Hack The Sec-Leading Resource Of Linux Tutorial

Configure Postfix SMTP Relay (Smart Host) on CentOS 8

Configure Postfix SMTP Relay (Smart Host) on CentOS 8 Postfix is a Mail Transport Agent (MTA), which can be easily configured as a private relay host, passing mail to other mail servers. Unlike Sendmail, Postfix is considered a very secure MTA, offering a high level of flexibility and ease of administration. In this article, I am configuring Postfix on CentOS 8 as SMTP smart host (relay host) using SASL authentication to send out mail. 1. Install Postfix<blockquote style="border: none; margin: 0 0 0 40px; padding: 0px;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgExCIgNV6dSQHUBuJSk7cnAf8X8jYG1wuC6oSMjlXn1enx_vc-wDCcb_coF_D3hCLkPHYGoXdQXiGHgFztfmQ7QuWBhMi26j_bg6vXcEFldqhLIv6e_TuiCOQi-eTeZq5VDeJsZ74-GVyJ_A18TzThvzbTHtBzIqLHcyomSTExNZtzcOzq7FxywZS3SQ/s1200/hackthesec.co.in_postfix.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="840" data-original-width="1200" height="224" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgExCIgNV6dSQHUBuJSk7cnAf8X8jYG1wuC6oSMjlXn1enx_vc-wDCcb_coF_D3hCLkPHYGoXdQXiGHgFztfmQ7QuWBhMi26j_bg6vXcEFldqhLIv6e_TuiCOQi-eTeZq5VDeJsZ74-GVyJ_A18TzThvzbTHtBzIqLHcyomSTExNZtzcOzq7FxywZS3SQ/s320/hackthesec.co.in_postfix.png" width="320" /></a></blockquote><div class="separator" style="clear: both; text-align: left;">Postfix should be preinstalled on CentOS 8 by default. If for some reason you don’t have the service installed, use the below command to install the relevant package:</div><div class="separator" style="clear: both; text-align: left;"> </div><pre class=" language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="root@hackthesec" style="background-color: transparent; box-sizing: border-box; text-decoration-line: none;">root@hackthesec</a> ~]# dnf install postfix</code></pre>2. Install SASL pluginPackage cyrus-sasl-plain contains the Cyrus SASL plugins which support PLAIN and LOGIN authentication.<pre class=" language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="root@hackthesec" style="background-color: transparent; box-sizing: border-box; text-decoration-line: none;">root@hackthesec</a> ~]# dnf install cyrus-sasl-plain</code></pre>3. Edit the configuration fileI am configuring the service to act as SMTP smart host, sending the mail to hackthesec mail server, which is my ISP mail server, using SASL authentication (login and password).Edit /etc/postfix/main.cf configuration file and update the below relevant lines:<pre class=" language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">...
meta_directory = /etc/postfix
myhostname = chronos
mydomain = hackthesec.co.in
local_transport = error: this is a null client
myorigin = $myhostname.$mydomain
# list of trusted network addresses, that can relay through this MTA
mynetworks = 127.0.0.0/8 [::1]/128
relayhost = [hackthesec.co.in]
disable_dns_lookups = yes

# SASL authentication 
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = static:</code>admin@hackthesec.co.in:mypassword</pre><pre class=" language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">smtp_sasl_security_options = noanonymous
smtp_tls_security_level = encrypt
...</code></pre>4. Test the configurationTest the configuration for any obvious errors. If the configuration is correct, the below command should not give any output:<pre class=" language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="root@hackthesec" style="background-color: transparent; box-sizing: border-box; text-decoration-line: none;">root@hackthesec</a> ~]# postfix check</code></pre>5. Start and enable Postfix serviceLaunch and enable Postfix daemon:<pre class=" language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="root@hackthesec" style="background-color: transparent; box-sizing: border-box; text-decoration-line: none;">root@hackthesec</a> ~]# systemctl start postfix
[<a class="token email-link" href="root@hackthesec" style="background-color: transparent; box-sizing: border-box; text-decoration-line: none;">root@hackthesec</a> ~]# systemctl enable postfix</code></pre>6. Test the e-mail deliveryVerify the configuration by sending the test e-mail from the command line. Prepare test e-mail body:<pre class=" language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="root@hackthesec" style="background-color: transparent; box-sizing: border-box; text-decoration-line: none;">root@hackthesec</a> ~]# echo "Subject: Mail Delivery Test" > /tmp/mail.txt
[<a class="token email-link" href="root@hackthesec" style="background-color: transparent; box-sizing: border-box; text-decoration-line: none;">root@hackthesec</a> ~]# echo "This is the example e-mail body" >> /tmp/mail.txt</code></pre>Send the test e-mail using sendmail script with increased verbosity:<pre class=" language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="root@hackthesec" style="background-color: transparent; box-sizing: border-box; text-decoration-line: none;">root@hackthesec</a> ~]# sendmail -v admin@hackthesec.co.in < /tmp/mail.txt</code></pre>Monitor the system journal to check if the e-mail was successfully relayed to the mail server:<pre class=" language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="root@hackthesec" style="background-color: transparent; box-sizing: border-box; text-decoration-line: none;">root@hackthesec</a> ~]# journalctl -u postfix </code></pre>Last but not least – check the recipient’s Inbox (or SPAM box), the test e-mail should be delivered successfully.If for some reason the e-mail has not arrived yet, you can display mail queue on your relay host:<pre class=" language-markup" style="background: rgb(39, 40, 34); border-radius: 0.3em; box-sizing: border-box; color: #f8f8f2; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 15.36px; hyphens: none; line-height: 1.2; margin-bottom: 20px; margin-top: 0px; max-width: 100%; overflow: auto; padding: 10px; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal;"><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;">[<a class="token email-link" href="root@hackthesec" style="background-color: transparent; box-sizing: border-box; text-decoration-line: none;">root@hackthesec</a> ~]# mailq</code></pre><div><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;"> </code></div><div><code class=" language-markup" style="box-sizing: border-box; direction: ltr; font-family: Consolas, Monaco, "Andale Mono", monospace; font-size: 14.7456px; hyphens: none; line-height: 1.2; tab-size: 4; text-shadow: rgba(0, 0, 0, 0.3) 0px 1px; word-break: normal; word-spacing: normal;"> </code></div>

Configure Postfix SMTP Relay (Smart Host) on CentOS 8

Configure Postfix SMTP Relay (Smart Host) on CentOS 8 Postfix is a Mail Transport Agent (MTA), which can be easily configured as a private ...

COPY PUTTY (SSH) SESSIONS TO NEW OR OTHER COMPUTER

COPY PUTTY (SSH) SESSIONS TO NEW/OTHER COMPUTER I’m a huge fan of putty – available for download at: <a href="https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html" style="border: 0px; color: #24890d; font-family: inherit; font-size: 16px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Download PuTTY: latest release (0.78) (greenend.org.uk)</a><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiw6DmAPtJ_KtkLaWWcNiyFLTjlTgHEIc21VnBrMUjL4BZtlyMXXsjeMU7lBX91pK0N-blwlF02TCDRhaXA2kdojQFqOetYjidlc-nMYXzFoU0oEdkVFLeucqFLMuaSfVlD0vEDBxPMAyvMiUsAvzqiBgxZB5pLGhr-TZEhRWzMV5rTqYtpkVz92M/s1200/PuTTY_Icon_upstream.svg.png" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" data-original-height="1200" data-original-width="1200" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiw6DmAPtJ_KtkLaWWcNiyFLTjlTgHEIc21VnBrMUjL4BZtlyMXXsjeMU7lBX91pK0N-blwlF02TCDRhaXA2kdojQFqOetYjidlc-nMYXzFoU0oEdkVFLeucqFLMuaSfVlD0vEDBxPMAyvMiUsAvzqiBgxZB5pLGhr-TZEhRWzMV5rTqYtpkVz92M/w212-h212/PuTTY_Icon_upstream.svg.png" width="212" /></a></div> Over time, I tend to accumulate a large number of saved “sessions” that I find it useful to either move to a new computer, or save/backup. He<code style="border: 0px; font-family: monospace, serif; font-size: 15px; font-style: inherit; font-weight: inherit; hyphens: none; line-height: 1.6; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">regedit /ea c:\Users\mark\dropbox\_mark\puttycopy.reg HKEY_CURRENT_USER\Software\SimonTatham\PuTTY</code>Copied that puttycopy.reg to the new drive/computer.To add the saved sessions, just double clicked on that .reg file on the new computer.

COPY PUTTY (SSH) SESSIONS TO NEW OR OTHER COMPUTER

COPY PUTTY (SSH) SESSIONS TO NEW/OTHER COMPUTER I’m a huge fan of putty – available for download at: Download PuTTY: latest release (0.7...

How to Enable exec() in PHP-FPM?

<div dir="ltr" style="text-align: left;" trbidi="on">
How to Enable exec() in PHP-FPM? 
 
Sometimes the exec() function is not working after turning on the PHP-FPM and in php configuration file we could not find any disable functions. If we turned off the PHP-FPM the exec function is working again. If you are facing such issues, please follow the below steps. 
 
 
 
First, you need to verify the PHP-FPM is enabled on the domain that facing the issue. Please follow the steps. 
 
1) Login to WHM. 
 
2) Navigate to MultiPHP Manager to check whether the domain is using PHP-FPM or not. 
 
3) From that page, you can verify that the domain is using PHP-FPM. 
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfWqCwz5B8T5Cv_s0Os8aS6S8Hfze3b2pDQxZ-KSWoUHdr8-K2ZUCmebBq7yz1g2ZxS5oFP-IkhveBvoivs6hbvFA5E4t04HJTcecYbb3x3BFul9y-diEmz6p0_P5RFfg6_TSfM4v6bwep/s1600/Function_Enable_CPANEL_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="612" data-original-width="1068" height="227" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfWqCwz5B8T5Cv_s0Os8aS6S8Hfze3b2pDQxZ-KSWoUHdr8-K2ZUCmebBq7yz1g2ZxS5oFP-IkhveBvoivs6hbvFA5E4t04HJTcecYbb3x3BFul9y-diEmz6p0_P5RFfg6_TSfM4v6bwep/s400/Function_Enable_CPANEL_hackthesec.co.in.png" width="400" /></a></div>
 
 
Now you have verified that PHP-FPM is on the server. So you need to follow the steps to enable exec() in PHP-FPM. 
 
1) Login to server via SSH. 
 
2) Check the PHP version of the server using the below command. 
 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">#php -v</pre>
3) Then open the PHP-FPM configuration file. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /opt/cpanel/ea-php70/root/etc/php-fpm.d/blah.domain.tld.conf</pre>
<div>
 </div>
4) Then you will find the exec() function in the disabled function list. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">php_admin_value[disable_functions] = passthru,shell_exec,system</pre>
5) Remove that from the above line. 
 
 
6) Then restart PHP-FPM using the below command. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">/scripts/restartsrv_apache_php_fpm</pre>
Now exec() should works. 
 
* You can also do the same by following below steps. 
 
 
1) Create the /var/cpanel/ApachePHPFPM directory using the below command: 
 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">mkdir /var/cpanel/ApachePHPFPM</pre>
<div>
 </div>
2) Create the /var/cpanel/ApachePHPFPM/system_pool_defaults.yaml file 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">touch /var/cpanel/ApachePHPFPM/system_pool_defaults.yaml</pre>
3) Open the file /var/cpanel/ApachePHPFPM/system_pool_defaults.yaml using your text editor (e.g. vi, nano) : 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /var/cpanel/ApachePHPFPM/system_pool_defaults.yaml</pre>
add the function that you want to disable. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">php_admin_value_disable_functions : passthru,system</pre>
In this example, "passthru,system" are left as disabled functions. No other lines exist before or after this entry in this file. 
 
 
4) Regenerate the PHP-FPM configuration files via: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">/scripts/php_fpm_config –rebuild</pre>
Now exec() should works. 
 
 
Thanks 
 
 </div>

How to Enable exec() in PHP-FPM?

How to Enable exec() in PHP-FPM? Sometimes the exec() function is not working after turning on the PHP-FPM and in php configuration file ...