March 2015 – iT3k

Projet personnel : serveur dédié Kimsufi

Hier soir, j’ai installé Munin sur les conseils de Matthias le guru ^^ J’ai même crée un sous-domaine avec l’interface OVH auquel j’ai rattaché un vhost : ça fait beaucoup plus propre et j’aime bien le concept du sous-domaine =)

<VirtualHost *:80>

        ServerAdmin  ***@renaudmalingre.fr
        ServerName   renaudmalingre.fr
        ServerAlias  ***.renaudmalingre.fr
        DocumentRoot /var/cache/munin/www

        Alias /munin /var/cache/munin/www
        <Directory /var/cache/munin/www>
                Order allow,deny
                Allow from all
                Options None
                AllowOverride None

                AuthUserFile /etc/***/***-htpasswd
                AuthName "Accès restreint"
                AuthType Basic
                Require valid-user

                <ifmodule mod_expires.c="">
                        ExpiresActive On
                        ExpiresDefault M310
                </ifmodule>
        </Directory>

        LogLevel warn
        ErrorLog ${APACHE_LOG_DIR}/error_***.log
        CustomLog ${APACHE_LOG_DIR}/access_***.log combined

</VirtualHost>

Ça fonctionne formidablement bien : la pléthore d’informations est tout simplement impressionante (et bien au delà de mes besoins, je dois l’avouer)

Un petit screenshot :

Il subsiste un petit bug avec Dynazoom, mais j’ai trouvé une solution que j’appliquerais ASAP. Avec logwatch et désormais Munin, j’ai suffisamment d’informations pour gérer la prod’ efficacement.

The impact of Generation Y

Born digital, the kids who grew up with the Internet are appearing in the workforce. It is important to attract and retain the best of this Generation Y, and unified communications and collaboration systems have a role to play.

It is clear from Fujitsu’s research that IT managers and CIOs recognise this. Forty percent of respondents to a recent survey conducted by IDG Connect on Fujitsu’s behalf saw the provision of a unified communication and collaboration (UCC) infrastructure as either very important or important today. In three years’ time, 43% said they expected it to be extremely important, up from today’s 15% figure. Only a tiny minority (4%) perceived it as not very important.

Further, 79% of the survey’s respondents said that their implementation of UCC had been accelerated either moderately or significantly as a consequence of the needs and expectations of Generation Y employees.

As well as the need to deliver a UCC to meet expectations, IT managers further reported that the work styles of a younger generation raised a number of challenges. Core among these is data security (77% said so) and individual IT requirements, such as new devices (54%). For example, the survey found that 82% of end users have a mobile phone or smartphones, and 76% have either a tablet or notebook. Phones and file sharing receive the most organisational support, the survey found.

Other research clearly demonstrates a shift of power away from the centre and towards the end user. This appears unstoppable. More than one survey result shows that many users will break corporate device usage and security policies if the company does not provide devices and adequate infrastructure support, leaving corporate data at risk on unprotected device storage. Not only is there a commercial risk here but the possibility exists that this may expose a company to becoming non-compliant with legislative requirements.

The trend of a growing number of personal devices containing increasing amounts of storage looks set only to continue, as hyper-connected wearable computers start to appear on the market from 2015 onwards.

It is clear that end-user devices are here to stay and there is little or nothing the IT department or the company as a whole can do to hold back the tide. Instead, the organisation must embrace and extend its security and communications systems to include those devices, and continue to educate users in best practices.

Personal project : Kimsufi dedicated server

Hello,

It’s been a while since I last posted, so I’ll take a few minutes to tell you what work have been done.

After I bought renaudmalingre.fr, I changed the DNS type A with my OVH pannel and set it up so that the value would match the one of my dedicated server (see the post of 04/03/2015 below).
Then I updated the contents of my online resume (which was previously on cybermaohi.com, a DNS I’ve been owning for years; you may also note that the default page on this DNS is also my online resume : I will keep it like this for some time until I will find something more suitable to publish on cybermaohi.com) and transferred it to renaudmalingre.fr. You can check ^^

About 2 weeks ago, I finally managed to set apache virtual hosts properly and this work perfectly, meaning I can host a tremendous number of websites on my dedicated server from now on.

In order to test this, I bought sabnature.fr which was previously owned by a friend but she didn’t have the time to manage her website and pay the fees so, eventually, the DNS was not renewed and it became accessible. She kindly allowed me to buy it as I told her months ago I would like to play around with a website and hers was a good idea. 3 years ago I made a Proof Of Concept of her website with Drupal and hosted it on cybermaohi.com, even though she already had one.At the moment, the website sabnature.fr is quite empty. I used WordPress but I may change this to Drupal or even something lighter.
Anyway, it allowed me to learn how to install WP and fully set it up with the command line. I even used the mysql shell to set up the database parameters instead of PHPMyAdmin : that’s pretty basical and straightforward.

Before I can install ownCloud, ISPConfig and Open-Xchange, I have one last thing to do : I must properly install and set up Dovecot and protect the dedicated server from incoming emails (hence the POP3/IMAP protocols) their lots of viruses and spams (i.e. anti-virus and anti-spam softwares). SMTP is working great with Postfix and doesn’t require any extra security layer as the server stands for now.

I’ll post a few pics as proofs that both DNS, renaudmalingre.fr and sabnature.fr are pointing at the same IP address, and you can check they do not display the same websites. It means the virtual hosts are nicely configured ^^

More later!

[edit]
here are the pics I promised before, enjoy =)

[/edit]

Projet personnel : serveur dédié Kimsufi

Juste une petite news en passant : le serveur ronronne.

Voici un exemple de ce que je reçois tous les matins à 6h25 :

 ################### Logwatch 7.4.0 (05/02/12) ###################
        Processing Initiated: Tue Mar  3 06:25:28 2015
        Date Range Processed: yesterday
                              ( 2015-Mar-02 )
                              Period is day.
        Detail Level of Output: 0
        Type of Output/Format: mail / text
        Logfiles for Host: ns329480.ip-37-187-116.eu
 #################################################################

 --------------------- fail2ban-messages Begin -------------------

 Banned services with Fail2Ban:                          Bans:Unbans
    apache-phpmyadmin:                                   [  2:0  ]
    ssh:                                                 [ 11:12 ]

 ---------------------- fail2ban-messages End --------------------


 --------------------- httpd Begin ------------------------


 A total of 1 sites probed the server
    42.120.142.220

 Requests with error response codes
    400 Bad Request
       /: 10 Time(s)
       /w00tw00t.at.ISC.SANS.DFind:): 2 Time(s)
    404 Not Found
       /hudson/script: 2 Time(s)
       /jenkins/login: 2 Time(s)
       /jenkins/script: 2 Time(s)
       /login: 2 Time(s)
       /mysql: 2 Time(s)
       /script: 2 Time(s)
       /sql: 2 Time(s)
       /MySQLDumper: 1 Time(s)
       /hudson/login: 1 Time(s)
       /jmx-console: 1 Time(s)
       /manager/html: 1 Time(s)
       /msd: 1 Time(s)
       /msd1.24.4: 1 Time(s)
       /msd1.24stable: 1 Time(s)
       /mySqlDumper: 1 Time(s)
       /mysqldumper: 1 Time(s)
       /phpMyAdmin: 1 Time(s)
       /phpmyadmin: 1 Time(s)
    408 Request Timeout
       null: 1 Time(s)

 ---------------------- httpd End -------------------------


 --------------------- pam_unix Begin ------------------------

 sshd:
    Authentication Failures:
       unknown (86.121.27.128): 12 Time(s)
       root (182.100.67.113): 4 Time(s)
       root (218.87.111.107): 4 Time(s)
       root (218.87.111.117): 4 Time(s)
       root (93.114.82.239): 4 Time(s)
       root (85.172.190.126): 2 Time(s)
       unknown (110.16.69.138): 2 Time(s)
       unknown (200.59.57.79): 2 Time(s)
       root (110.16.69.138): 1 Time(s)
       root (200.59.57.79): 1 Time(s)
       unknown (85.172.190.126): 1 Time(s)
    Invalid Users:
       Unknown Account: 17 Time(s)

 su:
    Sessions Opened:
       ??? -> root: 1 Time(s)


 ---------------------- pam_unix End -------------------------


 --------------------- Postfix Begin ------------------------

        5   Miscellaneous warnings

    8.909K  Bytes accepted                               9,123
    9.049K  Bytes sent via SMTP                          9,266
    4.453K  Bytes forwarded                              4,560
 ========   ==================================================

        2   Accepted                                   100.00%
 --------   --------------------------------------------------
        2   Total                                      100.00%
 ========   ==================================================

        3   Removed from queue
        2   Sent via SMTP
        1   Forwarded


 ---------------------- Postfix End -------------------------


 --------------------- SSHD Begin ------------------------


 Illegal users from:
    undef: 32 times
    85.172.190.126: 3 times
    86.121.27.128 (86-121-27-128.rdsnet.ro): 12 times
    93.114.82.239 (s4-239.gazduirejocuri.ro): 4 times
    110.16.69.138: 3 times
    182.100.67.113: 5 times
    200.59.57.79: 3 times
    218.87.111.107: 5 times
    218.87.111.117: 5 times

 Login attempted when not in AllowUsers list:
    root : 15 Time(s)

 Users logging in through sshd:
    ???:
       www.xxx.yyy.zzz: 1 time


 Received disconnect:
    11:  [preauth] : 4 Time(s)
    11: BUNNYBYTEv0.1 [preauth] : 12 Time(s)
    11: Bye Bye [preauth] : 9 Time(s)

 ---------------------- SSHD End -------------------------


 --------------------- Disk Space Begin ------------------------

 Filesystem      Size  Used Avail Use% Mounted on
 rootfs           20G 1000M   18G   6% /
 /dev/root        20G 1000M   18G   6% /
 devtmpfs        2.0G     0  2.0G   0% /dev
 /dev/sda3       1.8T  151M  1.7T   1% /home


 ---------------------- Disk Space End -------------------------


 ###################### Logwatch End #########################

??? = le login ssh pour rentrer sur la machine, masqué pour des raisons évidentes de sécurité =)

www.xxx.yyy.zzz = ça c’est mon ip ;P

si vous êtes très attentif, j’ai laissé le nom du serveur … puisqu’il y’a déjà plein de méchants qui tapent à la porte, autant la rendre un peu plus publique : j’ai d’ailleurs acheté un nouveau nom de domaine il y a 2 semaines et j’y ai rattaché ce serveur …
ça se passe sur https://renaudmalingre.fr et vous remarquerez que c’est plutôt vide : ne vous inquiêtez pas, je vais publier un petit site, probablement mon CV en bootstrap, d’ici une semaine ou 2

c1@0!