cd /usr/src
wget http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.28.tar.bz2
tar -jxvf linux-2.4.28.tar.bz2
wget http://grsecurity.org/grsecurity-2.0.2-2.4.28.patch.gz
gunzip grsecurity-2.0.2-2.4.28.patch.gz
patch -p0 <ggrsecurity-2.0.2-2.4.28.patch
cd linux-2.4.28
make mrproper
make clean
make menuconfig
make dep
nohup make bzImage &
make modules 2> modules.err& or make modules 1> modules.out 2> modules.err&   and tail the modules.out file
make modules_install
make install
mkinitrd /boot/initrd-2.6.0.img 2.6.0
$ cp arch/i386/boot/bzImage /boot/bzImage-KERNEL_VERSION
$ cp System.map /boot/System.map-KERNEL_VERSION
$ ln -s /boot/System.map-KERNEL_VERSION /boot/System.map
=======================================================
cd /usr/src
wget http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.28.tar.bz2
tar -jxvf linux-2.4.28.tar.bz2
wget http://grsecurity.org/grsecurity-2.0.2-2.4.28.patch.gz
gunzip grsecurity-2.0.2-2.4.28.patch.gz
patch -p0 <ggrsecurity-2.0.2-2.4.28.patch
cd linux-2.4.28
make mrproper
make clean
make menuconfig
make dep
nohup make bzImage &
make modules 2> modules.err& or make modules 1> modules.out 2> modules.err&   and tail the modules.out file
make modules_install
make install
mkinitrd /boot/initrd-2.6.0.img …
#!/bin/sh
###########################
# Update all v2.0 Released By Wael Isa
# http://www.web4host.net
# Date 22-5-2006
###########################
# Update to openssl-0.9.8b
# Update to exim-4.62
# Update to openssh-4.3p2
# Update to proftpd-1.3.0
# Update to phpMyAdmin 2.8.1
# Update to MySQL-server-4.1.19-0
###########################
echo “Update all v2.0 Released By Wael Isa”
echo “http://www.web4host.net”
echo “Date 22-5-2006″
echo “”
echo “”
echo “”
echo “”
echo “Update to openssl-0.9.8b”
echo “Update to exim-4.62″
echo “Update to openssh-4.3p2″
echo “Update to proftpd-1.3.0″
echo “Update to phpMyAdmin 2.8.1″
echo “Update to MySQL-server-4.1.19″
echo “”
echo “Do you want to continue ? (y/n) [y]”
read CONFIRM
case “$CONFIRM” in
[yY]) ;;
“”) ;;
*) echo “Abort done”
exit …
Solaris firewalls with IPfilter
IPfilter can be used to construct firewalls (or just to filter and/or log packets) on all supported
operating systems, which includes Solaris. I’ve installed ipfilter on roswell.sdsu.edu with
the configuration given below. Note that no packets are currently being blocked, just logged. My plan is run this for several days to “tune” it and then convert it to block unwanted packets. My concerns for tuning include udp services, passive ftp connections, and web servers not included below. If you …
Rule for port blocking.
Note that it does not start up by default, since there are no symlinks into the run-script directories.
Quick start guide:
1.
Put some lines into /etc/opt/ipf/ipf.conf such as
block in on lan0 from any to any port = 23
block in on lan0 proto icmp from any to any
block in on hme0 from any to any port = 8443
block in on hme0 from any to any port = 8080
pass in quick from 192.168.0.1/24 to any …
