• XSS.stack #1 – первый литературный журнал от юзеров форума

Статья Nginx web server , DNS server and Ejabberd setup guide for beginners

Отслеживать
blackhunt

blackhunt

(L2) cache
Пользователь
Регистрация
10.05.2023
Сообщения
333
Решения
8
Реакции
336
A general guide to building a localhost web with (nginx) and implementing a jabber server in VMWARE

Well, to start, a very brief explanation about the steps of the work I want to do.

  • -Configure a host using NGINX and creating a self-signed SSL certificate
  • -Setting up the bind and revers service
  • -DNS settings on Windows
  • -Setting up a jabber server and configuring it and test in pidgin
  • -And finally they worked in the environment


Well, first of all, let me give a brief technical explanation about nginx and its setup in centos


NGINX :
Nginx is a lightweight and fast web server that can also be used as a reverse proxy server, load balancer, HTTP cache, and more. It is very popular due to its high performance and low resource consumption.
So now let's go to install NGINX prerequisites

First, update the repositories and packages in the system:

Bash: 
dnf or (yum) update && upgrade -y


Install Last version of Nginx using the add the NGINX repository to yum.repos.d


Bash: 
nano /etc/yum.repos.d/nginx.repo

you will need to first install the `dnf` utilities:

Bash: 
dnf install dnf-utils

With the `nginx.repo` that we just added, dnf will install the stable Nginx version. In case you want to, you could use the Mainline, which includes some new features, you need to run the following command :

Bash: 
yum-config-manager --enable nginx-mainline


install NGINX :

Bash: 
dnf install nginx

1720044341167.png


now make DIR sites-available and sites-enabled :

Bash: 
mkdir /etc/nginx/sites-available

Bash: 
mkdir /etc/nginx/sites-enabled


now open nginx.conf and add include /etc/nginx/sites-enabled/*.conf :

Bash: 
nano /etc/nginx/nginx.conf

now make config file site in site-available :

Bash: 
cd /etc/nginx/site-avaliable

Bash: 
nano matrix.local.conf

now add conf to [B]matrix.local.conf[/B]:

Bash: 
server {
    listen 443 ssl;
    server_name matrix.local;

    ssl_certificate /etc/nginx/ssl/nginx.crt;
    ssl_certificate_key /etc/nginx/ssl/nginx.key;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
    ssl_session_timeout 10m;
    ssl_session_cache shared:SSL:10m;

    location / {
        root /var/www/html/nginx/public_html/;
        index index.html index.htm;
    }

}

server {
    listen 80;
    server_name matrix.local www.matrix.local;

    # Redirect http to https
    return 301 https://$host$request_uri;
}

now we need make ssl :

Bash: 
sudo dnf install openssl -y

Now we create a certificate for the site :

Bash: 
mkdir -p /etc/nginx/ssl
Bash: 
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt

ok, now i will test nginx config:
Bash: 
nginx -t

result:
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
[B]nginx: configuration file /etc/nginx/nginx.conf test is successful[/B]

now start and enable nginx services :

Bash: 
systemctl start nginx
systemctl enable nginx

and check status :

Bash: 
systemctl status nginx

1720044362696.png


Well, now we have launched a site and now we have to install the bind service, before that I will give a very brief explanation about bind:

BIND :

BIND (Berkeley Internet Name Domain) service is a DNS (Domain Name System) server software that is used to manage and provide domain name services in Internet networks. Basically, BIND is responsible for translating domain names to IP addresses (and vice versa), a process known as name resolution.

install bind :

Bash: 
dnf install bind -y

Well, after installing bind, we have to go to the named configuration
Let's define ZONE together for named :

Bash: 
mkdir -p /etc/named/zone

Now we create a zone database :
Bash: 
nano /etc/named/zone/db.matrix.local

and add config :

Bash: 
$TTL 86400
@   IN  SOA ns.matrix.local. root.matrix.local. (
        2021070701  ; Serial
        3600        ; Refresh
        1800        ; Retry
        604800      ; Expire
        86400       ; Minimum TTL
    )
@   IN  NS  ns.matrix.local.
ns  IN  A   10.1.4.192
@   IN  A   10.1.4.192

Revers DNS :
Reverse DNS (rDNS) or reverse naming is a process in DNS (Domain Name System) that translates IP addresses to equivalent domain names. In contrast to DNS, which translates a domain name to an IP address, rDNS does the opposite and translates the IP address to the associated domain name with the help of the information in the reverse names (Reverse DNS records).


Now it's time to configure reverse DNS :

Bash: 
nano /etc/named/zone/db.10.1.4

note :
To set rDNS, a Reverse DNS record must be set in the Reverse Zone in the DNS system. This record is created based on the IP address and points to the equivalent domain name of that IP address.
For example, if the IP address 10.1.4.192 belongs to the matrix.local domain, a Reverse DNS record for 4.1.10.in-addr.arpa should point to matrix.local.

config db.10.1.4:

Bash: 
$TTL 86400
@   IN  SOA ns.matrix.local. root.matrix.local. (
        2021070701  ; Serial
        3600        ; Refresh
        1800        ; Retry
        604800      ; Expire
        86400       ; Minimum TTL
    )
@   IN  NS  ns.matrix.local.
100 IN  PTR ns.matrix.local.
100 IN  PTR www.matrix.local.

1720044528930.png


Now let's create the necessary configurations in named.conf:

Bash: 
zone "matrix.local" {
    type master;
    file "/etc/named/zone/db.matrix.local";
};

zone "4.1.10.in-addr.arpa" {
    type master;
    file "/etc/named/zone/db.10.1.4";
};

now i will start and enable named(bind) services :

Bash: 
systemctl start named
systemctl enable named

and status :

Bash: 
systemctl status named

1720044877383.png


Well, now it's time to come to Windows to check the site. Well, here we have defined dns for our site, whose name is matrix.local. Now, in order to be able to have the site with our main system, we must first remove firewalld in Linux (here I delete it because it is educational) and also the iptables rules. also delete
Well, first we remove firewalld:

Bash: 
dnf remove firewalld -y

now remove iptables rules :

Bash: 
iptables -F

Well, now we will set up our main system and Linux IP in the Windows DNS section so that we can have the site:


go to
Control Panel\Network and Internet\Network Connections

Click-Right Ethernet and open Ethernet Properties now double-click on IP V4 and use the following DNS server addresses and finally add your Linux IP address to preferred DNS server LIKE this :

1720045207611.png



Now, in order to see if we have access to the site or not, first of all, open a (win+r and type CMD) CMD and enter the command ipconfig /flushdns to clear the previous cache.

Now I get ping from the site:

ping matrix.local
1720045288084.png


Well, now that everything has been executed successfully, let's go to install ejabberd:


Ejabberd:
ejabberd is an instant messaging server that implements XMPP (Extensible Messaging and Presence Protocol). This server is written in Erlang language and is known for its reliability, high scalability and support for clustering.

First of all, we install the prerequisites:

Bash: 
sudo dnf install -y gcc gcc-c++ make openssl-devel expat-devel yaml-devel pam-devel zlib-devel

now install ejabberd:

Bash: 
dnf install -y epel-release
dnf install -y ejabberd

Now let's do an initial configuration in ejabberd config :

Maybe your file is here /opt/ejabberd/conf/ejabberd.yml or here /etc/ejabberd/ejabberd.yml for me it is in /opt/ejabberd/conf/ejabberd.yml so i open ejabberd.yml :

Bash: 
nano /opt/ejabberd/conf/ejabberd.yml

add
hosts:
- matrix.local
1720045417812.png


and set admin user :

acl:
admin:
user: xss@matrix.local

1720045470484.png


Now we need to create an admin user using ejabberdctl:

Bash: 
ejabberdctl register (user)xss (yuour domain)matrix.local (your password)123@123

and now start ejabberd servies :

Bash: 
systemctl start ejabberd

systemctl enable ejabberd

now i will try to access web page Ejabberd :

1720045851903.png


now test on pidgin:
download pidgin and OTR from here :

pidgin

1720045990980.png


1720046003576.png



1720046014244.png


OTR

1720046025895.png


1720046034265.png


1720046041836.png


Author : blackhunt
special for xss.pro

Of course, this article is written for beginners, I hope it can help )))
~./Enjoy!
 
why do you need nginx if ejabberd has its own web server? and why gcc make *-devel are prerequisites for a binary ejabberd? you do not compile it from source.
 
Dread Pirate Roberts сказал(а):
why do you need nginx if ejabberd has its own web server? and why gcc make *-devel are prerequisites for a binary ejabberd? you do not compile it from source.
First, I came to teach everyone , and if you saw it, I wrote about setting up locahost web and DNS and setting it up on Windows. And gcc make *-devel is also added because I went this way several times to get to the right step. I had various problems. Now don't follow my method, follow a method that you know is better.
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх