Ubuntu Install ZoneMinder on Ubuntu Server - Revision history

Snake: /* Disable Apache and PHP Infopages */

2020-12-13T05:46:38Z

Disable Apache and PHP Infopages

← Older revision		Revision as of 01:46, 13 December 2020
Line 525:		Line 525:

	sudo systemctl restart apache2		sudo systemctl restart apache2

			===Related Links===
			[[ZMNinja]] - Geoblocking for apache.

2020-03-31T10:19:09Z

← Older revision		Revision as of 06:19, 31 March 2020
Line 1:		Line 1:
			Es sollen mittels ZoneMinder verschiedene Überwachungskameras, vom Hersteller Vivotek, verwaltet werden. Als Basishardware dient ein Raspberry Pi mit einem Ubuntu Server Betriebssystem. Als Datenspeicher kommt eine Synology die per NFS eingebunden wird zum Einsatz.

	=LAMP (Linux, Apache, MySQL, PHP) vorbereiten=		=LAMP (Linux, Apache, MySQL, PHP) vorbereiten=
	==Installation Apache==		==Installation Apache==

2020-03-31T10:16:50Z

Disable Directory Listing and FollowSymLinks

← Older revision		Revision as of 06:16, 31 March 2020
Line 497:		Line 497:
	</Directory>		</Directory>

	sudo systemctl restart apache2		sudo systemctl restart apache2

	===Secure Apache using mod_security and mod_evasive Modules===		===Secure Apache using mod_security and mod_evasive Modules===

2020-03-31T10:16:33Z

Hardening Webserver

← Older revision		Revision as of 06:16, 31 March 2020
Line 505:		Line 505:

	sudo apt-get install libapache2-mod-security2 -y		sudo apt-get install libapache2-mod-security2 -y

			sudo systemctl restart apache2

			===Disable TRACE HTTP Requestit Request Size===
			By default, Trace HTTP Request is enabled allowing for Cross Site Tracing. This enables a hacker to easily steal cookie information. Disabling Trace HTTP Request makes the mod_proxy and core server return “405 - Method Not Allowed” error message to clients.

			sudo vi /etc/apache2/conf-enabled/security.conf

			TraceEnable Off

			sudo systemctl restart apache2

			===Disable Apache and PHP Infopages===
			sudo rm /var/www/html/index.html

			sudo rm /var/www/html/phpinfo.php

	sudo systemctl restart apache2		sudo systemctl restart apache2

2020-03-31T10:15:11Z

Hardening Webserver

← Older revision		Revision as of 06:15, 31 March 2020
Line 501:		Line 501:
	===Secure Apache using mod_security and mod_evasive Modules===		===Secure Apache using mod_security and mod_evasive Modules===
	'''Mod_security'''		'''Mod_security'''

	Acts as a firewall for web servers and applications, providing protection against brute force attacks. Install it and then restart Apache.		Acts as a firewall for web servers and applications, providing protection against brute force attacks. Install it and then restart Apache.

2020-03-31T10:15:01Z

Hardening Webserver

← Older revision		Revision as of 06:15, 31 March 2020
Line 498:		Line 498:

	sudo systemctl restart apache2		sudo systemctl restart apache2

			===Secure Apache using mod_security and mod_evasive Modules===
			'''Mod_security'''
			Acts as a firewall for web servers and applications, providing protection against brute force attacks. Install it and then restart Apache.

			sudo apt-get install libapache2-mod-security2 -y

			sudo systemctl restart apache2

2020-03-31T10:14:21Z

Disable Directory Listing and FollowSymLinks

← Older revision		Revision as of 06:14, 31 March 2020
Line 496:		Line 496:
	Require all granted		Require all granted
	</Directory>		</Directory>

			sudo systemctl restart apache2

2020-03-31T10:14:10Z

Hardening Webserver

← Older revision		Revision as of 06:14, 31 March 2020
Line 487:		Line 487:

	sudo systemctl restart apache2		sudo systemctl restart apache2

			===Disable Directory Listing and FollowSymLinks===
			sudo vi /etc/apache2/apache2.conf

			<Directory /var/www/>
			Options '''-Indexes -FollowSymLinks'''
			AllowOverride None
			Require all granted
			</Directory>

2020-03-31T10:13:35Z

Webserver Konfiguration SSL only

@@ Line 469: / Line 469: @@
           Listen 443
   </IfModule>
   sudo systemctl restart apache2

2020-03-31T10:12:18Z

Webserver Konfiguration SSL only

← Older revision		Revision as of 06:12, 31 March 2020
Line 446:		Line 446:

	sudo a2ensite zoneminder-ssl		sudo a2ensite zoneminder-ssl

			sudo systemctl restart apache2

			==Standard Virtual Host (Port 80) deaktivieren==
			sudo a2dissite 000-default

			sudo mv /etc/apache2/sites-available/000-default.conf /etc/apache2/sites-available/000-default.conf_orig

			sudo vi /etc/apache2/ports.conf

			# If you just change the port or add more ports here, you will likely also
			# have to change the VirtualHost statement in
			# /etc/apache2/sites-enabled/000-default.conf

			#Listen 80

			<IfModule ssl_module>
			Listen 443
			</IfModule>

			<IfModule mod_gnutls.c>
			Listen 443
			</IfModule>

	sudo systemctl restart apache2		sudo systemctl restart apache2