ShareWiz Ultra Secure Server Setup

Add Software

add software

Install Useful Software

The following software packages are really useful and recommended to be installed.

Please note that additional software is installed as per the instructions below, but the actual configuration of each individual software package will be done later.

Install binutils (highly recommended)

Issue the following command:

sudo aptitude install binutils

The programs in this package are used to assemble, link and manipulate binary and object files. They may be used in conjunction with a compiler and various libraries to build programs.

top

Install the most package (highly recommended)

Issue the following command:

sudo aptitude install most

Most is an improvement of the more and less commands, allowing data to be viewed in a scrollable window.

In addition to displaying ordinary text files, most can also display binary files as well as files with arbitrary ascii characters.

top

Install the sysv-rc-conf package (highly recommended)

Issue the following command:

sudo aptitude install sysv-rc-conf

sysv-rc-conf provides a terminal GUI for managing /etc/rc{runlevel}.d/ symlinks.

The interface comes in two different flavors, one that simply allows turning services on or off and another that allows for more fine tuned management of the symlinks.

Unlike most runlevel config programs, you can edit startup scripts for any runlevel, not just your current one.

top

Install the htop package (highly recommended)

Issue the following command:

sudo aptitude install htop

htop is an interactive process viewer, which allows killing and renicing of processes without entering their PIDs.

top

Install the facter package (highly recommended)

Issue the following command:

sudo aptitude install facter

facter is a system information utility that makes it easy to determine information about the system hardware.

It is an alternative to the lshw command.

top

Install the nmap package (highly recommended)

Issue the following command:

sudo aptitude install nmap

nmap is a network security monitor.

It is used to check the security of the system.

It can also be used to check for networking problems.

top

Install the hping3 package (highly recommended)

Issue the following command:

sudo aptitude install hping3

hping3 is a network tool able to send customised packets.

Using hping3 allows the following to be tested:

  • Test firewall rules
  • Advanced port scanning
  • Test net performance using different protocols, packet size, TOS (type of service) and fragmentation.
  • Path MTU discovery
  • Remote OS fingerprinting
  • TCP/IP stack auditing
  • A lot more

top

Install the traceroute package (recommended)

Issue the following command:

sudo aptitude install traceroute

The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host. Traceroute displays the IP number and host name (if possible) of the machines along the route taken by the packets. Traceroute is used as a network debugging tool. If you're having network connectivity problems, traceroute will show you where the trouble is coming from along the route.

Install traceroute if you need a tool for diagnosing network connectivity problems.

top

Install the 7-zip archive package (recommended)

Issue the following command:

sudo aptitude install p7zip-full

The 7z (7-Zip) archive format offers good compression ratios and is an open source format.

p7zip is easy to use on the command line. To compress a file named testfile to testfile.7z:

p7zip testfile

To decompress the archive:

p7zip -d testfile.7z

top

Install the lftp package (recommended)

Issue the following command:

sudo aptitude install lftp

lftp is a file retrieving tool that supports FTP, HTTP, FISH, SFTP, HTTPS and FTPS protocols under both IPv4 and IPv6. Lftp has an amazing set of features, while preserving its interface as simple and easy as possible.

The main two advantages over other ftp clients are reliability and ability to perform tasks in background. It will reconnect and reget the file being transferred if the connection broke. You can start a transfer in background and continue browsing on the ftp site. It does this all in one process.

When you have started background jobs and feel you are done, you can just exit lftp and it automatically moves to nohup mode and completes the transfers. It has also such nice features as reput and mirror. It can also download a file as soon as possible by using several connections at the same time.

lftp can also be scriptable, it can be used to mirror sites, it lets you copy files among remote servers (even between FTP and HTTP). It has an extensive online help. It supports bookmarks, and connecting to several ftp/http sites at the same time.

top

Install the fsarchiver package (recommended)

Issue the following command:

sudo aptitude install fsarchiver

fsarchiver FSArchiver is a system tool that allows you to save the contents of a file-system to a compressed archive file. The file-system can be restored on a partition which has a different size and it can be restored on a different file-system. Unlike tar/dar, FSArchiver also creates the file-system when it extracts the data to partitions. Everything is checksummed in the archive in order to protect the data. If the archive is corrupt, you just loose the current file, not the whole archive.

top

Install a command-line email utility (recommended)

Issue the following command:

sudo aptitude install sendemail

If you have an external mail server you can test the command-line email utility by following these instructions:

Issue the following command:

sudo vi /etc/hosts

and add your email server:

192.168.5.25 server-mail

Test the ability to send email by typing:

sendemail -f root@server1 -t your@emailaddress.com -u "Test Subject" -m "Test Body" -s server-mail:25

top

Continue to Base Security...