Hack The Sec-Leading Resource Of Linux Tutorial: redhat

Cryptmount – A Utility to Create Encrypted Filesystems in Linux

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">cryptmount is a utility for GNU/Linux operating systems which allows an ordinary user to mount an encrypted filing system without requiring superuser privileges. It is aimed at Linux systems using the 2.6 kernel series or later.</span></span><br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://cryptmount.sourceforge.net/crypt-img.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="482" data-original-width="700" src="http://cryptmount.sourceforge.net/crypt-img.png" /></a></div>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><b><u>Technical background</u></b></span></span><br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">There are currently two main approaches to using encrypted filesystems within the linux kernel:</span></span><br />
<br />
<ul style="text-align: left;">
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">the cryptoloop device driver;</span></span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">the device-mapper system, using the dm-crypt target.</span></span></li>
</ul>
<br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">The (older) cryptoloop system has grown in parallel with the loopback device-driver of 2.4 kernel series, but has now been superseded by the device-mapper capabilities of the 2.6 kernel series. The newer devmapper system offers a <a href="http://docs.linux.com/article.pl?sid=04/06/07/2036205&tid=72&tid=14&tid=35">cleaner organization</a> of encryption and device-access, and superior performance has <a href="http://deb.riseup.net/storage/encryption/dmcrypt">been noted</a>. Alternative user-space tools which allow individual files to be encrypted are also widely available, but allow some information about file sizes & organization to be exposed.</span></span><br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">With the older cryptoloop system, it was possible to describe all the details of an encrypted filesystem within /etc/fstab so that it could be configured completely by 'mount'. This meant that it was particularly easy to give any user permission to mount those encrypted filesystems simply by providing the 'user' option within /etc/fstab.</span></span><br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">With the newer device-mapper infrastructure, there are more stages involved in mounting an encrypted filing system, and neither does 'mount' currently allow this nor does the syntax of /etc/fstab lend itself to describing all the necessary filesystem parameters. This is especially so if the filesystem is stored in an ordinary file, which would require separate configuration of a loopback device and a devmapper target before the filesystem could be accessed.</span></span><br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">cryptmount was written to make it as easy for ordinary users to access encrypted filesystems on-demand using the newer devmapper mechansism as it was to use the older, now deprecated, cryptoloop methods. This offers the following advantages:</span></span><br />
<br />
<ul style="text-align: left;">
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">access to improved functionality in the kernel</span></span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">transparent support for filesystems stored on either raw disk partitions or loopback files</span></span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"></span></li>
<li style="font-size: 15px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">separate encryption of filesystem access keys, allowing access passwords to be changed without re-encrypting the entire filesystem</span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">storing multiple encrypted filesystems within a single disk partition, using a designated subset of blocks for each</span></span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">rarely used filesystems do not need to be mounted at system startup</span></span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">un-mounting of each filesystem is locked so that this can only be performed by the user that mounted it, or the superuser</span></span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">encrypted filesystems compatible with cryptsetup</span></span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">encrypted access-keys can be chosen to be compatible with openssl, or managed via libgcrypt, or (for 2.0 release-series) built-in SHA1/Blowfish ciphers</span></span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">support for encrypted swap partitions (superuser only)</span></span></li>
<li><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">support for setting up encrypted filesystems or crypto-swap at system boot-up</span></span></li>
</ul>
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><u><span style="color: #0b5394;"><b>Install and Configure Cryptmount in Linux</b></span></u></span></span><br />
<br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">On Debian/Ubuntu distributions, you can install Cryptmount using the following command line</span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"><span style="color: white; font-family: monospace , serif;"><span style="font-size: 14px;">sudo apt install cryptmount</span></span></pre>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">On RHEL/CentOS/Fedora distributions,install it from source. First start installing the required package(s) to successfully build and use cryptmount.</span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"><span style="color: white; font-family: monospace , serif;"><span style="font-size: 14px;">yum install device-mapper-devel</span></span></pre>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"><span style="color: white; font-family: monospace , serif;"><span style="font-size: 14px;">yum groupinstall "Development tools"</span></span></pre>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">Then download the latest Cryptmount source files.</span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"><span style="color: white; font-family: monospace , serif;"><span style="font-size: 14px;">wget https://downloads.sourceforge.net/project/cryptmount/cryptmount/cryptmount-5.2/cryptmount-5.2.4.tar.gz
tar -xzf  cryptmount-5.2.4.tar.gz
cd cryptmount-5.2.4
./configure
make
make instal</span></span></pre>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">After installation go for setup using bellow command line</span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"><span style="color: white; font-family: monospace , serif;"><span style="font-size: 14px;">cryptmount-setup</span></span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4_bf_zluIl3w2Tpa7Kj-r9HtLoen_02EXBU0bh0fZCpA9sXzYivNF0EIGcs7tNx4I95ID2E9k3NkajvFnLo8BGvbCj5ovWxGdVFnPo6EqmrnqtPihRHc-53-IqMBlBufcKWY8yQPfXWmF/s1600/crypt.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="729" data-original-width="872" height="534" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4_bf_zluIl3w2Tpa7Kj-r9HtLoen_02EXBU0bh0fZCpA9sXzYivNF0EIGcs7tNx4I95ID2E9k3NkajvFnLo8BGvbCj5ovWxGdVFnPo6EqmrnqtPihRHc-53-IqMBlBufcKWY8yQPfXWmF/s640/crypt.png" width="640" /></a></div>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">Once the new encrypted filesystem is created, you can access it as follows (enter the name you specified for your target – hackthesec), you will be prompted to enter the password for the target.</span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"><span style="color: white; font-family: monospace , serif;"><span style="font-size: 14px;">cryptmount hackthesec
cd /home/crypt</span></span></pre>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">To unmount the target run cd command to get out of the encrypted filesystem, then use the -u switch to unmount as shown.</span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"><span style="color: white; font-family: monospace , serif;"><span style="font-size: 14px;">cryptmount -u hackthesec</span></span></pre>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">For more information you can use bellow command or you can visit cryptmount website </span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"><span style="color: white; font-family: monospace , serif;"><span style="font-size: 14px;">man cryptmount
man cmtab </span></span></pre>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"><span style="color: white; font-family: monospace , serif;"><span style="font-size: 14px;">Website - <a href="http://cryptmount.sourceforge.net/">http://cryptmount.sourceforge.net/</a></span></span></pre>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #990000; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><b><u>Troubleshooting in my case</u></b></span></span><br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">After installation i just received a error message from my ubuntu box</span></span><br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">"Taking backup of cryptmount master config-file (@ETCDIR@/cmtab.bckp-setup)...mv: cannot stat '@ETCDIR@/cmtab': No such file or directory"</span></span><br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">for this error just follow bellow commands </span></span><br />
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"><span style="color: white; font-family: monospace , serif;"><span style="font-size: 14px;">root@new:~# which cryptmount-setup
/usr/sbin/cryptmount-setup
</span></span></pre>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"><span style="color: white; font-family: monospace , serif;"><span style="font-size: 14px;">root@new:~# vi /usr/sbin/cryptmount-setup</span></span></pre>
<div>
<br /></div>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;">and</span></span><br />
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;">Changed from: </span></span><br />
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;">CM_CFGDIR="@ETCDIR@" </span></span><br />
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;"><br /></span></span>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;">Changed to: </span></span><br />
<span style="font-size: 15px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"></span></span><br />
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;">CM_CFGDIR="/etc/cryptmount" </span></span><br />
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;"><br /></span></span>

Cryptmount – A Utility to Create Encrypted Filesystems in Linux

cryptmount is a utility for GNU/Linux operating systems which allows an ordinary user to mount an encrypted filing system without requiring...

Configure vsftpd SSL/TLS and Jail for Any User Writing as www-data to Web Server

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: red; font-size: large;"><u>Configure vsftpd SSL/TLS and Jail for Any User Writing as www-data to Web Server</u></span><br />
<span style="font-size: large;"><u><br /></u></span>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><a href="http://www.hackthesec.co.in/search/label/vsftp">vsftpd</a>, (or very secure FTP daemon), is an <a href="http://www.hackthesec.co.in/search/label/ftp">FTP</a> server for Unix-like systems, including Linux. It is licensed under the GNU General Public License. It supports IPv6 and SSL.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4DuFEKA7uUfUyq3NjeiqEJRsKfjRKEhgoqMczS8lnDImAetVPJDFKrFZBqXmvnIqSTcGW1Eu_1ZXgnxBItoUatI4cACW4RhWhC5mF0e7AkpqaFjbQx4-a7q59cZLWqYOc4HzZXW68ubfU/s1600/vsftpd_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4DuFEKA7uUfUyq3NjeiqEJRsKfjRKEhgoqMczS8lnDImAetVPJDFKrFZBqXmvnIqSTcGW1Eu_1ZXgnxBItoUatI4cACW4RhWhC5mF0e7AkpqaFjbQx4-a7q59cZLWqYOc4HzZXW68ubfU/s1600/vsftpd_hackthesec.co.in.png" /></a></div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">vsftpd supports explicit (since 2.0.0) and implicit (since 2.1.0) FTPS.</span></span><br />
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">vsftpd is the default FTP server in the Ubuntu, CentOS, Fedora, NimbleX, Slackware and RHEL Linux distributions.</span></span><br />
<span style="background-color: white; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">INSTALL VSFTPD</span></u></b></span><br />
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
Debian<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># apt-get install vsftpd</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
RedHat<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># yum -y install vsftpd</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Arch Linux<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># pacman -S vsftpd</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
FreeBSD<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># pkg install vsftpd</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
FreeBSD to enable vsftpd you would enter:<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># vim /etc/rc.conf</span></div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Add line below to enable and start vsftpd during startup:</span></span><br />
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">vsftpd_enable="YES"</pre>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Start vsftpd:</span></span><br />
<div style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
<span class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;">$ sudo /usr/local/etc/rc.d/vsftpd start</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Some settings in <strong>FreeBSD</strong> vsftpd.conf are a little different. I'll create a article specifically for <strong>FreeBSD</strong> vsftpd<span style="color: #444444;">.</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
Gentoo<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># emerge vsftpd</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Adding and starting <strong>Gentoo</strong><span style="color: #444444;"> </span><b><em style="color: #dd0055;">vsftpd at startup</em><span style="color: #444444;">:</span></b></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
OpenRC<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># rc-update add vsftpd default <br /># /etc/init.d/vsftpd start</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
systemd<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># systemctl enable vsftpd <br /># systemctl start vsftpd</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
Add user to login to the vsftpd server<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># adduser ftpuser</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Change password:<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># passwd ftpuser</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Create a folder for the user we just created in the root or your web server:<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># mkdir /var/www/html/ftpuser</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Add rights to the directory for the user:<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># chmod -R ftpuser:ftpuser /var/www/html/ftpuser</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Add the following in:<br style="color: #444444;" /><span class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># vim /etc/vsftpd.conf</span></div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Add the following lines:</span></span><br />
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">listen=YES
anonymous_enable=NO
local_enable=YES
virtual_use_local_privs=YES
write_enable=YES
connect_from_port_20=YES
secure_chroot_dir=/var/run/vsftpd
pam_service_name=vsftpd
guest_enable=YES
ftp_username=www-data
chmod_enable=YES
chown_uploads=YES
chown_username=www-data
guest_username=www-data
force_dot_files=YES
pasv_enable=YES
pasv_promiscuous=YES
pasv_min_port=1024
pasv_max_port=65535
syslog_enable=YES
max_clients=10
max_per_ip=10
port_promiscuous=YES
port_enable=YES
listen_port=21
ftp_data_port=20
user_sub_token=$USER
hide_ids=YES
user_config_dir=/etc/vsftpd
chroot_local_user=YES
allow_writeable_chroot=YES
seccomp_sandbox=NO</pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><span style="color: #333333; font-family: Menlo, Monaco, Consolas, Courier New, monospace;"><span style="line-height: 18.5714px;"><b><u>SSL lines</u></b>
ssl_enable=YES
rsa_cert_file=/etc/ssl/linuxsecrets-bundle.crt
rsa_private_key_file=/etc/ssl/linuxsecrets_com.key
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO
require_ssl_reuse=NO
ssl_ciphers=HIGH</span></span></pre>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Save the file if using vi or vim hit : then x.</span></span><br />
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Change Default vsftpd Port</u></b></span></span><br />
<br />
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">If you like you can change the vsftpd default ports to non-standard to listen on 1234</span></span><br />
<div class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin-bottom: 5px; margin-top: 5px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;">
# vim /etc/vsftpd.conf</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Set this to NO:</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">connect_from_port_20=NO
ftp_data_port=1233
listen_port=1234</pre>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Custom vsftpd Logs</u></b></span></span><br />
<div class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin-bottom: 5px; margin-top: 5px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;">
# vim /etc/vsftpd.conf</div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Default log – enable and change for custom location/name</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">xferlog_file=/var/log/vsftpd.log</pre>
<span style="color: red; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b>Make sure you disable syslog_enable=NO</b></span></span><br />
<br />
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">This will show all files moving through the webserver, but if you want to view all the activity, including connections and commands you need to add:</span></span><br />
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">log_ftp_protocol=YES</pre>
</div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">After making changes to the ports you need to restart the service</span></span><br />
<div style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
<span class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># service vsftpd restart</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Verify port:</div>
<div style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
<span class="xtypo_sticky" style="background: url("/templates/yoo_nano3/css/assets/shadow.png") 50% 100% repeat-x rgb(92, 93, 95); border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># netstat -nuptl | grep ftp</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Output:</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">tcp 0 0 0.0.0.0:1234 0.0.0.0:* LISTEN 4136/vsftpd</pre>
<div style="background-color: white; margin-bottom: 20px;">
<span style="font-family: Open Sans;"><span style="font-size: 14px; line-height: 20px;"><u><b>Options Defined Bellow:-</b></u></span></span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">listen</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - vsftpd itself will take care of listening and handling incoming connections. Default setting is NO.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">anonymous_enable</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Allow anonymous FTP? (Beware - allowed by default if you comment this out). Set this to NO</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">local_enable</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Controls whether local logins are permitted or not. If enabled, normal user accounts in /etc/passwd (or wherever your PAM config references) may be used to log in.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">virtual_use_local_privs</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - If enabled, virtual users will use the same privileges as local users. By default, virtual users will use the same privileges as anonymous users, which tends to be more restrictive (especially in terms of write access).</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">write_enable</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - This controls whether any FTP commands which change the filesystem are allowed or not. These commands are: STOR, DELE, RNFR, RNTO, MKD, RMD, APPE and SITE.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">connect_from_port_20</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - This controls whether PORT style data connections use port 20 (ftp-data) on the server machine. </span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">secure_chroot_dir</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - This option should be the name of a directory which is empty. Also, the directory should not be writable by the ftp user. This directory is used as a secure chroot() jail at times vsftpd does not require filesystem access.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">pam_service_name</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - PAM (pluggable authentication modules). A virtual user is a user login which does not exist as a real login on the system in /etc/passwd and /etc/shadow file.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">guest_enable</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - If enabled, all non-anonymous logins are classed as "guest" logins. A guest login is remapped to the user specified in the guest_username setting.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">ftp_username</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - This is the name of the user we use for handling anonymous FTP. The home directory of this user is the root of the anonymous FTP area. Default is ftp.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">chmod_enable</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - When enabled, allows use of the SITE CHMOD command. NOTE! This only applies to local users. Anonymous users never get to use SITE CHMOD.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">chown_uploads</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - If enabled, all anonymously uploaded files will have the ownership changed to the user specified in the setting chown_username. This is useful from an administrative, and perhaps security, standpoint.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">chown_username</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - This is the name of the user who is given ownership of anonymously uploaded files. This option is only relevant if another option, chown_uploads, is set.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">guest_username</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - See the boolean setting guest_enable for a description of what constitutes a guest login. This setting is the real username which guest users are mapped to.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">force_dot_files</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - If activated, files and directories starting with . will be shown in directory listings even if the "a" flag was not used by the client. This override excludes the "." and ".." entries.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">pasv_enable</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Set to NO if you want to disallow the PASV method of obtaining a data connection.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">pasv_promiscuous</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Set to YES if you want to disable the PASV security check that ensures the data connection originates from the same IP address as the control connection. Only enable if you know what you are doing! The only legitimate use for this is in some form of secure tunnelling scheme, or perhaps to facilitate FXP support.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">pasv_min_port</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - The minimum port to allocate for PASV style data connections. Can be used to specify a narrow port range to assist firewalling.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">pasv_max_port</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - The maximum port to allocate for PASV style data connections. Can be used to specify a narrow port range to assist firewalling.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">syslog_enable</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - If enabled, then any log output which would have gone to /var/log/vsftpd.log goes to the system log instead. Logging is done under the FTPD facility.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">max_clients</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - If vsftpd is in standalone mode, this is the maximum number of clients which may be connected. Any additional clients connecting will get an error message.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">max_per_ip</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - If vsftpd is in standalone mode, this is the maximum number of clients which may be connected from the same source internet address. A client will get an error message if they go over this limit.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">port_promiscuous</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Set to YES if you want to disable the PORT security check that ensures that outgoing data connections can only connect to the client. Only enable if you know what you are doing!</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">port_enable</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Set to NO if you want to disallow the PORT method of obtaining a data connection.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">listen_port</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - If vsftpd is in standalone mode, this is the port it will listen on for incoming FTP connections.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">ftp_data_port</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - The port from which PORT style connections originate (as long as the poorly named connect_from_port_20 is enabled).</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">user_sub_token</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - This option is useful is conjunction with virtual users. It is used to automatically generate a home directory for each virtual user, based on a template. For example, if the home directory of the real user specified via guest_username is /home/virtual/$USER, and user_sub_token is set to $USER, then when virtual user fred logs in, he will end up (usually chroot()'ed) in the directory /home/virtual/fred. This option also takes affect if local_root contains user_sub_token.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">hide_ids</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - If enabled, all user and group information in directory listings will be displayed as "ftp".</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">user_config_dir</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - This powerful option allows the override of any config option specified in the manual page, on a per-user basis. Usage is simple, and is best illustrated with an example. If you set user_config_dir to be /etc/vsftpd_user_conf and then log on as the user "chris", then vsftpd will apply the settings in the file /etc/vsftpd_user_conf/chris for the duration of the session. The format of this file is as detailed in this manual page! PLEASE NOTE that not all settings are effective on a per-user basis. For example, many settings only prior to the user's session being started. Examples of settings which will not affect any behviour on a per-user basis include listen_address, banner_file, max_per_ip, max_clients, xferlog_file, etc.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">chroot_local_user</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - If set to YES, local users will be (by default) placed in a chroot() jail in their home directory after login. Warning: This option has security implications, especially if the users have upload </span>permission<span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">, or shell access. Only enable if you know what you are doing. Note that these security implications are not vsftpd specific. They apply to all FTP daemons which offer to put local users in chroot() jails.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">allow_writeable_chroot</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Writeable enabled to specificed location by setting to = YES</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">seccomp_sandbox</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - is a computer security facility that provides an application sandboxing mechanism in the </span>Linux<span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> </span>kernel<span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">. Setting to NO resolves some errors. </span></pre>
<div style="background-color: white; margin-bottom: 20px;">
<span style="font-family: Open Sans;"><span style="font-size: 14px; line-height: 20px;"><u><b>SSL Lines Defined Bellow:-</b></u></span></span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">sl_enable</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Enables SSL support</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">rsa_cert_file</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Specify localtion of you webserver crt like: /etc/ssl/bundle.crt</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">rsa_private_key_file</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Specify location to /etc/ssl/linuxsecrets.key from webserver.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">allow_anon_ssl</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Disallow anaymous logins set to NO</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">force_local_data_ssl</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Only applies if ssl_enable is activated. If activated, all non-anonymous logins are forced to use a secure SSL connection in order to send and receive data on data connections.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">force_local_logins_ssl</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Only applies if ssl_enable is activated. If activated, all non-anonymous logins are forced to use a secure SSL connection in order to send the password.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">ssl_tlsv1</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Only applies if ssl_enable is activated. If enabled, this option will permit TLS v1 protocol connections. TLS v1 connections are preferred.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">ssl_sslv2</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Only applies if ssl_enable is activated. If enabled, this option will permit SSL v2 protocol connections. TLS v1 connections are preferred.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">ssl_sslv3</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - Only applies if ssl_enable is activated. If enabled, this option will permit SSL v3 protocol connections. TLS v1 connections are preferred.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">require_ssl_reuse</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - If set to yes, all SSL data connections are required to exhibit SSL session reuse (which proves that they know the same master secret as the control channel). Although this is a secure default, it may break many FTP clients, so you may want to disable it.</span>
<strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">ssl_ciphers</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;"> - This option can be used to select which SSL ciphers vsftpd will allow for encrypted SSL connections. See the ciphers man page for further details. </span><strong style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">Note</strong><span style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; white-space: normal;">: that restricting ciphers can be a useful security precaution as it prevents malicious remote parties forcing a cipher which they have found problems with. </span></pre>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px;">
<b><u>Start the vsftpd service</u></b><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># service vsftpd start</span></div>
<div style="background-color: white; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Verify you have the correct port or custom port assigned and working.<br /><span class="xtypo_sticky" style="background-attachment: initial; background-clip: initial; background-color: #5c5d5f; background-image: url("/templates/yoo_nano3/css/assets/shadow.png"); background-origin: initial; background-position: 50% 100%; background-repeat: repeat-x; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 3px; border: 1px solid rgb(92, 93, 95); box-shadow: rgb(204, 204, 204) 0px 0px 3px; color: white; display: block; font-family: Arial, Helvetica, sans-serif; font-size: 15px; margin: 5px 0px; padding: 5px 15px; text-shadow: rgb(102, 102, 102) 0px -1px 0px;"># netstat -nuptl | grep ftp</span></div>
<div style="background-color: white; color: #444444; font-family: 'Open Sans'; font-size: 14px; line-height: 20px; margin-bottom: 20px; margin-top: 20px;">
Output:</div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 4136/vsftpd</pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></pre>
</div>

Configure vsftpd SSL/TLS and Jail for Any User Writing as www-data to Web Server

Configure vsftpd SSL/TLS and Jail for Any User Writing as www-data to Web Server vsftpd , (or very secure FTP daemon), is an FTP server ...

How to Install Firefox 45 on CentOS, Ubuntu & Other Linux

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<u><span style="color: #990000;">Install Firefox 45 on CentOS, Ubuntu & Other Linux</span></u></h2>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Firefox 45 Released for systems and Android on March 8, 2016 with various bug fixes and updates. Below is the list of few changes which is made in this release of firefox. Read more details about this <a href="https://www.mozilla.org/en-US/firefox/45.0/releasenotes/">release </a>of Firefox.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDnbSJDg6HrWLxEFFQni50CScnZkEBSeA2HV-P21QIhcT8w_W0IxXZ4KjMmBHsnaf_WXm0nbwwE3LSarTUDgKJBzbTKDasdGekED9gUxo2F32Qfx_XEbFLbWeP0xoYIw5F0LZZw5IIWD_y/s1600/firefox_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDnbSJDg6HrWLxEFFQni50CScnZkEBSeA2HV-P21QIhcT8w_W0IxXZ4KjMmBHsnaf_WXm0nbwwE3LSarTUDgKJBzbTKDasdGekED9gUxo2F32Qfx_XEbFLbWeP0xoYIw5F0LZZw5IIWD_y/s1600/firefox_www.hackthesec.co.in.png" /></a></div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">This article will help you to install Firefox 45 on <a href="http://www.hackthesec.co.in/search/label/Centos">CentOS</a>, <a href="http://www.hackthesec.co.in/search/label/RHEL">Red Hat</a>, <a href="http://www.hackthesec.co.in/search/label/Ubuntu">Ubuntu</a>, <a href="http://www.hackthesec.co.in/search/label/Debian">Debian</a>, CloudLinux Linux and other <a href="http://www.hackthesec.co.in/search/label/Linux%20Tutorial">Linux operating systems</a>. </span></span></div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>1. Remove Existing Version’s</u></b></span></span></div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">First remove any existing version of Firefox from your system if installed using rpm. Red Hat based system use following command.</span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># yum remove firefox
  [OR]
$ sudo apt-get remove firefox</span></pre>
</div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><div>
<b><u><span style="color: #0b5394;">2. Downloading Latest Firefox Archive</span></u></b></div>
<div style="color: #222222;">
Download the latest Firefox archive from <a href="http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/latest/linux-i686/en-US/">here (32 bit)</a> and <a href="http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/latest/linux-x86_64/en-US/">here (64 bit)</a>. At the time of last update of this article Firefox 45 is the latest version available. Download Firefox 45 source code as per your system architecture using one of following commands.</div>
</span></span></div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><div>
<span style="font-size: 15px; line-height: 26px;"><b><u>32-Bit Systems</u></b></span></div>
<div style="line-height: 26px;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># cd /usr/local
# wget http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/45.0/linux-i686/en-US/firefox-45.0.tar.bz2</span></pre>
</div>
</span></div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>64-Bit Systems</u></b></span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># cd /usr/local
# wget http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/45.0/linux-x86_64/en-US/firefox-45.0.tar.bz2</span></pre>
</div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="line-height: 26px;"><div>
<b><u><span style="color: #0b5394;">3. Extract Archive on System</span></u></b></div>
<div style="color: #222222; font-size: 15px;">
After downloading latest version of Firefox archive on your system, let’s extract is using following command.</div>
</span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># tar xvjf firefox-45.0.tar.bz2</span></pre>
</div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="line-height: 26px;"><div>
<b><u><span style="color: #0b5394;">4. Configure Firefox</span></u></b></div>
<div style="color: #222222; font-size: 15px;">
Firefox source is completely pre compiled and we don’t have to do anything to make it running on system. We just need to create a soft-link of Firefox binary file to systems bin directory to make it accessible from anywhere in system.</div>
</span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;">$ sudo ln -s /usr/local/firefox/firefox /usr/bin/firefox</span></pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now start Firefox using following command from Linux terminal. You may also use GUI menu to start Firefox on your system</span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"> # firefox &</span></pre>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></pre>
</div>
</div>

How to Install Firefox 45 on CentOS, Ubuntu & Other Linux

Install Firefox 45 on CentOS, Ubuntu & Other Linux Firefox 45 Released for systems and Android on March 8, 2016 with various bug fix...

How to install webmin on CentOS/Redhat 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="background-color: white; border: 0px; font-family: 'Open Sans'; font-size: 24px; line-height: 30px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<u><span style="color: #990000;">Install webmin on CentOS 7</span></u></h2>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><a href="http://www.hackthesec.co.in/search/label/webmin">Webmin</a> is a web-based interface for system administration for Unix. Using any modern web browser, you can setup user accounts, Apache, DNS, file sharing and much more. Webmin removes the need to manually edit Unix configuration files like /etc/passwd, and lets you manage a system from the console or remotely. See the s<a href="http://www.webmin.com/standard.html">tandard modules</a> page for a list of all the functions built into Webmin</span></span></div>
<div>
<ul style="background-color: white;">
<li style="font-family: Verdana, Geneva, sans-serif; line-height: 19.2px;"><span style="font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; line-height: 30px; text-decoration: none;"><a href="http://www.hackthesec.co.in/2016/01/how-to-install-usermin-on-centos.html"><span style="font-size: large;">How to Install Usermin On Linux</span></a></span></li>
<li><span style="color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: large;"><span style="line-height: 19.2px;"><a href="http://www.hackthesec.co.in/2016/01/how-to-install-webmin-on-centos-6.html">How to install webmin on centos 6</a></span></span></li>
</ul>
</div>
<div style="text-align: center;">
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>INSTALLATION STEPS:-</u></b></span></span></div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Step-1: </u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">mkdir /download
cd /download</span></span></pre>
</div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">Step-2:</span></u></b><span style="color: #222222;"> Download the rpm file from <a href="http://webmin.com/">webmin.com</a></span></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">wget </span></span><span style="background-color: transparent; font-size: 15px; line-height: 15.6px;"><span style="color: white; font-family: trebuchet ms, sans-serif;">http://prdownloads.sourceforge.net/webadmin/webmin-1.791-1.src.rpm</span></span></pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Once you finish download make sure you have perl package installed, as webmin is a perl application it will check the package when initial installation process begin if it is there it will continue so let’s install perl packages first.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">yum -y install perl perl-Net-SSLeay openssl perl-IO-Tty</span></span></pre>
</div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">Step-3:</span></u></b><span style="color: #222222;"> Now install webmin from '.rpm' file we downloaded.</span></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">rpm -ivUh </span></span><span style="background-color: transparent; color: white; font-family: 'trebuchet ms', sans-serif; font-size: 15px; line-height: 15.6px;">webmin-1.791-1.src.rpm</span></pre>
</div>
<div style="text-align: center;">
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Method-2: How to Install webmin using Yum Command.</u></b></span></span></div>
<div style="text-align: left;">
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Another way to install webmin on your <a href="http://www.hackthesec.co.in/search/label/Centos">CentOS</a> 7 Box using Yum Command, since webmin is not in CentOS default Repositories, we have to create webmin repository before installation.</span></span></div>
<div style="text-align: left;">
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">Step-1:</span></u></b> Frist step is to create the repository file.</span></span></div>
<div style="text-align: left;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">vi /etc/yum.repos.d/webmin.repo</span></span></pre>
</div>
<div style="text-align: left;">
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Copy and paste the below code into the file.</span></span></div>
<div style="text-align: left;">
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">[Webmin]
name=Webmin Distribution Neutral
#baseurl=http://download.webmin.com/download/yum
mirrorlist=http://download.webmin.com/download/yum/mirrorlist
enabled=1</pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Save and exit.</span></span></div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">Step-2:</span></u></b><span style="color: #222222;"> Now download the GPG key using the below command.</span></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">wget http://www.webmin.com/jcameron-key.asc</span></span></pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Import the GPG Key</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">rpm –import jcameron-key.asc</span></span></pre>
</div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">Step-3:</span></u></b><span style="color: #222222;"> Finally you can install the webmin using Yum command.</span></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: trebuchet ms, sans-serif;"><span style="font-size: 15px; line-height: 15.6px;">yum install webmin –y</span></span></pre>
</div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now open <b>http://serverip:10000</b> in your browser, you could see the below screen after login ( Use root username and password ).</span></span></div>
<div>
<img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizudnF5XbG8-xiAO9rt-OQYS8oQCQJ5B_SIsx-apcSksTewahdIeRULIOfuoTY_rpiFC5n8H6xhg8jBjJyCLfy9oUgXgiH9x9snAl7gxB3bNUZaolkfRvNKnXlcWXBgFzkkgCErVgBUnMF/s640/webmin_configuration_www.hackthesec.co.in.png" /></div>
<div>
<img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhea7QjVvwiIdl_-oS5mhbo60n5KhIh5XtfFDlOv0Fz8znuzoJId6qafnlIwv5WfrDPSs9kJkd4z3ISzNfX_mCtXsbXznnRjXeUS8Ntya4dQdOo6ZyYHTMZ5c67Y_SfvSB2tAXt8557eVTd/s640/webmin_useradmin_www.hackthesec.co.in.png" /></div>
<div>
<span style="color: #222222; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>

How to install webmin on CentOS/Redhat 7

Install webmin on CentOS 7 Webmin is a web-based interface for system administration for Unix. Using any modern web browser, you can se...

How to Install and use Lsyncd on CentOS 7 & RHEL 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="post-title" style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-stretch: inherit; font-weight: 400; letter-spacing: -1px; line-height: 1.3em; margin: 0px 0px 10px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
<span style="color: #990000; font-size: x-large;"><u>Install and use Lsyncd on CentOS 7 & RHEL 7</u></span></h1>
<div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
Lsyncd stands for “<span style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 600; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: red;">Live Syncing Daemon</span></span>“, as the name suggest lsyncd is used to sync or replicate files & directories locally and remotely after a specific time of interval. It uses Rsync & ssh in the backend.</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
Lsyncd works on Master and Slave architecture where it monitors the directory on the master server, if any changes or modification are done then lsyncd will replicate the same on its slave servers after specific interval of time.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTyZpkz4pnuZAN_GANaJ28m-tKol7w9pN_2oVRmUmoijwcySiO_0m7w3h5QBr35mzmQ1bZxAOZ9FGN3-PU67M6aztnByUWK_DxBstGvK2VCasdrlbmqnv9vBQRBnb5mmyOBTcCLvoAZYe6/s1600/lsyncd-www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTyZpkz4pnuZAN_GANaJ28m-tKol7w9pN_2oVRmUmoijwcySiO_0m7w3h5QBr35mzmQ1bZxAOZ9FGN3-PU67M6aztnByUWK_DxBstGvK2VCasdrlbmqnv9vBQRBnb5mmyOBTcCLvoAZYe6/s1600/lsyncd-www.hackthesec.co.in.jpg" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
In this article we will discuss how to install and use lsyncd on <a href="http://www.hackthesec.co.in/search/label/Centos">CentOS</a> 7 & <a href="http://www.hackthesec.co.in/search/label/RHEL">RHEL</a> 7.</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Scenario : Suppose want to sync the folder “<span style="color: red;">/var/www/html</span>” from Master server to Slave server</div>
<ul style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; list-style: none; margin: 0px 0px 15px 30px; padding: 0px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: square; margin: 0px; padding: 0px; vertical-align: baseline;">Master Server’s IP = 192.168.1.14</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: square; margin: 0px; padding: 0px; vertical-align: baseline;">Slave Server’s IP = 192.168.1.15</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; list-style: square; margin: 0px; padding: 0px; vertical-align: baseline;"><b>Directory to be Sync = /var/www/html</b></li>
</ul>
<h6 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 18px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
First Enable Key based authentication between Master and Slave Server.</h6>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Login to Master server & generate the public and Private keys using ssh-keygen command.</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">root@ec:/home/ec# </span><span style="color: lime;">ssh-keygen</span><span style="color: white;">
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
5f:56:26:70:d4:99:7f:77:87:0a:46:f6:5e:e6:22:df root@ec
The key's randomart image is:
+---[RSA 2048]----+
|          ..o. o |
|          oo  +  |
|         o .. oo |
|          o .++ *|
|        S. oo=  =|
|         ..o+ .  |
|          .o o   |
|            . E  |
|                 |
+-----------------+</span></span></pre>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Now Copy the public key using ssh-copy-id command to slave server</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# </span><span style="color: lime;">ssh-copy-id -i</span><span style="color: white;"> /root/.ssh/id_rsa.pub root@192.168.1.15</span></span></pre>
<h5 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 20px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Step:1 Login to Master Server and Install Lsyncd Package</h5>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Install the lsyncd dependency packages using below yum command.</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# yum install </span><span style="color: lime;">lua lua-devel pkgconfig gcc asciidoc</span></span></pre>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
To install lsyncd package using yum command , first enable the <a href="http://www.hackthesec.co.in/2016/01/how-to-install-epel-repo-on-centos-and.html">EPEL repo </a>as lsyncd rpm is not available in the default repos.</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# rpm -iUvh http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm
[root@hackthesec ~]# yum </span><span style="color: lime;">install lsyncd</span></span></pre>
<h5 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 20px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Step:2 Set up Configuration File of Lsyncd</h5>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Copy the sample Configuration to <b>/etc/lsyncd.conf</b></div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# cp </span><span style="color: lime;">/usr/share/doc/lsyncd</span><span style="color: white;">-2.1.5/examples/lrsync.lua /etc/lsyncd.conf</span></span></pre>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Add the following Lines to the config file.</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# cat </span><span style="color: lime;">/etc/lsyncd.conf</span><span style="color: white;"> 
----
-- User configuration file for lsyncd.
--
-- Simple example for default rsync.
--
settings = {
 </span><span style="color: red;">logfile</span><span style="color: white;"> = "/var/log/lsyncd.log",
 </span><span style="color: red;">statusFile</span><span style="color: white;"> = "/var/log/lsyncd.stat",
 statusInterval = 2,
}
sync{
 default.rsync,
 </span><span style="color: red;">source</span><span style="color: white;">="/var/www/html",
 </span><span style="color: red;">target</span><span style="color: white;">="192.168.1.15:/var/www/html",
 rsync={rsh ="/usr/bin/ssh -l root -i /root/.ssh/id_rsa",}
}
[root@hackthesec ~]#</span></span></pre>
</div>
<div>
<h5 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 20px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Step:3 Start the Service and enable it at reboot</h5>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# systemctl start lsyncd
[root@hackthesec ~]# systemctl </span><span style="color: lime;">enable lsyncd</span><span style="color: white;">
ln -s '/usr/lib/systemd/system/lsyncd.service' '/etc/systemd/system/multi-user.target.wants/</span><span style="color: lime;">lsyncd.service</span></span><span style="color: white;">'</span></pre>
<h5 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 20px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Step:4 Analyze the Replication and Logs Report.</h5>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
As we can see that we are using “<span style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 600; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">root</span>” user for syncing data , as per your requirement you can change the user name.</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
In the log File we can see the status of replication whether the replication is completed or Not.</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# </span><span style="color: lime;">tail -10</span><span style="color: white;"> /var/log/lsyncd.log
Sun Jul 26 12:53:04 2015 Normal: recursive startup rsync: /var/www/html/ -> 192.168.1.15:/var/www/html/
Sun Jul 26 12:53:56 2015 Normal: Startup of "</span><span style="color: lime;">/var/www/html/</span><span style="color: white;">" finished.
[root@hackthesec ~]#</span></span></pre>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.3999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Using Stat file we view the lsyncd status Report. Sample Example is shown below</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# </span><span style="color: lime;">more /var/log/lsyncd.stat</span><span style="color: white;">

Lsyncd status report at Sun Jul 26 12:53:58 2015
</span><span style="color: lime;">Sync1 source=/var/www/html/
</span><span style="color: white;">There are 0 delays
Excluding:
 nothing.

Inotify watching 849 directories
 1: /var/www/html/
 2: /var/www/html/catalog/
 3: /var/www/html/catalog/controller/
 4: /var/www/html/catalog/controller/module/
 5: /var/www/html/catalog/controller/checkout/
 6: /var/www/html/catalog/controller/api/
 7: /var/www/html/catalog/controller/payment/
 8: /var/www/html/catalog/controller/tool/
 9: /var/www/html/catalog/controller/product/
 ---------------------
 848: /var/www/html/system/library/db/
 849: /var/www/html/system/modification/
[root@hackthesec ~]#</span></span></pre>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;"><a href="http://www.hackthesec.co.in/p/id-table-outer-border-0-sort-list-by-id.html">Hack The Sec</a>
<a href="https://www.twitter.com/hackthesecurity">Hack The Sec Twitter</a>
<a href="http://www.linuxtutorial.net/">Our Another Website</a></span></span></pre>
</div>
</div>

How to Install and use Lsyncd on CentOS 7 & RHEL 7

Install and use Lsyncd on CentOS 7 & RHEL 7 Lsyncd stands for “ Live Syncing Daemon “, as the name suggest lsyncd is used to sync o...