Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - KenobiSky

Pages: [1]
1
If the service is not installed, it won't show on the dashboard.

You can try to uninstall it using
Code: [Select]
dnf remove clamav* clamd
Is there some reason you don't want an AV on your server?

Hi! Thanks again for helping me. Can I bother you again, please?
Is there a code to disable/uninstall AMAVIS ?

2
If the service is not installed, it won't show on the dashboard.

You can try to uninstall it using
Code: [Select]
dnf remove clamav* clamd
Is there some reason you don't want an AV on your server?

I will try that code. Thanks!

The reason is that it eats too much resources and every client already have an AV installed.

3
How to permanently disable ClamAV?

I executed "service clamd stop && systemctl disable clamd" om the terminal as root.
But after some time, i dont know what exactly happened, if it was an update or something, but it re-enabled itself.

How can I permanently disable it and if possible even remove from the "mail services status dashboard" ?

4
Thanks for the reply. I followed the tutorial but im still getting this:

Quote
# algorithm recommendations (for OpenSSH 8.0)
(rec) -ecdh-sha2-nistp256                   -- kex algorithm to remove
(rec) -ecdh-sha2-nistp384                   -- kex algorithm to remove
(rec) -ecdh-sha2-nistp521                   -- kex algorithm to remove
(rec) -ecdsa-sha2-nistp256                  -- key algorithm to remove
(rec) -ssh-rsa                              -- key algorithm to remove
(rec) -diffie-hellman-group14-sha1          -- kex algorithm to remove
(rec) -hmac-sha1                            -- mac algorithm to remove
(rec) -hmac-sha1-etm@openssh.com            -- mac algorithm to remove
(rec) -hmac-sha2-256                        -- mac algorithm to remove
(rec) -hmac-sha2-512                        -- mac algorithm to remove
(rec) -umac-128@openssh.com                 -- mac algorithm to remove
(rec) -umac-64-etm@openssh.com              -- mac algorithm to remove
(rec) -umac-64@openssh.com                  -- mac algorithm to remove

5
Greetings everyone.
I have used SSH-audit package to determine any flaws on my SSH server settings.
https://github.com/jtesta/ssh-audit

I have got the following recommendations:

Quote
# algorithm recommendations (for OpenSSH 8.0)
(rec) -aes128-cbc                           -- enc algorithm to remove
(rec) -aes256-cbc                           -- enc algorithm to remove
(rec) -diffie-hellman-group-exchange-sha1   -- kex algorithm to remove
(rec) -ecdh-sha2-nistp256                   -- kex algorithm to remove
(rec) -ecdh-sha2-nistp384                   -- kex algorithm to remove
(rec) -ecdh-sha2-nistp521                   -- kex algorithm to remove
(rec) -ecdsa-sha2-nistp256                  -- key algorithm to remove
(rec) -ssh-rsa                              -- key algorithm to remove
(rec) +aes192-ctr                           -- enc algorithm to append
(rec) -diffie-hellman-group14-sha1          -- kex algorithm to remove
(rec) -hmac-sha1                            -- mac algorithm to remove
(rec) -hmac-sha1-etm@openssh.com            -- mac algorithm to remove
(rec) -hmac-sha2-256                        -- mac algorithm to remove
(rec) -hmac-sha2-512                        -- mac algorithm to remove
(rec) -umac-128@openssh.com                 -- mac algorithm to remove

Can I use the following tutorial to fix it or CWP Pro or Almalinux8 requires another procedure?

https://www.ssh-audit.com/hardening_guides.html#debian_12

Pages: [1]