yum remove sendmail or apt-get remove sendmail
yum install postfix or apt-get install postfix
wget http://www.lolacolay.com/ramon/postfixgmail.sh
chmod +x postfixgmail.sh
./postfixgmail.sh
#/bin/bash!
#Input Gmail credentials
echo "Insert your Gmail user with syntax account@gmail.com"
read gmailuser
echo "Insert your Gmail password"
read gmailpasswd
# Input certificate data
echo "Now you need to input some data to create ssl certificates"
echo "=========================================================="
echo "Country code (two letter code like US, ES, CO, etc.):"
read country
echo "State:"
read state
echo "City:"
read locality
echo "Organization:"
read organization
echo "Oranizational Unit:"
read ogrunit
echo "Server Name:"
read servername
echo "Admin email:"
read adminemail
#Stop postfix, backup main.cf and add tls data
/etc/init.d/postfix stop
cp /etc/postfix/main.cf /etc/postfix/main.cf.backup-`date +%Y-%m-%d-%Hh%Mm`
cat >> /etc/postfix/main.cf << EOF # SMTP relayhost relayhost = [smtp.gmail.com]:587 ## TLS Settings smtp_tls_loglevel = 1 smtp_tls_CAfile = /etc/postfix/certs/CAcert.pem smtp_tls_cert_file = /etc/postfix/certs/mycert.pem smtp_tls_key_file = /etc/postfix/certs/mykey.pem smtp_use_tls = yes smtpd_tls_CAfile = /etc/postfix/certs/CAcert.pem smtpd_tls_cert_file = /etc/postfix/certs/mycert.pem smtpd_tls_key_file = /etc/postfix/certs/mykey.pem smtpd_tls_received_header = yes smtpd_use_tls = yes # configuracion tls smtp_use_tls = yes smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd smtp_sasl_security_options = noanonymous smtp_sasl_tls_security_options = noanonymous # alias de mapeo interno a externo smtp_generic_maps = hash:/etc/postfix/generic EOF #Configure postfix mv /etc/postfix/sasl_passwd /etc/postfix/sasl_passwd.backup-`date +%Y-%m-%d-%Hh%Mm` echo "[smtp.gmail.com]:587 $gmailuser:$gmailpasswd" >> /etc/postfix/sasl_passwd
mv /etc/postfix/generic /etc/postfix/generic.backup-`date +%Y-%m-%d-%Hh%Mm`
gmailaccount=`echo $gmailuser|awk -F "@" '1 { print $1 }'`
echo "$gmailaccount@localhost $gmailuser" >> /etc/postfix/generic
chmod 600 /etc/postfix/sasl_passwd
chmod 600 /etc/postfix/generic
postmap /etc/postfix/sasl_passwd
postmap /etc/postfix/generic
/etc/init.d/postfix restart
#Backup ssl certificates and recreate them
mv /etc/postfix/certs /etc/postfix/certs.backup-`date +%Y-%m-%d-%Hh%Mm`
mkdir -p /etc/postfix/certs/
cd /etc/postfix/certs/
cat >> openssl.cnf << EOF [ req ] default_bits = 1024 # Size of keys default_keyfile = key.pem # name of generated keys default_md = md5 # message digest algorithm string_mask = nombstr # permitted characters distinguished_name = req_distinguished_name [ req_distinguished_name ] # Variable name Prompt string 0.organizationName = Organization Name (company) organizationalUnitName = Organizational Unit Name (department, division) emailAddress = Email Address emailAddress_max = 40 localityName = Locality Name (city, district) stateOrProvinceName = State or Province Name (full name) countryName = Country Name (2 letter code) countryName_min = 2 countryName_max = 2 commonName = Common Name (hostname, IP, or your name) commonName_max = 64 #-------------------Edit this section------------------------------ countryName_default = $country stateOrProvinceName_default = $state localityName_default = $locality 0.organizationName_default = $organization organizationalUnitName_default = $ogrunit commonName_default = $servername emailAddress_default = $adminemail EOF openssl dsaparam 1024 -out dsa1024.pem openssl req -x509 -nodes -days 3650 -newkey dsa:dsa1024.pem -out mycert.pem -keyout mykey.pem -config openssl.cnf -batch ln -s mycert.pem CAcert.pem openssl req -x509 -new -days 3650 -key mykey.pem -out mycert.pem -config openssl.cnf -batch rm -rf dsa1024.pem openssl.cnf # Uncomment the following line to send a test mail to $adminemail and view the maillog. Exit with CRTL+C # echo "this is a test email body to be sent" | mail -s "test email subject" $adminemail ; tail -f /var/log/maillog
tar -xf fail2ban-0.8.4.tar.bz2cd fail2ban-0.8.4python setup.py installcp files/redhat-initd /etc/init.d/fail2banchkconfig --add fail2banchkconfig fail2ban on#!/bin/sh
# scan /var/log/secure for ssh attempts
# use iptables to block the bad guys
# Looking for attempts on existing and non-existing users. For example:
# Nov 2 22:44:07 pbxer sshd[28318]: Failed password for root from 74.143.42.70 port 52416 ssh2
# Nov 3 00:06:57 pbxer sshd[31767]: Failed password for invalid user mat3 from 192.203.145.200 port 35841 ssh2
tail -1000 /var/log/secure | awk '/sshd/ && /Failed password for/ { if (/invalid user/) try[$13]++; else try[$11]++; }
END { for (h in try) if (try[h] > 4) print h; }' |
while read ip
do
# note: check if IP is already blocked...
/sbin/iptables -L -n | grep $ip > /dev/null
if [ $? -eq 0 ] ; then
# echo "already denied ip: [$ip]" ;
true
else
echo "Subject: denying ip: $ip" | /usr/sbin/sendmail urmailid@gmail.com
logger -p authpriv.notice "*** Blocking SSH attempt from: $ip"
/sbin/iptables -I INPUT -s $ip -j DROP
fi
done
g723 gsm ulaw alaw g726aal2 adpcm slin lpc10 g729 speex ilbc g726 g722
g723 - - - - - - - - - - - - -
gsm - - 2 2 2 2 1 2 4 - - 2 -
ulaw - 2 - 1 2 2 1 2 4 - - 2 -
alaw - 2 1 - 2 2 1 2 4 - - 2 -
g726aal2 - 2 2 2 - 2 1 2 4 - - 2 -
adpcm - 2 2 2 2 - 1 2 4 - - 2 -
slin - 1 1 1 1 1 - 1 3 - - 1 -
lpc10 - 2 2 2 2 2 1 - 4 - - 2 -
g729 - 2 2 2 2 2 1 2 - - - 2 -
- type lspci this will output pci boards connected in the server , if digium card is recognised it shows output as below 0e:08.0 Ethernet controller: Digium, Inc. Wildcard TE121 single-span T1/E1/J1 card (PCI-Express) (rev 11)
2. Type dahdi_cfg -vvvv - this outputs the channels if it configured properly
- [root@localhost ~]# dahdi_genconf -vvvvvv
- Default parameters from /etc/dahdi/genconf_parameters
- Generating /etc/dahdi/system.conf
- Generating /etc/asterisk/dahdi-channels.conf
[root@mrlpriprimary ~]# dahdi_cfg -vvvv3. Now configuration is done, some small changes to be done to enable the channels in the asterisk
DAHDI Tools Version - 2.4.1
DAHDI Version: 2.4.1.2
Echo Canceller(s): MG2
Configuration
======================
SPAN 1: CCS/HDB3 Build-out: 0 db (CSU)/0-133 feet (DSX-1)
31 channels to configure.
Channel 01: Clear channel (Default) (Echo Canceler: mg2) (Slaves: 01)
Channel 02: Clear channel (Default) (Echo Canceler: mg2) (Slaves: 02)
Channel 03: Clear channel (Default) (Echo Canceler: mg2) (Slaves: 03)
...........................................................................................................
Channel 30: Clear channel (Default) (Echo Canceler: mg2) (Slaves: 30)
Channel 31: Clear channel (Default) (Echo Canceler: mg2) (Slaves: 31)
/dev/mapper/VolGroup00-LogVol002. If it shows 100% then the harddisk is full you need to delete the recordings and logs
446G 54G 0 100% /
