Topics

1

Problems on other RedHat linux servers / How to permanently disable ClamAV?

« on: February 01, 2025, 03:45:17 PM »

How to permanently disable ClamAV?

I executed "service clamd stop && systemctl disable clamd" om the terminal as root.
But after some time, i dont know what exactly happened, if it was an update or something, but it re-enabled itself.

How can I permanently disable it and if possible even remove from the "mail services status dashboard" ?

2

Problems on other RedHat linux servers / How to Adjust my SSH Server ? Almalinux 8

« on: January 22, 2025, 12:34:04 AM »

Greetings everyone.
I have used SSH-audit package to determine any flaws on my SSH server settings.
https://github.com/jtesta/ssh-audit

I have got the following recommendations:

# algorithm recommendations (for OpenSSH 8.0)
(rec) -aes128-cbc                           -- enc algorithm to remove
(rec) -aes256-cbc                           -- enc algorithm to remove
(rec) -diffie-hellman-group-exchange-sha1   -- kex algorithm to remove
(rec) -ecdh-sha2-nistp256                   -- kex algorithm to remove
(rec) -ecdh-sha2-nistp384                   -- kex algorithm to remove
(rec) -ecdh-sha2-nistp521                   -- kex algorithm to remove
(rec) -ecdsa-sha2-nistp256                  -- key algorithm to remove
(rec) -ssh-rsa                              -- key algorithm to remove
(rec) +aes192-ctr                           -- enc algorithm to append
(rec) -diffie-hellman-group14-sha1          -- kex algorithm to remove
(rec) -hmac-sha1                            -- mac algorithm to remove
(rec) -hmac-sha1-etm@openssh.com            -- mac algorithm to remove
(rec) -hmac-sha2-256                        -- mac algorithm to remove
(rec) -hmac-sha2-512                        -- mac algorithm to remove
(rec) -umac-128@openssh.com                 -- mac algorithm to remove

Can I use the following tutorial to fix it or CWP Pro or Almalinux8 requires another procedure?

https://www.ssh-audit.com/hardening_guides.html#debian_12