setting

hostname

botond published 2024/02/10, Sat - 08:40 time
The hostname command is a basic tool in Linux systems that allows you to query or set the computer name. In Linux systems, every machine has a unique name, which we call "hostname". This name allows devices to be identified and accessed within the network. The hostname command can be used to view or change the settings of the current hostname. This command is particularly useful when diagnosing network problems and configuring servers and other network devices.

How to set and keep the exact time in sync on your Debian computer using systemd-timesyncd

botond published March 2024, 01, Thu - 18:20 time
In the world of modern information technology, the use of accurate time is a critical aspect. In today's Linux operating systems, there are many solutions to ensure that our system's clock is always synchronized with world time. In this short description, we will see how to set the date, the exact time and our time zone manually, and how to activate time synchronization with the Internet.

How to defend against attacks resulting in large volumes of 404 or other 4xx HTTP error codes with Fail2Ban

botond published 2023/03/14, k - 00:38 time
Our websites are constantly under attack from the outside world. The vast majority of these are done by robots, which try to discover the weak points of the websites running on the server. Some of the robots with this purpose try to do this by making various seemingly random HTTP requests to our websites, most of which are directed to non-existent URL addresses. As a result, our server responds with a 404 HTTP response code. In this description, we will look at how to ban the large number of attempts resulting in 404 and other 4xx HTTP response codes using Fail2Ban.

How to fix "dovecot: master: Error: socket() failed: Address family not supported by protocol" errors

botond published 2023/02/25, Sat - 08:03 time
After updating ISPConfig, not all services restarted. In this case, the Dovecot POP3/IMAP mail server and even Postfix threw warnings. Although we fixed these errors earlier, our settings were overwritten again during the ISPConfig update. In this troubleshooter, on the one hand, we fix "Address family not supported by protocol" type errors that cause the service to be inoperable, and we also make their permanent settings so that they remain even after further ISPConfig updates.

How to build and arming our ISPConfig3 server and how to secure our control panel, main services and websites with Let's Encrypt SSL (page 3)

botond published 2023/01/20, p - 23:19 time
With the help of the ISPConfig control panel, we can easily manage the websites on our server, as well as other web services. In this description, we will review how to build and provision our ISPConfig3 server, as well as how to set up free SSL certificates issued by Let's Encrypt for the control panel, main services and our websites. On this page, we check the web services and other components running on the server, then we set up the Let's Encrypt SSL certificates for the control panel and the required services and websites. Finally, we perform a few more fine-tuning tasks and eliminate any problems that may arise.

How to enable the HTTP/2 protocol on our Apache based web server

botond published 2022/12/20, k - 02:50 time
The HTTP/2 or HTTP2.0 protocol enables faster web services with less data traffic. Although the protocol created in 2015 has been widespread for quite a few years, it is not turned on by default in the majority of web servers due to compatibility reasons. Among other things, it does not support the outdated mod_php Apache module, which in turn still operates many old websites, so enabling and enabling it is left to system administrators. In this short description, we will see how we can enable the use of the HTTP/2 protocol on Apache web servers that still use the old HTTP/1.1 protocol.

How can we change the default tcp port 22 of our SSH server on our Debian or Ubuntu Linux server for better security?

botond published 2022/10/23, v - 08:10 time
There are several ways to manage web servers and other servers remotely, of which SSH is the most common command line solution. The SSH protocol communicates over an encrypted channel between the server and the client. Like all similar communications, SSH transmits data through a specific port, which by default is the well-known tcp port 22. Since the function of this port is known to many people, it exposes the servers to regular attacks. This is usually avoided - or at least to reduce the number of attempts - by switching this well-known port to another, unknown port number, which can only be detected externally by port scanning, which is a more time-consuming task.
In this write-up, we will look at how to change SSH's well-known TCP port 22 to a unique port number to minimize the number of attack attempts via SSH.

Installing, configuring and using a UFW firewall on Debian / Ubuntu systems

botond published 2022. 06. 27., h - 12:54 time
UCW (Uncomplicated Firewall) is an easy-to-use netfilter firewall management program. It uses a command line interface that consists of a few simple commands and uses iptables for configuration, so it is the frontend of iptables. In this description we will look at the installation and basic use and configuration of the UFW firewall, the steps of which I will perform on a minimal Debian 11 server.