Hack The Sec-Leading Resource Of Linux Tutorial

Install and Configure Caching-Only DNS Server in RHEL/CentOS 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #990000; font-size: x-large;">Install and Configure Caching-Only DNS Server in RHEL/CentOS 7</span><br />
<span style="background-color: white; font-family: Verdana, sans-serif; line-height: 28.8px;">DNS servers comes in several types such as master, slave, forwarding and cache, to name a few examples, with cache-only DNS being the one that is easier to setup. Since DNS uses the UDP protocol, it improves the query time because it does not require an acknowledgement.</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGmlA863bI-9bY9VrlFYVC-uB7nhDSRVe3oqRhIjT0ACX5k3aih65GwI1OegSFwsV_S82UZ8u84NNlNHPkgkfW_BTIbJ9xxAA2PCPELHRQNoIJwPBiCM7Jjj0SlsOzskdVbHOUOXHReufH/s1600/Setup-Cache-Only-DNS-in-CentOS-RHEL-7_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="306" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGmlA863bI-9bY9VrlFYVC-uB7nhDSRVe3oqRhIjT0ACX5k3aih65GwI1OegSFwsV_S82UZ8u84NNlNHPkgkfW_BTIbJ9xxAA2PCPELHRQNoIJwPBiCM7Jjj0SlsOzskdVbHOUOXHReufH/s640/Setup-Cache-Only-DNS-in-CentOS-RHEL-7_www.hackthesec.co.in.png" width="640" /></a></div>
<span style="background-color: white; font-family: "roboto condensed" , "arial" , sans-serif; font-size: 18px; line-height: 28.7999992370605px;"><br /></span>
<br />
<ul style="text-align: left;">
<li><span style="background-color: white; font-family: 'roboto condensed', arial, sans-serif; font-size: 18px; line-height: 28.8px;"><a href="http://www.hackthesec.co.in/2016/01/how-to-setup-dns-bind-server-on.html" target="_blank"><span style="color: red;">How to Setup DNS (Bind) Server on CentOS/RHEL 7/6/5</span></a></span></li>
</ul>
<span style="background-color: white; font-family: Verdana, sans-serif; line-height: 28.8px;">The cache-only DNS server is also known as resolver, which will query DNS records and fetch all the DNS details from other servers, and keep each query request in its cache for later use so that when we perform the same request in the future, it will serve from its cache, thus reducing the response time even more.</span><br />
<u><span style="font-family: Arial, Helvetica, sans-serif;"><span style="background-color: white; line-height: 28.8px;"><br /></span>
</span></u><br />
<div style="background-color: white; margin-bottom: 10px;">
<span style="color: #0b5394; font-family: Arial, Helvetica, sans-serif; font-size: small;"><span style="font-family: Arial, Helvetica, sans-serif; font-size: large; line-height: 18px;"><u>My Testing Environment</u></span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;">DNS server  : dns.hackthesec.co.in (Red Hat Enterprise Linux 7.1)
Server IP Address : 192.168.1.17
Client   : node1.</span></span><span style="color: white; font-size: 12px; line-height: 15.6000003814697px;">hackthesec.co.in</span><span style="color: white; font-size: 12px; line-height: 15.6000003814697px;"> (CentOS 7.1)</span>
<span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;">Client IP Address : 192.168.1.35</span></span></pre>
<div>
<div style="background-color: white; margin-bottom: 10px;">
<span style="color: #0b5394; font-family: "arial" , "helvetica" , sans-serif;"><span style="line-height: 18px;">Step 1: Installing Cache-Only DNS Server in RHEL/CentOS 7</span></span></div>
<div style="background-color: white; margin-bottom: 10px;">
<span style="line-height: 28.7999992370605px;"><span style="font-family: "arial" , "helvetica" , sans-serif;">1.The Cache-Only DNS server, can be installed via the bind package. If you don’t remember the package name, you can do a quick search for the package name using the command below.</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># yum search bind</span></span></pre>
<div>
<span style="color: white;"><span style="line-height: 15.6000003814697px;"><br /></span></span></div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">2.</span><span style="line-height: 28.7999992370605px;"> In the above result, you will see several packages. From those, we need to choose and install only</span><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">bind</span><span style="line-height: 28.7999992370605px;"> and </span><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">bind-utils</span><span style="line-height: 28.7999992370605px;"> packages using following yum command.</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># yum install bind bind-utils -y</span></span></pre>
<div>
<span style="color: white;"><span style="line-height: 15.6000003814697px;"><br /></span></span></div>
<div style="background-color: white; margin-bottom: 10px;">
<span style="color: #0b5394; font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 18px;">Step 2: Configure Cache-Only DNS in RHEL/CentOS 7</span></span></div>
<div style="background-color: white; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">3.</span><span style="line-height: 28.7999992370605px;"> Once DNS packages are installed we can go ahead and configure DNS. Open and edit</span></span></div>
<div style="background-color: white; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><code style="background: none 0px 0px repeat scroll rgb(246, 246, 248); border-radius: 3px; border: 1px solid rgb(158, 158, 159); font-stretch: inherit; font-weight: 600; line-height: 1.6; margin: 0px; max-width: 100%; overflow: auto; padding: 2px; vertical-align: baseline; white-space: pre;">/etc/named.conf</code><span style="line-height: 28.7999992370605px;"> using your preferred text editor. Make the changes suggested below (or you can use your settings as per your requirements).</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;">listen-on port 53 { 127.0.0.1; any; };
allow-query     { localhost; any; };
allow-query-cache       { localhost; any; };</span></span></pre>
<div>
<div style="background-color: white; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">These directives instruct the DNS server to listen on <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">UDP</span> port <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">53</span>, and to allow queries and caches responses from <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">localhost</span> and any other machine that reaches the server.</span></div>
<div style="background-color: white; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">4.</span> It is important to note that the ownership of this file must be set to <code style="background-attachment: scroll; background-clip: initial; background-color: #f6f6f8; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(158, 158, 159); font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 600; line-height: 1.6; margin: 0px; max-width: 100%; overflow: auto; padding: 2px; vertical-align: baseline; white-space: pre;">root:named</code> and also if<span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">SELinux</span> is enabled, after editing the configuration file we need to make sure that its context is set to<code style="background-attachment: scroll; background-clip: initial; background-color: #f6f6f8; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(158, 158, 159); font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 600; line-height: 1.6; margin: 0px; max-width: 100%; overflow: auto; padding: 2px; vertical-align: baseline; white-space: pre;">named_conf_t</code> as shown in Fig. 4 (same thing for the auxiliary file <code style="background-attachment: scroll; background-clip: initial; background-color: #f6f6f8; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(158, 158, 159); font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 600; line-height: 1.6; margin: 0px; max-width: 100%; overflow: auto; padding: 2px; vertical-align: baseline; white-space: pre;">/etc/named.rfc1912.zones</code>):</span></div>
</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># ls -lZ /etc/named.conf
# ls -lZ /etc/named.rfc1912.zones</span></span></pre>
</div>
<div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="line-height: 28.7999992370605px;"><span style="font-family: "arial" , "helvetica" , sans-serif;">Otherwise, configure the SELinux context before proceeding:</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># semanage fcontext -a -t named_conf_t /etc/named.conf
# semanage fcontext -a -t named_conf_t /etc/named.rfc1912.zones</span></span></pre>
</div>
<div>
<span style="color: white;"><span style="line-height: 15.6000003814697px;"><br /></span></span></div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">5.</span><span style="line-height: 28.7999992370605px;"> Additionally, we need to test the DNS configuration now for some syntax error before starting the bind service:</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># named-checkconf /etc/named.conf</span></span></pre>
<div>
<span style="color: white;"><span style="line-height: 15.6000003814697px;"><br /></span></span></div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">6.</span><span style="line-height: 28.7999992370605px;"> After the syntax verification results seems perfect, restart the </span><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">named</span><span style="line-height: 28.7999992370605px;"> service to take new changes into effect and also make the service to auto start across system boots, and then check its status:</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># systemctl restart named
# systemctl enable named
# systemctl status named</span></span></pre>
<div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">7.</span><span style="line-height: 28.7999992370605px;"> Next, open the port 53 on the firewall.</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># firewall-cmd --add-port=53/udp
# firewall-cmd --add-port=53/udp --permanent</span></span></pre>
</div>
<div>
<div style="background-color: white; margin-bottom: 10px;">
<span style="color: #0b5394; font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 18px;">Step 3: Chroot Cache-Only DNS Server in RHEL and CentOS 7</span></span></div>
<div style="background-color: white; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">8.</span><span style="line-height: 28.7999992370605px;"> If you wish to deploy the Cache-only DNS server within </span><span style="border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">chroot</span><span style="line-height: 28.7999992370605px;"> environment, you need to have the package </span><span style="border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">chroot</span><span style="line-height: 28.7999992370605px;"> installed on the system and no further configuration is needed as it by default hard-link to chroot.</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># yum install bind-chroot -y</span></span></pre>
</div>
<div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="line-height: 28.7999992370605px;">Once </span><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">chroot</span><span style="line-height: 28.7999992370605px;"> package has been installed, you can restart named to take the new changes into effect:</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># systemctl restart named</span></span></pre>
</div>
<div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">9.</span><span style="line-height: 28.7999992370605px;"> Next, create a symbolic link (also named </span><code style="background-attachment: scroll; background-clip: initial; background-color: #f6f6f8; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(158, 158, 159); font-stretch: inherit; font-weight: 600; line-height: 1.6; margin: 0px; max-width: 100%; overflow: auto; padding: 2px; vertical-align: baseline; white-space: pre;">/etc/named.conf</code><span style="line-height: 28.7999992370605px;">) inside </span><code style="background-attachment: scroll; background-clip: initial; background-color: #f6f6f8; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(158, 158, 159); font-stretch: inherit; font-weight: 600; line-height: 1.6; margin: 0px; max-width: 100%; overflow: auto; padding: 2px; vertical-align: baseline; white-space: pre;">/var/named/chroot/etc/</code><span style="line-height: 28.7999992370605px;">:</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># ln -s /etc/named.conf /var/named/chroot/etc/named.conf</span></span></pre>
</div>
<div>
<div style="background-color: white; margin-bottom: 10px;">
<span style="color: #0b5394; font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 18px;">Step 4: Configure DNS on Client Machine</span></span></div>
<div style="background-color: white; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">10.</span><span style="line-height: 28.7999992370605px;"> Add the DNS Cache servers </span><span style="border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">IP 192.168.0.18</span><span style="line-height: 28.7999992370605px;"> as resolver to the client machine. Edit</span><code style="background: none 0px 0px repeat scroll rgb(246, 246, 248); border-radius: 3px; border: 1px solid rgb(158, 158, 159); font-stretch: inherit; font-weight: 600; line-height: 1.6; margin: 0px; max-width: 100%; overflow: auto; padding: 2px; vertical-align: baseline; white-space: pre;">/etc/sysconfig/network-scripts/ifcfg-eth0</code><span style="line-height: 28.7999992370605px;"> as shown in the following figure:</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;">DNS=192.168.1.17</span></span></pre>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;">HWADDR=00:1A:4D:9A:F7:CE
TYPE=Ethernet
BOOTPROTO=static
IPADDR=192.168.1.35
NETMASK=255.255.255.0
GATEWAY=192.168.1.1
NM_CONTROLLED=no
DEFROUTE=yes
PEERDNS=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFFROUTE=yes
IPV6_PEERDNS=yes
IPV6_PEEROUTER=yes
IPV6_FAILURE_FATAL=no
NAME=eth0
DNS=192.168.1.17
ONBOOT=yes</span></span></pre>
</div>
<div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; line-height: 1.5em; margin-bottom: 10px;">
<span style="color: #272727; font-family: "roboto condensed" , "arial" , sans-serif; line-height: 28.7999992370605px;">And </span><span style="border: 0px; font-family: "roboto condensed" , "arial" , sans-serif; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">/etc/resolv.conf</span><span style="color: #272727; font-family: "roboto condensed" , "arial" , sans-serif; line-height: 28.7999992370605px;"> as follows:</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;">nameserver 192.168.1.17</span></span></pre>
</div>
<div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<div style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">11.</span> Finally it’s time to check our cache server. To do this, you can use dig utility or nslookup command.</span></div>
<div style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif; line-height: 28.7999992370605px;">Choose any website and query it twice (we will use</span><span style="font-family: "arial" , "helvetica" , sans-serif; line-height: 28.7999992370605px;"> </span><span style="border: 0px; font-family: "arial" , "helvetica" , sans-serif; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">facebook.com</span><span style="font-family: "arial" , "helvetica" , sans-serif; line-height: 28.7999992370605px;"> </span><span style="font-family: "arial" , "helvetica" , sans-serif; line-height: 28.7999992370605px;">as an example). Note that with dig the second time the query is completed much faster because it is being served from the cache.</span></div>
</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;">root@hackthesec:/home/hackthesec# dig facebook.com

; <<>> DiG 9.9.5-9-Ubuntu <<>> facebook.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50459
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;facebook.com.   IN A

;; ANSWER SECTION:
facebook.com.  285 IN A 66.220.158.68

;; Query time: 65 msec
;; SERVER:192.168.1.17#53(</span></span><span style="color: white; font-size: 12px; line-height: 15.6000003814697px;">192.168.1.17</span><span style="color: white; font-size: 12px; line-height: 15.6000003814697px;">)</span>
<span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;">;; WHEN: Mon Jan 25 16:59:32 IST 2016
;; MSG SIZE  rcvd: 57</span></span>
</pre>
</div>
<div>
<br /></div>
<div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="line-height: 28.7999992370605px;">You can also use </span><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-stretch: inherit; line-height: 28.7999992370605px; margin: 0px; padding: 0px; vertical-align: baseline;">nslookup</span><span style="line-height: 28.7999992370605px;"> to verify that the DNS server is working as expected.</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;">[root@node1 ~]# nslookup facebook.com
Server:         192.168.1.17
Address:        192.168.1.17#53

Non-authoritative answer:
Name:  facebook.com
Address: 66.220.158.68</span></span></pre>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"><pre style="background-attachment: scroll; background-clip: initial; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><a href="http://www.hackthesec.co.in/" target="_blank">http://www.hackthesec.co.in</a>
<a href="http://www.twitter.com/hackthesecurity" target="_blank">http://www.twitter.com/hackthesecurity</a>
<span style="color: #999999;"><a href="https://www.facebook.com/htsecu">https://www.facebook.com/htsecu</a></span></pre>
</span></span></pre>
</div>
<div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 1.5em; margin-bottom: 10px;">
<br /></div>
</div>
</div>

Install and Configure Caching-Only DNS Server in RHEL/CentOS 7

Install and Configure Caching-Only DNS Server in RHEL/CentOS 7 DNS servers comes in several types such as master, slave, forwarding and ca...

How do I Install and Use Iptables on CentOS/RHEL 7

firewalld.service
   Loaded: masked (/dev/null)
   Active: inactive (dead) since Fri 2015-02-27 11:09:37 EST; 56s ago
 Main PID: 7411 (code=exited, status=0/SUCCESS)

Feb 27 11:02:18 svr10 systemd[1]: Started firewalld - dynamic firewall daemon.
Feb 27 11:09:36 svr10 systemd[1]: Stopping firewalld - dynamic firewall daemon...
Feb 27 11:09:37 svr10 systemd[1]: Stopped firewalld - dynamic firewall daemon.<span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Install Iptables Service in CentOS/RHEL 7</span></h2>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">Now install iptables service using yum package manager using following command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># yum install iptables-services -y<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">After installing enable iptables service and start using below commands.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># systemctl <orange style="color: orange;">enable</orange> iptables
# systemctl <orange style="color: orange;">start</orange> iptables<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">Now check the iptables service status using below command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># <orange style="color: orange;">systemctl status iptables</orange>

iptables.service - IPv4 firewall with iptables
   Loaded: loaded (/usr/lib/systemd/system/iptables.service; enabled)
   Active: <green style="color: green;">active (exited)</green> since Fri 2015-02-27 11:14:12 EST; 14s ago
  Process: 7938 ExecStart=/usr/libexec/iptables/iptables.init start (code=exited, status=0/SUCCESS)
 Main PID: 7938 (code=exited, status=0/SUCCESS)

Feb 27 11:14:12 svr10 iptables.init[7938]: iptables: Applying firewall rules: [  OK  ]
Feb 27 11:14:12 svr10 systemd[1]: Started IPv4 firewall with iptables.<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; color: #555555; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ2VipFy4QxSQUQ8Chyphenhyphenc_kXJDhqJ0gdaTbekB1BVNL7aDj-nzBVatnpVMwsEYzYU7Ws-tlMuavy5zeJaIQPpKuFWHpwhlP5-8YAG37KpxVpRwCckickkCcN0Hbdb5qpkpZWXHz0GN51ioZ/s1600/firewalld-vs-iptables_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="348" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ2VipFy4QxSQUQ8Chyphenhyphenc_kXJDhqJ0gdaTbekB1BVNL7aDj-nzBVatnpVMwsEYzYU7Ws-tlMuavy5zeJaIQPpKuFWHpwhlP5-8YAG37KpxVpRwCckickkCcN0Hbdb5qpkpZWXHz0GN51ioZ/s640/firewalld-vs-iptables_www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">To list iptables rules use following command.</span></div>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div style="border: 0px; color: #555555; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div class="single-post-ad" style="border: 0px; clear: both; color: #555555; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<br />
<pre style="-webkit-text-stroke-width: 0px; background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 1.3em; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: start; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"># <orange style="color: orange;">iptables -L</orange>

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:ssh
REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination<span style="font-size: 0.9em;">
</span></pre>
<pre style="-webkit-text-stroke-width: 0px; background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 1.3em; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: start; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"><a href="http://www.hackthesec.co.in/">http://www.hackthesec.co.in</a>
<a href="http://www.twitter.com/hackthesecurity">http://www.twitter.com/hackthesecurity</a>
<a href="https://www.facebook.com/htsecu">https://www.facebook.com/htsecu</a>
</pre>
</div>
</div>

How do I Install and Use Iptables on CentOS/RHEL 7

How do I Install and Use Iptables on CentOS/RHEL 7 Latest Linux operating systems like CentOS/RedHat 7 and Fedora 21 has stop using ip...

MySQL Replication in 5 Minutes

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #990000; font-family: "verdana" , sans-serif; font-size: x-large;">MySQL Replication in 5 Minutes</span><br />
<span style="font-family: "verdana" , sans-serif; font-size: x-large;"><br /></span>
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.1000003814697px;">Configure MySQL replication is extremely simple. This article demonstrates how to create a master in minutes replicating it for a slave. Replication is a native MySQL feature and has multiple uses, such as backup, high availability, redundancy and geographical data distribution, horizontal scalability, among others.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuoxi5s0F8G1O0EBBaQZsBkS53hGtJLk_5eq5KH15vOG2iLfA9nuLja5cUU2fWhS1X4g5P4ZlYYQqXwgEsl-yiFo4igoYjJqXmPJwPtqi0z2OfxgfDGLmW_NcgzWNb-Bd7hqB52-V5rAxI/s1600/mysq-linux-www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuoxi5s0F8G1O0EBBaQZsBkS53hGtJLk_5eq5KH15vOG2iLfA9nuLja5cUU2fWhS1X4g5P4ZlYYQqXwgEsl-yiFo4igoYjJqXmPJwPtqi0z2OfxgfDGLmW_NcgzWNb-Bd7hqB52-V5rAxI/s1600/mysq-linux-www.hackthesec.co.in.jpg" /></a></div>
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.1000003814697px;"><br /></span></span>
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.1000003814697px;">For this simple test, we use Linux and configure replication in MySQL 5.6 between two instances: a master and a slave. We will create two instances MySQL from scratch, that is, without data. They will be on the same machine, but responding in different ports: 3310 and 3311.</span></span><br />
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.1000003814697px;"><br /></span></span>
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.1000003814697px;">The only requirement is to have MySQL 5.6 installed.</span></span><br />
<br />
<ul style="text-align: left;">
<li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium; line-height: 23.1000003814697px;">If you have it installed, simply use the path where resides bin/mysqld as basedir in the steps below. For example, in Oracle Linux 7 or RHEL 7 the binary is located in </span><b style="font-family: arial, helvetica, sans-serif; font-size: large; line-height: 23.1000003814697px;"><span style="color: red;">/usr/sbin/mysqld</span></b><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium; line-height: 23.1000003814697px;">, therefore</span><b style="font-family: arial, helvetica, sans-serif; font-size: large; line-height: 23.1000003814697px;"> <span style="color: red;">basedir=/usr;</span></b></li>
</ul>
<br />
<br />
<ul style="text-align: left;">
<li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium; line-height: 23.1000003814697px;"> If you do not have MySQL 5.6 binaries, just download the tar file and unpack it in a convenient directory that will be your basedir, such as</span><b style="font-family: arial, helvetica, sans-serif; font-size: large; line-height: 23.1000003814697px;"> <span style="color: red;">/opt/mysql/mysql-5.6</span></b><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium; line-height: 23.1000003814697px;"><span style="color: red;">:</span></span></li>
</ul>
<br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># mkdir /opt/mysql
# cd /opt/mysql
# wget http://dev.mysql.com/get/Downloads/MySQL-5.6/mysql-5.6.23-linux-glibc2.5-x86_64.tar.gz
# tar xvzf mysql-5.6.23-linux-glibc2.5-x86_64.tar.gz
# rm mysql-5.6.23-linux-glibc2.5-x86_64.tar.gz
# mv mysql-5.6.23-linux-glibc2.5-x86_64 mysql-5.6</span></span></pre>
<div style="background-color: white; margin-bottom: 10px;">
<span style="background-color: transparent; line-height: 18px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;">Note: In this case, consider the steps below <b><span style="color: red;">basedir=/opt/mysql/mysql-5.6;</span></b> always try to work with the latest versions — replace 5.6.23 in the above commands if a brand new one is available in <b><span style="color: red;">http://dev.mysql.com/downloads/mysql.</span></b></span></span></div>
<div style="background-color: white; margin-bottom: 10px;">
<span style="background-color: transparent;"></span><br />
<div style="font-family: arial, helvetica, sans-serif; font-size: large; font-weight: bold; line-height: 18px; margin-bottom: 10px;">
<span style="background-color: transparent;"><span style="color: #0b5394;"><u>Simple replication</u></span></span></div>
<span style="background-color: transparent;">
<div style="margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.1000003814697px;">Create an instance for the master:</span></span></div>
<div style="margin-bottom: 10px;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;"># mkdir /opt/mysql/master /opt/mysql/master/data /opt/mysql/master/tmp
# cd /opt/mysql/master
# nano master.cnf
[client]
port=3310
socket=/opt/mysql/master/tmp/my-master.sock
[mysql]
prompt=master>\\_
[mysqld]
server-id=10
port=3310
basedir=/usr
datadir=/opt/mysql/master/data
socket=/opt/mysql/master/tmp/my-master.sock
log-bin=master-bin.log
innodb_flush_log_at_trx_commit=1
sync_binlog=1
# chown mysql:mysql *
# /usr/bin/mysql_install_db --defaults-file=/opt/mysql/master/master.cnf --user=mysql</span></span></pre>
</div>
</span></div>
<div style="background-color: white; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.1000003814697px;">Start and test the new instance:</span></span></div>
<div style="background-color: white; margin-bottom: 10px;">
</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># /usr/bin/mysqld_safe --defaults-file=/opt/mysql/master/master.cnf &
# mysql --defaults-file=/opt/mysql/master/master.cnf -uroot -p
master> SHOW VARIABLES LIKE 'port';
+---------------+-------+
| Variable_name | Value |
+---------------+-------+
| port | 3310 |
+---------------+-------+</span></span></pre>
<div style="background-color: white; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.0999984741211px;">Note: To stop the MySQL process when necessary, make a clean shutdown:</span></span></div>
<div style="background-color: white; margin-bottom: 10px;">
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># mysqladmin --defaults-file=/opt/mysql/master/master.cnf -uroot –p shutdown</span></span></pre>
<div style="margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.0999984741211px;">Open another terminal and create another instance to be the Slave:</span></span></div>
<div style="margin-bottom: 10px;">
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 11.9999990463257px; line-height: 15.6000003814697px;"># mkdir /opt/mysql/slave /opt/mysql/slave/data /opt/mysql/slave/tmp
# cd /opt/mysql/slave
# nano slave.cnf
[client]
port=3311
socket=/opt/mysql/slave/tmp/my-slave.sock
[mysql]
prompt=slave>\\_
[mysqld]
server-id=11
port=3311
basedir=/usr
datadir=/opt/mysql/slave/data
socket=/opt/mysql/slave/tmp/my-slave.sock
log-bin=slave-bin.log
innodb_flush_log_at_trx_commit=1
sync_binlog=1
# chown mysql:mysql *
# /usr/bin/mysql_install_db --defaults-file=/opt/mysql/slave/slave.cnf --user=mysql
Start and test the new instance:
# /usr/bin/mysqld_safe --defaults-file=/opt/mysql/slave/slave.cnf &
# mysql --defaults-file=/opt/mysql/slave/slave.cnf -uroot -p
slave> SHOW VARIABLES LIKE 'port';
+---------------+-------+
| Variable_name | Value |
+---------------+-------+
| port | 3311 |
+---------------+-------+</span></span></pre>
<div style="margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.1000003814697px;">Now that we have two instances with different server-ids and log-bin enabled, create a user in the master instance so the slave can connect to it:</span></span></div>
<div style="margin-bottom: 10px;">
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 11.9999990463257px; line-height: 15.6000003814697px;">master> CREATE USER repl_user@127.0.0.1;
master> GRANT REPLICATION SLAVE ON *.* TO repl_user@127.0.0.1 IDENTIFIED BY 'repl_user_password';</span></span></pre>
<div style="margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.1000003814697px;">Note: In an actual installation, the slave instance will probably be in another host — replace 127.0.0.1 with the host IP where your slave instance is.</span></span></div>
<div style="margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 23.1000003814697px;">Before starting replication, check the Master status:</span></span></div>
<div style="margin-bottom: 10px;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 11.9999990463257px; line-height: 15.6000003814697px;">master> SHOW MASTER STATUS \G
*************************** 1. row ***************************
File: master-bin.000003
Position: 433</span></span></pre>
<div style="margin-bottom: 10px;">
<div style="margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 18px;">Use the data status above and initiates replication on the slave:</span></span></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 11.9999990463257px; line-height: 15.6000003814697px;">slave> CHANGE MASTER TO
MASTER_HOST=’127.0.0.1′,
MASTER_PORT=3310,
MASTER_USER=’repl_user’,
MASTER_PASSWORD=’repl_user_password’,
MASTER_LOG_FILE=’master-bin.000003′,
MASTER_LOG_POS=433;
slave> START SLAVE;</span></span></pre>
<div style="margin-bottom: 10px;">
<div style="margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><span style="line-height: 18px;">Basic test</span></span><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium; line-height: 1.5em;">:</span></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 11.9999990463257px; line-height: 15.6000003814697px;">master> CREATE DATABASE teste_repl;
master> CREATE TABLE teste_repl.simples (id INT NOT NULL PRIMARY KEY);
master> INSERT INTO teste_repl.simples VALUES (999),(1),(20),(5);
slave> SELECT * FROM teste_repl.simples;</span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 11.9999990463257px; line-height: 15.6000003814697px;"><b>References:</b>
http://dev.mysql.com/doc/refman/5.6/en/binary-installation.html
http://dev.mysql.com/doc/refman/5.6/en/replication-howto.html

<a href="http://www.hackthesec.co.in/" target="_blank">HackTheSecurity</a>
<a href="https://www.twitter.com/hackthesecurity" target="_blank">HackTheSecurity Twitter</a>
<a href="https://www.facebook.com/htsecu/" target="_blank">HackTheSecurity Facebook</a></span></span></pre>
</div>
</div>
</div>
</div>
</div>
</div>
</div>

MySQL Replication in 5 Minutes

MySQL Replication in 5 Minutes Configure MySQL replication is extremely simple. This article demonstrates how to create a master in minut...

How to Install MariaDB 10 on CentOS 7 / RHEL 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #990000; font-size: large;">Installing MariaDB 10 on CentOS 7 / RHEL 7</span><br />
<span style="color: #990000; font-size: large;"><br /></span>
<br />
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
Installing MariaDB became very easy on the latest CentOS /RHEL Linux version 7. During initial setup MariaDB has a tick in the graphical setup environment which enables MariaDB and replaces MySQL.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwMo7BsU9vXIg51zHiq2lMsv2y7hRKUvaoj7vkZSOz8WWkOumvYMDMA7fZ5G7JT5EMKGHuXZiahQ3Y1KaeePAz68lb_7x-Fchyphenhyphen_GulaqeLuyepipFNiGPIFPPEy1WAazZkeHY4_Nmag9k/s1600/MariaDB_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwMo7BsU9vXIg51zHiq2lMsv2y7hRKUvaoj7vkZSOz8WWkOumvYMDMA7fZ5G7JT5EMKGHuXZiahQ3Y1KaeePAz68lb_7x-Fchyphenhyphen_GulaqeLuyepipFNiGPIFPPEy1WAazZkeHY4_Nmag9k/s1600/MariaDB_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
<br /></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
During installation the section</div>
<div style="background-color: white; color: #333333; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
<img alt="" src="https://mariadb.com/sites/default/files/elfinder/94/Blog/centos3.png" style="border: 0px; height: 21px; margin: 10px; max-width: 100%; vertical-align: middle; width: 203px;" /></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
allows enabling a MariaDB server.</div>
<div style="background-color: white; color: #333333; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
<img alt="" src="https://mariadb.com/sites/default/files/elfinder/94/Blog/centos2.png" style="border: 0px; height: 56px; margin: 10px; max-width: 100%; vertical-align: middle; width: 300px;" /></div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<br class="Apple-interchange-newline" />
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">If you prefer the command line the installation can be performed with:</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># yum install mariadb-server</span></span></pre>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">MariaDB is shipped untuned and not protected with MariaDB version 5.5.35. </span></span><br />
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">No basic optimizations in the configuration file have been set and the root user has no password. </span></span><br />
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">An update will install the version 5.5.37. (The latest version of MariaDB October 2014 is Version 5.5.39).</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">yum update</span></span></pre>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">It is important to secure the server. MariaDB is shipped with a script to harden the system accordingly using a user dialog. </span></span><br />
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">It is highly recommended to use this script before creating and populating the databases.</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">mysql_secure_installation</span></span></pre>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Install the latest Version 10 is an easy step since MariaDB's repository configuration wizard <a href="https://downloads.mariadb.org/mariadb/repositories" style="text-decoration: none;"><span style="color: red;">https://downloads.mariadb.org/mariadb/repositories</span></a> has now the latest CentOS/RHEL version available.</span></div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Before installing 10.0 it is important to perform a backup and remove the existing 5.5 version</span></div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">if you have.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">yum remove mariadb-server mariadb-libs</span></span></pre>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-size: large; line-height: 23.0999984741211px;">Create the repository settings using the link and follow the steps <a href="https://downloads.mariadb.org/mariadb/repositories"><span style="color: red;">MariaDB</span></a></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://mariadb.com/sites/default/files/elfinder/94/Blog/centos.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="480" src="https://mariadb.com/sites/default/files/elfinder/94/Blog/centos.png" width="640" /></a></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; line-height: 1.5em; margin-bottom: 10px;">
<br /></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "helvetica neue" , "helvetica" , "arial" , sans-serif; font-size: large; line-height: 18px;">Here is your custom MariaDB YUM repository entry for CentOS. Copy and paste it into a file</span></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "helvetica neue" , "helvetica" , "arial" , sans-serif; font-size: large; line-height: 18px;">under /etc/yum.repos.d/ (we suggest naming the file MariaDB.repo or something similar).</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># MariaDB 10.0 CentOS repository list - created 2016-01-25 08:01 UTC
# http://mariadb.org/mariadb/repositories/
[mariadb]
name = MariaDB
baseurl = http://yum.mariadb.org/10.0/centos7-amd64
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1</span></span></pre>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="line-height: 18px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">After the file is in place, install MariaDB with:</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">sudo yum install MariaDB-server MariaDB-client</span></span></pre>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; line-height: 1.5em; margin-bottom: 10px;">
</div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">You are now running the latest 10.0 version!</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">/etc/init.d/mysql start
# </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">mysql_upgrade</span></span></pre>
<ul style="text-align: left;">
<li><span style="font-size: large; line-height: 1.5em;"><a href="http://www.hackthesec.co.in/2016/01/install-mariadb-on-centos-6.html"><span style="color: red;">Install MariaDB On Centos 6</span></a></span></li>
</ul>
</div>

How to Install MariaDB 10 on CentOS 7 / RHEL 7

Installing MariaDB 10 on CentOS 7 / RHEL 7 Installing MariaDB became very easy on the latest CentOS /RHEL Linux version 7. During initi...

How to Install MariaDB On CentOS 6

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #660000; font-family: "arial" , "helvetica" , sans-serif; font-size: x-large;">Install MariaDB On CentOS 6</span><br />
<div>
<span style="color: #660000; font-family: "arial" , "helvetica" , sans-serif; font-size: x-large;"><br /></span>
<br />
<div>
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="background-color: white; box-sizing: border-box; font-size: 16px; font-weight: 700; line-height: 28.7999992370605px; text-align: justify;">MariaDB</span><span style="background-color: white; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;"> is a community-developed fork of the MySQL relational database management system, the impetus being the community maintenance of its free status under the GNU GPL. Being a fork of a leading open source software system, it is notable for being led by its original developers and triggered by concerns over direction by an acquiring commercial company Oracle</span></span></div>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZvWjf2im0TY93a7A8KGA0V-SkPtD5YpfMjN2QXn2duiNXM4FQcYUiC4aeU_M0Chfly9qjEV6C133P1tGPxAyj2jp1qQTrrlQLRf43ECkwqmf6vbNOaRMCLYj1C8OBlHNkEzlopemSjS8/s1600/MariaDB_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZvWjf2im0TY93a7A8KGA0V-SkPtD5YpfMjN2QXn2duiNXM4FQcYUiC4aeU_M0Chfly9qjEV6C133P1tGPxAyj2jp1qQTrrlQLRf43ECkwqmf6vbNOaRMCLYj1C8OBlHNkEzlopemSjS8/s1600/MariaDB_www.hackthesec.co.in.png" /></a></div>
<div>
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="background-color: white; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;"><br /></span></span></div>
<div>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Step1: <span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;">Add repository on Centos 6 32-bit</span></h4>
</div>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;"># vi /etc/yum.repos.d/MariaDB.repo</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-size: 16px; font-weight: normal; line-height: 28.7999992370605px; text-align: justify;"><span style="font-family: "arial" , "helvetica" , sans-serif;"> and paste following line:</span></span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;">[mariadb]
 name = MariaDB
 baseurl = http://yum.mariadb.org/5.5/centos6-x86
 gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
 gpgcheck=1</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
 <span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;">Add repository on Centos 6 64-bit</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;">[mariadb]    
name = MariaDB
baseurl = http://yum.mariadb.org/5.5/centos6-amd64    
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB   
gpgcheck=1</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="box-sizing: border-box; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;"><span style="color: #0379bf; font-family: "roboto slab"; font-size: 20px; font-weight: bolder; line-height: 30px; text-align: left;">Step2:</span><span style="color: #0b5394; font-family: "arial" , "helvetica" , sans-serif;"> Start Install</span></span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;"># yum install MariaDB-server MariaDB-client -y</span></span></pre>
<div>
</div>
</div>
<div>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-stretch: normal; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; text-align: justify; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0379bf; font-family: "roboto slab";"><span style="font-size: 20px; font-weight: bolder; line-height: 30px;"> </span></span><span style="color: #0379bf; font-family: "roboto slab"; font-size: 20px; font-weight: bolder; line-height: 30px; text-align: left;">Step3: </span><span style="background-color: transparent; color: #0379bf; font-family: "arial" , "helvetica" , sans-serif; line-height: 28.7999992370605px;">After complete installation process, start MariaDB :</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;"># service mysql start</span></span></pre>
<div>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
 <span style="font-weight: bolder;">Step4: </span><span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; font-weight: bolder; line-height: 28.7999992370605px; text-align: justify;">Set MariaDB to start on boot:</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;"># chkconfig mysql on</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-weight: bolder;">Step5: </span><span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;">Secure MariaDB after installation to :</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;">– Set (Change) root password
– Remove anonymous users
– Disallow root login remotely
– Remove test database and access to it
– Reload privilege tables</span></span></pre>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;">[root@Unixmen-centos65 Downloads]# mysql_secure_installation</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-weight: bolder;">Step6: </span><span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;"> Check the new root password and databases:</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;"># mysql -u root -p</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-stretch: normal; font-weight: bolder; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; text-align: left; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-size: 20px; font-weight: bolder; line-height: 30px; text-align: justify;"><span style="font-family: "roboto slab";">Result Bellow</span></span><span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; font-weight: bolder; line-height: 28.7999992370605px; text-align: justify;">:</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;">Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 13
Server version: 5.5.34-MariaDB MariaDB Server
Copyright (c) 2000, 2013, Oracle, Monty Program Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]></span></span></pre>
</div>
</div>
</div>
<div>
<a href="https://mariadb.com/">Click Here</a> For More Information About MariaDB</div>
<div>
<ul style="text-align: left;">
<li><span style="font-size: large;"><span style="color: red;"><a href="http://www.hackthesec.co.in/2016/01/how-to-install-mariadb-10-on-centos-7.html">Installing MariaDB 10 on CentOS 7 / RHEL 7</a> </span></span></li>
</ul>
</div>
<div>
<span style="color: white;"><span style="line-height: 15.6000003814697px;"><br /></span></span></div>
<div>
</div>
</div>
</div>
<div>
</div>
</div>
</div>
<div>
</div>
</div>
</div>
</div>
</div>

How to Install MariaDB On CentOS 6

Install MariaDB On CentOS 6 MariaDB is a community-developed fork of the MySQL relational database management system, the impetus bei...

What is ModSecurity and How to Install with Apache on CentOS/RHEL

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #660000;">HWhat is ModSecurity and How to Install with Apache on CentOS/RHEL</span></h2>
<div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ModSecurity</span> is a Web Application Firewall that execute as a Module on your Web Server and provides protection against various attacks to our web applications. It monitors HTTP traffic and performs real time analysis. It’s a product developed by Breach Security and is available a free software under the GNU License. It is Available for <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Apache</span>, <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Nginx</span> and <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">IIS</span>.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIoA499Ma1AO7UoQJ1jYy6gpUyDZ55sYYLDG8AzhzkuZOeX0umVxETvYnUT3dJ-TuG0Ut1TXMDs5Lr6kknG7Z0X3YWrMxb1DC5F6rdQpN0CP9hrafCs1JkYTz1N1yT2fG25_J1xZUzhXQ/s1600/ModSecurity-www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="166" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIoA499Ma1AO7UoQJ1jYy6gpUyDZ55sYYLDG8AzhzkuZOeX0umVxETvYnUT3dJ-TuG0Ut1TXMDs5Lr6kknG7Z0X3YWrMxb1DC5F6rdQpN0CP9hrafCs1JkYTz1N1yT2fG25_J1xZUzhXQ/s640/ModSecurity-www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></span></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">The Module has several features.</span></span></div>
<ul style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;"><ul style="border: 0px; font-size: inherit; list-style: disc; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Filtered Request:</span> The incoming HTTP Request or analyzed by the ModSecurity Module before passing it to the Web Service, these request are compared against a group of predefined rules to take the appropriate action.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Anti-Evasion Techniques:</span> Routes and Parameters are normalized before the analysis to prevent evasion techniques.</span></li>
<ul style="border: 0px; font-size: inherit; list-style: disc; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Eliminates multiple bars (//)</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Eliminates directories referenced by itself (./)</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">In Windows the \ and / are treated the same</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">URL Decoding</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Null Bytes replaced for spaces ()</span></li>
</ul>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">HTTP protocol Understanding:</span> by understanding the HTTP Protocol, ModSecurity can perform specific and granular filtering.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Post Payload Analysis:</span> intercepts and analyse content transmitted using POST.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Audit Log:</span> It is possible to leave logs for further analysis.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">HTTPS Filtering:</span> since it works as an embedded module, ModSecurity has access to data after it has been decrypted.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Byte Range Check:</span> it detects and block Shellcodes, limiting the range of bytes.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Real Time Monitoring:</span> Besides logging all the HTTP Traffic, ModSecurity can monitor traffic in real time to detect attacks, meaning it works as an intrusion detection tool.</span></li>
</ul>
</ul>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">From Version 2 ModSecurity</span> added several additional functionality that are:</span></div>
<ul style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;"><ul style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; list-style: disc; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Five phases of processing: Request header, Request Body. Response headers. Response Body and Logging</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Rules Transformation options</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Transactional variables</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Persistent Data ( Used of IP follow up, Application Sesions and users)</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">XML Support</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">IP Blocking</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="color: black; font-family: Arial, Helvetica, sans-serif;"><a href="https://www.modsecurity.org/" style="outline: none; text-decoration: none;" target="_blank">And More</a>,</span></li>
</ul>
</ul>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">ModSecurity can be deployed and integrated in our current Web Servers infrastructure, meaning that we do not have to modify our internal Network, we don’t add any point of failure, we can benefit from load balancing and scalability and we would not have any issues with compress or encrypted Data.<br />ModSecurity is a valuable security tool and have proven to be effective. If we want to protect our web applications this is a tool the deserves your attention.</span></div>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">How to Install ModSecurity and Get it Running in Linux CentOS/RHEL with Apache</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">To install ModSecurity in a Linux Server running Centos or RHEL Derivative with the Apache web Service, we follow these steps as the root user.</span></div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Step 1: Install the EPEL Repository</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Firstly add the EPEL rpm repository in your system using following command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># rpm –ivh http://fedora.mirror.uber.com.au/epel/6/i386/epel-release-6-7.noarch.rpm
</pre>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Step 2: Install ModSecurity and Predefined Rules</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Let’s install mod_security apache modules with predefined rules of mod_security.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># yum install mod_security mod_security_crs
</pre>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Step 3: Activate the Module</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Edit ModSecurity configuration file <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">/etc/httpd/conf.d/mod_security.conf</span> and look for the<span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">SecRuleEngine</span> Directive on the File and configured with the Desired Value.</span></div>
<ul style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;"><ul style="border: 0px; font-size: inherit; list-style: disc; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">On </span>– Rules are activated<br /><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Off </span>– Rules are Deactivated<br /><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">DetectionOnly</span> – Only Intercepts and logs Transactions</span></ul>
</ul>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Since we want to Intercept and Block Attacks we configure it with <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">On</span>.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> SecRuleEngine <orange style="color: orange;">on</orange>
</pre>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Step 4: Restart Apache and Check</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Now we restart the apache web services</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># service httpd restart
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">To confirm that our web application firewall is working we should see something like this in our Apache error logs.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># tail /var/log/httpd/error_log
[Sat Mar15 16 09:20:58 2014] [notice] ModSecurity for Apache/2.7.3 (http://www.modsecurity.org/) configured.
[Sat Mar15 16 09:20:58 2014] [notice] ModSecurity: APR compiled version=”1.3.9″; loaded version=”1.3.9″
[Sat Mar15 16 09:20:58 2014] [notice] ModSecurity: PCRE compiled version=”7.8 “; loaded version=”7.8 2008-09-05″
[Sat Mar15 16 09:20:58 2014] [notice] ModSecurity: LUA compiled version=”Lua 5.1″
[Sat Mar15 16 09:20:58 2014] [notice] ModSecurity: LIBXML compiled version=”2.7.6″
<span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Important files to Remember</span></h2>
<ul style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;"><ul style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; list-style: disc; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Mod Security Config File</span> – /etc/httpd/conf.d/mod_security.conf<br /><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Debug Log</span> – /var/log/httpd/modsec_debug.log<br /><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Audit log</span> – /var/log/httpd/modsec_audit.log<br /><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Rules</span> – /etc/httpd/modsecurity.d/activated_rules</span></ul>
</ul>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">References:<br /><a href="https://www.modsecurity.org/" style="outline: none; text-decoration: none;" target="_blank">https://www.modsecurity.org/</a><br /><a href="https://www.modsecurity.org/projects/modsecurity/apache/index.html" style="outline: none; text-decoration: none;" target="_blank">https://www.modsecurity.org/projects/modsecurity/apache/index.html</a></span></div>
</div>
</div>