Thursday, March 17, 2011

How to avoid TCP time stamp issues in linux

How to avoid TCP time stamp issues in linux

1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...

Hello,

Here is the solution to avoid tcp fingerprinting . This need to be added in your linux server to get pcidss compilance .

# echo “net.ipv4.tcp_timestamps = 0″ >> /etc/sysctl.conf

# sysctl -p

This will fix the tcp fingerprint issue.

Disable sslv2 in cPanel/whm services

Disable sslv2 in cPanel/whm services

1 Star2 Stars3 Stars4 Stars5 Stars (1 votes, average: 5.00 out of 5)
Loading ... Loading ...

It is easy to disable sslv2 in cpanel / whm services ( ports 2083 , 2087, etc,. ) . To do this you need to enable stunnel from the tweak settings , After that edit the file

/usr/local/cpanel/etc/stunnel/mycabundle/stunnel.conf and add the following line ,

options = NO_SSLv2

Now restart cPanel server. This will fix the issue. And you will get pcidss compilance.