Lab 2 || Timezones & Logging - Michaelfoop/SEC-350-01 GitHub Wiki

Network Diagram Updated

image

Time Settings for Operating Systems

xubuntu

Going into /etc/rsyslog.conf via nano, scroll down until you find this line and then comment it out

image

This will add time to the logs

image

Linux

Going into /etc/rsyslog.conf via nano, scroll down until you find this line and then comment it out

image

This will add time to the logs

image

rsyslog

New drop in file configuration


In order to drop in a file (in log01), I went into the /etc/rsyslog.d directory and used wget to bring in a file from a specific github
sudo wget https://raw.githubusercontent.com/gmcyber/sec350-share/main/03-sec350.conf

This creates a file with all the contents from that webpage, rather than me typing it all in manually

VYOS

Password Change


In order to change the password, I opened conf and typed this command
set system login user <username> authentication plaintext-password <new_password>

Logging authpriv messages


I adjusted the VyOS config to send authentication messages from fw1 to log01. In order to do that, I opened conf in vyos and set this command
set system syslog remote 172.16.50.5 facility authpriv level info
⚠️ **GitHub.com Fallback** ⚠️