Disable SSLv2 in Cyrus IMAP server

Cyrus often ships by default with SSLv2 enabled which can be considered a security vulnerability. Here’s how to disable SSLv2 in your Cyrus IMAP server!

1. Edit the file /etc/imapd.conf

sudo nano /etc/imapd.conf

Find the . . . → Read More: Disable SSLv2 in Cyrus IMAP server

myhosting.com Linux VPS Review

myhosting.com provides Linux VPS hosting for cheap. I recently had the opportunity for an in-depth test drive and so here is the scottlinux review!

myhosting.com Linux VPS offerings runs on Virtuozzo Containers, the commercial version of . . . → Read More: myhosting.com Linux VPS Review

Add User to Group in Linux

In Linux, the command gpasswd can be used to add or remove users from a group. I’ll show you how! To add a user to a group, use tack a:

$ sudo gpasswd -a user group

The . . . → Read More: Add User to Group in Linux

OS X Version from Command Line

There are a few ways to find the OS X version from the command line. I’ll show you how!

$ system_profiler SPSoftwareDataType

Output looks like this:

$ system_profiler SPSoftwareDataType Software: System Software Overview: System Version: . . . → Read More: OS X Version from Command Line

OS X Monitor Virtual Memory Usage from Command Line

OS X has a simple command line tool to monitor virtual memory usage: vm_stat. I’ll show you how it works! Crack open a terminal and run vm_stat. You will see an output somewhat like below:

$ vm_stat . . . → Read More: OS X Monitor Virtual Memory Usage from Command Line

How to Check for SSL Renegotiation

To check if a server allows SSL Renegotiation, you can use the openssl command. I’ll show you how!

The commands are as follows:

$ openssl s_client -connect yourdomain.com:443

Then after the regular ssl cert info . . . → Read More: How to Check for SSL Renegotiation

OS X Lion Show Hidden Library Folder

To enable viewing the Library folder which is hidden in OS X Lion, crack open a terminal (Utilities > Terminal) and use this terminal command:

chflags nohidden ~/Library

. . . → Read More: OS X Lion Show Hidden Library Folder

TechSNAP Episode 28 – ZFS

TechSNAP is a sweet sysadmin show over on Jupiter Broadcasting.

Episode 28 is an incredible show on ZFS. Check it out!

WPScan WordPress Vulnerability Scanner

WPScan is a nifty WordPress vulnerability scanner. It can do things such as scan for installed plugins and provide vulnerability information based on results. It is part of Backtrack, which is handy as well!

Here’s how . . . → Read More: WPScan WordPress Vulnerability Scanner

ufw Allow From Specific IP on Specific Port

ufw is the friendly command line firewall utility in Debian and Ubuntu.

I’ll show you how to create a specific rule syntax for allowing traffic in from a specific ip on a specific port.

Say for . . . → Read More: ufw Allow From Specific IP on Specific Port

Use nmap to Identify MAC and IP of Machines on LAN

Instead of pinging the broadcast which may or may not work for various reasons, use namp to identify MAC addresses and ips of computers or devices on your LAN.

Here is how it works!

The nmap option . . . → Read More: Use nmap to Identify MAC and IP of Machines on LAN

Quick nmap How-To

nmap or network mapper is an open source command line program for security auditing. Here is a basic intro!

As always, only scan your own hosts or hosts that you have permission to scan! To do a . . . → Read More: Quick nmap How-To

Create self-signed SSL certificate for Virtual Host

In Debian or Ubuntu, it is easy to generate a self-signed certificate for your virtual host. Here is how it works!

1. First, install the package ssl-cert:

$ sudo apt-get install ssl-cert

Since . . . → Read More: Create self-signed SSL certificate for Virtual Host

Fetch HTTP headers with curl

A simple curl command can fetch HTTP headers from a website. Here’s how it works!

The command is:

$ curl -I domain.com

Example:

stmiller@brahms:~$ curl -I http://scottlinux.com HTTP/1.1 200 OK Date: Sat, 24 Sep 2011 02:53:17 GMT . . . → Read More: Fetch HTTP headers with curl