CentOS 6 Linux Server Cookbook -- Table of Contents -- CentOS 6 Linux Server Cookbook -- Credits -- About the Author -- About the Reviewers -- www.PacktPub.com -- Support files, eBooks, discount offers and more -- Why Subscribe? -- Free Access for Packt account holders -- Preface -- What this book covers -- What you need for this book -- Who this book is for -- Conventions -- Reader feedback -- Customer support -- Errata -- Piracy -- Questions -- 1. Installing CentOS -- Introduction -- Downloading CentOS and confirming the checksum on a Windows desktop -- Getting ready -- How to do it... -- How it works… -- See also -- Performing an installation of CentOS using the graphical installer -- Getting ready -- How to do it... -- How it works… -- See also -- Running a netinstall over HTTP -- Getting ready -- How to do it... -- How it works... -- See also -- Installing CentOS in Text Mode and building a minimal installation -- Getting ready -- How to do it... -- How it works... -- See also -- Re-installing the boot loader -- Getting ready -- How to do it... -- How it works... -- Updating the installation and enhancing the minimal install with additional administration and development tools -- Getting ready -- How to do it... -- How it works... -- See also -- Finishing the installation process with Firstboot -- Getting ready -- How to do it... -- How it works... -- There's more... -- Adding the GNOME desktop environment, changing the runlevel, and installing additional software -- Getting ready -- How to do it... -- How it works... -- 2. Configuring CentOS -- Introduction -- Changing the time zone and updating the hardware clock -- Getting ready -- How to do it... -- How it works... -- There's more... -- Linking time and location -- Synchronizing the system clock with NTP -- Getting ready -- How to do it... -- How it works... -- There's more...

Synchronizing multiple machines -- Modifying the logfile's location -- Fudging time -- See also -- Setting a static IP address -- Getting ready -- How to do it... -- How it works... -- There's more... -- Substituting the Netmask value with a prefix -- Finding your HWADDR/MAC address -- Binding multiple IP addresses to a single Ethernet device -- Getting ready -- How to do it... -- How it works... -- There's more... -- Bonding two Ethernet devices to increase bandwidth and provide redundancy -- Getting ready -- How to do it... -- How it works... -- There's more... -- Changing the hostname and resolving a fully qualified domain name -- Getting ready -- How to do it... -- How it works... -- There's more... -- Switching SELinux off -- Getting ready -- How to do it... -- How it works... -- See also -- Disabling the IPv6 module -- Getting ready -- How to do it... -- How it works... -- There's more... -- 3. Working with CentOS -- Introduction -- Creating an administrative user and becoming root with the switch user command -- Getting ready -- How to do it... -- How it works... -- There's more... -- Introducing mailx and forwarding the root's e-mail to an external e-mail address -- Getting ready -- How to do it... -- How it works... -- There's more... -- Automating tasks with cron -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also -- Synchronizing files and directories with rsync and working towards a full system backup with cron -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also -- Issuing customized e-mail reports with Mutt -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also -- Using logrotate to manage logfiles -- Getting ready -- How to do it... -- How it works... -- There's more... -- Extending log rotation by adding NTP to logrotate -- Getting ready.

How to do it... -- How it works... -- Using chkconfig to enable a custom service at boot -- Getting ready -- How to do it... -- How it works... -- There's more... -- Evaluating current memory usage with the free and top commands and clearing the memory cache -- Getting ready -- How to do it... -- How it works... -- There's more... -- 4. Managing Packages with Yum -- Introduction -- Updating the system with YUM -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also -- Cleaning the YUM cache -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also -- Automating Yum updates with Yum-cron -- Getting ready -- How to do it... -- How it works... -- See also -- Installing packages with YUM -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also -- Removing packages with YUM -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also -- Finding packages with YUM -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also -- Installing Yum Priorities to support additional repositories -- Getting ready -- How to do it... -- How it works... -- See also -- Enhancing CentOS with the EPEL and Remi repositories -- Getting ready -- How to do it... -- How it works... -- See also -- 5. Securing CentOS -- Introduction -- Escalating user privilege with sudo -- Getting ready -- How to do it... -- How it works... -- There's more... -- Change the default timeout -- Hardening the secure shell environment -- Getting ready -- How to do it... -- How it works... -- There's more... -- Changing the SSH port number of your server -- Limiting SSH access by user or group -- See also -- Configuring a firewall and working with IPTables -- Getting ready -- How to do it... -- How it works... -- There's more... -- Allowing an IP address.

Banning an IP address -- See also -- Protecting SSH with fail2ban -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also -- Preventing dictionary-based attacks with DenyHosts -- Getting ready -- How to do it... -- How it works... -- There's more... -- Unblocking an IP address -- See also -- Running antivirus scans with ClamAV -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also... -- 6. Working with Samba -- Introduction -- Configuring Samba as a standalone server and enabling home directories -- Getting ready -- How to do it... -- How it works... -- There's more... -- Disable printing support in Samba -- Relaxing the rules for SELinux -- Opening the firewall -- Assigning the master browser -- See also -- Adding, deleting, and disabling a Samba user -- Getting ready -- How to do it... -- How it works... -- There's more... -- Providing a network recycle bin for Samba -- Getting ready -- How to do it... -- How it works... -- There's more... -- Hiding folders and files with Samba -- Getting ready -- How to do it... -- How it works... -- There's more... -- Creating a custom share folder for a specific user or a group of users -- Getting ready -- How to do it... -- How it works... -- There's more... -- Controlling access and enabling a write list for specific users or groups -- Enabling guest-only access to a custom share folder -- See also -- 7. Working with Domains -- Introduction -- Building a caching-only nameserver with BIND -- Getting ready -- How to do it... -- How it works... -- There's more... -- Enabling access to a DNS server from behind a firewall -- Cleaning expired records -- See also -- Writing zone files for BIND -- Getting ready -- How to do it... -- How it works... -- See also -- Adding zones to BIND and configuring a nameserver -- Getting ready -- How to do it...

How it works... -- There's more... -- See also -- Deploying a local nameserver with dnsmasq -- Getting ready -- How to do it... -- How it works... -- See also -- Logging events with dnsmasq and combining this with logrotate -- Getting ready -- How to do it... -- How it works... -- See also -- Enabling domain name wildcards with dnsmasq -- Getting ready -- How to do it... -- How it works... -- See also -- Hardening BIND with chroot and providing better security measures -- Getting ready -- How to do it... -- How it works... -- See also -- 8. Working with Databases -- Introduction -- Installing and hardening MySQL server with mysql_secure_installation -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also -- Creating a MySQL database, adding a MySQL user, and assigning user privilege from the command line -- Getting ready -- How to do it... -- How it works... -- There's more... -- Reviewing and revoking permissions or dropping a user -- See also -- Installing PostgreSQL, adding a user, and creating your first database -- Getting ready -- How to do it... -- How it works... -- There's more... -- Connecting to PostgreSQL -- Accessing a PostgreSQL database using psql -- Creating a copy of a database in PostgreSQL -- See also -- Configuring remote access to PostgreSQL -- Getting ready -- How to do it... -- How it works... -- See also -- 9. Providing Mail Services -- Introduction -- Enabling a domain-wide Mail Transport Agent (MTA) and testing your SMTP configuration with Telnet -- Getting ready -- How to do it... -- How it works... -- There's more... -- See also -- Building a local POP3/SMTP server with Postfix and Dovecot -- Getting ready -- How to do it... -- How it works... -- There's more... -- Setting up e-mail software -- See also.

Closing the open relay, enabling SMTP authentication and dealing with Spam by configuring SASL, and enabling Postfix header and body checks.