This article shows the Jason for a custom IAM policy to allow snapshots with the minimum required access. I bet it can be improved upon but this is pretty close. { “Version”: “2012-10-17”, “Statement”: [ { “Effect”: “Allow”, “Action”: [ “ec2:CreateSnapshot”, “ec2:DeleteSnapshot”, “ec2:Describe*”, “ec2:CreateTags” ], “Resource”: “*” } ] }
Read more
This article shows how firewalld priorities rules and zones. The priority of zones is in alphabetical order. So the “block” zone is checked before the “dmz” done. And within a zone, the rules are applied in the order they were added. As we know, rules are in the order they
Read more
There are two issues with creating EC2 snapshots on a schedule. First the AWS recommended way doesn’t allow for custom names for snapshots which we use for identifying the source or schedule. Second the AWS IAM doesn’t have a built-in policy that allows it. So this article provides an example
Read more
This article notes the AWS EC2 Security Group that should be associated with an EC2 to permit a roaming VPN client to connect to an IPSec/L2TP hosted on a server within AWS. * TIP: The AH and ESP are entered in as just numbers, not the “AH” and “ESP”.
Read more
This article is a quick note on how to improve OpenSSH server security on Redhat Enterprise Linux and CentOS 6 and 7. This is not about Passwords-v-Keys (use keys, not passwords) but rather hashes, encryption and key exchanges. The “/etc/ssh/sshd_config” file should have the following added to it to ensure
Read more
This article focuses on installing and running RHEL8 (Red Hat Enterprise Linux 8) on VirtualBo. Specifically, this article demonstrates how to install additional driver support to ensure RHEL8 mouse movements and resolutions acre correct. You can see another good article at “https://developers.redhat.com/rhel8/install-rhel8-vbox/”. This article starts from a complete installation of
Read more
This article is the minimal configuration for a Squid transparent proxy with SSL Interception (or bump). We’re using CentoOS 7. This article is based on the good work at “https://www.sbarjatiya.com/notes_wiki/index.php/Configure_squid-3.3_in_transparent_mode_on_CentOS_7_with_SSL_bump” with a few minor changes/corrections. Disable SELinux or put it in permissive mode. Squid works on odd ports. I will
Read more
If you get this strange error when trying to start the Zabbix agent on a CentOS 7 or similar system, this article should help you solve the problem. The article at “https://www.zabbix.com/forum/zabbix-troubleshooting-and-problems/355498-centos-7-zabbix-3-4-7-cannot-create-semaphore-28-no-space-left-on-device” explains the issue further. However, you can jump right to the solution in “this” article. Issuing the command:
Read more
If you need a quick LDAP and Kerberos system up and running to provide authentication and user information, FreeIPA is for you. IPA is documented at “https://www.freeipa.org/page/Main_Page”. This article demonstrates how to set up FreeIPA on CentOS 7. By the end of this article, you’ll have a working FreeIPS system
Read more
This article shows how to configure a Redhat/CentOS 7 workstation to access a remote storage system using both NFS and CIFS. This article focuses on the workstation (client) side. The server should already be configured to share the resources. For this demonstration, the following detalis need to be know about
Read more