Hack The Sec-Leading Resource Of Linux Tutorial: centos6

How to install Cherokee Web server on Ubuntu and Rhel/CentOS linux

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #990000; font-family: "verdana" , "geneva" , sans-serif; font-size: large;"><span style="line-height: 26px;"><u><b>Installing Cherokee Web server on Linux</b></u></span></span><br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Cherokee is an open-source cross-platform web server that runs on Linux, BSD variants, Solaris, OS X, and Windows. It is a lightweight,high-performance web server/reverse proxy licensed under the GNU General Public License. Its goal is to be fast and fully functional yet still light. Major features of Cherokee include a graphical administration interface named cherokee-admin, and a modular light-weight design.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVawWpuWBMIYtnPXn0m-G5poju3S9W-8SlRlmxNULg04FrbFryQWmLZbFPhbm1kapl6h_WZvanm2hj9ali-ENNF9KRG0HslGrNYrtpnecf532ESdaVV5n4jTFOalSEibVhmO6Bs1lLST2t/s1600/cherokee.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVawWpuWBMIYtnPXn0m-G5poju3S9W-8SlRlmxNULg04FrbFryQWmLZbFPhbm1kapl6h_WZvanm2hj9ali-ENNF9KRG0HslGrNYrtpnecf532ESdaVV5n4jTFOalSEibVhmO6Bs1lLST2t/s1600/cherokee.png" /></a></div>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Independent tests have shown Cherokee to be better performing than Apache when serving up both static and dynamic content.</span></span><br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Cherokee is maintained and developed by an open source community</span></span><br />
<u><b><span style="color: #0b5394;"><span style="font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">Cherokee</span><span style="font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"> </span><span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">features</span></span></span></b></u><br />
<br />
<ul style="text-align: left;">
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">TLS and SSL</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">Virtual servers</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">URL rewriting and redirections supporting regular expressions</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">Authentication via htdigest, htpasswd, LDAP, MySQL, PAM, plain, and fixed list.</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">Reverse HTTP proxy</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">HTTP load balancing</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">Traffic shaping</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">Custom and Apache compatible log format.</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">Server Side Includes (SSI)</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">CGI</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">FastCGI</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">SCGI</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">uWSGI support</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">chroot support</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">RRDtool statistics</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">PHP</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">Ruby on Rails</span><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">ColdFusion</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">GlassFish</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">Django</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">Etc... More </span><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Features</span></span></li>
</ul>
<div>
<span style="color: #0b5394; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Setup Cherokee on Ubuntu 12.04, 13.04, 13.10, 14.10</u></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">First, install required package:</span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">#sudo apt-get install python-software-properties</pre>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Enable Cherokee  PPA (Personal Package Archive) repository:</span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># sudo add-apt-repository ppa:cherokee-webserver
# sudo apt-get update</pre>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">If your system does not come with add-apt-repository, try installing software-properties-common first.</span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># sudo apt-get install software-properties-common</pre>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Install cherokee web server:</span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># apt-get install cheroke cherokee-admin -y</pre>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #0b5394; font-family: "verdana" , "geneva" , sans-serif;"><b><u>Cherokee in RHEL/CentOS 5.x/6.x and Fedora linux</u></b></span></span><br />
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">For installation Cherokee web server on RHEL/CentOS or Fedora linux using yum command required <a href="http://www.hackthesec.co.in/2016/01/centos-rhel-scientific-linux-6-enable.html" target="_blank"><b>EPEL repository</b></a>.</span></span><br />
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">See Here:-<a href="http://www.hackthesec.co.in/2016/01/centos-rhel-scientific-linux-6-enable.html" target="_blank">CentOS / RHEL / Scientific Enable & Install EPEL Repo</a></span></span><br />
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="background-color: white; font-size: 15px; line-height: 26px;"><b>Install cherokee web server using yum command:</b></span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px; margin-top: 10px; overflow: auto; padding: 10px; width: auto; word-break: break-all;"># yum install cherokee -y</pre>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Start Cherokee Service</u></b></span></span>
<br />
<span style="background-color: white; color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">Now that Cherokee is installed, we can check whether it is running</span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px; margin-top: 10px; overflow: auto; padding: 10px; width: auto; word-break: break-all;">#sudo service cherokee status</pre>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif;"></span>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">To start Cherokee type following command:</span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px; margin-top: 10px; overflow: auto; padding: 10px; width: auto; word-break: break-all;"># service cherokee start</pre>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif;"></span>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Start Cherokee on boot:</span></span>
<br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px; margin-top: 10px; overflow: auto; padding: 10px; width: auto; word-break: break-all;"># chkconfig cherokee on</pre>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">We can also verify that Cherokee is running by visiting server IP address. We should be greeted by this page.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidQrXNrMISKn8xMLk7ZTPeGpHm9GKSEZMJqkHWHkdcKkotH2jM-lnk9cVsgD0jC7o1nvvXkKbetLkZBbCk7HsQkyFxCUdtWbbJw1XkTqt1eA5F_Zsz_ShxOOIFGualBfozSqC03teefyms/s1600/cherokee_testpage_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidQrXNrMISKn8xMLk7ZTPeGpHm9GKSEZMJqkHWHkdcKkotH2jM-lnk9cVsgD0jC7o1nvvXkKbetLkZBbCk7HsQkyFxCUdtWbbJw1XkTqt1eA5F_Zsz_ShxOOIFGualBfozSqC03teefyms/s1600/cherokee_testpage_hackthesec.co.in.png" /></a></div>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span>
<span style="background-color: white; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">Administering Cherokee</span></u></b></span></span><span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Cherokee is being able to manage all of its configurations through a simple to use web interface. The web management interface does not and should not be running by default. It can be started through the cherokee-admin command.</span></span>
<br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px; margin-top: 10px; overflow: auto; padding: 10px; width: auto; word-break: break-all;"># sudo cherokee-admin</pre>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif;"></span>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Cherokee-admin will output the temporary credentials to use in the web interface. Copy the one time password generated.</span></span><br />
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">You can Access cherokee admin from specific network address using the following command</span></span>
<br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px; margin-top: 10px; overflow: auto; padding: 10px; width: auto; word-break: break-all;">sudo cherokee-admin -b 192.168.0.11</pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLqNoBBlY21twbg3dTcYYFZMQv_GpaRyB2Z0p9u8VlwpTWcmxuhN5-lCCZpKeRrtCW3AItooy24p7PPAjO7JhVuFxiqTyV8SHbChzj6y_Pro3SDCy-NUdYUxm-_Dfh2xXIwT4CsFACG05Q/s1600/cherokee_server_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLqNoBBlY21twbg3dTcYYFZMQv_GpaRyB2Z0p9u8VlwpTWcmxuhN5-lCCZpKeRrtCW3AItooy24p7PPAjO7JhVuFxiqTyV8SHbChzj6y_Pro3SDCy-NUdYUxm-_Dfh2xXIwT4CsFACG05Q/s1600/cherokee_server_hackthesec.co.in.png" /></a></div>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"></span>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"><br /></span><span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"><b>Cherokee Dashboard</b></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZNF8zf1HygzJf0pcW9dunih17d_-WOmWOOpLjMtqDXGzGIDt7kEQg7N1tjHctQ2CypfHlSCyxJl2UA3BTfNQU7UFqeTKnCFShJOzOhn_PB14lJj42BfHZ41Xpp1YC81mkNchH0FNMfZmq/s1600/cherokee_admin_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZNF8zf1HygzJf0pcW9dunih17d_-WOmWOOpLjMtqDXGzGIDt7kEQg7N1tjHctQ2CypfHlSCyxJl2UA3BTfNQU7UFqeTKnCFShJOzOhn_PB14lJj42BfHZ41Xpp1YC81mkNchH0FNMfZmq/s1600/cherokee_admin_hackthesec.co.in.png" /></a></div>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"><br /></span>
<div style="text-align: center;">
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"><span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"><a href="http://www.hackthesec.co.in/" target="_blank">www.hackthesec.co.in</a></span><span style="background-color: transparent;">
</span></span></div>
</div>

How to install Cherokee Web server on Ubuntu and Rhel/CentOS linux

Installing Cherokee Web server on Linux Cherokee is an open-source cross-platform web server that runs on Linux, BSD variants, Solaris, OS...

How to install OpenVas in Centos 6/7 and Fedora 23/24

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: red; font-family: verdana, geneva, sans-serif; font-size: large;"><span style="line-height: 26px;"><b><u>Install OpenVas in Centos 6/7 and Fedora 23/24</u></b></span></span><br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">OpenVAS (Open Vulnerability Assessment System,the name of the fork originally known as GNessUs) is a framework of several services and tools offering a vulnerability scanning and vulnerability management solution.</span></span><br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">All OpenVAS products are Free Software. Most components are licensed under the GPL.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt4XDZZrKy47zsbXI1ZEdj8GCh69Mke8hyphenhyphenEvhu4VtC5W1uKkabhsipVM7ki3rew5RlK2uxjwWzWCnRm7eo06UI78OiC9JlcOHPc__oFD-RmM2A1ig1FeQIgCgr5FsB0LfK1LO6CpTwzi6S/s1600/OpenVAS4-Structure_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt4XDZZrKy47zsbXI1ZEdj8GCh69Mke8hyphenhyphenEvhu4VtC5W1uKkabhsipVM7ki3rew5RlK2uxjwWzWCnRm7eo06UI78OiC9JlcOHPc__oFD-RmM2A1ig1FeQIgCgr5FsB0LfK1LO6CpTwzi6S/s1600/OpenVAS4-Structure_hackthesec.co.in.png" /></a></div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">OpenVas began, under the name of GNessUs, as a fork of the previously open source Nessus scanning tool after Tenable Network Security changed it to a proprietary (closed source) license in October 2005. OpenVAS was originally proposed by pentesters at Portcullis Computer Security and then announced by Tim Brown on Slashdot.</span></span><br />
<br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">OpenVAS is a member project of Software in the Public Interest.</span></span><br />
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>INSTALLATION</u></b></span></span><br />
<span style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">First you need </span><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">Install required packages Bellow</span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">yum install wget bzip2 texlive net-tools alien</span></span></pre>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">After that need to add atomic repository to install openvas as follows</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">wget -q -O - http://www.atomicorp.com/installers/atomic |sh</span></span></pre>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><span style="color: #222222;">Now Disable The </span><b><span style="color: red;">SELINUX</span></b></span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">Edit /etc/selinux/config </span></span></pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of these two values:
#     targeted - Targeted processes are protected,
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted</pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now install Openvas by using following command in terminal by using yum</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">yum -y install openvas</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now Edit the openvas config file and add or uncomment the following lines</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">edit /etc/redis.conf</span></span></pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">unixsocket /tmp/redis.sock
unixsocketperm 700</pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Restart Redis</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">systemctl enable redis && systemctl restart redis</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Once All done then start the setup process by using  the command <b>openvas-setup</b>. This is going to take some time. You will be prompted for some information shortly</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">openvas-setup</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">It downloads the latest databases once it completed, enter the Administrator password</span></span><br />
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">Step 2: Configure GSAD
The Greenbone Security Assistant is a Web Based front end
for managing scans. By default it is configured to only allow
connections from localhost.

Allow connections from any IP? [Default: yes] 
Allow connections from any IP? [Default: yes] Redirecting to /bin/systemctl restart
  gsad.service

Step 3: Choose the GSAD admin users password.
The admin user is used to configure accounts,
Update NVT's manually, and manage roles.

Enter administrator username [Default: admin] : Enter Administrator Password:
Verify Administrator Password:
Empty password not allowed.

Enter Administrator Password:
Verify Administrator Password:
Redirecting to /bin/systemctl start redis.service

Setup complete, you can now access GSAD at:
https://192.168.2.56:9392</pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">once completed, you are able to login.Before that, we're just going to disable firewalld service</span></span><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">. my case i have centos 7 it's depend on os version</span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: 'Courier New', Courier, monospace; font-size: 15px; line-height: 15.6px;">systemctl stop firewalld
systemctl mask firewalld</span><span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px; white-space: normal;">
</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Or </span></span><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">You can exception for tcp 9392</span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">firewall-cmd --permanent --zone=public --add-port=9392/tcp
firewall-cmd --reload</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now Go to your web browser, type the url as https://192.168.2.56:9392(In my case my ip address is 192.168.2.56) default username is admin and enter the password entered during setup, and you should be able to login.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSczFKT-um6AclB_AuWMs1-1whexF0uSOqHcTOGX-HDQdikKe6A7CERS8oAIXT3uBi3BZaX4ranoMc_4uLFXU4NY8Ecgy2gqE0Vkpcd41xZO9sbgpl0dhaY09SsZ6MB_5jqhiPX2Vtsqg5/s1600/security-alert-for-openvas_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSczFKT-um6AclB_AuWMs1-1whexF0uSOqHcTOGX-HDQdikKe6A7CERS8oAIXT3uBi3BZaX4ranoMc_4uLFXU4NY8Ecgy2gqE0Vkpcd41xZO9sbgpl0dhaY09SsZ6MB_5jqhiPX2Vtsqg5/s1600/security-alert-for-openvas_hackthesec.co.in.png" /></a></div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">After that you will see a login panel check the screenshot bellow</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNmKfuYDy50xhNm6MiA1kCUKVEWStPTifR-HQ2UclhSaNysQyJXV8fW4uU2_mFD2yhxi1Tvw_MexFi7rUPXXKxaN8mdvanL74m0Iqhm1yRHTp74Bac0F8xFJovwjmCjT-8CD048Cl7LQi-/s1600/openvas-webinterface-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNmKfuYDy50xhNm6MiA1kCUKVEWStPTifR-HQ2UclhSaNysQyJXV8fW4uU2_mFD2yhxi1Tvw_MexFi7rUPXXKxaN8mdvanL74m0Iqhm1yRHTp74Bac0F8xFJovwjmCjT-8CD048Cl7LQi-/s1600/openvas-webinterface-hackthesec.co.in.png" /></a></div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">To start a scan, enter an IP in the start scan area.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikNNbd_UUq8606k5ij7SghA-cDfHC4hmxasUL0D2bJ1s_LHJPFuk678j2OQFr_0qxOi4fhk31Fc-I6FsvvePIJ7xOKSs3CTh1Y-OlvNo4I0nsmpKaC4kuIO5jccNAAe3OzrWfwgzsjreL8/s1600/quick-scan-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikNNbd_UUq8606k5ij7SghA-cDfHC4hmxasUL0D2bJ1s_LHJPFuk678j2OQFr_0qxOi4fhk31Fc-I6FsvvePIJ7xOKSs3CTh1Y-OlvNo4I0nsmpKaC4kuIO5jccNAAe3OzrWfwgzsjreL8/s1600/quick-scan-hackthesec.co.in.png" /></a></div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">You can also configure the report format by going into Configuration section.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWJBatKxWYrb4Y8ZJlmTXxqXBrFo_W79L1x2BPn3HXcfCuh7LK9G8JBF0xVg48JwUpjB_rebHtsDHSSxTwhEfoGEWrqLG4Uz5LDGbaW_NnB96qv_cnRx_wn4aBX9s_ZEZXX8AWnjpEk4Qb/s1600/report-format-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWJBatKxWYrb4Y8ZJlmTXxqXBrFo_W79L1x2BPn3HXcfCuh7LK9G8JBF0xVg48JwUpjB_rebHtsDHSSxTwhEfoGEWrqLG4Uz5LDGbaW_NnB96qv_cnRx_wn4aBX9s_ZEZXX8AWnjpEk4Qb/s1600/report-format-hackthesec.co.in.png" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Installation Done</span></span></div>
<div class="separator" style="clear: both; text-align: left;">
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Thanks</span></span></div>
<div class="separator" style="clear: both; text-align: left;">
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></span></div>
</div>

How to install OpenVas in Centos 6/7 and Fedora 23/24

Install OpenVas in Centos 6/7 and Fedora 23/24 OpenVAS (Open Vulnerability Assessment System,the name of the fork originally known as GNes...

How to install X-Cart 5 on CentOS

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #990000; font-family: verdana, geneva, sans-serif; font-size: large;"><span style="line-height: 26px;"><b><u>Install X-Cart 5 on CentOS</u></b></span></span><br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">X-Cart is a PHP/MySQL based secure shopping cart software with open source code.</span></span><br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>X-Cart:</u></b></span></span><br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">1) To start you just need to install the basic pack. Then you can extend it with skins/add-ons with one click right from the admin back end.</span></span><br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">2) When you need to upgrade/update the store, click just one button and the software handles this automatically.</span></span><br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">3) When you need an extra feature you can have us build it or hire a developer you like.</span></span><br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">4) When you need assistance, you can choose between community, which is very active by the way, and official technical support.</span></span><br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">5) When you need to accept credit cards right on your website, you simply sign up for X-Payments, set it up and go.</span></span><br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">6) There is a one time fee for the license.</span></span><br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>The latest stable version of X-Cart is 5.2.13 and it requires:</u></b></span></span><br />
<br />
<ul style="text-align: left;">
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">PHP 5.3.10 or higher with the following PHP extensions enabled: libCURL, PDO, Phar and GD Graphics Library version 2.0.x+ (or ImageMagick). Also, safe_mode and magic_quotes_runtime settings should be disabled and ini_set and file_uploads setting should be enabled in PHP configuration (php.ini).</span></li>
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">Apache Web Server 2.0 or higher compiled with mod_rewrite module and with the following directives allowed: RewriteEngine, RewriteBase, RewriteCond and RewriteRule.</span></li>
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">MySQL 5.1.31 or higher, or MariaDB database server installed on your virtual server.</span></li>
</ul>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Installation instructions</u></b></span></span></div>
<br />
<br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Download the latest version of X-Cart available on the official website at 'http://www.x-cart.com/download.html' to a directory on your server, then extract the archive file using the following commands:</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">cd /opt/
wget http://static.x-cart.com/xc5kit/x-cart-5.2.13-en.zip -O x-cart.zip
mkdir -p /var/www/html/xcart
unzip x-cart.zip -d /var/www/</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Run the following command to set proper permissions:</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">chown apache:apache -R /var/www/xcart/</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Create a new MySQL database for X-Cart 5 on your server:</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">mysql -u root -p
mysql> CREATE DATABASE xcartdb;
mysql> GRANT ALL PRIVILEGES ON xcartdb.* TO 'xcartuser'@'localhost' IDENTIFIED BY 'your-password' WITH GRANT OPTION;
mysql> FLUSH PRIVILEGES;
mysql> quit</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Locate the php configuration file using the following command:</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">#php -i | grep php.ini
Configuration File (php.ini) Path => /etc
Loaded Configuration File => /etc/php.ini</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Edit the 'php.ini' file and add/modify the following lines:</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">file_uploads = On
allow_url_fopen = On
memory_limit = 256M
upload_max_filesize = 10M
post_max_size = 20M
safe_mode = Off
magic_quotes_runtime = Off
session.auto_start = 0</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Create a new virtual host directive in Apache. For example, edit your Apache configuration file ('<b>/etc/httpd/conf/httpd.conf</b>' by default) and uncomment the following line:</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">#NameVirtualHost *:80</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Then, add the following lines at the end:</span></span><br />
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><VirtualHost *:80>
ServerAdmin admin@your-domain.com
DocumentRoot /var/www/html/xcart/
ServerName your-domain.com
ServerAlias www.your-domain.com
<Directory /var/www/html/xcart/>
    Options FollowSymLinks
    AllowOverride All
</Directory>
    ErrorLog logs/your-domain.com-error_log
    CustomLog logs/your-domain.com-access_log common
</VirtualHost></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Restart the Apache web server for the changes to take effect:</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">service httpd restart</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Set the following secure file permissions:</span></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace;"><span style="font-size: 15px; line-height: 15.6px;">chmod 755 /var/www/html/xcart/
chmod 755 /var/www/html/xcart/etc/
chmod 644 /var/www/html/xcart/etc/config.php
chmod 644 /var/www/html/xcart/.htaccess</span></span></pre>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Open the link: http://<your-domain>/<x-cart-5-directory>/install.php in your browser. It will start the installation wizard. Accept the license agreement and click Next.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhY39duJlBAYpLyNp3iToecmk3UDNWChpMCxN-ewq2lXzeSSc19uVc7RdcsiyEowu2_U6jLAY9GJSLKClb0JyjfZppOMJ62PhrbH0EZakJrNTeH-k6l8r5wHLSChrrJZY3SX0AhJ-VS7pV/s1600/xc5_installation_step1_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhY39duJlBAYpLyNp3iToecmk3UDNWChpMCxN-ewq2lXzeSSc19uVc7RdcsiyEowu2_U6jLAY9GJSLKClb0JyjfZppOMJ62PhrbH0EZakJrNTeH-k6l8r5wHLSChrrJZY3SX0AhJ-VS7pV/s1600/xc5_installation_step1_hackthesec.co.in.png" /></a></div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">At this step, you need to define the email and password for your store's administrator profile. Once you are done with that, X-Cart 5 will send a notification to the email address you have specified along with some service info.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRlxHUBY4g0iyDC3o7GCyztKsmYhYpHW8xL8F5zuSFLCyG4CePG0usPht-Spsvpmo_QuPNRLdWFVPVk3-_wenBDe7v8Nhr7MQvST-xC8FoDVrcfPxQ6xeH28ZssH_sM2vyg2WOwwKADy8f/s1600/xc5_installation_step2_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRlxHUBY4g0iyDC3o7GCyztKsmYhYpHW8xL8F5zuSFLCyG4CePG0usPht-Spsvpmo_QuPNRLdWFVPVk3-_wenBDe7v8Nhr7MQvST-xC8FoDVrcfPxQ6xeH28ZssH_sM2vyg2WOwwKADy8f/s1600/xc5_installation_step2_hackthesec.co.in.png" /></a></div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now the installation wizard will check whether your server meets the system requirements for X-Cart 5. It will report if the requirements are not met. If everything is OK, you will be automatically redirected to the next step.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAH6VfCeo0oru0TBVaBEj3tWINaYYQuifbn1BI1ktafYkSY1mFi05iF8uRcUNuRA52xiMv-E3u5lKssfWriQCLula3j_uB9Smy3gwgfJVVEUYCsrDNQ6xBseYybN0zTWL28hcAQeXZZNTM/s1600/xc5_installation_step3_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAH6VfCeo0oru0TBVaBEj3tWINaYYQuifbn1BI1ktafYkSY1mFi05iF8uRcUNuRA52xiMv-E3u5lKssfWriQCLula3j_uB9Smy3gwgfJVVEUYCsrDNQ6xBseYybN0zTWL28hcAQeXZZNTM/s1600/xc5_installation_step3_hackthesec.co.in.png" /></a></div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">At this step you need to define the basic settings of your X-Cart 5 installation. Typically the page looks like the snapshot below:</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhoYubqwYJfjNqf_h8RU2NeBoB5sEPVenHm_Ifd0EuRtE3AYcb5hyphenhyphenQalg4tFYvasw7qg84BneKvZqlyBURcqv_axgE77VYLm0zw-Dbg3mIr5odJWLF6UFLQjppw75jGtf85I7FyWAhumZf1/s1600/xc5_installation_step4_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhoYubqwYJfjNqf_h8RU2NeBoB5sEPVenHm_Ifd0EuRtE3AYcb5hyphenhyphenQalg4tFYvasw7qg84BneKvZqlyBURcqv_axgE77VYLm0zw-Dbg3mIr5odJWLF6UFLQjppw75jGtf85I7FyWAhumZf1/s1600/xc5_installation_step4_hackthesec.co.in.png" /></a></div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Let's walk through the settings you need to adjust. The first group of settings on this page is as follows:</span></span><br />
<br />
<ul style="text-align: left;">
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;"><b>MySQL server name:</b> The name of your MySQL server. In most cases, it is localhost. If it is different, your host has likely notified you about it.</span></li>
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;"><b>MySQL database name:</b> The name of the database that will be used by your X-Cart 5 store (You have created this database earlier at the step "Create an empty database").</span></li>
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;"><b>MySQL username and MySQLpassword:</b> The credentials needed to access the X-Cart 5 database on your MySQL server.</span></li>
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;"><b>Install a sample catalog:</b> Whether you want to have sample data in your X-Cart installation for you to experiment with. If this is your first experience with X-Cart 5, we strongly recommend enabling this check box.</span></li>
</ul>
<br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Below you will find links to some advanced configuration settings. Click on a link to access the respective settings section.</span></span><br />
<br />
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Here's the Advanced MySQL settings section:</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ8ceMKByQ675sQtaaWCcTIQ-3QeQDa8Vbo1Y12-5PPRAQcJIOCSOwCS35KEn30-ZLYyovkWl-RSAdQYwtjprSNodtxMLVjfDC9cVBNOwZkJFaOoZ73cA0bdLw0dpl1iVke7I69b-8l4W9/s1600/xc5_installation_step4_2_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ8ceMKByQ675sQtaaWCcTIQ-3QeQDa8Vbo1Y12-5PPRAQcJIOCSOwCS35KEn30-ZLYyovkWl-RSAdQYwtjprSNodtxMLVjfDC9cVBNOwZkJFaOoZ73cA0bdLw0dpl1iVke7I69b-8l4W9/s1600/xc5_installation_step4_2_hackthesec.co.in.png" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
<span style="background-color: white; color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">In Advanced Section You Can Define : -</span></div>
<div class="separator" style="clear: both;">
</div>
<ul style="text-align: left;">
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">MySQL server port</span></li>
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">MySQL server socket </span></li>
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">MySQL tables prefix </span></li>
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">Web server name</span></li>
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">Secure web server name</span></li>
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">X-Cart 5 web directory</span></li>
<li><span style="color: #222222; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">Default time zone</span></li>
</ul>
<br />
<div class="separator" style="clear: both;">
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="background-color: white; font-size: 15px; line-height: 26px;"></span></span></div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">These two steps are dedicated to some boring work that X-Cart 5 has to do. It creates MySQL tables, cache, development code and so on. These steps are fully automated, so you just need to wait and let X-Cart 5 do the job. Usually it takes less than a minute.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibz4UDnTGx0WA6MWCMDMCtZiBZAGfh3jfC_RT_-oKorwmZsZFc6fsCOc1yYTkFevVhlzfeliNOEj304F93e3ML_miCCJsNUfs96-KGickwS-sxmHaqGk5d7eMGmvYtsuwIQsNipQEdSw28/s1600/xc5_installation_step5_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibz4UDnTGx0WA6MWCMDMCtZiBZAGfh3jfC_RT_-oKorwmZsZFc6fsCOc1yYTkFevVhlzfeliNOEj304F93e3ML_miCCJsNUfs96-KGickwS-sxmHaqGk5d7eMGmvYtsuwIQsNipQEdSw28/s1600/xc5_installation_step5_hackthesec.co.in.png" /></a></div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now the installation process has been completed. You can use the links provided to access your store's customer front end and admin area. </span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjt8T32iLEIkf52Zj5U2l3jWoZ8wKpNLjoQA-6XP7_vv4LrXvv_wdKyybj5MVP3Z5kG70Fwlvt0YiB1-MWESHrLfae9eJqWtHAnv8Tmn5IsmRjDyB5Vizyfeu-sW-40AufmZJMe-TW_o2Oa/s1600/xc5_installation_step7_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjt8T32iLEIkf52Zj5U2l3jWoZ8wKpNLjoQA-6XP7_vv4LrXvv_wdKyybj5MVP3Z5kG70Fwlvt0YiB1-MWESHrLfae9eJqWtHAnv8Tmn5IsmRjDyB5Vizyfeu-sW-40AufmZJMe-TW_o2Oa/s1600/xc5_installation_step7_hackthesec.co.in.png" /></a></div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></span><br />
<br /></div>

How to install X-Cart 5 on CentOS

Install X-Cart 5 on CentOS X-Cart is a PHP/MySQL based secure shopping cart software with open source code. X-Cart: 1) To start you just...

How to Install Zabbix Agent on CentOS/RHEL 7/6/5

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="title single-title title20" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<u><span style="color: #990000;">Install Zabbix Agent on CentOS/RHEL</span></u></h1>
<div>
<span style="background-color: white; color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">Zabbix Agent is required to install on all remote systems needs to monitor through Zabbix server. The Zabbix Agent collects resource utilization and applications data on client system and provide such information to Zabbix server on their requests.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiflimtG3M_1XU6o3qBRtYV7CRgFJwxQ2WF3kiVMo_pszCrQMegKU2e96oTFV8aIb87Vzn3MCoibMIKbycx3Og9nBYxjBhzCfPddRw23PtPnzkumauxo6O4LQaMYg3UkWo5wbo8FMBIJhox/s1600/Zabbix_agent_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiflimtG3M_1XU6o3qBRtYV7CRgFJwxQ2WF3kiVMo_pszCrQMegKU2e96oTFV8aIb87Vzn3MCoibMIKbycx3Og9nBYxjBhzCfPddRw23PtPnzkumauxo6O4LQaMYg3UkWo5wbo8FMBIJhox/s1600/Zabbix_agent_hackthesec.co.in.png" /></a></div>
<div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">There are two types of checks can be configured between Zabbix Server and Client.</span></span></div>
<div style="background-color: white; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<a href="http://www.hackthesec.co.in/2016/05/how-to-install-zabbix-server-30-on-ubuntu-and-debian.html" itemprop="url" style="color: #999999; display: block; font-family: 'Open Sans', serif, sans-serif; font-size: 18.6px; font-weight: 600; text-decoration: none;"></a><ul style="font-size: 18.6px;"><a href="http://www.hackthesec.co.in/2016/05/how-to-install-zabbix-server-30-on-ubuntu-and-debian.html" itemprop="url" style="color: #999999; display: block; font-family: 'Open Sans', serif, sans-serif; font-size: 18.6px; font-weight: 600; text-decoration: none;"></a>
<li style="color: #333333;"><a href="http://www.hackthesec.co.in/2016/05/how-to-install-zabbix-server-30-on-ubuntu-and-debian.html" itemprop="url" style="color: #999999; display: block; font-family: 'Open Sans', serif, sans-serif; font-size: 18.6px; font-weight: 600; text-decoration: none;"></a><a href="http://www.hackthesec.co.in/2016/05/how-to-install-zabbix-server-30-on-ubuntu-and-debian.html" itemprop="url" style="color: #999999; display: inline !important; font-size: 18.6px; text-decoration: none;"><span style="color: red;">How to Install Zabbix Server 3.0 on Ubuntu 14.04 LTS and Debian 8/7</span></a></li>
<li><span style="font-size: 18.6px;"><span style="text-decoration: none;"><a href="http://www.hackthesec.co.in/2016/04/how-to-install-zabbix-30-monitoring.html" style="text-decoration: none;"><span style="color: red;">How to install Zabbix 3.0 (Monitoring Server) on CentOS 7.x / RHEL 7.x</span></a></span></span></li>
<li><span style="font-size: 18.6px;"><a href="http://www.hackthesec.co.in/2016/05/how-to-install-zabbix-agent-on-ubuntu-and-debian.html" itemprop="url" style="display: block; font-family: 'Open Sans', serif, sans-serif; font-size: 18.6px; font-weight: 600; line-height: normal; text-decoration: none;"><span style="color: red;">How To Install Zabbix Agent on Ubuntu 14.04 LTS and Debian 8/7</span></a></span></li>
</ul>
</div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Passive Check : Zabbix Agent only sent data to server on their request.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Active Check : Zabbix Agent sends data periodically to Server.</span></span></div>
</div>
<div style="background-color: white;">
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Installing Zabbix Agent</u></b></span></span></div>
<div style="background-color: white;">
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Add Required Repository</span></span></div>
<div style="background-color: white;">
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Before installing Zabbix Agent first configure zabbix yum repository using following commands as per your required version and operating system.</span></span></div>
<div style="background-color: white;">
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; line-height: 1.3em;"><span style="font-size: large;"><orange style="color: orange;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">CentOS/RHEL 7:</span></orange>
# rpm -Uvh http://repo.zabbix.com/zabbix/3.0/rhel/7/x86_64/zabbix-release-3.0-1.el7.noarch.rpm

<orange style="color: orange;"><span style="border: 0px; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">CentOS/RHEL 6:</span></orange>
# rpm -Uvh http://repo.zabbix.com/zabbix/3.0/rhel/6/x86_64/zabbix-release-3.0-1.el6.noarch.rpm

<orange style="color: orange;"><span style="border: 0px; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">CentOS/RHEL 5:</span></orange>
# rpm -Uvh http://repo.zabbix.com/zabbix/3.0/rhel/5/x86_64/zabbix-release-3.0-1.el5.noarch.rpm</span></span><span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px; white-space: normal;">
</span></span></pre>
<div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Install Zabbix Agent</u></b></span></span></div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">After installing yum repository packages in our system. Now use following command to install Zabbix agent on your Linux system.</span></span></div>
</div>
</div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; line-height: 19.2px;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># yum install <orange style="color: orange;">zabbix zabbix-agent</orange></span></pre>
</div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; line-height: 19.2px;">
<div style="color: black; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b><u>Edit Zabbix Agent Configuration</u></b></div>
<div style="color: black; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
As zabbix agent has been successfully installed on our remote system. Now we just need to configure zabbix agent by adding zabbix server ip in its configuration file <b>/etc/zabbix/zabbix_agentd.conf</b></div>
<div style="color: black; font-family: verdana, geneva, sans-serif; line-height: 26px;">
<pre style="background-color: whitesmoke; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; line-height: 19.2px; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><span style="font-family: Menlo, Monaco, Consolas, 'Courier New', monospace;"><span style="line-height: 25.7143px;"><span style="font-size: large;">#Server=[zabbix server ip]
#Hostname=[Hostname of client system ]

Server=192.168.2.11
Hostname=zabbizagentserver</span></span></span></pre>
</div>
</div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<div style="color: black; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b><u>Restarting Zabbix Agent</u></b></div>
<div style="color: black; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
After adding zabbix server ip in configuration file, now restart agent service using below command.</div>
</div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; line-height: 19.2px;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># /etc/init.d/zabbix-agent restart</span></pre>
</div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; line-height: 19.2px;">
<div style="line-height: 19.2px;">
<span style="font-size: 15px; line-height: 26px;"><span style="font-family: verdana, geneva, sans-serif;">To start and stop zabbix-agent service anytime use following commands.</span></span></div>
<div style="line-height: 19.2px;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white;"># /etc/init.d/zabbix-agent start
# </span><span style="color: lime;">/etc/init.d/</span><span style="color: white;">zabbix-agent stop</span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: #999999; font-size: large;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></pre>
</div>
</div>
</div>

How to Install Zabbix Agent on CentOS/RHEL 7/6/5

Install Zabbix Agent on CentOS/RHEL Zabbix Agent is required to install on all remote systems needs to monitor through Zabbix server. Th...

How to install DenyHosts on centos 6

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" style="border: 0px; clear: both; font-family: Lato, sans-serif; line-height: 1.09091; margin: 0px 0px 12px; outline: 0px; padding: 0px; text-transform: uppercase; vertical-align: baseline;">
<span style="color: #990000; font-size: large;"><u>INSTALLING DENYHOSTS ON CENTOS 6</u></span></h1>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">DenyHosts is a log-based intrusion prevention security tool for SSH servers written in Python. It is intended to prevent brute-force attacks on SSH servers by monitoring invalid login attempts in the authentication log and blocking the originating IP</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD1RySwwFlb3FxDiUgqxzGv0MJKNpmB7PbbCmt6GsNAprT7X521HwYKUyklwj7KG6gSgwJyGiXHKHOzWVFnWC1NWeCnF84-cq_CqVYGbq68YiAwz0tnMS8OKE4kw_ZQge_Q0ZjPKopPGfi/s1600/denyhosts_hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD1RySwwFlb3FxDiUgqxzGv0MJKNpmB7PbbCmt6GsNAprT7X521HwYKUyklwj7KG6gSgwJyGiXHKHOzWVFnWC1NWeCnF84-cq_CqVYGbq68YiAwz0tnMS8OKE4kw_ZQge_Q0ZjPKopPGfi/s1600/denyhosts_hackthesec.co.in.jpg" /></a></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"> addresses. DenyHosts is developed by Phil Schwartz, who is also the developer of Kodos Python Regular Expression Debugger.</span></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><b><u>Install DenyHosts</u></b></span></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;">First, <a href="http://www.hackthesec.co.in/2016/01/centos-rhel-scientific-linux-6-enable.html">add the EPEL repository.</a> Then simply install the package from the EPEL repository:</span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: large;"><span style="line-height: 15.6px;"># yum install denyhosts</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: verdana, geneva, sans-serif;"><div>
<b><u><span style="color: #0b5394;">Configure DenyHosts</span></u></b></div>
<div style="color: #333333;">
Before starting DenyHosts, configure a white list of IPs that DenyHosts should never block. Again, DenyHosts uses <a href="https://www.centos.org/docs/4/html/rhel-rg-en-4/s1-tcpwrappers-access.html">TCP Wrappers</a>. Hence, edit <b>/etc/hosts.allow</b> and add IPs, entire subnets, etc. For example,</div>
</span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: large;"><span style="line-height: 15.6px;">sshd: 12.34.56.78
sshd: 192.168.0.0/255.255.255.0</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;">Start DenyHosts</span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: large;"><span style="line-height: 15.6px;"># service denyhosts start</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;">Configure the system to start DenyHosts at boot:</span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: Courier New, Courier, monospace; font-size: large;"><span style="line-height: 15.6px;"># chkconfig denyhosts on</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;">Basic things to be aware of:</span></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><div>
<ul style="text-align: left;">
<li>IPs to white list should be added to <b>/etc/hosts.allow.</b></li>
<li>IPs that DenyHosts blocks will be added to <b>/etc/hosts.deny.</b></li>
<li>The DenyHosts configuration file is<b> /etc/denyhosts.conf.</b></li>
<li>DenyHosts logs everything that it does to <b>/var/log/denyhosts.</b></li>
<li>DenyHosts watches <b>/var/log/secure</b> for SSH login attempts.</li>
<li>If a host is ever added to the block list by mistake, just remove it from <b>/etc/hosts.deny. </b>You can also manually add hosts you want to block.</li>
</ul>
</div>
</span></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;">Go through the DenyHosts configuration file (<b>/etc/denyhosts.conf</b>) and tune it to your liking. Be sure to restart DenyHosts (<b>service denyhosts restart</b>) if you change anything.</span></span></div>
</div>

How to install DenyHosts on centos 6

INSTALLING DENYHOSTS ON CENTOS 6 DenyHosts is a log-based intrusion prevention security tool for SSH servers written in Python. It is in...

How to install squid proxy on centos

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 style="clear: both; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 30px; height: auto; line-height: 31px; margin: 0px; padding: 0px; width: 614px;">
<u><span style="color: #990000;">Install squid proxy on centos</span></u></h1>
<div>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Squid is a caching and forwarding web proxy. It has a wide variety of uses, from speeding up a web server by caching repeated requests; to caching web, <a href="http://www.hackthesec.co.in/search/label/DNS">DNS</a> and other computer network lookups for a group of people sharing network resources; to aiding security by filtering traffic. Although primarily used for HTTP and <a href="http://www.hackthesec.co.in/search/label/ftp">FTP</a>, Squid includes limited support for several other protocols including TLS, SSL, Internet Gopher and HTTPS</span></span><span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtuLbkofJ_zaadojyg-kg2TTym3Z1SblRiTiwNCaRRxvNfwE7UGzMyriv33EkqCKKK-PNDNIrXMTxl633f8uUdiToe_67H4UK77mB5VOLK7hTbxGaSICl3pNA6navN1-2mqAmMYhmcMrOT/s1600/squid_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtuLbkofJ_zaadojyg-kg2TTym3Z1SblRiTiwNCaRRxvNfwE7UGzMyriv33EkqCKKK-PNDNIrXMTxl633f8uUdiToe_67H4UK77mB5VOLK7hTbxGaSICl3pNA6navN1-2mqAmMYhmcMrOT/s1600/squid_www.hackthesec.co.in.png" /></a></div>
<div>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"><br /></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Update yum repositories and packages by typing the below command</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# yum update</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 1:- Install squid package and dependencies using the below command</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# yum install squid</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">By default squid configuration file "<b>/etc/squid/squid.conf</b>" will contains recommended minimum configuration  and squid caching feature will work without making any changes . Recommended minimum configuration will looks like the below</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">#
# Recommended minimum configuration:
#
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
acl localnet src 10.0.0.0/8     # RFC1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src fc00::/7       # RFC 4193 local private network range
acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines

acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT

#
# Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager

# Deny requests to certain unsafe ports
http_access deny !Safe_ports

# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports

# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost

#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#
# Example rule allowing access from your local networks.
# Adapt localnet in the ACL section to list your (internal) IP networks
# from where browsing should be allowed
http_access allow localnet
http_access allow localhost

# And finally deny all other access to this proxy
http_access deny all

# Squid normally listens to port 3128
http_port 3128

# We recommend you to use at least the following line.
hierarchy_stoplist cgi-bin ?

# Uncomment and adjust the following to add a disk cache directory.
#cache_dir ufs /var/spool/squid 100 16 256

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|?) 0     0%      0
refresh_pattern .               0       20%     4320</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Now start squid service</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# service squid start</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and type this below command to start squid service automatically while booting.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# chkconfig --levels 235 squid on</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 3:- Setup your web browser to access Internet through proxy server on port 3128</span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">
<div>
<br /></div>
<div>
IE : Tools » Internet options »Connections » LAN settings » Choose "Use a proxy server for your LAN" » Type your Proxy server ip (192.168.1.11 ) and port no 3128</div>
<div>
<br /></div>
<div>
Firefox : Options / Preferences » Advanced » Network » Settings » Choose "Manual proxy configuration " » Type your Proxy server ip (192.168.1.11 ) and port no 3128</div>
<div>
<br /></div>
<div>
Step 4:- Browse some sites and check the access log file on proxy server</div>
</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">[root@hackthesec ~]# cat /var/log/squid/access.log
1343759484.645    265 192.168.1.15 TCP_MISS/304 477 GET http://platform.twitter.com/widgets.js - DIRECT/23.64.79.144 application/javascript
1343759484.681    309 192.168.1.15 TCP_MISS/304 839 GET http://apis.google.com/js/plusone.js - DIRECT/173.194.36.36 -
1343759485.005    178 192.168.1.15 TCP_MISS/200 495 GET http://www.google-analytics.com/__utm.gif? - DIRECT/74.125.236.142 image/gif
1343759502.763  20292 192.168.1.15 TCP_MISS/200 1898 CONNECT s-static.ak.facebook.com:443 - DIRECT/23.64.66.110 -
1343759502.765  20292 192.168.1.15 TCP_MISS/200 1898 CONNECT s-static.ak.facebook.com:443 - DIRECT/23.64.66.110 -
1343759723.040 240567 192.168.1.15 TCP_MISS/200 2904 CONNECT plusone.google.com:443 - DIRECT/173.194.36.41 -
1343759934.518    459 192.168.1.15 TCP_MISS/200 495 GET http://www.google-analytics.com/__utm.gif? - DIRECT/173.194.36.8 image/gif
1343759943.131   2186 192.168.1.15 TCP_MISS/200 8343 CONNECT www.facebook.com:443 - DIRECT/66.220.146.94 -
1343759943.266  10616 192.168.1.15 TCP_MISS/200 2790 CONNECT apis.google.com:443 - DIRECT/74.125.236.128 -
1343759943.267  10615 192.168.1.15 TCP_MISS/200 2228 CONNECT ssl.gstatic.com:443 - DIRECT/74.125.236.143 -
1343759950.875   2596 192.168.1.15 TCP_MISS/200 32219 CONNECT www.facebook.com:443 - DIRECT/66.220.146.94 -
1343759961.388  20443 192.168.1.15 TCP_MISS/200 1911 CONNECT s-static.ak.fbcdn.net:443 - DIRECT/23.64.77.177 -</pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Troubleshooting :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
If you not able to browse using proxy settings , Disable the firewall ( iptables ) and selinux service on your squid proxy server .</div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b>Disable firewall ( Iptables ) :-</b></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# service iptables stop
[root@hackthesec ~]# chkconfig iptables off</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white;"></span><br />
<div>
<span style="background-color: white;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Disable Selinux :- open the file /etc/selinux/config and find the line</span></span></span></div>
<span style="background-color: white;">
</span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">SELINUX=enforcing</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and replace with</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">SELINUX=disabled</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">now reboot the server and try step 4.</span></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><span style="color: #0b5394;"><u>Configure squid proxy as web filter:</u></span></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
You can restrict user access to particular websites or keywords using access control lists (ACLs) .</div>
<div>
<b><span style="color: #0b5394;"><u>Restricting Access to specific web sites :</u></span></b></div>
<div style="color: #333333;">
For example , we can see how to block facebook.com and gmail.com .</div>
<div style="color: #333333;">
Step 1:- create a file ( <b>/etc/squid/blockedsites.squid</b> ) and add the site names one per line.</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# cat /etc/squid/blockedsites.squid
#blocked sites
www.facebook.com
www.gmail.com</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Open the /etc/squid/squid.conf and create a new acl " blocksites" and acl type "dstdomain" in the acl section like the below .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
# ACL blocksites 
acl blocksites dstdomain "/etc/squid/blockedsites.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the following line "<b>http_access deny blocksites</b>" to http_section to deny the access to the acl "<b>blocksites</b>" .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blocksites ACL
http_access deny blocksites</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 3:- Now restart squid service</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# service squid restart</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 4:- Try to access facebook.com in your browser . you could see the blocked page as below .</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitsQRp6xcr5AmcJgrWIHEyVE274ObQfkcEWpNTBGqT_25fkxX_ryBbASwHU-G3Iwsye8ZiK2CDfkIEo6AU3h-ZmCZtF4of10Dt34mqj-ryTojXljt7XEsIrjcl-LADcICkQ61A8Yl4cXKE/s1600/squid_proxy_server_block_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitsQRp6xcr5AmcJgrWIHEyVE274ObQfkcEWpNTBGqT_25fkxX_ryBbASwHU-G3Iwsye8ZiK2CDfkIEo6AU3h-ZmCZtF4of10Dt34mqj-ryTojXljt7XEsIrjcl-LADcICkQ61A8Yl4cXKE/s1600/squid_proxy_server_block_www.hackthesec.co.in.jpg" /></a></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><br /></span></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and check the log file you can see the facebook request is denied .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"> [root@hackthesec ~]# tail -f /var/log/squid/access.log
.................................................................................
1343820985.542      1 192.168.1.15 TCP_DENIED/403 4255 GET http://www.facebook.com/ - NONE/- text/html
1343820986.998   1411 192.168.1.15 TCP_MISS/200 13152 GET http://www.squid-cache.org/Artwork/SN.png - DIRECT/198.186.193.234 image/png
1343820987.004      0 192.168.1.15 TCP_DENIED/403 4178 GET http://www.facebook.com/favicon.ico - NONE/- text/html</pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Restricting Access to specific keywords :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Step 1:- create a file (<b> /etc/squid/blockkeywords.squid</b> ) and add the keywords one per line.</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# cat /etc/squid/blockkeywords.squid
#blocked keywords
sex
porn
xxx</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Open the <b>/etc/squid/squid.conf</b> and create a new acl "blockkeywords" and acl type "url_regex" in the acl section</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
# ACL blocksites 
acl blocksites dstdomain "/etc/squid/blockedsites.squid"
# ACL blockkeywords
acl blockkeywords url_regex -i "/etc/squid/blockkeywords.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the following line "http_access deny blockkeywords" to http_section to deny the access to the acl "<b>blockkeywords</b>" .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blocksites ACL
http_access deny blocksites
# Deny access to blockkeywords ACL
http_access deny blockkeywords</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><span style="color: #0b5394;"><u>Restricting Access to specific Ipaddress :</u></span></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
Step 1:- create a file ( /etc/squid/blockip.squid ) and add the ip adresses one per line.</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# cat /etc/squid/blockip.squid
#blocked ips
192.168.1.20
192.168.1.21</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Open the /etc/squid/squid.conf and create a new acl "blockip" and acl type "src" in the acl section</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
# ACL blocksites 
acl blocksites dstdomain "/etc/squid/blockedsites.squid"
# ACL blockkeywords
acl blockkeywords url_regex -i "/etc/squid/blockkeywords.squid"
# ACL blockip
acl blockip src "/etc/squid/blockip.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the following line "http_access deny blockip" to http_section to deny the access to the acl "blockip" .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blockip ACL
http_access deny blockip
# Deny access to blocksites ACL
http_access deny blocksites
# Deny access to blockkeywords ACL
http_access deny blockkeywords</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><u><span style="color: #0b5394;">Allow Full access to specific Ipaddress :</span></u></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
You can allow specific ip address to gain full access without blocking sites and keywords . just create a file "/etc/squid/allowip.squid" and add the ip address one per line and create an acl "allowip"  and acl type "src" in the acl section</div>
</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># ACL allowip
acl allowip src "/etc/squid/allowip.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the "allowip" in the http_access as below</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blockip ACL
http_access deny blockip
# Deny access to blocksites ACL
http_access deny blocksites !allowip
# Deny access to blockkeywords ACL
http_access deny blockkeywords !allowip</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><u><span style="color: #0b5394;">Changing squid proxy port number:</span></u></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
You can change squid proxy port number , by default it uses 3128 port .</div>
<div style="color: #333333;">
Just find the below line in "/etc/squid/squid.conf"</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">http_port 3128</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and replace with</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">http_port 8000 # whatever port number you want</span></span></pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Restricting Download size :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
You can restrict download file size  using reply_body_max_size .</div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Add the below line at the bottom of the http_access section</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">#Restrict download size
reply_body_max_size 10 MB all</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">or</span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">#Restrict download size
reply_body_max_size 10 MB !allowip</span></span></pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Configuring Squid as Transparent Proxy :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
You can configure squid as transparent proxy .</div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Step 1:- just find the below line</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># Squid normally listens to port 3128
http_port 3128</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and replace with</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># Squid normally listens to port 3128
http_port 3128 intercept</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Create a file "/root/squidfw.sh" and add the following firewall script ( modify as per your interface configuration ).</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">#!/bin/sh
# squid server IP
SQUID_SERVER="192.168.1.11"
# Interface connected to Internet
INTERNET="eth0"
# Interface connected to LAN
LAN_IN="eth1"
# Squid port
SQUID_PORT="3128"
# DO NOT MODIFY BELOW
# Clean old firewall
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
# Load IPTABLES modules for NAT and IP conntrack support
modprobe ip_conntrack
modprobe ip_conntrack_ftp
# For win xp ftp client
#modprobe ip_nat_ftp
echo 1 > /proc/sys/net/ipv4/ip_forward
# Setting default filter policy
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
# Unlimited access to loop back
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
# Allow UDP, DNS and Passive FTP
iptables -A INPUT -i $INTERNET -m state --state ESTABLISHED,RELATED -j ACCEPT
# set this system as a router for Rest of LAN
iptables --table nat --append POSTROUTING --out-interface $INTERNET -j MASQUERADE
iptables --append FORWARD --in-interface $LAN_IN -j ACCEPT
# unlimited access to LAN
iptables -A INPUT -i $LAN_IN -j ACCEPT
iptables -A OUTPUT -o $LAN_IN -j ACCEPT
# DNAT port 80 request comming from LAN systems to squid 3128 ($SQUID_PORT) aka transparent proxy
iptables -t nat -A PREROUTING -i $LAN_IN -p tcp --dport 80 -j DNAT --to $SQUID_SERVER:$SQUID_PORT
# if it is same system
iptables -t nat -A PREROUTING -i $INTERNET -p tcp --dport 80 -j REDIRECT --to-port $SQUID_PORT
# DROP everything and Log it
iptables -A INPUT -j LOG
iptables -A INPUT -j DROP</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 3:- just run the script</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# sh /root/squidfw.sh</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the below line to "/etc/rc.local" to run the script during startup</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">sh /root/squidfw.sh</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 4 (Updated):- Change default gateway ip to squid server ip on the user machines </span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">
<div>
Now users can access Internet without setting proxy in the browser settings.</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></span></pre>
</div>
</div>

How to install squid proxy on centos

Install squid proxy on centos Squid is a caching and forwarding web proxy. It has a wide variety of uses, from speeding up a web server ...