Ubuntu Servers :: Setting Up Secure FTP On Internal Network
Mar 8, 2010
I'm running Ubuntu Server 9.10 and I'm looking to setup an FTP server. I have SSH running beautifully and it's accessible from any computer whether it be inside the network or coming in from the internet (provided you have the administrator username and password ). I've tried Proftpd and vsftpd and have failed miserably so far. Which FTP server application do you think I should go with and how could I go about setting it up through my SSH connection?
My current setup is this:
- Ubuntu Server 9.10 with Fixed IP of 192.168.1.100
- 500GB Hard Drive
- SDA1 = 512MB ext2 /boot
- SDA2 = 2GB swap
- SDA3 = 20GB ext4 /
- SDA5 = 438GB ext4 /home
- One User (Username = administrator)
- Full SSH Capabilities
- IP Address to DNS provided by www.dyndns.org
- WRT120N Router with Remote Access and Port 22 Open
I basically want to set up a secure FTP server that anyone on the internal network can access as well as anyone from the internet (as long as they have a username and password). I want to setup a username and password for each user so that they all have read/write access to the same folder in my /home partition (I'll call it FTPSHARE).
View 9 Replies
ADVERTISEMENT
Jun 9, 2011
Does anyone know how to go about setting up a secure IMAP email server that is able to be accessed from outside the network? Similar to how you can access your google email account from your computer using Thunderbird.
View 3 Replies
View Related
Feb 25, 2011
I've installed Ubuntu Server 10.10 with two network cards. One for external, and one internal.My problem is that as soon as i activate eth1 (external), i can't access the server from the internal network (eth0)
With these settings i can't reach the internal network from inside.If i disable the gateway on eth1 and enable the gateway on eth0, it works.
View 6 Replies
View Related
Jan 9, 2010
I have a problem configuring my PostGreSQL server for internal network access.
I want to be able to access my postgre server from 192.168.1.10
It works when I set listen_address to *, but if I input 192.168.1.10, or any other IP address, I always get:
Quote:
WARNING: could not create listen socket for "192.168.1.10"
FATAL: could not create any TCP/IP sockets
postgresql.conf section
[Code]....
View 6 Replies
View Related
Jul 27, 2010
I've 7 PC's on my network. I've to setup an internal mail service, to send mails inside the network. I've installed Fedora 12 on one machine and the rest run's on Windows XP. What all packages do I need? How can I configure it?
View 2 Replies
View Related
Jun 9, 2009
I'm in the process of setting up a script in perl to make 1,000's of curl calls to my companies application on our test server. Our software does all sorts of tracking of data based on IP addresses using geoIP, so i was wondering if anyone knew of a way to fake these addresses to the server?I know a big issue with the IP faking is the return path but i dont really need this. I also cant do it on the hardware level since the script is going to be picking lots of different IP's at random.Anyone have any idea if this is possible and if so, are there any known libraries i can use for this? I prefer perl but any Linux compatiblie scripting language is fine.
View 1 Replies
View Related
Jan 26, 2011
Suppose I have a bunch of web servers running on my internal network:
And I have a dyndns account, I was wondering:
How can I do this?
View 2 Replies
View Related
Mar 31, 2010
I have a server on my home network. It's currently running a DNS server (bind9) and an HTTP caching server (squid).What I would like to do is redirect all outgoing port 80 connections to the squid server and also make the server responsible for managing DHCP on the network.
Do I just need to install a DHCP daemon on the server, disable it on the router, then set my server as the default gateway and configure iptables to route all connections like I want? Or is it more complicated than that? Also, would that mean that all communication between two computers on the network will go through the server?
View 9 Replies
View Related
Aug 3, 2011
setting up secure ftp on linux
View 3 Replies
View Related
Jul 11, 2010
I have a Fedora server at home. I don't want it to be running all the time to reduce the power usage and be more green It only works , whet it is really needed. So when it is not in use (no ssh or http connections have been active for some time), a custom python script suspends it. I have set it to wake up on unicast messages, so when somebody connects to it, the server wakes up.In Fedora 12 everything worked fine: when the server was sleeping and you connected to it using ssh or a web browser, the client waited for couple of seconds until the server was up and then connected (actually it worked even when server was turned off: the command "ssh [user]@[server]" just waited until server was booted up and then connected.)
Now I installed Fedora 13 on the server. When I try to connect to the server when it's sleeping, the client waits for some time (and server wakes up), then the connection just times out. When I try to connect again, it works. When server is up and running, I can connect to it. So when it is sleeping I have to connect twice: first to wake it up and then connect again to log in.Do you have any ideas what is causing this problem, as it is really annoying for me and I don't want to have it running all the day.Also, I have not set up the network in the best way, I think. To start the network at boot, i have put the command
Code:
ifup eth0
to /etc/rc.local.
To start the network when resurming from suspend, I have creted a script with the same command in /usr/lib64/pm-utils/sleep.d. It works, but it does not seam to be the *right* way to do this. Maybe this is also causing the first problem. So how have you managed to get a working network connection on your Fedora 13 headless server?
View 4 Replies
View Related
Oct 7, 2010
I have a good grasp on windows server 2003 but I don?t want to pay outrageous license fees for software and services and clients. I am newish to terminal as I only know a few commands. I have no problem installing services for the server edition for 10.04. Its just understanding whats going wrong to troubleshoot. I guess there is you guys and I have good working knowledge of Cisco's IOS's so I understand things like routing tables and interfaces and such for troubleshooting.
Questions I have... Can I install the desktop version of 10.04 and just install the server services? I was looking at the server guide [URL] and would like to know if these can all be installed on the desktop edition without too much trouble. I would imagine one could just use the server edition but I would really want a graphical user environment for some of the activities, if not all that I can. This would be becuase on my skills in the CLI. I priced out a server from Dell. I fits my budget perfectly if I go the Ubuntu 10.04 route. I was wondering if anyone sees any conflicts with the hardware for the Ubuntu OS....
[Code]....
View 4 Replies
View Related
Dec 3, 2010
I have recently setup a RHEL 5.3 server primarily to be used as an Apache web server. I also now have a requirement to have this server also service SFTP requests for uploading/downloading files.
1. By default RHEL 5.3 allows SFTP (over TCP port 22). However when searching for SFTP site setup I've come across the fact that RedHat recommends using vsftpd. So if I configure vsftpd, what happens to the default SFTP and the ability to remotely use something like PuTTY to SSH into the server? Really looking to see if SFTP or vsftpd is best. Also, is vsftpd as or more secure than FTP over SSH?
2. I've set aside a separate disk parition (to keep it away from the system partition to help lock down security) for the SFTP site. So I want to use that as the default SFTP root directory structure. How can this be achieved?
3. My requirements dictate 3 separate directories need to be used, each with their own associated SFTP user. The user can only read/write it's own directory structure and cannot navigate out of it. Also there will be a SFTP super user able to navigate through each of the 3 directory structures mentioned, but will not be able to navigate out of it's home directory. Can this be done, if so how?
There will be no SSL certificates in play at the moment. I'm more concerned about getting things setup and working correctly first. However there may be a requirement to use them later. The site will be accessed over the Internet initially, hence the reason I'm looking to make it as secure as possible while getting it up and running quickly.
View 3 Replies
View Related
Jun 17, 2010
I'm trying to secure the CentOS servers on our company network as the current situation is, shall we say, less-than-ideal: remote root logins with the same password across several servers (behind a firewall, on non-standard ports, but still) and several key processes running as root. My proposal to amend this consists of the following:
- setup a bare as possible SSH-gateway with only the normal user accounts to handle remote access
- disable the root login from anywhere else but LOCAL and create special accounts with root permissions for our ~4 system administrators, like admin.foo admin.bar that can only login from inside the company network, using SSH-keys.
So far my biggest obstacle seems to be creating the administrative users, how do I go about and do that? When I simply create a user adminfoo with uid=0 it will show on my shell as root, which makes it useless as a way to make our admins accountable for their actions. BTW, my initial proposal to use sudo unfortunately met with strong resistance, because it compromises usability.
View 7 Replies
View Related
Apr 2, 2010
I dont know were to begin to solve my problem and I have been googling for hours to get a hint without any success. I'm runnning a Counterstrike Server on my virtual openSuse server - I'm exploring so don't justify what I am hosting at the moment
I want to make it possible to gain access to the cstrike folde via a ftp login. But I really have no idea were to start. The server is also a webserver, where I can ass FTP accounts for my apache vhosts via plesk - but I dont think this is the solution of my problem, isn't it?
View 2 Replies
View Related
Nov 27, 2009
I'm confused about the sendmail/ssl combination. so confused, i'm not even sure what i'm confused about :) I want to have email sent from our server to the rest of the world in a 'secure' manner. Just dl'ed and installed CentOS5.4: Linux rh5 2.6.18-164.el5xen #1 SMP Thu Sep 3 04:03:03 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux the /etc/mail/sendmail.mc has the instructions
[Code]...
View 2 Replies
View Related
Aug 25, 2009
My hard drive is partitioned in 12 partitions (for various reasons) anyways I am having two issues when I mount my data partition. Firstly I can only write/edit files on the partition when I am under root. Second when it mounts it uses the drive's UUID as the mount name in /media (so it is horribly long!) is there a way I can force it to mount under a different name? I tried right clicking on the drive like I am able to do in Ubuntu and set a "mount point" but Fedora does not have this option.
View 3 Replies
View Related
Nov 27, 2010
I just started messing around with openSUSE 11.3 (64-bit version, KDE environment).
My desktop computer has an internal fax/modem card (PCI version, mod. USR5610C). I am very confident that this card works with Linux and U.S. Robotics guarantees that much on their web site.
I connect to the Internet via DSL but I am attempting to set up the internal analog modem card as a back up should the DSL line be temporarily down. I went to YaST -> Modem and I see that my card was detected as "U.S. ROBOTICS 56K FAX INT Modem Not configured". I pressed Edit and the Modem Parameters page says that the device is in "/dev/ttyS4". I am not sure that this is indeed where the modem is located (is there a way to make sure?) but I accepted it and proceeded to entering the name of my Internet service provider, the access phone number, user name, and password. So far, so good -- I think!
Eventually, I come to a window where YaST2 wants to install the following:
* jack Jack-Audio Connection Kit v. 1.9.5-2.8
* smpppd SuSE Meta PPP Daemon v. 1.60.46-1.1.1
So far I have not installed them because of the Jack-Audio Connection Kit software. Do I really need to install it in order to get the modem working? The reason I am being careful is that I just spent weeks and weeks in trying to get my audio card (ASUS Xonar DX 7.1, PCI-E) to work with openSUSE and I sure do not want to mess things up and start all over again!
How to set up an analog modem with openSUSE 11.3?
View 2 Replies
View Related
May 30, 2011
I'm trying to setup an open-source project, I have a couple of developers on the team but nobody has experience with Apache. I would like to setup a simple home server for Bugzilla on Ubuntu 10.04, so my question is, is there a server that comes secure out-of-the-box so that simply adding files to /htdocs would suffice?
View 1 Replies
View Related
Feb 23, 2010
I would like to set up a proxy server at home which i can use to access sites from work. I was thinking a web-page i log into and then a sort of use like a browser? like this for example, but where i can have a secure login
View 4 Replies
View Related
Jul 19, 2010
I am going to be away semi permanently and want to create a VPN that will allow me to act as if my laptop was connected to my home network.
All I want is for the drives to be accessible so I can use them for primary access as if they are in the laptop.
Questions:
1. Can I set up a Linux VPN that is secure using public WiFi (or however I connect to the net) when I am on the road?
2. I will be using a desktop (32 bit) as the server, what version of Linux would be best for this?
3. If my server is linux and the server drives are NTFS will they be accessible using a windows machine? (I will be double booting the laptop)
4. I would like to set up a pass-code that is stored on the laptop so that only that machine can get access.
This can be up to 255 characters and encrypted so it would be very hard to break. Even I would not know what it is. (I would store it on a pen drive and be able to recover it from there.)
One more. I might want to add separate users that only have access to their one drive, not the server drive. Is that OK?
View 5 Replies
View Related
Nov 22, 2010
I installed AWSTATS on my LAMP 10.04 LTS and followed several tutorials URL...) but I can't secure the folder, either by an alias or by .htaccess. I tried both methods manually and by using Webmin.If you go to the URL www.mywebsite/awstats/awstats.pl it shows up, which is good, but this is the default installation site and anyone who knows awstats could possibly see my stats. The conf folder is /etc/awstats/, and I did an alias for that, then .htacess, but neither worked. With the .htaccess, I would get a password promt but the full stats page was visible behind the password promt, and if you clicked "Cancel" about 20 times or so the promt would go away and the full stats page would be visible.
The actual file that powers awstats is in /usr/share/lib/cgi-bin/awstats.pl, and I also tried an Alias and .htaccess seperately and neither worked.I restarted apache2 after each change and I've searched several forums, but I still can't figure this out.
View 2 Replies
View Related
May 4, 2010
I have a ubuntu server , can advise if I want to change the network setting ( eg. IP address , gateway address etc ) , which one is the configuration file ? for example , if I want to change eth0 setting , what file I should update ?
View 10 Replies
View Related
Apr 20, 2011
I am running Maverick (desktop edition - don't like the netbook remix) on my Acer Aspire One AO532h. I can deal with not being able to print, but not being able to get on my secure wireless network is getting to be a bother.I have AT&T DSL and am using an AT&T 2701HG-B 2Wire Wireless Gateway DSL Router Modem. If I had known that this particular 2Wire router-modem was so crappy, I'd have bought my own and tried wrestling around with that.I recently secured my wireless network and had to change the encryption from WEP to WPA so my iPad could get on it. Both my Mac desktops, the iPad, and an old Windows laptop are working fine, but not my Acer (or my XBox, for that matter). I've searched and searched for a solution and called AT&T (no Linux support :), all to no avail.
When I try to connect to my network, it goes and goes and either says that it can't connect, or shows that I'm connected, but with no signal/net capability.
View 4 Replies
View Related
Dec 13, 2010
I am trying to remove the ability to login with password so, I follow the procedures I have found to generate a key, copy it on the server and after editing the sshd_conf file to set PasswordAuthentication to no, after I restart ssh, I find my self locked out of it....
View 5 Replies
View Related
Dec 27, 2010
how to setup a secure and reliable server, i have three ubuntu 10.10 servers a Dell PowerEdge 850,1850 and 2850 which has a Dell PowerVault 220s attached to it.The Dell PE850 Server Consists of:
Intel Pentium D 3.0GHz
4 GB RAM
Eventually 2x250GB Sata Hard Drives
The Dell PE850 Server Consists of:
2xIntel Xeon Processors 3.4GHz
4 GB RAM
2x76GB SCSI Hard Drives RAID 1
The Dell PE850 Server Consists of:
2xIntel Dual Core Processors 2.8GHz
4 GB RAM
6x76GB SCSI Hard Drives RAID 5 (pretty sure)
Dell PowerVault 220s
I would like to setup a reliable webserver, mail server, DNS and Dynamic DNS, DHCP, SQL, FTP, Samba (with Roaming Profiles), PXE Boot Server.I know how to setup most of the server modules, i would just like to know the best way to do it tho. I also want to no how to setup the secuity of the system correctly, and setup and partition up my hard disks to allow for the best reliabilty, even when a server crashes.I would like to now how to set these servers up from start to finish in a sence.
View 1 Replies
View Related
Dec 29, 2010
I am going to set up a file server on Ubuntu. I have searched a while, but can't seem to find a guide to what I want. The requirements specifications are the following:File server: possible to upload, change and download files.Linux (Ubuntu) clients, Windows clients if possible.Access restriction to deny access to other than registered users.Only the user should be able to read the content of the files.Ideally root should not be able to see the individual files, but in worst case it is ok for root to see the files.Root should not be able to open the files.Point 1-3 is easy to find out how to set up. But I can't seem to find a way to deny root to view the files. The only solution I can think of is to encrypt files or a whole folder, but I don't know how to set it up.
The setup is for a home network, but the server used as a file server will have a web server as well. If someone manages to get access to the server I don't want them to be able to read the files.
View 5 Replies
View Related
Apr 3, 2011
On a windows system I installed xampp, and let web applications on the computer be acceseable via internet . On a forum I was firmly instructed that it was an unsecure pracsis.Now I saw on utube, that it is possible to install apache and php on ubuntu 10.04 lts desktop edition.
q1: What shall I install to get apache and php and sql databases?
q2: Is runnings web applications that are acceseable via internet on a ubuntu desktop edition with the above descripted software also unacceptable in terms of security, or is it a productive secure platform. I was told that productive platforms are ok to connect to the internet.
View 2 Replies
View Related
May 5, 2011
Know any documentation or software packages to do a open source "File Hosting" or also known as "one-click hosting" server.I want to create my own private secure site to easily have clients download sensitive files. If it could be setup to use SSL that would be great.
View 1 Replies
View Related
May 17, 2011
I would like to use my Ubuntu server machine as a proxy so I can browse a little more securely/privately while I am traveling. I connect to a lot of open Wi-FI networks.I have Squid setup on an old laptop running Ubuntu Server 10.10 at home, and the main machine I will be using to connect to the proxy is a computer running Windows Vista.I am able to connect and use the Ubuntu Server machine as a proxy while traveling with the squid config file modified with http access set to 'allow all'.
Obviously this isn't the ideal setting.After lots of reading and Googling I can't figure out how to allow only my Vista laptop to use the proxy.I'm a little lost with the ACL settings required.
View 7 Replies
View Related
Feb 25, 2010
I was planning on using my VPS to grant some of my friends shells. The problem though is that I don't want them doing crazy stuff on it, like using up all my RAM or disk space. I would like to limit them to a very small 25 mb disk space, and allow them only certain application in /usr/bin like python perl irssi screen etc. I do NOT want them to be able to cd out of their home directory. I really want this to be setup like the shell provider SHellium. I can setup the FTP and SSH stuff myself.
View 3 Replies
View Related
