec ~]# cat /var/log/squid/access.log
1343759484.645    265 192.168.1.15 TCP_MISS/304 477 GET http://platform.twitter.com/widgets.js - DIRECT/23.64.79.144 application/javascript
1343759484.681    309 192.168.1.15 TCP_MISS/304 839 GET http://apis.google.com/js/plusone.js - DIRECT/173.194.36.36 -
1343759485.005    178 192.168.1.15 TCP_MISS/200 495 GET http://www.google-analytics.com/__utm.gif? - DIRECT/74.125.236.142 image/gif
1343759502.763  20292 192.168.1.15 TCP_MISS/200 1898 CONNECT s-static.ak.facebook.com:443 - DIRECT/23.64.66.110 -
1343759502.765  20292 192.168.1.15 TCP_MISS/200 1898 CONNECT s-static.ak.facebook.com:443 - DIRECT/23.64.66.110 -
1343759723.040 240567 192.168.1.15 TCP_MISS/200 2904 CONNECT plusone.google.com:443 - DIRECT/173.194.36.41 -
1343759934.518    459 192.168.1.15 TCP_MISS/200 495 GET http://www.google-analytics.com/__utm.gif? - DIRECT/173.194.36.8 image/gif
1343759943.131   2186 192.168.1.15 TCP_MISS/200 8343 CONNECT www.facebook.com:443 - DIRECT/66.220.146.94 -
1343759943.266  10616 192.168.1.15 TCP_MISS/200 2790 CONNECT apis.google.com:443 - DIRECT/74.125.236.128 -
1343759943.267  10615 192.168.1.15 TCP_MISS/200 2228 CONNECT ssl.gstatic.com:443 - DIRECT/74.125.236.143 -
1343759950.875   2596 192.168.1.15 TCP_MISS/200 32219 CONNECT www.facebook.com:443 - DIRECT/66.220.146.94 -
1343759961.388  20443 192.168.1.15 TCP_MISS/200 1911 CONNECT s-static.ak.fbcdn.net:443 - DIRECT/23.64.77.177 -</pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Troubleshooting :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
If you not able to browse using proxy settings , Disable the firewall ( iptables ) and selinux service on your squid proxy server .</div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b>Disable firewall ( Iptables ) :-</b></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# service iptables stop
[root@hackthesec ~]# chkconfig iptables off</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white;"></span><br />
<div>
<span style="background-color: white;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Disable Selinux :- open the file /etc/selinux/config and find the line</span></span></span></div>
<span style="background-color: white;">
</span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">SELINUX=enforcing</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and replace with</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">SELINUX=disabled</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">now reboot the server and try step 4.</span></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><span style="color: #0b5394;"><u>Configure squid proxy as web filter:</u></span></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
You can restrict user access to particular websites or keywords using access control lists (ACLs) .</div>
<div>
<b><span style="color: #0b5394;"><u>Restricting Access to specific web sites :</u></span></b></div>
<div style="color: #333333;">
For example , we can see how to block facebook.com and gmail.com .</div>
<div style="color: #333333;">
Step 1:- create a file ( <b>/etc/squid/blockedsites.squid</b> ) and add the site names one per line.</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# cat /etc/squid/blockedsites.squid
#blocked sites
www.facebook.com
www.gmail.com</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Open the /etc/squid/squid.conf and create a new acl " blocksites" and acl type "dstdomain" in the acl section like the below .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
# ACL blocksites 
acl blocksites dstdomain "/etc/squid/blockedsites.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the following line "<b>http_access deny blocksites</b>" to http_section to deny the access to the acl "<b>blocksites</b>" .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blocksites ACL
http_access deny blocksites</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 3:- Now restart squid service</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# service squid restart</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 4:- Try to access facebook.com in your browser . you could see the blocked page as below .</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitsQRp6xcr5AmcJgrWIHEyVE274ObQfkcEWpNTBGqT_25fkxX_ryBbASwHU-G3Iwsye8ZiK2CDfkIEo6AU3h-ZmCZtF4of10Dt34mqj-ryTojXljt7XEsIrjcl-LADcICkQ61A8Yl4cXKE/s1600/squid_proxy_server_block_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitsQRp6xcr5AmcJgrWIHEyVE274ObQfkcEWpNTBGqT_25fkxX_ryBbASwHU-G3Iwsye8ZiK2CDfkIEo6AU3h-ZmCZtF4of10Dt34mqj-ryTojXljt7XEsIrjcl-LADcICkQ61A8Yl4cXKE/s1600/squid_proxy_server_block_www.hackthesec.co.in.jpg" /></a></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><br /></span></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and check the log file you can see the facebook request is denied .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"> [root@hackthesec ~]# tail -f /var/log/squid/access.log
.................................................................................
1343820985.542      1 192.168.1.15 TCP_DENIED/403 4255 GET http://www.facebook.com/ - NONE/- text/html
1343820986.998   1411 192.168.1.15 TCP_MISS/200 13152 GET http://www.squid-cache.org/Artwork/SN.png - DIRECT/198.186.193.234 image/png
1343820987.004      0 192.168.1.15 TCP_DENIED/403 4178 GET http://www.facebook.com/favicon.ico - NONE/- text/html</pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Restricting Access to specific keywords :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Step 1:- create a file (<b> /etc/squid/blockkeywords.squid</b> ) and add the keywords one per line.</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# cat /etc/squid/blockkeywords.squid
#blocked keywords
sex
porn
xxx</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Open the <b>/etc/squid/squid.conf</b> and create a new acl "blockkeywords" and acl type "url_regex" in the acl section</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
# ACL blocksites 
acl blocksites dstdomain "/etc/squid/blockedsites.squid"
# ACL blockkeywords
acl blockkeywords url_regex -i "/etc/squid/blockkeywords.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the following line "http_access deny blockkeywords" to http_section to deny the access to the acl "<b>blockkeywords</b>" .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blocksites ACL
http_access deny blocksites
# Deny access to blockkeywords ACL
http_access deny blockkeywords</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><span style="color: #0b5394;"><u>Restricting Access to specific Ipaddress :</u></span></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
Step 1:- create a file ( /etc/squid/blockip.squid ) and add the ip adresses one per line.</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# cat /etc/squid/blockip.squid
#blocked ips
192.168.1.20
192.168.1.21</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Open the /etc/squid/squid.conf and create a new acl "blockip" and acl type "src" in the acl section</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
# ACL blocksites 
acl blocksites dstdomain "/etc/squid/blockedsites.squid"
# ACL blockkeywords
acl blockkeywords url_regex -i "/etc/squid/blockkeywords.squid"
# ACL blockip
acl blockip src "/etc/squid/blockip.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the following line "http_access deny blockip" to http_section to deny the access to the acl "blockip" .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blockip ACL
http_access deny blockip
# Deny access to blocksites ACL
http_access deny blocksites
# Deny access to blockkeywords ACL
http_access deny blockkeywords</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><u><span style="color: #0b5394;">Allow Full access to specific Ipaddress :</span></u></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
You can allow specific ip address to gain full access without blocking sites and keywords . just create a file "/etc/squid/allowip.squid" and add the ip address one per line and create an acl "allowip"  and acl type "src" in the acl section</div>
</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># ACL allowip
acl allowip src "/etc/squid/allowip.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the "allowip" in the http_access as below</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blockip ACL
http_access deny blockip
# Deny access to blocksites ACL
http_access deny blocksites !allowip
# Deny access to blockkeywords ACL
http_access deny blockkeywords !allowip</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><u><span style="color: #0b5394;">Changing squid proxy port number:</span></u></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
You can change squid proxy port number , by default it uses 3128 port .</div>
<div style="color: #333333;">
Just find the below line in "/etc/squid/squid.conf"</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">http_port 3128</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and replace with</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">http_port 8000 # whatever port number you want</span></span></pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Restricting Download size :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
You can restrict download file size  using reply_body_max_size .</div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Add the below line at the bottom of the http_access section</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">#Restrict download size
reply_body_max_size 10 MB all</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">or</span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">#Restrict download size
reply_body_max_size 10 MB !allowip</span></span></pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Configuring Squid as Transparent Proxy :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
You can configure squid as transparent proxy .</div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Step 1:- just find the below line</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># Squid normally listens to port 3128
http_port 3128</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and replace with</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># Squid normally listens to port 3128
http_port 3128 intercept</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Create a file "/root/squidfw.sh" and add the following firewall script ( modify as per your interface configuration ).</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">#!/bin/sh
# squid server IP
SQUID_SERVER="192.168.1.11"
# Interface connected to Internet
INTERNET="eth0"
# Interface connected to LAN
LAN_IN="eth1"
# Squid port
SQUID_PORT="3128"
# DO NOT MODIFY BELOW
# Clean old firewall
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
# Load IPTABLES modules for NAT and IP conntrack support
modprobe ip_conntrack
modprobe ip_conntrack_ftp
# For win xp ftp client
#modprobe ip_nat_ftp
echo 1 > /proc/sys/net/ipv4/ip_forward
# Setting default filter policy
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
# Unlimited access to loop back
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
# Allow UDP, DNS and Passive FTP
iptables -A INPUT -i $INTERNET -m state --state ESTABLISHED,RELATED -j ACCEPT
# set this system as a router for Rest of LAN
iptables --table nat --append POSTROUTING --out-interface $INTERNET -j MASQUERADE
iptables --append FORWARD --in-interface $LAN_IN -j ACCEPT
# unlimited access to LAN
iptables -A INPUT -i $LAN_IN -j ACCEPT
iptables -A OUTPUT -o $LAN_IN -j ACCEPT
# DNAT port 80 request comming from LAN systems to squid 3128 ($SQUID_PORT) aka transparent proxy
iptables -t nat -A PREROUTING -i $LAN_IN -p tcp --dport 80 -j DNAT --to $SQUID_SERVER:$SQUID_PORT
# if it is same system
iptables -t nat -A PREROUTING -i $INTERNET -p tcp --dport 80 -j REDIRECT --to-port $SQUID_PORT
# DROP everything and Log it
iptables -A INPUT -j LOG
iptables -A INPUT -j DROP</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 3:- just run the script</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# sh /root/squidfw.sh</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the below line to "/etc/rc.local" to run the script during startup</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">sh /root/squidfw.sh</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 4 (Updated):- Change default gateway ip to squid server ip on the user machines </span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">
<div>
Now users can access Internet without setting proxy in the browser settings.</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></span></pre>
</div>
</div>

How to install squid proxy on centos

Install squid proxy on centos Squid is a caching and forwarding web proxy. It has a wide variety of uses, from speeding up a web server ...

How to install and configure rsnapshot on RHEL/Centos 6/7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="background-color: white; border: 0px; font-family: 'Open Sans'; font-size: 24px; line-height: 30px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<u><span style="color: #990000;">Install and configure rsnapshot on RHEL/Centos 6/7</span></u></h2>
<div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">This tutorial will describe how to set up and use <b>rsnapshot</b>, a remote backup solution based on rsync. Rsnapshot leverages the power of <a href="http://www.hackthesec.co.in/search/label/rsync">rsync </a>to create scheduled, <a href="http://www.hackthesec.co.in/search/label/backup_scripting">incremental backups</a>.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWfsEhOQkTxLGP5TwWgjpX1PaZxwMFo8N3RjRTzvxoWizg5eM5IgLqOB-v1CyRZbY7np70uK0ZkpFC-RseMrGOugIYBWGOv2-H06ocpFnaqBb3Itz1pJcTneFlRhBNqBAm0PBrmMqRAtU1/s1600/How+To+Install+Rsnapshot_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWfsEhOQkTxLGP5TwWgjpX1PaZxwMFo8N3RjRTzvxoWizg5eM5IgLqOB-v1CyRZbY7np70uK0ZkpFC-RseMrGOugIYBWGOv2-H06ocpFnaqBb3Itz1pJcTneFlRhBNqBAm0PBrmMqRAtU1/s1600/How+To+Install+Rsnapshot_www.hackthesec.co.in.jpg" /></a></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">This procedure will demonstrate how to create local backups, as well as how to use another cloud server or your home computer as backup space. To complete the procedures in this tutorial, you will need to be logged in as root or preface all commands with "sudo".</span></span></div>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">To install rsnapshot through yum we need to install and enable third-party repository called <a href="http://www.hackthesec.co.in/search/label/EPEL">EPEL</a>.</span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>RHEL/CentOS 7 64 Bit</u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># wget http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm</span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># rpm -ivh epel-release-7-5.noarch.rpm</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>RHEL/CentOS 6 32 bit</u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># wget http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm</span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># rpm -ivh epel-release-6-8.noarch.rpm</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>RHEL/CentOS 6 64-Bit</u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># wget http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm</span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># rpm -ivh epel-release-6-8.noarch.rpm</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">After installation EPEL Repository use the following yum command to install rsnapshot.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># yum install rsnapshot</span></span></pre>
</div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Configuring Rsnapshot</u></b></span></span></div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now open <b>rsnapshot.conf</b> file with vi or nano editor.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># vi /etc/rsnapshot.conf</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Next create a backup directory, where you want to store backup of your important data. In my case I will create my backup directory called <b>"/home/backup/"</b>. Search following line in <b>/etc/rsnapshot.conf</b> and add following parameter to set where you want to store all your important data as backup.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">snapshot_root                           /home/backup/</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Also uncomment the"<b>cmd_ssh</b>" line to allow to take remote backups over SSH.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">cmd_ssh                                  /usr/bin/ssh</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Next step is that, you need to decide how many old backups you would like to keep.This will take backup every six hours on a day but you can set your own schedule as per your requirements such as hourly, daily, weekly and monthly basis.</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><span style="color: #333333; font-family: Menlo, Monaco, Consolas, Courier New, monospace;"><span style="line-height: 18.5714px;">#           BACKUP INTERVALS            #

# Must be unique and in ascending order #

# i.e. hourly, daily, weekly, etc.      #

#########################################

interval        hourly  6

interval        daily   7

interval        weekly  4

interval        monthly 3</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Backup Local Directories</u></b></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">If you want backup your directories locally to the same machine then follow the steps.  If you want take a backup from windows client then first you need to mount directory in Linux machine.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">backup             /hackthesec/                    localhost/

backup             /etc/                           localhost/</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Backup Remote Directories</u></b></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">If you want to backup up remote server directories then you need to follow the easy steps. I am taking a backup of my remote server "/home" directory under "/home/backup" directory on rsnapshot server.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">backup        root@example.com:/home/             /home/backup/</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Verify Rsnapshot Configuration</u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium; line-height: 20.8px;"># rsnapshot configtest
# rsnapshot -t hourly</span><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px; white-space: normal;"><b><u>
</u></b></span></span></pre>
</div>
<div>
<span style="color: #333333;"><div style="font-family: verdana, geneva, sans-serif; font-size: 15px; font-weight: bold; line-height: 26px; text-decoration: underline;">
Automating the Process</div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Now i will show you how to schedule our backup process. In Linux we use cron jobs in order to schedule task. By default, rsnapshot comes with <a href="http://www.hackthesec.co.in/search/label/cron">cron </a>file under "/etc/cron.d/rsnapshot", if it’s doesn’t exists create one and add the following lines to it. If rules already exist then you need to remove the "#" from of the scheduling section to enable these values.</div>
<div>
<pre style="background-color: whitesmoke; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><span style="font-family: Menlo, Monaco, Consolas, Courier New, monospace;"><span style="font-size: 15px; line-height: 18.5714px;"># This is a sample cron file for rsnapshot.
# The values used correspond to the examples in /etc/rsnapshot.conf.
# There you can also set the backup points and many other things.
#
# To activate this cron file you have to uncomment the lines below.
# Feel free to adapt it to your needs.
0 */4 * * * root /usr/bin/rsnapshot hourly
 
30 3 * * * root /usr/bin/rsnapshot daily
 
0 3 * * 1 root /usr/bin/rsnapshot weekly
 
30 2 1 * * root /usr/bin/rsnapshot monthly</span></span></pre>
<pre style="background-color: whitesmoke; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></pre>
</div>
</span></div>
</div>

How to install and configure rsnapshot on RHEL/Centos 6/7

Install and configure rsnapshot on RHEL/Centos 6/7 This tutorial will describe how to set up and use rsnapshot , a remote backup soluti...

How to install ProjectSend on CentOS 6

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" style="background-color: white; box-sizing: border-box; font-family: Lato, sans-serif; line-height: 1.1; margin: 20px 0px 10px; text-align: center;">
<span style="color: #990000; font-size: large;"><u>Install ProjectSend on CentOS</u></span></h1>
<div>
<div style="background-color: white;">
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b>ProjectSend</b> is a self-hosted application that lets you upload files and assign them to specific clients that you create yourself! Secure, private and easy. No more depending on external services or e-mail to send those files!</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWhDS__nMR1yNkpjMOQQzmd-IJqEuxdLk-fgWZM9sCXQZea4dTXGj7mZJq-nnrTUJnsy-OPp9K5CYbGCWORdq9_rZBpRRCAzr1ZWtynBvg8hnG1aUXSiyBEt_hq-hwq_K_orc2tUPZbDoS/s1600/projectsend_logo_www.hackthesec.co.in.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWhDS__nMR1yNkpjMOQQzmd-IJqEuxdLk-fgWZM9sCXQZea4dTXGj7mZJq-nnrTUJnsy-OPp9K5CYbGCWORdq9_rZBpRRCAzr1ZWtynBvg8hnG1aUXSiyBEt_hq-hwq_K_orc2tUPZbDoS/s1600/projectsend_logo_www.hackthesec.co.in.gif" /></a></div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">ProjectSend is made in php and uses a <a href="http://www.hackthesec.co.in/search/label/Mysql">MySQL database</a> to store the information. Please see that your server has at least <a href="http://www.hackthesec.co.in/search/label/PHP">php</a> 5.2 and MySQL 5 or better to run the software. Apache 2 is recommended but PS should also work on IIS.</span></span></div>
<div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b><u><span style="color: #0b5394;">Installation instructions:</span></u></b></div>
<div style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Login to your server via <a href="http://www.hackthesec.co.in/search/label/SSH">SSH</a>:</div>
<div style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: black; line-height: normal; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: trebuchet ms, sans-serif;"><span style="line-height: 15.6px;">ssh root@server_ip</span></span></pre>
</div>
<div style="font-family: verdana, geneva, sans-serif;">
<span style="color: #222222;"><span style="font-size: 15px; line-height: 26px;">Update the OS packages and install necessary packages:</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;"><span style="color: white;">sudo yum -y upgrade
</span><span style="color: lime;">sudo yum install unzip wget</span></span></span></pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Download and extract the ProjectSend archive to a directory on your server:</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;"><span style="color: white;">wget https://github.com/ignacionelson/ProjectSend/archive/master.zip
unzip master.zip
</span><span style="color: lime;">mv ProjectSend-master /var/www/html/projectsend</span></span></span></pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Create a new MySQL database for ProjectSend on your server:</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">mysql -u root -p
mysql> CREATE DATABASE projectsenddb;
mysql> GRANT ALL PRIVILEGES ON projectsenddb.* TO 'projectsenduser'@'localhost' IDENTIFIED BY 'your-password' WITH GRANT OPTION;
mysql> FLUSH PRIVILEGES;
mysql> quit</pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Rename the '<b>sys.config.sample.php</b>' file to '<b>sys.config.php</b>':</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;"><span style="color: white;">cd /var/www/html/projectsend/includes
</span><span style="color: lime;">mv sys.config.sample.php sys.config.php</span></span></span></pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">Open the ProjectSend configuration file with your favorite text editor and change the MySQL database name, MySQL username and password with the ones you used at the time of the database creation:</span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: orange; font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">nano sys.config.php</span></span></pre>
</div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">/** MySQL database name */
define('DB_NAME', 'projectsenddb');

/** Database host (in most cases it's localhost) */
define('DB_HOST', 'localhost');

/** MySQL username (must be assigned to the database) */
define('DB_USER', 'projectsenduser');

/** MySQL password */
define('DB_PASSWORD', 'your-password');</pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Create a new virtual host directive in Apache. For example, edit your Apache configuration file (/etc/httpd/conf/httpd.conf by default) and uncomment the following line:</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">#NameVirtualHost *:80</pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Then, add the following lines at the end:</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><VirtualHost *:80>
ServerAdmin admin@yourdomain.com
DocumentRoot /var/www/html/projectsend/
ServerName yourdomain.com
ServerAlias www.yourdomain.com
<Directory /var/www/html/projectsend/>
 Options Indexes FollowSymLinks MultiViews
 AllowOverride All
 Order allow,deny
 allow from all
</Directory>
ErrorLog logs/yourdomain.com-error_log
CustomLog logs/yourdomain.com-access_log common
</VirtualHost></pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Restart the Apache web service for the changes to take effect.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;"><span style="color: white;">service </span><span style="color: cyan;">httpd restart</span></span></span></pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Open your favorite web browser, navigate to http://yourdomain.com/ and follow the easy instructions.You will be welcomed by the ProjectSend installation page like the one below:</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoP0g9A4Q9qy8TWxMeeog1xDbiyApP6p3SnWk7jeI9WXYGv2NVG9Z-KbIFqeKLTPuWBbQdEGc_1HbN0G8epsXilKdu2UUtgcIKdRTisznnySlJZuKaWRdQrYeXmFLObYAYy2XQ5QY4yjfn/s1600/projectsend_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoP0g9A4Q9qy8TWxMeeog1xDbiyApP6p3SnWk7jeI9WXYGv2NVG9Z-KbIFqeKLTPuWBbQdEGc_1HbN0G8epsXilKdu2UUtgcIKdRTisznnySlJZuKaWRdQrYeXmFLObYAYy2XQ5QY4yjfn/s1600/projectsend_www.hackthesec.co.in.png" /></a></div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Fill in the following details:</span></span></div>
<div style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">Sitename: It can be anything.(myproject.com)
ProjectSend URL: your domain name or IP address of the server.</pre>
</div>
<div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Then, enter your personal details and log in credentials: name, e-mail address, administrator username and password and click 'Install'.</span></span></div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">That is it. The ProjectSend installation is now complete. Now you can log in and create new users, create groups, upload files from the ProjectSend dashboard.</span></span></div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">For more information about ProjectSend, please refer to the <a href="http://www.projectsend.org/">ProjectSend </a>website.</span></span></div>
</div>
<div style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>
</div>
</div>
</div>

How to install ProjectSend on CentOS 6

Install ProjectSend on CentOS ProjectSend is a self-hosted application that lets you upload files and assign them to specific clients...

How to Install ProFTPD on CentOS 6

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" style="background-color: white; border: 0px; box-sizing: inherit; font-family: proxima-nova, sans-serif; line-height: 3.4rem; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="color: red; font-size: large;"><u>Install ProFTPD on CentOS 6</u></span></h1>
<div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<b style="color: #222222; font-size: 15px; line-height: 26px;">ProFTPD </b><span style="color: #222222; font-size: 15px; line-height: 26px;">(short for Pro FTP daemon) is an </span><a href="http://www.hackthesec.co.in/search/label/ftp" style="color: #999999; text-decoration: none;">FTP server</a><span style="color: #222222; font-size: 15px; line-height: 26px;">. ProFTPD is Free and open-source software, compatible with Unix-like systems and Microsoft Windows (via Cygwin). Along with </span><a href="http://www.hackthesec.co.in/search/label/vsftp" style="color: #999999; font-size: 15px; line-height: 26px; text-decoration: none;">vsftpd</a><span style="color: #222222; font-size: 15px; line-height: 26px;"> and Pure-FTPd, ProFTPD is among the most popular FTP servers in </span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px; text-align: center;">
<img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhr45fLBm5B3qr3E_CEJ5KuZUrSdFkVs80KSv10Df6qJ6nUOVi87vnMY5LJDD7YL9QuqqK26UAfgpgxrqSMKsHMQ-kx54qElbc6d-6Iwn75dk9isdDXrxkmkjMepG2ZgBtZ80wDXGTqTLCY/s1600/proftpd-www.hackthesec.co.in.png" style="border: 1px solid rgb(192, 192, 192); height: auto; max-width: 95%; padding: 4px;" /></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<span style="color: #222222; line-height: 19.2px;"><span style="font-size: 15px; line-height: 26px;">Unix-like environments today. Compared to those, which focus e.g. on simplicity, speed or security, ProFTPD's primary design goal is to be a highly feature rich FTP server, exposing a large amount of configuration options to the user</span></span><span style="color: #222222; font-size: 15px; line-height: 26px;">.</span></div>
</div>
<div style="background-color: white; font-family: Verdana, Geneva, sans-serif; line-height: 19.2px;">
<strong style="line-height: 19.2px;"><a class="titlex" href="http://www.hackthesec.co.in/2016/03/how-to-install-proftpd-on-centos-7.html" style="display: block; font-family: 'Open Sans', serif, sans-serif; font-stretch: normal; line-height: 1.4em; margin: 5px 0px 0px; max-height: 36px; overflow: hidden; text-decoration: none;"></a><ul style="text-align: left;"><a class="titlex" href="http://www.hackthesec.co.in/2016/03/how-to-install-proftpd-on-centos-7.html" style="display: block; font-family: 'Open Sans', serif, sans-serif; font-stretch: normal; line-height: 1.4em; margin: 5px 0px 0px; max-height: 36px; overflow: hidden; text-decoration: none;"></a>
<li><a class="titlex" href="http://www.hackthesec.co.in/2016/03/how-to-install-proftpd-on-centos-7.html" style="display: block; font-family: 'Open Sans', serif, sans-serif; font-stretch: normal; line-height: 1.4em; margin: 5px 0px 0px; max-height: 36px; overflow: hidden; text-decoration: none;"><strong style="font-family: Verdana, Geneva, sans-serif; line-height: 19.2px;"></strong></a><strong style="font-family: Verdana, Geneva, sans-serif; line-height: 19.2px;"><a class="titlex" href="http://www.hackthesec.co.in/2016/03/how-to-install-proftpd-on-centos-7.html" style="display: inline !important; font-family: 'Open Sans', serif, sans-serif; font-stretch: normal; line-height: 1.4em; margin: 5px 0px 0px; max-height: 36px; overflow: hidden; text-decoration: none;"><span style="color: red;">How to Install ProFTPD on CentOS 7</span></a></strong></li>
</ul>
</strong></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<span style="color: #222222; font-size: 15px; line-height: 26px;"><br /></span></div>
<div style="background-color: white;">
<div style="color: #333333; font-family: Verdana, Geneva, sans-serif; line-height: 26px;">
<b><u><span style="color: #0b5394;">Step 1: Add the EPEL Repository</span></u></b></div>
<div style="color: #222222; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px;">
ProFTPD is part of Extra Packages for Enterprise Linux (<a href="http://www.hackthesec.co.in/search/label/EPEL_Repo" style="color: #999999; text-decoration: none;">EPEL</a>), which is a community repository of non-standard packages for the <a href="http://www.hackthesec.co.in/search/label/EPEL" style="color: #999999; text-decoration: none;">RHEL</a> distribution. First, we’ll install the EPEL repository:</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Trebuchet MS, sans-serif;"><span style="line-height: 15.6px;">rpm -iUvh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm</span></span></pre>
</div>
</div>
<div style="background-color: white;">
<div style="color: #333333; font-family: Verdana, Geneva, sans-serif; line-height: 26px;">
<div>
<b><u><span style="color: #0b5394;">Step 2: Install ProFTPD</span></u></b></div>
<div style="color: #222222; font-size: 15px;">
As a matter of best practice we’ll update our packages:</div>
</div>
<div style="color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: 'Trebuchet MS', sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">yum -y update</span></span></pre>
</div>
<div style="color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<span style="color: #222222;"><span style="font-size: 15px; line-height: 26px;">Then let’s install ProFTPD and any required packages:</span></span></div>
<div style="color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: 'Trebuchet MS', sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">yum -y install proftpd</span></span></pre>
</div>
<div style="color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<div>
<span style="color: #0b5394;"><span style="font-size: 15px; line-height: 26px;"><b><u>Step 3: Configure ProFTPD</u></b></span></span></div>
<div>
<span style="color: #222222;"><span style="font-size: 15px; line-height: 26px;">Let’s edit the configuration file for ProFTPD:</span></span></div>
</div>
<div style="color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: 'Trebuchet MS', sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">vi /etc/proftpd.conf</span></span></pre>
</div>
<div style="color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<div>
<div style="color: #222222; font-size: 15px; line-height: 26px;">
Change the <b>ServerName to the hostname of your server</b>. In the case below, ftp.hackthesec.co.in is an example:</div>
<div style="color: #222222; font-size: 15px; line-height: 26px;">
<br /></div>
<div style="color: #222222; font-size: 15px; line-height: 26px;">
<b>ServerName </b>"ftp.hackthesec.co.in"</div>
</div>
<div>
<span style="color: #222222;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<span style="color: #222222;"><span style="font-size: 15px; line-height: 26px;">Exit and save the file with the command :wq .</span></span></div>
<div>
<span style="color: #222222;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<span style="color: #222222;"><span style="font-size: 15px; line-height: 26px;"><b><u>Restart the ProFTPD service:</u></b></span></span></div>
</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Trebuchet MS, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">service proftpd restart</span></span></pre>
</div>
<div style="color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<span style="color: #222222;"><span style="font-size: 15px; line-height: 26px;">Then set the ProFTPD service to start at boot:</span></span></div>
</div>
<div style="background-color: white;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Trebuchet MS, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">chkconfig proftpd on</span></span></pre>
</div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); line-height: 19.2px; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: red; font-family: 'Trebuchet MS', sans-serif;"><span style="font-size: 15px; line-height: 15.6px;"><a href="http://www.hackthesec.co.in/" style="color: #999999; text-decoration: none;">www.hackthesec.co.in</a>
<a href="http://facebook.com/htsecu" style="color: #999999; text-decoration: none;">HackTheSec Facebook</a>
<a href="https://www.twitter.com/Hackthesecurity" style="color: #999999; text-decoration: none;">HackTheSec Twitter</a>
<a href="http://feeds.hackthesec.co.in/hackthesec" style="color: #999999; text-decoration: none;">HackTheSec Feed</a></span></span></pre>
</div>
</div>

How to Install ProFTPD on CentOS 6

Install ProFTPD on CentOS 6 ProFTPD (short for Pro FTP daemon) is an FTP server . ProFTPD is Free and open-source software, compatibl...