Welcome to my blog, For more information about me, visit my website at https://www.kush.com.fj. This blog is mostly just a journal.
PROJ=paper
OS := $(shell uname -s)
.PHONY: all pdf clean read
all: pdf
pdf: $(PROJ).tex
pdflatex $(PROJ)
bibtex $(PROJ)
pdflatex $(PROJ)
pdflatex $(PROJ)
diff: $(PROJ)-original.tex
latexdiff $(PROJ)-original.tex $(PROJ).tex > $(PROJ)-diff.tex
pdflatex $(PROJ)-diff
bibtex $(PROJ)-diff
pdflatex $(PROJ)-diff
pdflatex $(PROJ)-diff
readdiff:
ifeq ($(OS), windows32)
start ${PROJ}-diff.pdf
endif
ifeq ($(OS), Darwin)
open -a /Applications/Preview.app/Contents/MacOS/Preview ${PROJ}-diff.pdf
endif
ifeq ($(OS), Linux)
acroread ${PROJ}-diff.pdf
endif
read:
ifeq ($(OS), windows32)
start ${PROJ}.pdf
endif
ifeq ($(OS), Darwin)
open -a /Applications/Preview.app/Contents/MacOS/Preview ${PROJ}.pdf
endif
ifeq ($(OS), Linux)
acroread ${PROJ}.pdf
endif
clean:
rm -f ${PROJ}.ps ${PROJ}.pdf ${PROJ}.log ${PROJ}.aux ${PROJ}.out ${PROJ}.dvi ${PROJ}.bbl ${PROJ}.blg ${PROJ}.toc
cleandiff:
rm -f ${PROJ}-diff.ps ${PROJ}-diff.pdf ${PROJ}-diff.log ${PROJ}-diff.aux ${PROJ}-diff.out ${PROJ}-diff.dvi ${PROJ}-diff.bbl ${PROJ}-diff.blg ${PROJ}-diff.toc
References
<project name="TODO-PROJ-NAME" basedir="." default="main">
<property name="username" value="TODO-USERNAME"/>
<property name="proj.name" value="TODO-PROJ-NAME"/>
<property name="proj.ver" value="TODO-VER"/>
<property name="proj.owner" value="TODO-COPYRIGHT"/>
<tstamp>
<format property="TODAY" pattern="yyyy-MM-dd HH:mm:ss" />
</tstamp>
<property name="src.dir" value="src"/>
<property name="build.dir" value="bin"/>
<property name="lib.dir" value="lib"/>
<property name="classes.dir" value="${build.dir}/classes"/>
<property name="jar.dir" value="${build.dir}/jar"/>
<property name="javadoc.dir" value="${build.dir}/javadoc"/>
<property name="main-class" value="fj.com.kush.ui.TODO-PROJ"/>
<path id="project.classpath">
<fileset dir="${lib.dir}">
<include name="*.jar"/>
</fileset>
<pathelement path="${classes.dir}"/>
</path>
<target name="clean">
<delete dir="${build.dir}"/>
<delete>
<fileset dir="." includes="**/*~" defaultexcludes="false"/>
</delete>
</target>
<target name="compile">
<mkdir dir="${classes.dir}"/>
<javac destdir="${classes.dir}" includeantruntime="false" debug="true" debuglevel="lines, vars, and source">
<src path="${src.dir}"/>
<classpath refid="project.classpath"/>
</javac>
</target>
<target name="javadoc">
<mkdir dir="${javadoc.dir}"/>
<javadoc destdir="${javadoc.dir}">
<fileset dir="${src.dir}"/>
</javadoc>
</target>
<target name="release" depends="jar, javadoc" description="make a new release of the project"/>
<target name="copy.properties">
<mkdir dir="${classes.dir}"/>
<patternset id="properties.files">
<include name="**/*.properties"/>
</patternset>
<copy todir="${classes.dir}">
<fileset dir="${src.dir}">
<patternset refid="properties.files"/>
</fileset>
</copy>
</target>
<target name="jar" depends="compile,copy.properties">
<mkdir dir="${jar.dir}"/>
<jar destfile="${jar.dir}/${ant.project.name}.jar" basedir="${classes.dir}">
<manifest>
<attribute name="Implementation-Title" value="${proj.name}"/>
<attribute name="Implementation-Version" value="${proj.ver}"/>
<attribute name="Implementation-Vendor" value="${proj.owner}"/>
<attribute name="Main-Class" value="${main-class}"/>
<attribute name="Built-By" value="${username}"/>
<attribute name="Built-Date" value="${TODAY}"/>
<attribute name="Class-Path" value="./"/>
</manifest>
</jar>
</target>
<target name="run" depends="jar">
<java jar="${jar.dir}/${ant.project.name}.jar" fork="true"/>
</target>
<target name="clean-build" depends="clean,jar"/>
<target name="main" depends="clean,run"/>
</project>
vi /etc/my.cnf
bind-address=127.0.0.1
RKHunter Rootkit Anti-malware
yum install rkhunter
vi /etc/rkhunter.conf
PKGMGR=RPM
ENABLE_TESTS="all"
DISABLE_TESTS="none"
SCAN_MODE_DEV=THOROUGH
rkhunter --propupd --update --check --sk -l
vi /etc/rkhunter.conf
ALLOWHIDDENDIR=
ALLOWDEVFILE=
IPTables Firewall
#!/bin/bash
#
# Global script variables
#
# Commands
IPTABLES=/sbin/iptables
# Network interfaces and addresses
LOOP_IFACE=lo
LAN=192.168.100.0/24
LAN_ADDR=192.168.100.201
LAN_IFACE=eth0
# Port numbers
NAMED_PORT=53
NETFLOW_PORT=9996
NTP_PORT=123
PRIV_PORTS=1:1024
SMB_PORTS=137:139
SSHD_PORT=4022
UNPRIV_PORTS=1025:65535
#
# Manage kernel parameters
#
echo 1 > /proc/sys/net/ipv4/tcp_syncookies
echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter
echo 1 > /proc/sys/net/ipv4/conf/all/log_martians
echo 0 > /proc/sys/net/ipv4/conf/all/send_redirects
echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route
echo 0 > /proc/sys/net/ipv4/conf/all/accept_redirects
echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
echo 1 > /proc/sys/net/ipv4/ip_forward
#
# Configure default table policies
#
$IPTABLES -P INPUT DROP
$IPTABLES -P FORWARD DROP
$IPTABLES -P OUTPUT DROP
#
# Initialise tables - flush rules, remove chains, zero counts
#
$IPTABLES -F
$IPTABLES -F -t mangle
$IPTABLES -F -t nat
$IPTABLES -X
$IPTABLES -X -t mangle
$IPTABLES -X -t nat
$IPTABLES -Z
#
# Allow all local loopback traffic
#
$IPTABLES -A INPUT -i $LOOP_IFACE -j ACCEPT
$IPTABLES -A OUTPUT -o $LOOP_IFACE -j ACCEPT
#
# Allow all traffic that is part of a related or established connection in
#
$IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
#
# Politely reject SMB traffic
#
$IPTABLES -A INPUT -i $LAN_IFACE -p tcp --dport $SMB_PORTS -j REJECT
$IPTABLES -A INPUT -i $LAN_IFACE -p udp --dport $SMB_PORTS -j REJECT
#
# Allow icmp pings
#
$IPTABLES -A INPUT -i $LAN_IFACE -s $LAN -d $LAN_ADDR -p icmp --icmp-type echo-request -m state --state NEW,ESTABLISHED -j ACCEPT
$IPTABLES -A OUTPUT -o $LAN_IFACE -s $LAN_ADDR -d $LAN -p icmp --icmp-type echo-reply -m state --state ESTABLISHED,RELATED -j ACCEPT
#
# *** DELETED SERVICES SPECIFIC RULES TO IMPLEMENT SECURITY BY OBSCURITY ***
# # # Debugging - log all other traffic *** DO NOT USE IN PRODUCTION ENVIRONMENT *** # # #$IPTABLES -A INPUT -i $LAN_IFACE -j LOG --log-prefix "rc.firewall " #
yum install clamav clamd clamav-db
vi /etc/cron.hourly/freshclam
#!/bin/bash
/usr/bin/freshclam --quiet -l /var/log/clamav/freshclam.log
vi /etc/cron.daily/clamscan
#!/bin/bash
/usr/bin/clamscan -r / --exclude-dir=/proc --quiet --infected --log=/var/log/clamd/clamscan
Fail2Ban Intrusion Prevention
yum install fail2ban
vi /etc/ssh/sshd_config
SyslogFacility LOCAL5
LogLevel INFO
vi /etc/syslog.conf
local5.info /var/log/sshd/sshd.log
vi /etc/fail2ban/jail.conf
[ssh-iptables]
enabled = true
filter = sshd
action = iptables[name=SSH, port=ssh, protocol=tcp]
sendmail-whois[name=SSH, dest=*DELTED*, sender=*DELETED*]
logpath = /var/log/sshd/sshd.log
maxretry = 2