Category: Reliable Penguin

IPTables – Filter ICMP Timestamp Requests & Replies

Here’s how to filter or block ICMP timestamp requests and replies. On Redhat/CentOS, edit /etc/sysconfig/iptables and add the following lines

and then run:

Or run the following commands:

Recently on an Ubantu server we just added these lines to /etc/rc.local:

Read More »

SSH session logging

Add the following line to /etc/profile to setup full logging of all ssh sessions: script -q /var/log/sessions/ssh-date +%d-%M-%Y-%Hh-%Mm-%Ss–whoami-$$.log && exit Of course this is a security risk and violates user privacy.

Read More »

ftps with lftp

lftp support ftps (different from sftp). ftps is ftp over an explicit TLS (SSL) connection. We’ve seen a few sites running MS IIS that require ftps and getting lftp to work has been tricky. To make it work verify that your lftp build has gnutls support compiled in with:

This build does not:

Here’s one that does:

Once you have have TLS support in your lftp build then you can put a file with something like this:

The option sets are critical as lftp wants to do “PROT C” by default but Windows wants to see “PROT P”.

Read More »

Rename file via scripted FTP

Here’s an lftp script to rename a remote file vi FTP without downloading the file:

Read More »

Categories

Get a free consultation from Reliable Penguin

Submit the form—or for immediate service call 866-649-7984.