Como instalar NTP en centos 7

Network Time Protocol es un protocolo de Internet para sincronizar los relojes de los sistemas informáticos a través del enrutamiento de paquetes en redes con latencia variable.

# yum install ntp ntpdate

# ntpdate -u 0.pool.ntp.org

# vi /etc/ntp.conf

# For more information about this file, see the man pages
# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).

driftfile /var/lib/ntp/drift

# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default nomodify notrap nopeer noquery

# Permit all access over the loopback interface.  This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1 
restrict ::1

# Hosts on local network are less restricted.
#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap
restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap
restrict 192.168.70.0 mask 255.255.255.128 nomodify notrap
restrict 172.16.1.0 mask 255.255.255.240 nomodify notrap
restrict 10.0.1.0 mask 255.255.255.248 nomodify notrap

# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
server 0.centos.pool.ntp.org iburst
server 1.centos.pool.ntp.org iburst
server 2.centos.pool.ntp.org iburst
server 3.centos.pool.ntp.org iburst

#broadcast 192.168.1.255 autokey # broadcast server
#broadcastclient   # broadcast client
#broadcast 224.0.1.1 autokey  # multicast server
#multicastclient 224.0.1.1  # multicast client
#manycastserver 239.255.254.254  # manycast server
#manycastclient 239.255.254.254 autokey # manycast client

# Enable public key cryptography.
#crypto

includefile /etc/ntp/crypto/pw

# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography. 
keys /etc/ntp/keys

# Specify the key identifiers which are trusted.
#trustedkey 4 8 42

# Specify the key identifier to use with the ntpdc utility.
#requestkey 8

# Specify the key identifier to use with the ntpq utility.
#controlkey 8

# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats

# Disable the monitoring facility to prevent amplification attacks using ntpdc
# monlist command when default restrict does not include the noquery flag. See
# CVE-2013-5211 for more details.
# Note: Monitoring will not be disabled with the limited restriction flag.
disable monitor

# systemctl enable ntpd
# systemctl start ntpd

# ntpdate -u mi-servidorntp.local
# ntpdate -u 172.16.0.2

Como instalar tu sitio .onion en Centos 7

Una vez que tengas instalado el servidos debes tenerconfigurada al menos una interfaz de red que tenga asignada una IP y que tenga conectividad hacia la LAN.

Cuando tengas acceso a internet busca actualizar el servidor con el comando yum, así:

# yum update

Instalar un servidor web

Instalar PHP para tu servidor web lighttpd

# yum install php php-fpm lighttpd-fastcgi php-gd php-mysql php-tidy php-xmlrpc php-common php-cli php-xml

# vi /etc/php-fpm.d/www.conf

user = lighttpd
group = lighttpd

systemctl enable php-fpm.service
systemctl start php-fpm.service

vi /etc/php.ini

cgi.fix_pathinfo=1

vi /etc/lighttpd/modules.conf

include conf.d/fastcgi.conf

vi /etc/lighttpd/conf.d/fastcgi.conf

fastcgi.server += ( ".php" =>
        ((
                "host" => "127.0.0.1",
                "port" => "9000",
                "broken-scriptfilename" => "enable"
        ))
)

# systemctl restart lighttpd.service

Instalar una base de datos

Instalar Tor en Centos 7

# vi /etc/yum.repos.d/tor.repo

[tor]
name=Tor repo
enabled=1
baseurl=https://deb.torproject.org/torproject.org/rpm/el/7/$basearch/
gpgcheck=1
gpgkey=https://deb.torproject.org/torproject.org/rpm/RPM-GPG-KEY-torproject.org.asc

[tor-source]
name=Tor source repo
enabled=1
autorefresh=0
baseurl=https://deb.torproject.org/torproject.org/rpm/el/7/SRPMS
gpgcheck=1
gpgkey=https://deb.torproject.org/torproject.org/rpm/RPM-GPG-KEY-torproject.org.asc

vi /etc/yum.repos.d/epel.repo

enabled=1
exclude=tor
gpgcheck=1

yum update
yum list | grep tor

tor.x86_64                                  0.2.5.10-tor.2.rh7_0_1406  tor      
tor-debuginfo.x86_64                        0.2.5.10-tor.2.rh7_0_1406  tor

yum install tor

# adduser operador-tor
# passwd operador-tor

# su - operador-tor
$ tor

$ tor
Nov 10 16:33:46.424 [notice] Tor v0.2.5.10 (git-52198c0e51a1a8c1) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1e-fips and Zlib 1.2.7.
Nov 10 16:33:46.424 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning
Nov 10 16:33:46.424 [notice] Read configuration file "/etc/tor/torrc".
Nov 10 16:33:46.436 [notice] Opening Socks listener on 127.0.0.1:9050
Nov 10 16:33:46.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.
Nov 10 16:33:46.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.
Nov 10 16:33:46.000 [notice] We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or later, but with a version of OpenSSL that apparently lacks accelerated support for the NIST P-224 and P-256 groups. Building openssl with such support (using the enable-ec_nistp_64_gcc_128 option when configuring it) would make ECDH much faster.
Nov 10 16:33:46.000 [notice] Bootstrapped 0%: Starting
Nov 10 16:33:46.000 [notice] Bootstrapped 5%: Connecting to directory server

# systemctl disable tor.service

Ajustando lighttpd para Tor

vi /etc/lighttpd/lighttpd.conf

server.bind = "127.0.0.1"

# systemctl restart lighttpd.service

# yum install lynx
# lynx 127.0.0.1

                              Powered by lighttpd
   LIGHTTPD - fly light.

   Powered by GNU/Linux
   Powered by Lighttpd

Creando un Hidden Service en Tor

vi /etc/tor/torrc

#HiddenServiceDir /var/lib/tor/hidden_service/
#HiddenServicePort 80 127.0.0.1:80

HiddenServiceDir /home/operador-tor/hidden_service1/
HiddenServicePort 80 127.0.0.1:11131

# su - operador-tor
$ mkdir hidden_service1
$ exit

# vi /etc/lighttpd/lighttpd.conf

$SERVER["socket"] == ":11131" {
        server.document-root       = "/var/www/hidden_service1"
}

# mkdir /var/www/hidden_service1

# echo "Mi Hidden Service 1" >  /var/www/hidden_service1/index.html

# systemctl restart lighttpd.service

# lynx 127.0.0.1:11131

#su - operador-tor
$ tor &

Bootstrapped 80%: Connecting to the Tor network
Bootstrapped 85%: Finishing handshake with first hop
Bootstrapped 90%: Establishing a Tor circuit
Tor has successfully opened a circuit. Looks like client functionality is working.
Bootstrapped 100%: Done

$ cat /home/operador-tor/hidden_service1/hostname
u22cnvxoljbnkffs.onion

Linux server monitoring en Centos

Un vistazo general con top

Un top con mas funciones: htop

Monitorear los discos con iotop

Monitorear las interfaces de Red con iftop

Cuando requieres ver casi todo: nmon

Como instalar Lighttpd en Centos 7

# yum install lighttpd

# systemctl start lighttpd.service

# firewall-cmd --permanent --zone=public --add-service=http
# firewall-cmd --reload

Como instalar Pure-FTPd en Centos

Tener un FTP que funcione y lo haga de forma segura puede ser un dolor de cabeza, te lo digo por experiencia, pero Pure-FTPd simplemente funciona y lo hace sin complicados scripts, configuraciones ni archivos extraños. Pero que además lo pueda hacer de forma segura cuando sea necesario pues el protocolo FTP es inseguro al enviar los datos de autentificación en texto plano por lo que alguien que capture tráfico puede ver tu usuario y contraseña con muy poco esfuerzo, para evitar esto puedes configurar Pure-FTPd para que utilice un cifrado TLS en la comunicación y aquí vamos a ver como configurar de forma segura un servidor FTP en Centos.

Instalar Pure-FTPd en Centos 6 y Centos 7

yum install pure-ftpd

chkconfig --levels 235 pure-ftpd on

systemctl enable pure-ftpd

nano /etc/pure-ftpd/pure-ftpd.conf

# This option can accept three values :
 # 0 : disable SSL/TLS encryption layer (default).
 # 1 : accept both traditional and encrypted sessions.
 # 2 : refuse connections that don't use SSL/TLS security mechanisms,
 #     including anonymous sessions.
 # Do _not_ uncomment this blindly. Be sure that :
 # 1) Your server has been compiled with SSL/TLS support (--with-tls),
 # 2) A valid certificate is in place,
 # 3) Only compatible clients will log in.

TLS                      1

mkdir -p /etc/ssl/private/
openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem

Country Name (2 letter code) [XX]:MX
State or Province Name (full name) []: Nuevo Leon
Locality Name (eg, city) [Default City]: Monterrey
Organization Name (eg, company) [Default Company Ltd]: ComoInstalarLinux.com
Organizational Unit Name (eg, section) []:IT
Common Name (eg, your name or your server's hostname) []:comoinstalarlinux.com
Email Address []:webmaster@comoinstalarlinux.com 
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

chmod 600 /etc/ssl/private/pure-ftpd.pem
/etc/init.d/pure-ftpd restart

chmod 600 /etc/ssl/private/pure-ftpd.pem
systemctl restart pure-ftpd

useradd soporte
passwd soporte

id -u soporte
id -G soporte

pure-pw useradd soporte -u 501 -g 501 -d /home/soporte
pure-pw mkdb

# Port range for passive connections replies. - for firewalling.
PassivePortRange          39599 39699

# If you want simple Unix (/etc/passwd) authentication, uncomment this
UnixAuthentication      yes

Un server ftp centos es un servicio que permite la transmisión de archivos entre un cliente FTP y el servidor FTP, el servidor FTP permite almacenar y publicar archivos en una estructura jerárquica de directorios o carpetas en las que se pueden almacenar archivos. Centos permite instalar un servidor FTP y aquí te digo como instalar un servidor ftp centos y los pasos necesarios para centos 6.5 y 7.

Instalando un servidor ftp centos

yum install vsftpd ftp -y

nano /etc/vsftpd/vsftpd.conf

## Deshabilita el ingreso como anómino ##
anonymous_enable=NO

## Quita el símbolo de comentario # a estas configuraciones  ##
ascii_upload_enable=YES
ascii_download_enable=YES

## Agrega esta línea al final del archivo ##
use_localtime=YES

service vsftpd restart

systemctl enable vsftpd
systemctl start vsftpd