I posted Malaysian Web Hosting some time back. Since then a few new entries came in so I thought it might make sense to republish them for you.
Its sometimes necessary to limit who has access to a server via SSH. Most Linux security hardening checklist today require this to be enforced.
Fortunately this can be easily done with openSSH. Just edit the /etc/ssh/sshd_config file and add the desired directives shown below. You don’t need them all, just use what suits you needs.
openSSH provides 4 directives, AllowUsers, AllowGroups, DenyUsers and DenyGroups
AllowUsers buddy john doe
Only users buddy, john and doe will be able to log in via ssh.
AllowGroups sysadmin bkpadmin
Only users within groups sysadmin and bkpadmin will be able to log in via ssh.
DenyUsers rambo tina
This is the opposite of AllowUsers. All users except for rambo and tina will be able to log in via ssh.
DenyGroups hr payroll
This is the opposite of AllowGroups. All groups except for hr and payroll will be able to log in via ssh.
rpm -qa --last will return all installed rpm packages with their installed time. The last installed packages will be at the top of the list.
rpm -qa --last | less is will return all installed packages with their install date. Less allows you to scroll through the results.
rpm -qa --last | tail -n [lines] will return the last 5 packages. Replace [line] with any number you want, in my case 5 for file lines.
[root@bambee root]# rpm -qa --last | tail -n 5
termcap-11.0.1-17.1 Tue 09 May 2006 03:02:53 PM MYT
setup-2.5.27-1 Tue 09 May 2006 03:02:52 PM MYT
filesystem-2.2.1-3 Tue 09 May 2006 03:02:52 PM MYT
basesystem-8.0-2 Tue 09 May 2006 03:02:52 PM MYT
redhat-logos-1.1.14.3-1 Tue 09 May 2006 03:02:51 PM MYT
rpm -qa --last | grep [package name] will return the install date for a specific RPM package. In my case the apache web server [httpd]
[root@jumbo root]# rpm -qa --last | grep httpd
redhat-config-httpd-1.1.0-4.30.2 Sat 29 Mar 2008 09:03:40 PM MYT
httpd-2.0.46-70.ent Sat 29 Mar 2008 08:58:19 PM MYT
Shinjiru is where I’m hosted. The guys are giving away 500 shared hosting packages at only RM 9.90 . That’s a 90% price cut on the original RM 99 proce tag. The package comes with 50GB of storage and 5GB /month bandwidth allocation.
However there is a catch, the promotion is only open to those currently hosted with Shinjiru and is limited to 3 purchases per user. But don’t worry, registered member are allowed to purchase the packages for their friends and family.
If you are interested just drop me a line. I’ll see if I can help.
Can you access support.microsoft.com? Chances are you can’t if you’re behind a squid proxy.
Here’s the fix/workaround,
Add the lines below into your squid.conf file. should be in /etc/squid/squid.conf. Restart squid and you should be good to go.
#> vi /etc/squid/squid.conf
add lines into /etc/squid.conf
# Fix support.microsoft.com by removing Accept-Encoding header
acl support.microsoft.com dstdomain support.microsoft.com
header_access Accept-Encoding deny support.microsoft.com
#> service squid restart
The other way is to remove the tick from “Use HTTP1.1 through proxy connections” in IE’s Advanced internet options tab. Beware that this might break other sites.
Source: Whirlpool.net.au
Update:
Newer versions of squid need a different approach as demonstrated by Dave over at davehope.co.uk