Lab 12 mnjk - Revision history

NateHaleen: /* Checking Your Work */

2021-04-25T16:10:20Z

Checking Your Work

← Older revision		Revision as of 16:10, 25 April 2021
Line 97:		Line 97:
	</nowiki></code>		</nowiki></code>
	</ol>		</ol>
	~~<br><br>~~		=Web App=
	You can check your progress on any of the labs in the ITC-2480 course from a webapp from this link: <br>		You can check your progress on any of the labs in the ITC-2480 course from a webapp from this link: <br>
	[http://webcheck.itc2480.campus.ihitc.net webcheck.itc2480.campus.ihitc.net]<br>		[http://webcheck.itc2480.campus.ihitc.net webcheck.itc2480.campus.ihitc.net]<br>
	You must be logged into the campus VPN to use this application.		You must be logged into the campus VPN to use this application.

NateHaleen: /* Checking Your Work */

2021-04-16T22:38:27Z

Checking Your Work

← Older revision		Revision as of 22:38, 16 April 2021
Line 97:		Line 97:
	</nowiki></code>		</nowiki></code>
	</ol>		</ol>
			<br><br>
			You can check your progress on any of the labs in the ITC-2480 course from a webapp from this link: <br>
			[http://webcheck.itc2480.campus.ihitc.net webcheck.itc2480.campus.ihitc.net]<br>
			You must be logged into the campus VPN to use this application.

NateHaleen: /* Monitoring Services and Graphing System Statistics with Zabbix */

2021-03-02T22:10:03Z

Monitoring Services and Graphing System Statistics with Zabbix

← Older revision		Revision as of 22:10, 2 March 2021
Line 89:		Line 89:
	: ''NOTE: Most services will not instantaneously show as down, the templates for the service probably check it once per minute or less so you may need to leave things down for a bit to see it in the Web UI.''		: ''NOTE: Most services will not instantaneously show as down, the templates for the service probably check it once per minute or less so you may need to leave things down for a bit to see it in the Web UI.''
	* If you have additional time see if you can get email notifications of failed services working (see ''Administration'' -> ''Media Types'' -> ''Email and Configuration'' -> ''Actions'')		* If you have additional time see if you can get email notifications of failed services working (see ''Administration'' -> ''Media Types'' -> ''Email and Configuration'' -> ''Actions'')
			</ol>
			==Checking Your Work==

			<li> Automatically check your results by running this command:</li>
			<code><nowiki>
			curl https://raw.githubusercontent.com/mnjk-inver/Linux-2480-Rebuild/main/lab_12_test.py \| python3
			</nowiki></code>
	</ol>		</ol>

MikeTieden: /* Introduction */

2021-02-14T01:18:00Z

Introduction

← Older revision		Revision as of 01:18, 14 February 2021
Line 7:		Line 7:
	* Monitor services with [https://www.zabbix.com/ zabbix]		* Monitor services with [https://www.zabbix.com/ zabbix]

	You will ~~use~~ the following commands:		You will be introduced to the following commands:
	*'''[https://linux.die.net/man/8/netstat netstat]'''		*'''[https://linux.die.net/man/8/netstat netstat]'''
	*'''[https://linux.die.net/man/1/ps ps]'''		*'''[https://linux.die.net/man/1/ps ps]'''
	*'''[https://linux.die.net/man/1/grep grep]'''		*'''[https://linux.die.net/man/1/grep grep]'''
	*'''[https://linux.die.net/man/1/nmap namp]'''		*'''[https://linux.die.net/man/1/nmap namp]'''
	*'''[https://linux.die.net/man/8/service service]'''
	*'''[https://www.man7.org/linux/man-pages/man1/systemctl.1.html systemctl]'''

	=Lab Procedure=		=Lab Procedure=

KreidKolo: /* Monitoring Services and Graphing System Statistics with Zabbix */

2021-02-12T01:17:02Z

Monitoring Services and Graphing System Statistics with Zabbix

KreidKolo: /* Monitoring connections with netstat */

2021-02-12T00:50:55Z

Monitoring connections with netstat

← Older revision		Revision as of 00:50, 12 February 2021
Line 29:		Line 29:
	<li> Use the '''sudo ps aux''' command (along with '''grep''') to match the PID (process ID) numbers of open ports shown in '''netstat -natup''' with specific processes on your system.</li>		<li> Use the '''sudo ps aux''' command (along with '''grep''') to match the PID (process ID) numbers of open ports shown in '''netstat -natup''' with specific processes on your system.</li>
	<li> Connect to the IP address or domain name of your system through your web browser and re-run the '''netstat -natup''' command to see the TCP session established by your browser to download the website.</li>		<li> Connect to the IP address or domain name of your system through your web browser and re-run the '''netstat -natup''' command to see the TCP session established by your browser to download the website.</li>
	~~: [[File:Netstat_natup.png \| 500px]]~~
	<ul> You'll find that there are a number of ports open on your system. Some of these we have opened to provide a specific service such as SMTP, DNS, Webserver, etc. but some such as the sunrpc port are open simply by default on a fresh install. There are a number of different strategies you can use to secure your system including disabling a service, binding it to an internal-only IP address, or blocking access with a firewall rule. If your firewall is setup with an implicit (or explicit) reject any rule at the bottom of the input chain and you have not specifically opened a port it should not be accessible from other systems. How can we test that though? The '''netstat''' utility is useful at making a list of ports somehow open on the system but it does not show us how those ports react if someone outside actually tries to connect.</ul>		<ul> You'll find that there are a number of ports open on your system. Some of these we have opened to provide a specific service such as SMTP, DNS, Webserver, etc. but some such as the sunrpc port are open simply by default on a fresh install. There are a number of different strategies you can use to secure your system including disabling a service, binding it to an internal-only IP address, or blocking access with a firewall rule. If your firewall is setup with an implicit (or explicit) reject any rule at the bottom of the input chain and you have not specifically opened a port it should not be accessible from other systems. How can we test that though? The '''netstat''' utility is useful at making a list of ports somehow open on the system but it does not show us how those ports react if someone outside actually tries to connect.</ul>
	</ol>		</ol>

KreidKolo: /* Monitoring connections with netstat */

2021-02-12T00:50:14Z

Monitoring connections with netstat

← Older revision		Revision as of 00:50, 12 February 2021
Line 29:		Line 29:
	<li> Use the '''sudo ps aux''' command (along with '''grep''') to match the PID (process ID) numbers of open ports shown in '''netstat -natup''' with specific processes on your system.</li>		<li> Use the '''sudo ps aux''' command (along with '''grep''') to match the PID (process ID) numbers of open ports shown in '''netstat -natup''' with specific processes on your system.</li>
	<li> Connect to the IP address or domain name of your system through your web browser and re-run the '''netstat -natup''' command to see the TCP session established by your browser to download the website.</li>		<li> Connect to the IP address or domain name of your system through your web browser and re-run the '''netstat -natup''' command to see the TCP session established by your browser to download the website.</li>
			: [[File:Netstat_natup.png \| 500px]]
	<ul> You'll find that there are a number of ports open on your system. Some of these we have opened to provide a specific service such as SMTP, DNS, Webserver, etc. but some such as the sunrpc port are open simply by default on a fresh install. There are a number of different strategies you can use to secure your system including disabling a service, binding it to an internal-only IP address, or blocking access with a firewall rule. If your firewall is setup with an implicit (or explicit) reject any rule at the bottom of the input chain and you have not specifically opened a port it should not be accessible from other systems. How can we test that though? The '''netstat''' utility is useful at making a list of ports somehow open on the system but it does not show us how those ports react if someone outside actually tries to connect.</ul>		<ul> You'll find that there are a number of ports open on your system. Some of these we have opened to provide a specific service such as SMTP, DNS, Webserver, etc. but some such as the sunrpc port are open simply by default on a fresh install. There are a number of different strategies you can use to secure your system including disabling a service, binding it to an internal-only IP address, or blocking access with a firewall rule. If your firewall is setup with an implicit (or explicit) reject any rule at the bottom of the input chain and you have not specifically opened a port it should not be accessible from other systems. How can we test that though? The '''netstat''' utility is useful at making a list of ports somehow open on the system but it does not show us how those ports react if someone outside actually tries to connect.</ul>
	</ol>		</ol>

KreidKolo: /* Monitoring Services and Graphing System Statistics with Zabbix */

2021-02-12T00:45:21Z

Monitoring Services and Graphing System Statistics with Zabbix

← Older revision		Revision as of 00:45, 12 February 2021
Line 64:		Line 64:
	<code>create database zabbix character set utf8 collate utf8_bin;</code><br>		<code>create database zabbix character set utf8 collate utf8_bin;</code><br>
	<code>create user zabbix@localhost identified by 'password';</code><br>		<code>create user zabbix@localhost identified by 'password';</code><br>
	* Replace password with a password you want to use. (Command needs the '' so don't remove them).		* Replace password with a password you want to use. (Command needs the quotes so don't remove them).
	<code>grant all privileges on zabbix.* to zabbix@localhost;</code><br>		<code>grant all privileges on zabbix.* to zabbix@localhost;</code><br>
	<code>quit;</code><br>		<code>quit;</code><br>

KreidKolo: /* Monitoring Services and Graphing System Statistics with Zabbix */

2021-02-12T00:44:38Z

Monitoring Services and Graphing System Statistics with Zabbix

← Older revision		Revision as of 00:44, 12 February 2021
Line 52:		Line 52:
	'''''[https://www.youtube.com/watch?v=fF5NNRJwLjg Video Tutorial - Monitoring with Zabbix]''''' <br>		'''''[https://www.youtube.com/watch?v=fF5NNRJwLjg Video Tutorial - Monitoring with Zabbix]''''' <br>
	In this section we will be following the instruction on how to install zabbix using [https://www.zabbix.com/download?zabbix=5.0&os_distribution=debian&os_version=10_buster&db=mysql&ws=apache these instructions on the Zabbix site].		In this section we will be following the instruction on how to install zabbix using [https://www.zabbix.com/download?zabbix=5.0&os_distribution=debian&os_version=10_buster&db=mysql&ws=apache these instructions on the Zabbix site].
	~~<code>sudo apt install zabbix-server-mysql zabbix-frontend-php zabbix-agent</code><br>~~
	~~<code>sudo mysql -u root -e "create database zabbix character set utf8"</code><br>~~
	~~<code>sudo mysql -u root -e "grant all on zabbix.* to 'zabbix'@'localhost' identified by 'Franske2900'"</code><br>~~
	~~<code>zcat /usr/share/zabbix-server-mysql/{schema,images,data}.sql.gz \| mysql -uzabbix -pFranske2900 zabbix</code>~~
	<ol>		<ol>
	<li> Go to the instructions link above and scroll down to '''part 2'''. Start by installing the zabbix repository.</li>		<li> Go to the instructions link above and scroll down to '''part 2'''. Start by installing the zabbix repository.</li>
Line 90:		Line 86:
	: ''NOTE: Most services will not instantaneously show as down, the templates for the service probably check it once per minute or less so you may need to leave things down for a bit to see it in the Web UI.''		: ''NOTE: Most services will not instantaneously show as down, the templates for the service probably check it once per minute or less so you may need to leave things down for a bit to see it in the Web UI.''
	* If you have additional time see if you can get email notifications of failed services working (see ''Administration'' -> ''Media Types'' -> ''Email and Configuration'' -> ''Actions'')		* If you have additional time see if you can get email notifications of failed services working (see ''Administration'' -> ''Media Types'' -> ''Email and Configuration'' -> ''Actions'')
			</ol>

KreidKolo: /* Monitoring Services and Graphing System Statistics with Zabbix */

2021-02-12T00:43:08Z

Monitoring Services and Graphing System Statistics with Zabbix

← Older revision		Revision as of 00:43, 12 February 2021
Line 75:		Line 75:
	<li>Edit the server configuration file ( ''/etc/zabbix/zabbix_server.conf'' ) to include the correct database password used when you setup the database above. ( ''DBPassword=<password>'' )		<li>Edit the server configuration file ( ''/etc/zabbix/zabbix_server.conf'' ) to include the correct database password used when you setup the database above. ( ''DBPassword=<password>'' )
	<li>Edit the server configuration file ( ''/etc/zabbix/apache.conf'' ) to include the correct timezone. [https://www.php.net/manual/en/timezones.php A list of valid PHP timezones can be found here.] We will be using ''America/Chicago''.</li>		<li>Edit the server configuration file ( ''/etc/zabbix/apache.conf'' ) to include the correct timezone. [https://www.php.net/manual/en/timezones.php A list of valid PHP timezones can be found here.] We will be using ''America/Chicago''.</li>
	<li>Restart the server</li>		<li>Restart the server. Then set it to auto start on startup:</li>
	<code>systemctl restart zabbix-server zabbix-agent apache2</code>		<code>systemctl restart zabbix-server zabbix-agent apache2</code><br>
	~~# Set the server to start automatically when the system starts up with the '''~~systemctl enable zabbix-server zabbix-agent apache2~~''' command.~~		<code>systemctl enable zabbix-server zabbix-agent apache2</code>
	# Access the Zabbix web application at http://yourserver/zabbix/ and complete the setup wizard. [https://www.zabbix.com/documentation/5.0/manual/installation/frontend Detailed instructions for completing the setup wizard can be found here on the Zabbix site.]		<li>Access the Zabbix web application at http://yourserver/zabbix/ and complete the setup wizard. [https://www.zabbix.com/documentation/5.0/manual/installation/frontend Detailed instructions for completing the setup wizard can be found here on the Zabbix site.]</li>
	# At the end of the setup wizard you may need to download a ''zabbix.conf.php'' and save it to ''/etc/zabbix/zabbix.conf.php'' on your system.		<ul> At the end of the setup wizard you may need to download a ''zabbix.conf.php'' and save it to ''/etc/zabbix/zabbix.conf.php'' on your system.</ul>
	# Login to http://yourserver/zabbix/ (where yourserver is the IP address or DNS name for your system) with the username and password found [https://www.zabbix.com/documentation/5.0/manual/quickstart/login on the Zabbix site login instructions].		<li> Login to http://yourserver/zabbix/ (where yourserver is the IP address or DNS name for your system) with the username and password found [https://www.zabbix.com/documentation/5.0/manual/quickstart/login on the Zabbix site login instructions].</li>
	# Enable monitoring of your Zabbix server host (''Configuration'' -> ''Hosts'')		<ul>The default superuser credentials are user name '''Admin''' with password '''zabbix'''.</ul>
	#* NOTE: [https://www.zabbix.com/documentation/5.0/manual The Zabbix manual] may be helpful in completing these monitoring setup tasks.		<li> Enable monitoring of your Zabbix server host (''Configuration'' -> ''Hosts'')</li>
	# Add the templates to the host appropriate for the services we are running on the server (HTTP, IMAP, MySQL, SMTP, SSH)		: ''NOTE: [https://www.zabbix.com/documentation/5.0/manual The Zabbix manual] may be helpful in completing these monitoring setup tasks.''
	# Explore some of the data available through Zabbix such as various graphs (''Monitoring'' -> ''Graphs''), Latest Data (''Monitoring'' -> ''Latest Data''), Screens (''Monitoring'' -> ''Screens''), and Events (''Monitoring'' -> ''Events'')		* Add the templates to the host appropriate for the services we are running on the server (HTTP, IMAP, MySQL, SMTP, SSH)
	# Try temporarily stopping some of the services on your system (to simulate a problem) such as the Postfix SMTP server, ''courier-imap'' server, etc. using the command line '''service''' command.		* Explore some of the data available through Zabbix such as various graphs (''Monitoring'' -> ''Graphs''), Latest Data (''Monitoring'' -> ''Latest Data''), Screens (''Monitoring'' -> ''Screens''), and Events (''Monitoring'' -> ''Events'')
	# Re-check the data in Zabbix with the services turned off, are you alerted of the problems? Make sure to turn the services back on when you're done.		* Try temporarily stopping some of the services on your system (to simulate a problem) such as the Postfix SMTP server, ''courier-imap'' server, etc. using the command line '''service''' command.
	#* NOTE: Most services will not instantaneously show as down, the templates for the service probably check it once per minute or less so you may need to leave things down for a bit to see it in the Web UI.		* Re-check the data in Zabbix with the services turned off, are you alerted of the problems? Make sure to turn the services back on when you're done.
	# If you have additional time see if you can get email notifications of failed services working (see ''Administration'' -> ''Media Types'' -> ''Email and Configuration'' -> ''Actions'')		: ''NOTE: Most services will not instantaneously show as down, the templates for the service probably check it once per minute or less so you may need to leave things down for a bit to see it in the Web UI.''
			* If you have additional time see if you can get email notifications of failed services working (see ''Administration'' -> ''Media Types'' -> ''Email and Configuration'' -> ''Actions'')

← Older revision		Revision as of 01:17, 12 February 2021
Line 70:		Line 70:
	<code>zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz \| mysql -uzabbix -p zabbix</code>		<code>zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz \| mysql -uzabbix -p zabbix</code>
	<li>Edit the server configuration file ( ''/etc/zabbix/zabbix_server.conf'' ) to include the correct database password used when you setup the database above. ( ''DBPassword=<password>'' )		<li>Edit the server configuration file ( ''/etc/zabbix/zabbix_server.conf'' ) to include the correct database password used when you setup the database above. ( ''DBPassword=<password>'' )
			: [[File:DBPassword.png \| 500px]]
	<li>Edit the server configuration file ( ''/etc/zabbix/apache.conf'' ) to include the correct timezone. [https://www.php.net/manual/en/timezones.php A list of valid PHP timezones can be found here.] We will be using ''America/Chicago''.</li>		<li>Edit the server configuration file ( ''/etc/zabbix/apache.conf'' ) to include the correct timezone. [https://www.php.net/manual/en/timezones.php A list of valid PHP timezones can be found here.] We will be using ''America/Chicago''.</li>
			: [[File:Apache_timezone.png \| 500px]]
	<li>Restart the server. Then set it to auto start on startup:</li>		<li>Restart the server. Then set it to auto start on startup:</li>
	<code>systemctl restart zabbix-server zabbix-agent apache2</code><br>		<code>systemctl restart zabbix-server zabbix-agent apache2</code><br>
Line 77:		Line 79:
	<ul> At the end of the setup wizard you may need to download a ''zabbix.conf.php'' and save it to ''/etc/zabbix/zabbix.conf.php'' on your system.</ul>		<ul> At the end of the setup wizard you may need to download a ''zabbix.conf.php'' and save it to ''/etc/zabbix/zabbix.conf.php'' on your system.</ul>
	<li> Login to http://yourserver/zabbix/ (where yourserver is the IP address or DNS name for your system) with the username and password found [https://www.zabbix.com/documentation/5.0/manual/quickstart/login on the Zabbix site login instructions].</li>		<li> Login to http://yourserver/zabbix/ (where yourserver is the IP address or DNS name for your system) with the username and password found [https://www.zabbix.com/documentation/5.0/manual/quickstart/login on the Zabbix site login instructions].</li>
			: [[File:Enable_monitoring_zabbix.png \| 500px]]
	<ul>The default superuser credentials are user name '''Admin''' with password '''zabbix'''.</ul>		<ul>The default superuser credentials are user name '''Admin''' with password '''zabbix'''.</ul>
	<li> Enable monitoring of your Zabbix server host (''Configuration'' -> ''Hosts'')</li>		<li> Enable monitoring of your Zabbix server host (''Configuration'' -> ''Hosts'')</li>
			: [[File:Enable_monitoring_zabbix.png \| 500px]]
	: ''NOTE: [https://www.zabbix.com/documentation/5.0/manual The Zabbix manual] may be helpful in completing these monitoring setup tasks.''		: ''NOTE: [https://www.zabbix.com/documentation/5.0/manual The Zabbix manual] may be helpful in completing these monitoring setup tasks.''
	* Add the templates to the host appropriate for the services we are running on the server (HTTP, IMAP, MySQL, SMTP, SSH)		* Add the templates to the host appropriate for the services we are running on the server (HTTP, IMAP, MySQL, SMTP, SSH)
			: [[File:Zabbix_templates.png \| 500px]]
	* Explore some of the data available through Zabbix such as various graphs (''Monitoring'' -> ''Graphs''), Latest Data (''Monitoring'' -> ''Latest Data''), Screens (''Monitoring'' -> ''Screens''), and Events (''Monitoring'' -> ''Events'')		* Explore some of the data available through Zabbix such as various graphs (''Monitoring'' -> ''Graphs''), Latest Data (''Monitoring'' -> ''Latest Data''), Screens (''Monitoring'' -> ''Screens''), and Events (''Monitoring'' -> ''Events'')
	* Try temporarily stopping some of the services on your system (to simulate a problem) such as the Postfix SMTP server, ''courier-imap'' server, etc. using the command line '''service''' command.		* Try temporarily stopping some of the services on your system (to simulate a problem) such as the Postfix SMTP server, ''courier-imap'' server, etc. using the command line '''service''' command.