Hack The Sec-Leading Resource Of Linux Tutorial

Apache HTTP Secure Server Configuration for CentOS 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" style="background-color: white; box-sizing: border-box; color: #111111; font-family: Roboto, sans-serif; line-height: 50px; margin: 0px 0px 7px; word-wrap: break-word;">
Apache HTTP Secure Server Configuration</h1>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggHeyVUmoNeKIkBBwjp6w9tE0OlnEU9f5FNLy8noHKQ_s_cTyi8PsSLWCjaXbwr5gRYARjr8QQcccb5nDTV_-shq7uTRIrCVhm0AGvXtczAiAoj0T49-tGF57qEVLm9IsoxVlXU5R3YBJl/s1600/SSL.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggHeyVUmoNeKIkBBwjp6w9tE0OlnEU9f5FNLy8noHKQ_s_cTyi8PsSLWCjaXbwr5gRYARjr8QQcccb5nDTV_-shq7uTRIrCVhm0AGvXtczAiAoj0T49-tGF57qEVLm9IsoxVlXU5R3YBJl/s1600/SSL.png" /></a></div>
<div>
 </div>
<div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
Securing the <a href="http://www.hackthesec.co.in/search/label/Apache" target="_blank">Apache</a> server is one of the most important tasks of the webmaster. In this example, we will show you in this Apache HTTP Secure Server Configuration tutorial  how to use <a href="http://www.hackthesec.co.in/search/label/SSL%20Encryption" target="_blank">ssl keys</a> with your Apache web server on your installed <a href="http://www.hackthesec.co.in/search/label/centos7" target="_blank">Centos7 </a>system. this method should also work on all Fedora or Redhat based  systems</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJzRTWvnXAQ0ZRfHxBuYgWRSlZYVURR8-Q7QJe6NnTmJyzbQWAV_0Tz7FYQ5QLj0-iETPuFhujh1IjAqm609EMcAXvGis8ycbsk-11Kv-Ed6tIbmZov1RSsRjtQWEgr1OSLnBJHKYJmiAv/s1600/system_checking_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJzRTWvnXAQ0ZRfHxBuYgWRSlZYVURR8-Q7QJe6NnTmJyzbQWAV_0Tz7FYQ5QLj0-iETPuFhujh1IjAqm609EMcAXvGis8ycbsk-11Kv-Ed6tIbmZov1RSsRjtQWEgr1OSLnBJHKYJmiAv/s1600/system_checking_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
 Create Certificates</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
Change to the following directory:</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[root@server /]# cd /etc/pki/tls/certs</pre>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
Run the following command to make server key file:</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[root@server certs]# make server.key</pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOd36DQttWjBm_ZM0hG34p4qGUhern7Q7wsDOxzymyXT9YAfXqnwWVlMVeqfhNR0WtxvouwiRdau8tqo_2MKQXp7WNmnbeTptl5R4d46yOOlgPznU2FN_0pywuA1ymTOw0pAdXZqMkpvsY/s1600/creating_server_key_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOd36DQttWjBm_ZM0hG34p4qGUhern7Q7wsDOxzymyXT9YAfXqnwWVlMVeqfhNR0WtxvouwiRdau8tqo_2MKQXp7WNmnbeTptl5R4d46yOOlgPznU2FN_0pywuA1ymTOw0pAdXZqMkpvsY/s1600/creating_server_key_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
Remove passphrase from private key:</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
Writing RSA key</div>
<div>
 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[root@server certs]# openssl rsa -in server.key -out server.key
Enter pass phrase for server.key:
writing RSA key</pre>

</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
Generate CSR key file</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[root@server certs]# make server.csr</pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEir6BCHFyKHm4fOYHQpAhoFzlt15I4yI9e59EcSQr0HggCzuu1QcqNPmjcr7qrqj_CorIvFKXuMOaSZ0NH8bZQUmJsfkSNoX5JvUjS4pnYsIvt07kLkBBgRLY8t7Gf8CAws7uxAi605iokU/s1600/generate_csr_file_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEir6BCHFyKHm4fOYHQpAhoFzlt15I4yI9e59EcSQr0HggCzuu1QcqNPmjcr7qrqj_CorIvFKXuMOaSZ0NH8bZQUmJsfkSNoX5JvUjS4pnYsIvt07kLkBBgRLY8t7Gf8CAws7uxAi605iokU/s1600/generate_csr_file_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
Sign the key and make Expiration days:</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[root@server certs]# openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 1000
Signature ok
subject=/C=US/ST=AL/L=OLI/O=Hackthesec/OU=Hackthesec Tutorial/CN=server.hackthesec.co.in/emailAddress=info@hackthesec.co.in
Getting Private key
[root@server certs]#
</pre>
<div>
Configure SSL keys with Apache  
 
<div style="-webkit-text-stroke-width: 0px; color: black; font-family: 'Times New Roman'; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px;">
</div>
 
<pre style="-webkit-text-stroke-width: 0px; background-attachment: scroll; background-color: #3c3c3c; background-image: none; background-position: 0px 0px; background-repeat: repeat; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: black; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: left; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;">[root@server certs]# yum -y install httpd mod_ssl
</pre>
</div>
<div>

</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
Enable  en Start  apache</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[root@server certs]# systemctl start httpd.service
[root@server certs]# systemctl enable httpd.service</pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaF_VliP7YXsKU9BtdT6xWsUhATC1FrREY7WQLVAEBFGbooXXIDR0l1BNAAJD51j3uS8bJVnfAHIvQvP4_JsNH_h6WC8grUAKsmJsXgpp_-J1Mp5FLHLwuIKm6BpOOnxNoiLbyWkPfqY2K/s1600/httpd_checking_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaF_VliP7YXsKU9BtdT6xWsUhATC1FrREY7WQLVAEBFGbooXXIDR0l1BNAAJD51j3uS8bJVnfAHIvQvP4_JsNH_h6WC8grUAKsmJsXgpp_-J1Mp5FLHLwuIKm6BpOOnxNoiLbyWkPfqY2K/s1600/httpd_checking_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
 </div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
Configure  ‘/etc/httpd/conf.d/ssl.conf’</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
Your ssl.conf should be like this:</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[root@server certs]# mv /etc/httpd/conf.d/ssl.conf /etc/httpd/conf.d/ssl.conf.orig

[root@server certs]# vi /etc/httpd/conf.d/ssl.conf</pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[root@server certs]# vi /etc/httpd/conf.d/ssl.conf
SSLPassPhraseDialog builtin
SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
SSLSessionCacheTimeout 300
SSLRandomSeed startup file:/dev/urandom 256
SSLRandomSeed connect builtin
SSLCryptoDevice builtin
<VirtualHost *:443>
DocumentRoot "/var/www/html"
ServerName 127.0.0.1:443
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
SSLCertificateFile /etc/pki/tls/certs/server.crt
SSLCertificateKeyFile /etc/pki/tls/certs/server.key
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
</pre>
<div>
 </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgANADOe3-VFafS2jkR3xnIpqlCnAM2kqqTcmvxvuyNqronPLqqIWg80q8d90vEbABRZEfssSM_1yfDnEoDVGX_JQL7ACbKRM-TQeCVIUpuKyVlYxeWUk36WpltCJYBKHeq5ZobDupEI-0S/s1600/ssl_setup_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgANADOe3-VFafS2jkR3xnIpqlCnAM2kqqTcmvxvuyNqronPLqqIWg80q8d90vEbABRZEfssSM_1yfDnEoDVGX_JQL7ACbKRM-TQeCVIUpuKyVlYxeWUk36WpltCJYBKHeq5ZobDupEI-0S/s1600/ssl_setup_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
Save  and exit</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
Restart Apache  </div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
</div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
Check if  the ports 80 and  443 are listening:</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> [root@server certs]# netstat -tulpen | grep :80</pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">
 [root@server certs]# netstat -tulpen | grep :443</pre>
<div>
 </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD8TEbDobkGb93B9nWhlOLZ4EBMgAL8kBOEh2soQ0i7GCT22EQtP53bm4sCcYF-xSSz1n8VT5Phb6Gl3lc7T9zh2D-M23cIaKLWPZ7W6CbOmfHHg2S9Zlhr49uZDYxK3NVrRRttG5PgxOj/s1600/checking_the_server_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD8TEbDobkGb93B9nWhlOLZ4EBMgAL8kBOEh2soQ0i7GCT22EQtP53bm4sCcYF-xSSz1n8VT5Phb6Gl3lc7T9zh2D-M23cIaKLWPZ7W6CbOmfHHg2S9Zlhr49uZDYxK3NVrRRttG5PgxOj/s1600/checking_the_server_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
 Allow the ports 80 and 443 via Iptables:</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[root@server certs]# vi /etc/sysconfig/iptables
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT</pre>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
If you are using  Firewalld  please  do :</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[root@server certs]# firewall-cmd --permanent --add-port=80/tcp
[root@server certs]# firewall-cmd --permanent --add-port=443/tcp</pre>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
And restart or reload the firewalls :</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[root@server certs]# service iptables restart
Or 
[root@server certs]# firewall-cmd --reload
</pre>
<div>
 </div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
Open the browser and Check  https://server.hackthesec.co.in</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOmx0xnX6B5fYo-_twuJiDNuyk15sAnp0frIxx-gxdF57ggbCnpv4_dR3K4U95wGlB3B6H4I-c_pW46l-ryCnwwnhdWKWA2QwW-IxYuCNXge3qvpdfn2ITFcPbSg7caNML0i3Df_yAxZgN/s1600/untrusted_option_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOmx0xnX6B5fYo-_twuJiDNuyk15sAnp0frIxx-gxdF57ggbCnpv4_dR3K4U95wGlB3B6H4I-c_pW46l-ryCnwwnhdWKWA2QwW-IxYuCNXge3qvpdfn2ITFcPbSg7caNML0i3Df_yAxZgN/s1600/untrusted_option_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
 Certificate View</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjNEUc61mVEi0DtyqECjspIrvaNH23vzqWFMKthHhfuyOO7knJG4UqjOmPOMIkkXK85SZra-QDAjGFpyMyPuO_idvu2ycfy3mUfxhuBCFnjfXV1CZyo_QVMWIffVm28PWAzBRONgLu9lV5/s1600/certificate_view_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjNEUc61mVEi0DtyqECjspIrvaNH23vzqWFMKthHhfuyOO7knJG4UqjOmPOMIkkXK85SZra-QDAjGFpyMyPuO_idvu2ycfy3mUfxhuBCFnjfXV1CZyo_QVMWIffVm28PWAzBRONgLu9lV5/s1600/certificate_view_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px; text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>
</div>

Apache HTTP Secure Server Configuration for CentOS 7

Apache HTTP Secure Server Configuration Securing the Apache server is one of the most important tasks of the webmaster. In this ex...

How to Block Email from certain TLDs (Top Level Domains) in ISPConfig

<div dir="ltr" style="text-align: left;" trbidi="on">
Block Email from certain TLDs (Top Level Domains) in ISPConfigSpam is an annoyance and there's a multitude of ways to counteract it. However spammers also get smarter and try to bypass filters and stuff. In addition, ICANN has lately approved a great mean gTLDs (generic Top Level Domains), like .biz, .info etc. Some of those gTLDs are, in my opinion, exclusive used by spammers. Lately, I have gotten a lot of spam from the .xyz gTLD. So the question was, how to block email coming from such domains using that gTLD. 
ISPConfig offers some global filters and they can be used to block all such emails and I'll show you how to do that. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIJWQ3LnvWCsgMo0Zo7-ukbmX3P0GQXSRL4rxc8EBm4iLa8DMEA9cYYVEKMr9KNBjXykaGjWMQFHNNjC5LNHPvn0084fkzE15mB0rQO2_H98gbgNoRO7L2rCllZoelB1JNOiFN6fz5_oeG/s1600/how_to_block_emails_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIJWQ3LnvWCsgMo0Zo7-ukbmX3P0GQXSRL4rxc8EBm4iLa8DMEA9cYYVEKMr9KNBjXykaGjWMQFHNNjC5LNHPvn0084fkzE15mB0rQO2_H98gbgNoRO7L2rCllZoelB1JNOiFN6fz5_oeG/s1600/how_to_block_emails_www.hackthesec.co.in.jpg" /></a></div>
 
Log into ISPConfig as Administrator 
The first thing you have to do is to login into ISPConfig with an admin account. The reason for this is that the global filters are being modified. 
Go to the Global Content Filters 
Once you've logged in as administrator, go click on the Email tab in the top navigation menu and then from the left-hand menu select the Content Filter entry in the Global Filters section. 
Add new Content Filter 
 
Once the Postfix Header and Body Checks page is loaded, click on the button to Add new Content Filter 
Fill in the Filter form and submit 
<div>
<div>
Now the Mail Content Filter form has been opened and you can set various things there.</div>
<div>
1. You need to select the server.</div>
<div>
2. Make sure to set Filter to Header Filter.</div>
<div>
3. The Pattern: The Regexp. Pattern. This form field is actually used to check if the header contents of an email that contains the unwanted TLD. For the TLD .xyz you'll have to enter the following pattern:</div>
</div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 18.5667px; margin-bottom: 10px; overflow: auto; padding: 9.5px; white-space: pre-wrap; word-break: break-all; word-wrap: break-word;">/<.+?@.+?\.xyz>/</pre>
</div>
<div>
Let's split this up a bit. The forward slashes "/" are the limiters for the pattern. The "<" and ">" are literal strings. Email addresses are always enclosed in those brackets in the mail header. After the opening "<" the pattern looks for any number of characters, followed again by an "@". After the "@" it looks again for any number of characters until the literal string of ".xyz". The "." in that literal string is escaped, since a "." in regular expressions has a special meaning. By escaping it, we tell the parser, that it's a literal character and not the special regexp one. Finally, it looks for the closing bracket after the TLD. For those proficient with globs, one could say that this pattern is like "<*@*.xyz>"</div>
<div>
 </div>
<div>
 
<div>
The Data field can be left empty. However it will be logged into the mail log and also it can tell other mailservers why their email is being rejected. For this, it's a good thing to give it a meaningful entry, e.g. "No mail from .xyz gTLD allowed". By providing meaningful text it will make your life easier to figure out which filter rule is responsible for blocking an email. If someone complains about email not receiving, check the mail log and you'll see the reason (=Data field) for it.</div>

<div>
 </div>
<div>
4. you can set which Action to take if the pattern matches. The recommendations here are either Reject or Discard. Reject means, the mail won't be accepted by the mail server and the sending mail server will be informed about it with the Data form field given as reason as well. If you chose to use Discard, then the mail server will just delete the email.</div>
<div>
 </div>
<div>
5. Of course, Activate check box also needs to be checked. Otherwise this filter pattern isn't being processedand also press the Save button.</div>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPN-pMoVsFqRDFlFBDy1wR_oZwSQYjNsEm84iUudctpAJ1cRec5ydriWYQaUaViRB1-M3rdQsy0QNelpGKr31pSiUDXFkQlBfd-LmB7RKQlUnWsdhtdWkxAJ-goVnN8wpi0yckqxmfoEwP/s1600/spam_block_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPN-pMoVsFqRDFlFBDy1wR_oZwSQYjNsEm84iUudctpAJ1cRec5ydriWYQaUaViRB1-M3rdQsy0QNelpGKr31pSiUDXFkQlBfd-LmB7RKQlUnWsdhtdWkxAJ-goVnN8wpi0yckqxmfoEwP/s1600/spam_block_www.hackthesec.co.in.png" /></a></div>
 
Repeat this for other TLDs 
Repeat the above steps for other TLDs you want to have blocked. Since you already have one entry, you can just easily copy the Regexp. Pattern and adjust the according tld text string there. 
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a> 
 </div>

How to Block Email from certain TLDs (Top Level Domains) in ISPConfig

Block Email from certain TLDs (Top Level Domains) in ISPConfig Spam is an annoyance and there's a multitude of ways to counteract it. H...

How to Configure Postfix to use Gmail as a Mail Relay

<div align="CENTER" style="line-height: 0.18in;">
Configure
Postfix to use Gmail as a Mail Relay</div>
<div align="CENTER">
 
</div>
<div style="line-height: 0.18in;">
If
you have a Gmail account, you can configure your MTA to relay
outgoing mail through Gmail. This gives you the benefit of Gmail's
reliability and robust infrastructure, and provides you with a simple
means of sending email from the command line.</div>
<div style="line-height: 0.18in;">
In
this tutorial, we will use <a href="http://www.hackthesec.co.in/search/label/postfix">Postfix</a>
as our MTA. Postfix is a free, open-source, actively maintained, and
highly secure <a href="http://www.hackthesec.co.in/search/label/Mail_Server">mail
</a>transfer agent.</div>
<div style="line-height: 0.18in;">
At
each step, we'll cover instructions specific to the following
operating systems:.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrMn_6bemuFMImdt3rnNMGi-Y-7CP0d4xncRey8PVK-Od8lJe-z2bdUGz-ApNY6AnTCa59mUXaE2I_Qr2KPa4KLBnh5VozputsikER_dKtSZHpQ35z-VbHznGZViTZNcQqH2XVnGaZ2fpW/s1600/Gmail-Relay-www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrMn_6bemuFMImdt3rnNMGi-Y-7CP0d4xncRey8PVK-Od8lJe-z2bdUGz-ApNY6AnTCa59mUXaE2I_Qr2KPa4KLBnh5VozputsikER_dKtSZHpQ35z-VbHznGZViTZNcQqH2XVnGaZ2fpW/s1600/Gmail-Relay-www.hackthesec.co.in.png" /></a></div>
<div style="line-height: 0.18in;">
 </div>
<div align="CENTER">
</div>
<ul>
<li><div align="LEFT" style="line-height: 0.18in; margin-bottom: 0in;">
<a href="http://www.hackthesec.co.in/search/label/Debian">Debian</a>
 8 
 </div>
</li>
<li><div align="LEFT" style="line-height: 0.18in; margin-bottom: 0in;">
<a href="http://www.hackthesec.co.in/search/label/ubuntu-15.10">Ubuntu
 15.10</a> 
 </div>
</li>
<li><div align="LEFT" style="line-height: 0.18in; margin-bottom: 0in;">
<a href="http://www.hackthesec.co.in/search/label/centos7">CentOS
 </a>7 
 </div>
</li>
<li><div align="LEFT" style="line-height: 0.18in; margin-bottom: 0in;">
<a href="http://www.hackthesec.co.in/search/label/SUSE">OpenSUSE</a>
 13.2 
 </div>
</li>
<li><div align="LEFT" style="line-height: 0.18in; margin-bottom: 0in;">
Arch
 Linux 2016.02.01 
 </div>
</li>
<li><div align="LEFT" style="line-height: 0.18in;">
FreeBSD
 10.2 
 </div>
</li>
</ul>

<div style="line-height: 0.18in;">
We
will also install mailutils/mailx so that we can send a test email.
Where necessary, we will install supplemental SASL libraries.</div>
<h2 class="western" style="background: #fdfdfd; line-height: 110%; margin-bottom: 0.1in; margin-top: 0.22in;">
Ubuntu/Debian:-</h2>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 142%; margin-bottom: 0.1in; padding: 0in;"><code class="western"># apt-get update && apt-get install postfix mailutils</code></pre>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">When
prompted for "General type of mail configuration,"
choose </code><code class="western">Internet
Site</code><code class="western">.</code></div>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">When
prompted for a "Mail name," choose a hostname to be used in
<a href="http://www.hackthesec.co.in/search/label/mail">mail</a>
headers as the origin of your emails. A fully-qualified domain name
is preferred, but using your machine's simple hostname is OK.
Regardless of what you enter here, your return address will appear to
recipients as your Gmail address.</code></div>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">You
may be prompted to set the "Root and postmaster mail recipient."
Enter </code><code class="western">root</code><code class="western">,
or another user who should receive mail subsystem notifications.</code></div>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">For
any other prompts, you can choose the default values.</code></div>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Fedora</code><code class="western"></code></h2>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.35in; margin-bottom: 0.1in; padding: 0in;"><code class="western"># </code><code class="western">dnf update && dnf install postfix mailx</code></pre>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">CentOS</code></h2>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.35in; margin-bottom: 0.1in; padding: 0in;"><code class="western"># </code><code class="western">yum update && yum install postfix mailx cyrus-sasl cyrus-sasl-plain</code></pre>
<h2 class="western" style="background: rgb(253, 253, 253) none repeat scroll 0% 0%; border: medium none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">OpenSUSE</code><code class="western"></code></h2>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.35in; margin-bottom: 0.1in; padding: 0in;"><code class="western"># </code><code class="western">zypper update && zypper install postfix mailx cyrus-sasl</code></pre>
<h2 class="western" style="background: rgb(253, 253, 253) none repeat scroll 0% 0%; border: medium none; line-height: 110%; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Arch
Linux</code><code class="western"></code></h2>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.35in; margin-bottom: 0.1in; padding: 0in;"><code class="western"># </code><code class="western">pacman -Sy postfix mailutils</code></pre>
<h2 class="western" style="background: rgb(253, 253, 253) none repeat scroll 0% 0%; border: medium none; line-height: 110%; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">FreeBSD</code></h2>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">Compile
<a href="http://www.hackthesec.co.in/search/label/postfix">Postfix
</a>from the ports collection to incorporate support for SASL:</code></div>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.35in; margin-bottom: 0.1in; padding: 0in;"><code class="western"># </code><code class="western">portsnap fetch extract update</code>
<code class="western"># </code><code class="western">cd /usr/ports/mail/postfix</code>
<code class="western"># </code><code class="western">make config</code></pre>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">In
the configuration dialogs, select </code><code class="western">SASL
support</code><code class="western">.
All other options can remain the same. Then:</code></div>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.35in; margin-bottom: 0.1in; padding: 0in;"><code class="western"># </code><code class="western">make install clean</code></pre>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">Mailx
can be installed from the binary package:</code></div>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.35in; margin-bottom: 0.1in; padding: 0in;"><code class="western"># </code><code class="western">pkg install mailx</code></pre>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
 
<code class="western">Configure Gmail Authentication</code></h2>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">Create
or modify a password file which will be used by Postfix to establish
authentication with Gmail. In the authentication information below,
replace </code><code class="western">username</code><code class="western"> with
your Gmail username and </code><code class="western">password</code><code class="western"> with
your Gmail password. If you are using a custom Gmail Apps domain
name, you may replace </code><code class="western">gmail.com</code><code class="western"> with
your Google Apps domain. The password file will reside in the
<a href="http://www.hackthesec.co.in/search/label/postfix">Postfix</a>
configuration directory. The file can be named whatever you like, but
the recommended filename is</code><code class="western">sasl_passwd</code><code class="western">.</code></div>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Debian,
Ubuntu, Fedora, CentOS, OpenSUSE, Arch Linux:</code></h2>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">Postfix
configuration files reside in the directory </code><code class="western">/etc/postfix</code><code class="western">.
Create or edit the password file:</code></div>
 
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.35in; margin-bottom: 0.1in; padding: 0in; text-align: left;"><code class="western"># </code><code class="western">vi /etc/postfix/sasl_passwd</code></pre>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">Add
the line:</code></div>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">[smtp.gmail.com]:587   username@gmail.com:password</code></pre>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">Save
and close the file. Your Gmail password is stored as plaintext, so
make the file accessible only by root:</code></div>
<pre class="western" style="background: #f5f5f5; border: 1px solid #cccccc; line-height: 0.19in; margin-bottom: 0.1in; padding: 0.09in;"><code class="western"># chmod 600 /etc/postfix/sasl_passwd</code></pre>
<h2 class="western" style="background: rgb(253, 253, 253) none repeat scroll 0% 0%; border: medium none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">FreeBSD:</code></h2>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">Postfix
configuration files reside in the directory </code><code class="western">/usr/local/etc/postfix</code><code class="western">.
Create or edit the password file:</code></div>
<pre class="western" style="background: #f5f5f5; border: 1px solid #cccccc; line-height: 0.19in; margin-bottom: 0.1in; padding: 0.09in;"><code class="western"># vi /usr/local/etc/postfix/sasl_passwd</code></pre>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">Add
the line:</code></div>
<pre class="western" style="background: #f5f5f5; border: 1px solid #cccccc; line-height: 0.19in; margin-bottom: 0.1in; padding: 0.09in;"><code class="western">[smtp.gmail.com]:587 username@gmail.com:password</code></pre>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">Save
and close the file. Make it accessible only by root:</code></div>
<pre class="western" style="background: #f5f5f5; border: 1px solid #cccccc; line-height: 0.19in; margin-bottom: 0.1in; padding: 0.09in;"><code class="western">#chmod 600 /usr/local/etc/postfix/sasl_passwd</code></pre>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Configure
Postfix</code></h2>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western">There
are six parameters which must be set in the Postfix configuration
file </code><code class="western">main.cf</code><code class="western">.
The parameters are:</code></div>
<div style="border: none; line-height: 0.18in; padding: 0in;">
<code class="western"> </code><code class="western">relayhost</code><code class="western">,
which specifies the mail relay host and port number. The host name
will be enclosed in brackets to specify that no MX lookup is
required.</code><code class="western">smtp_use_tls</code><code class="western">,
which enables (or disables) transport layer
security.</code><code class="western">smtp_sasl_auth_enable</code><code class="western">,
which enables (or disables) SASL
authentication.</code><code class="western">smtp_sasl_security_options</code><code class="western">,
which in the following configuration will be set to empty, to ensure
that no Gmail-incompatible security options are
used. smtp_sasl_password_maps, which specifies the password file
to use. This file will be compiled and hashed by </code><code class="western">postmap</code><code class="western"> in
a later step.</code><code class="western">smtp_tls_CAfile</code><code class="western">,
which specifies the list of certificate authorities to use when
verifying server identity.</code></div>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Debian,
Ubuntu, Arch Linux:</code></h2>
<div style="border: none; padding: 0in;">
<code class="western">Edit
the main Postfix configuration file:</code></div>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#</code><code class="western">vi /etc/postfix/main.cf</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Add
or modify the following values:</code></div>
<pre class="western" style="background: rgb(245, 245, 245) none repeat scroll 0% 0%; border: medium none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">relayhost = [smtp.gmail.com]:587</code>
<code class="western">smtp_use_tls = yes</code>
<code class="western">smtp_sasl_auth_enable = yes</code>
<code class="western">smtp_sasl_security_options =</code>
<code class="western">smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd</code>
<code class="western">smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Save
and close the file.</code></div>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Fedora,
CentOS:</code></h2>
<div style="border: none; padding: 0in;">
<code class="western">Edit
the main Postfix configuration file:</code></div>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#vi /etc/postfix/main.cf</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Add
or modify the following values:</code></div>
<pre class="western" style="background: rgb(245, 245, 245) none repeat scroll 0% 0%; border: medium none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">relayhost = [smtp.gmail.com]:587</code>
<code class="western">smtp_use_tls = yes</code>
<code class="western">smtp_sasl_auth_enable = yes</code>
<code class="western">smtp_sasl_security_options =</code>
<code class="western">smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd</code>
<code class="western">smtp_tls_CAfile = /etc/ssl/certs/ca-bundle.crt</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Save
and close the file.</code></div>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">OpenSUSE:</code></h2>
<div style="border: none; padding: 0in;">
<code class="western">Edit
the main Postfix configuration file:</code></div>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#vi /etc/postfix/main.cf</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Add
or modify the following values:</code></div>

<pre class="western" style="background: rgb(245, 245, 245) none repeat scroll 0% 0%; border: medium none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">relayhost = [smtp.gmail.com]:587</code>
<code class="western">smtp_use_tls = yes</code>
<code class="western">smtp_sasl_auth_enable = yes</code>
<code class="western">smtp_sasl_security_options =</code>
<code class="western">smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd</code>
<code class="western">smtp_tls_CAfile = /etc/ssl/certs/ca-bundle.crt</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Save
and close the file.</code></div>
<div style="border: none; padding: 0in;">
 </div>
<div style="border: none; padding: 0in;">
<code class="western">OpenSUSE
also requires that the Postfix master process configuration file
master.cf be modified. Open it for editing:</code></div>
<div style="border: none; padding: 0in;">
 
</div>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#</code><code class="western">vi /etc/postfix/master.cf</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Locate
the line which reads:</code></div>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#tlsmgr unix - - n 1000? 1 tlsmg</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Uncomment
it, so it reads:</code></div>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">tlsmgr unix - - n 1000? 1 tlsmg</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Save
and close the file.</code></div>
<h2 class="western" style="background: rgb(253, 253, 253) none repeat scroll 0% 0%; border: medium none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">FreeBSD:</code></h2>
<div style="border: none; padding: 0in;">
<code class="western">Edit
the main Postfix configuration file:</code></div>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#</code><code class="western">vi /usr/local/etc/postfix/main.cf</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Add or modify
the following values:</code></div>
<pre class="western" style="background: rgb(245, 245, 245) none repeat scroll 0% 0%; border: medium none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">relayhost = [smtp.gmail.com]:587</code>
<code class="western">smtp_use_tls = yes</code>
<code class="western">smtp_sasl_auth_enable = yes</code>
<code class="western">smtp_sasl_security_options =</code>
<code class="western">smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_passwd</code>
<code class="western">smtp_tls_CAfile = /etc/mail/certs/cacert.pem</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Save and
close the file.</code></div>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Process
Password File</code></h2>
<div style="border: none; padding: 0in;">
<code class="western">Use
postmap to compile and hash the contents of sasl_passwd. The results
will be stored in your Postfix configuration directory in the file
sasl_passwd.db.</code></div>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Debian,
Ubuntu, Fedora, CentOS, OpenSUSE, Arch Linux:</code></h2>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#</code><code class="western">postmap /etc/postfix/sasl_passwd</code></pre>
<h2 class="western" style="background: rgb(253, 253, 253) none repeat scroll 0% 0%; border: medium none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">FreeBSD</code><code class="western"></code></h2>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#</code><code class="western">postmap /usr/local/etc/postfix/sasl_passwd</code></pre>
<h2 align="CENTER" class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Restart
Postfix</code></h2>
<div style="border: none; padding: 0in;">
<code class="western">Restart
the Postfix service, putting your changes into effect.</code></div>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Debian,
Ubuntu, Fedora, CentOS, OpenSUSE, Arch Linux:</code></h2>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#</code><code class="western">systemctl restart postfix.service</code></pre>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">FreeBSD:</code></h2>
<div style="border: none; line-height: 0.27in; padding: 0in;">
<code class="western">To
start the Postfix service for this session only:</code></div>
 
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#</code><code class="western">service postfix onestart</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">To
start Postfix automatically when the system initializes, open
</code><code class="western">/etc/rc.conf</code><code class="western">
for editing:</code></div>
 
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#</code><code class="western">vi /etc/rc.conf</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Add
the line:</code></div>

<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">postfix_enable=YES</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Save
and close the file. You may then run:</code></div>
 
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">#</code><code class="western">service postfix start</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">To
start Postfix.</code></div>
<h2 align="CENTER" class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Enable
"Less Secure Apps" In Gmail</code></h2>
<div style="border: none; padding: 0in;">
<code class="western">By
default, only the most secure sign-ins, such as logging in to Gmail
on the web, are allowed for your Gmail account. To permit relay
requests, log in to your Gmail account and turn on Allow less secure
apps.</code></div>
<div style="border: none; padding: 0in;">
<code class="western">For
more information, review the Google Support document "<a href="https://support.google.com/accounts/answer/6010255">Allowing
less secure apps to access your account</a>."</code></div>
<h2 align="LEFT" class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Send
A Test Email</code></h2>
<div style="border: none; padding: 0in;">
<code class="western">Test
your new configuration by sending an email using the <a href="http://www.hackthesec.co.in/search/label/mail">mail
</a>command. Run:</code></div>

<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">mail -s "Subject Here" recipient@domain.com < textfile</code></pre>
<div style="border: none; padding: 0in;">
<code class="western">Where
textfile is the name of a file containing the text to be sent.</code></div>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Troubleshooting(Through
Log)</code></h2>
<div style="border: none; padding: 0in;">
<code class="western">If
it's not working, check the logs for any Postfix errors:</code></div>
<h2 class="western" style="background: rgb(253, 253, 253) none repeat scroll 0% 0%; border: medium none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Debian:</code></h2>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">less /var/log/mail.log</code></pre>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">Ubuntu,
Fedora, CentOS, OpenSUSE, Arch Linux:</code></h2>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">journalctl</code></pre>
<h2 class="western" style="background: #fdfdfd; border: none; line-height: 0.27in; margin-bottom: 0.1in; margin-top: 0.22in; padding: 0in;">
<code class="western">FreeBSD:</code></h2>
<pre class="western" style="background: #f5f5f5; border: none; line-height: 0.19in; margin-bottom: 0.1in; padding: 0in;"><code class="western">less /var/log/maillog</code></pre>
<div style="border: none; padding: 0in;">
 
</div>
<a href="http://hackthesec.co.in/">Hackthesec.co.in</a>

How to Configure Postfix to use Gmail as a Mail Relay

Configure Postfix to use Gmail as a Mail Relay If you have a Gmail account, you can configure your MTA to relay outgoing mail throug...

How To Install FreePBX on CentOS

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" itemprop="headline" style="background-color: #fdfdfd; box-sizing: border-box; font-family: proxima-nova, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 39px; line-height: 1.1; margin: 21px 0px 0px;">
Install FreePBX on CentOS</h1>
<div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
PBX (stands for private branch exchange) is a private telephone network used that can be very easily connected to the public landline and mobile networks. The PBX network also provides audio, video and instant messaging communication through the TCP/IP protocol stack for its internal network and interconnects its internal network with the Public Switched Telephone Network (PSTN) for telephony communication.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggyfE0RGe3F6bNgKJwgmfEIGAcZp-aiPwwHnE7ozF_zlWvKp6oKjpXoSWvr5RXrWcAJ0XpN_TmttG36GOIdt3cSBN8CNZCjuQBl6Xmstji8pMAmlkpIxsB-Pgel9vbFNWYbrxi08fkUEOx/s1600/asterisk_centos_freepbx_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggyfE0RGe3F6bNgKJwgmfEIGAcZp-aiPwwHnE7ozF_zlWvKp6oKjpXoSWvr5RXrWcAJ0XpN_TmttG36GOIdt3cSBN8CNZCjuQBl6Xmstji8pMAmlkpIxsB-Pgel9vbFNWYbrxi08fkUEOx/s1600/asterisk_centos_freepbx_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
 </div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
A lot of successful businesses are aiming to have their own telephony system that will allow them to have many different features, lower their costs using VoIP, especially on international calls, but inside that company as well. Some of them are choosing hosted solution, some are having their own In-House solution. In this tutorial we are installing FreePBX & Asterisk VoIP on a base <a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS</a> 6.4 installation.</div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
Asterisk is an open source software implementation of a telephone private branch exchange (PBX); it was created in 1999. Like any PBX, it allows attached telephones to make calls to one another, and to connect to other telephone services, such as the public switched telephone network (PSTN) and Voice over Internet Protocol (VoIP) services. Its name comes from the asterisk symbol, *. Asterisk includes many features like Voice mail, conference calling, Interactive voice response, automatic call distribution, Fax to email services etc.</div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
In order to control Asterisk, we will use FreePBX. It is open source graphical user interface that makes asterisk management very easy. It is usually included in the asterisk distribution, but it can be installed manually if needed. FreePBX distribution is unified server distribution that includes all of the software packages and dependencies required for Asterisk VoIP server, such as:</div>
<div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;">
</div>
<ul style="text-align: left;">
<li><a href="http://www.hackthesec.co.in/search/label/Apache" target="_blank">Apache Web Server</a></li>
<li>Cyrus SASL (Simple Authentication Security Layer)</li>
<li>Dnsmasq</li>
<li><a href="http://www.hackthesec.co.in/search/label/fail2ban" target="_blank">Fail2ban</a></li>
<li><a href="http://www.hackthesec.co.in/search/label/Iptables" target="_blank">iptables</a></li>
<li>Mailx</li>
<li><a href="http://www.hackthesec.co.in/search/label/Mysql" target="_blank">MySQL </a>Server</li>
<li>Network Time Protocol</li>
<li><a href="http://www.hackthesec.co.in/search/label/VPN" target="_blank">OpenVPN </a>Server</li>
<li><a href="http://www.hackthesec.co.in/search/label/postfix" target="_blank">Postfix </a>MTA</li>
<li>Prosody XMPP Server</li>
<li>TFTP Server</li>
<li>Very Secure FTP Daemon (<a href="http://www.hackthesec.co.in/search/label/vsftp" target="_blank">vsftpd</a>)</li>
<li>Vim text editor</li>
</ul>
 
<div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;">
</div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
Before we start with the installation, we must make sure that the server has decent and stable internet connection and it should be in a geographical location near the place where the majority of our calls will come from. We also need to determine the size of our server. That will depends mostly on the number of the concurrent calls that we anticipate to have. It is not that bad even if we choose wrong, since we can resize our server at any time later, but some best practices showed that we should follow this calculations.</div>
<div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;">
</div>
<ul style="text-align: left;">
<li>Server with 512 MB RAM can support approximately 5-15 concurrent calls</li>
<li>Server with 1 GB can support approximately 15-25 concurrent calls</li>
<li>Server with 2 GB can support approximately 25-50 concurrent calls</li>
<li>Server with 4 GB can support approximately 50-100 concurrent calls</li>
<li>Server with 8 GB can support approximately 100-175 concurrent calls</li>
<li>Server with 16 GB can support approximately 175+ concurrent calls</li>
</ul>
 
<div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;">
</div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
Next, we must make sure that our fully qualified domain name is properly set in our hosts file and make sure that the server time setting match the appropriate time zone that server belongs to. The last step before we actually start with the installation is to update our currently installed packages from the standard <a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS </a>repositories:</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># yum update
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
Now, we are ready to start the deployment. We will use installation script that we need to download. The script will download some file during the installation, so we will use <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;">/tmp</code> folder during the installations.</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># cd /tmp
# wget http://upgrades.freepbxdistro.org/blank-centos-installer/5.211.65-track/5.211.65-1-Installer-Script.sh
# /tmp/4.211.64-1-Installer-Script.sh
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
Once it is finished, we will have fully functional IP-PBX server, based on the FreePBX Distribution. Now, we need to test if our GUI works. To do that, we will open our browser and point to the fully qualified name or the IP of our newly installed PBX, we will be presented with FreePBX administrator-account setup screen. We should setup our admin account using the GUI. That will be the information that we will use later for managing the server through the GUI.</div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
If we want to upgrade out FreePBX system later, we can search for available upgrades, download the upgrade script and execute it, similar to the installation process. First, we need to determine which our current version is:</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># cat /etc/schmooze/pbx-version
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
Then, we can check the change list for the new version that is available and make decision whether we would like to upgrade or not. The upgrade process work same as the installation. The upgrade script might ask us for some additional information or confirmation. Once the upgrade is done we can check and confirm that our system is upgraded but executing:</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># cat /etc/schmooze/pbx-version
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
If there is more than one upgrade script available, we should execute every upgrade script, one by one, is sequential order and save every script in the same folder. This Asterisk and OpenPBX server are part of a very wide field and there are a lot of additional things to be considered and explored. However, this tutorial underlines the very basic information and steps that are required in order to get our own PBX system up and running.</div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<a href="http://hackthesec.co.in/" target="_blank">hackthesec.co.in</a> <a href="http://hackthesec.co.in/" target="_blank">hackthesec</a></div>
</div>
</div>

How To Install FreePBX on CentOS

Install FreePBX on CentOS PBX (stands for private branch exchange) is a private telephone network used that can be very easily connecte...