Simple Postfix Hardening

ADD TO  /etc/postfix/ vi /etc/postfix/   # Hardening SSL configuration# # enable opportunistic TLS support in the SMTP server and clientsmtp_tls_security_level = maysmtp_tls_loglevel = 1 # only offer authentication after STARTTLSsmtpd_tls_auth_only = yes # Disable SSL compressiontls_ssl_options = NO_COMPRESSION # Disable SSLv2 and SSLv3 leaving TLSv1, TLSv1.1 and TLSv1.2 enabled.smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3smtpd_tls_protocols = !SSLv2 Read more about Simple Postfix Hardening[…]

How to configure Static routing in Linux

Static routes can be added usually through “route add” or “ip route” command. However, “route add” command configures routing on the runtime and doesn’t persist the configuration after a reboot. To make it persistent across reboots, you have to add it to /etc/sysconfig/network/route file for SUSE . For example, static routes for the eth0 interface Read more about How to configure Static routing in Linux[…]