This is based on recent work (March 2015) with a customer to attain Level 3 PCI Compliance.

There seems to be a grey cloud cast over PCI Compliance and there are very few companies out there willing to give the relevant information to help the n00b out.

Environment

• Customer using remote integration (payment details taken on own website and not redirected to e.g. Paypal)
• Cardholder details are not stored by customer or payment gateway
• POS terminals on-site

Steps

Here are the steps I took on my journey to level 3 Compliance:

• Host website with PCI Compliant web hosting (34sp.com)
• Become a re-seller (scan on behalf of customer) with PCI ASV – Approved Scanning Vendor (qualys.com)
• Scan website IP with qualys.com and return the issues report (if any) to 34sp.com to patch
• Complete SAQ (Self Assesment Questionnaire) D form (covers taking payments on website and POS terminals) – http://www.pcisecuritystandards.org/security_standards/documents.php?category=saqs
• Complete SAQ D AOC (Attestation of Compliance) form
• Return completed SAQ forms and Attestation of Compliance scan report (qualys.com) to Acquiring bank

Research

First figure out which level of compliance you require. In our case it was level 3. Your acquiring bank can provide you with this information (Number of Transactions).

What have I learnt?

• Tough process to complete when little guidance is offered
• Website must be scanned by a third party PCI ASV
• Host with a hosting company that provide PCI compliant hosting – they understand the pain and will fix and hosting environment issues that come back from the scans
• Questionnaire and AOC are completed by you and not a third party
• You don’t need to pay the extortionate fees demanded by companies to help you through the process

Questions

Any questions please do not hesitate to get in touch. I will help out as best I can.

Simple perl script to transfer IMAP email from host server to Gmail.

This was carried out on Debian Wheezy.

Grab the latest tarball of imapsync from fedorahosted.org (1.607 at writing of this post):

wget http://fedorahosted.org/released/imapsync/imapsync-1.607.tgz

Decompress tarball:

tar -xvf imapsync-1.607.tgz

Change into directory and then check if you have the correct dependencies for imapsync:

cd imapsync1607

perl -c imapsync

The output we are after before proceeding is:

imapsync syntax OK

*See Troubleshooting below for examples of missing dependencies.

Now install imapsync scripts:

make install

*Need to have make package for this to work – apt-get install make

Now we simply run the script to transfer the mail from your IMAP server to Gmail (or other IMAP mail server):

imapsync --syncinternaldates --host1 <sourcehost> --port1 993 --ssl1 --user1 <sourceemailaccount> --password1 <sourcepassword> --host2 imap.googlemail.com --port2 993 --ssl2 --user2 <destinationemailaccount> --password2 <destinationpassword> --folder "Source/Folder" --prefix2 '[Gmail]/' --regextrans2 's/Source/Folder$/DestinationFolder/' --skipsize --noauthmd5 --reconnectretry1 1 --reconnectretry2 1

KEY TERMS

– source host (can be IP)
– source email account – e.g. test@test.com
– source email account password
– imap.googlemail.com – destination host
– destination email account
– destination email account
-“Source/Folder” – Folder on source email account to sync
-‘s/Source/Folder$/DestinationFolder/’ – substitute Source/Folder with Destination Folder

Full Example

imapsync --syncinternaldates --host1 localhost --port1 993 --ssl1 --user1 <source@email.com --password1 sourcepassword --host2 imap.googlemail.com --port2 993 --ssl2 --user2 destination@email.com --password2 destinationpassword --folder "Inbox/Client" --prefix2 '[Gmail]/' --regextrans2 's/Inbox/Client$/Client/' --skipsize --noauthmd5 --reconnectretry1 1 --reconnectretry2 1

The above will transfer the Inbox/Client Folder over to Client on Gmail account.

TROUBLESHOOTING

Can’t locate Mail/IMAPClient.pm in @INC (@INC contains: /etc/perl /usr/local/lib /perl/5.14.2 /usr/local/share/perl/5.14.2 /usr/lib/perl5 /usr/share/perl5 /usr/l ib/perl/5.14 /usr/share/perl/5.14 /usr/local/lib/site_perl .) at imapsync line 5 74.
BEGIN failed–compilation aborted at imapsync line 574

apt-get install libmail-imapclient-perl

Can’t locate File/Copy/Recursive.pm in @INC (@INC contains: /etc/perl /usr/local /lib/perl/5.14.2 /usr/local/share/perl/5.14.2 /usr/lib/perl5 /usr/share/perl5 /u sr/lib/perl/5.14 /usr/share/perl/5.14 /usr/local/lib/site_perl .) at imapsync li ne 586.
BEGIN failed–compilation aborted at imapsync line 586.

apt-get install libfile-copy-recursive-perl

Can’t locate IO/Tee.pm in @INC (@INC contains: /etc/perl /usr/local/lib/perl/5.1 4.2 /usr/local/share/perl/5.14.2 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5 .14 /usr/share/perl/5.14 /usr/local/lib/site_perl .) at imapsync line 595.
BEGIN failed–compilation aborted at imapsync line 595.

apt-get install libio-tee-perl

Can’t locate Unicode/String.pm in @INC (@INC contains: /etc/perl /usr/local/lib/perl/5.14.2 /usr/local/share/perl/5.14.2 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.14 /usr/share/perl/5.14 /usr/local/lib/site_perl .) at imapsync line 596.
BEGIN failed–compilation aborted at imapsync line 596.

apt-get install libunicode-string-perl

When trying to insert a database I got the following error:

“ERROR 1153 (08S01) at line 69: Got a packet bigger than ‘max_allowed_packet’ bytes”

This is due to the database being too large. To fix:

Enter MySQL:

mysql -p

Then run the following:

set global net_buffer_length=1000000; 
set global max_allowed_packet=1000000000;

The below command will sync all data to a remote server:

rsync -az -A -X sourcedir/ root@10.10.10.5:/remote/directory

Rsync switches explained:

• -a – Archive mode
• -z – Compress the data during transfer
• -A – Preserve – ACL (permissions)
• -X – Preserve extended attributes (date timestamp)

This command shows the total count of directories and files within a specified directory:

ls -1R directory/ | wc -l