Articles by Falko Timme
-
How To Set Up SSL Vhosts Under Nginx + SNI Support (Ubuntu 11.04/Debian Squeeze)
Author: Falko Timme • Tags: security, debian, ubuntu, web server, nginx • Comments: 3
How To Set Up SSL Vhosts Under Nginx + SNI Support (Ubuntu 11.04/Debian Squeeze) This article explains how you can set up SSL vhosts under nginx on Ubuntu 11.04 and Debian Squeeze so that you can access the vhost over HTTPS (port 443). SSL is short for Secure Sockets Layer and is a cryptographic protocol that provides security for communications over networks by encrypting segments of network connections at the transport layer end-to-end. In addition to that I will show how to make use of SNI (Server Name Indication) to allow multiple SSL vhosts per IP address.
-
Debian/Ubuntu - unable to make backup link of `./usr/sbin/sshd' before installing new version: Operation not permitted
Author: Falko Timme • Tags: errors • Comments: 5
Error: Debian/Ubuntu - unable to make backup link of `./usr/sbin/sshd' before installing new version: Operation not permitted You try to upgrade OpenSSH on Debian/Ubuntu (packages openssh-client and openssh-server) and get the following errors: Unpacking replacement openssh-server ... dpkg: error processing /var/cache/apt/archives/openssh-server_1%3a5.5p1-6_amd64.deb (--unpack): unable to make backup link of `./usr/sbin/sshd' before installing new version: Operation not permitted configured to not write apport reports Preparing to replace openssh-client 1:5.1p1-5 (using .../openssh-client_1%3a5.5p1-6_amd64.deb) ... Unpacking replacement openssh-client ... dpkg: error processing /var/cache/apt/archives/openssh-client_1%3a5.5p1-6_amd64.deb (--unpack): unable to make backup link of `./usr/bin/ssh' before installing new version: Operation not permitted
-
CentOS 5.6/Dovecot - Fatal: listen(::, 143) failed: Address already in use
Author: Falko Timme • Tags: errors • Comments: 0
Error: CentOS 5.6/Dovecot - Fatal: listen(::, 143) failed: Address already in use You try to start Dovecot on CentOS 5.6 and get the following error: Fatal: listen(::, 143) failed: Address already in use
-
-
Installing Lighttpd With PHP5 And MySQL Support On Fedora 15
Author: Falko Timme • Tags: fedora, lighttpd, mysql, php, web server • Comments: 0
Installing Lighttpd With PHP5 And MySQL Support On Fedora 15 Lighttpd is a secure, fast, standards-compliant web server designed for speed-critical environments. This tutorial shows how you can install Lighttpd on a Fedora 15 server with PHP5 support (through FastCGI) and MySQL support.
-
Restricting Users To SFTP Plus Setting Up Chrooted SSH/SFTP (Debian Squeeze)
Author: Falko Timme • Tags: debian, security • Comments: 12
Restricting Users To SFTP Plus Setting Up Chrooted SSH/SFTP (Debian Squeeze) This tutorial describes how to give users chrooted SSH and/or chrooted SFTP access on Debian Squeeze. With this setup, you can give your users shell access without having to fear that they can see your whole system. Your users will be jailed in a specific directory which they will not be able to break out of. I will also show how to restrict users to SFTP so that they cannot use SSH (this part is independent from the chroot part of this tutorial).
-
How To Install VMware Player On Ubuntu 11.04/Linux Mint 11
Author: Falko Timme • Tags: desktop, ubuntu, virtualization, vmware • Comments: 28
How To Install VMware Player On Ubuntu 11.04/Linux Mint 11 This tutorial provides step-by-step instructions on how to install VMware Player on an Ubuntu 11.04 or Linux Mint 11 desktop system. With VMware Player you can create and run guest operating systems ("virtual machines") such as Linux, Windows, FreeBSD, etc. on your desktop, i.e., you can run multiple operating systems on the same hardware which saves a lot of money.
-
Postfix/Greyfix - warning: problem talking to server private/greyfix: No such file or directory
Author: Falko Timme • Tags: errors • Comments: 0
Error: Postfix/Greyfix - warning: problem talking to server private/greyfix: No such file or directory You get the following error in your mail log: Aug 26 16:20:00 server1 postfix/smtpd[8471]: warning: problem talking to server private/greyfix: No such file or directory
-
Installing PowerDNS (With MySQL Backend) And Poweradmin On Debian Squeeze
Author: Falko Timme • Tags: dns, debian, powerdns • Comments: 4
Installing PowerDNS (With MySQL Backend) And Poweradmin On Debian Squeeze This article shows how you can install the PowerDNS nameserver (with MySQL backend) and the Poweradmin control panel for PowerDNS on a Debian Squeeze system. PowerDNS is a high-performance, authoritative-only nameserver - in the setup described here it will read the DNS records from a MySQL database (similar to MyDNS), although other backends such as PostgreSQL are supported as well. Poweradmin is a web-based control panel for PowerDNS.
-
Using scponly To Allow SCP/SFTP Logins And Disable SSH Logins On Debian Squeeze
Author: Falko Timme • Tags: debian, security • Comments: 4
Using scponly To Allow SCP/SFTP Logins And Disable SSH Logins On Debian Squeeze scponly is an alternate shell that restricts users to SCP and SFTP logins, but disallows SSH logins. It is a wrapper to the OpenSSH suite of applications. With the help of scponly, you can allow your users to use clients such as WinSCP or FileZilla to upload/download files, but you refuse SSH logins (e.g. with PuTTY) so that your users cannot execute files/programs. This tutorial shows how to install and use scponly on Debian Squeeze.
-
The Perfect Server - CentOS 6.0 x86_64 [ISPConfig 2]
Author: Falko Timme • Tags: centos, control panels, ispconfig • Comments: 6
The Perfect Server - CentOS 6.0 x86_64 [ISPConfig 2] This tutorial shows how to set up a CentOS 6.0 server (x86_64) that offers all services needed by ISPs and web hosters: Apache web server (SSL-capable), Postfix mail server with SMTP-AUTH and TLS, BIND DNS server, Proftpd FTP server, MySQL server, Dovecot POP3/IMAP, Quota, Firewall, etc. This tutorial is written for the 64-bit version of CentOS 6.0, but should apply to the 32-bit version with very little modifications as well. In the end you should have a system that works reliably, and if you like you can install the free webhosting control panel ISPConfig 2 (i.e., ISPConfig runs on it out of the box).