Archive for the ‘Server’ Category

Backup & Restore CactiEZ

Untuk backup sudah ada prosedurnya.  Adapun scriptnya bisa dilihat di  /var/www/backup.sh

Yang menjadi persoalan adalah bagaimana caranya merestore data yang sudah ada ke dalam instalasi baru.  Artinya meskipun baru di install data-data lama tetap bisa dipertahankan.
Sebenarnya sih tampilan cacti sekarang grafik muncul dan benar, cuma fontnya kagak ada yg keliatan.  Coba ota-atik path ga ada perubahan.  Ganti font ttf sama saja.
Jurus terakhir ya backup data.  Install baru dan restore.

Step restore:

  1. Copy isi folder /var/www/html/rra kedalam folder yang sama pada instal-an baru
  2. backup database
    mysqldump -uroot –opt cacti> cacti-backup.sql
    mysqldump -uroot –opt syslog> syslog-backup.sql
  3. Restore database cacti dari hasil ngedump
    # mysql -uroot cacti < cacti.sql
  4. Coba lihat hasilnya…  Hehe.. font2 muncul lagi

Wednesday, November 5th, 2008

UTM atau Firewall?

UTM (Unified Threat Management) adalah term yang digunakan untuk menjelaskan network firewall yang memiliki banyak feature dan di bundle menjadi satu. Adapun feature yang ada pada UTM diantaranya adalah:

  • Email filtering
  • Anti Virus
  • IDS (Intrusion Detection System)
  • IPS (Intrusion Prevention System)
  • Web content filtering.

Selanjutnya simpulkan sendiri

Thursday, October 16th, 2008

Apache2, PHP5 & MySQL5 with Yum on CentOS

This guide shows you how to install Apache2, PHP5 and MySQL5 on a CentOS 5+ server with Yum.

Please note that this guide assumes you know basic shell commands, however all steps are documented.

Our first step, is fairly simple. Once you’ve connected to your server over SSH, use the following Yum command to install everything you need:

yum -y install httpd php mysql mysql-server php-mysql

This will take a few minutes to download (total package size is 16Mb)

Once its done Yum will say “Complete!” and you will be returned to shell.

Next, you need to set a MySQL root password. Without this, your MySQL server is open to attack, and it WILL happen! Use the following command (WITH QUOTES) to set your root password:

mysqladmin -u root password 'ENTER-PASSWORD-HERE'

Next we want to do additional security checks on MySQL by removing any other users that managed to get created, as well as removing the MySQL test database as that wont be needed!

mysql -u root -p
mysql> DROP DATABASE test;
mysql> DELETE FROM mysql.user WHERE user = '';
mysql> FLUSH PRIVILEGES;

Finally, we are going to set Apache & MySQL to run on startup. This is useful if your server has a power outage or needs to be rebooted as it will automatically restart Apache & MySQL for you.

  /sbin/chkconfig httpd on
  /sbin/chkconfig --add mysqld
  /sbin/chkconfig mysqld on
  /sbin/service httpd start
  /sbin/service mysqld start

To check everything worked, browse to the web servers directory (on CentOS its /var/www/html) and create a new file using NANO text editor called phpinfo.php (enter “nano phpinfo.php” to open the text editor). Enter the following code into that file to check PHP is working:

<php echo phpinfo(); ?>

All done :)

Thursday, September 4th, 2008

Fetchmail

Ngingetin aja biar ndak lupa

 

Monday, August 11th, 2008

Freeware Virtual Computer

Pasti sudah tahulah virtual computer.  Jika belum, pasti sudah kenal vmware, virtual pc atau mungkin lainnya?  Kalo belum ya coba cari tahu dulu di Om Google deh.

Vmware sebenarnya ok, cuma tidak gratis.  Padahal maunya yang gratis.  Ya sudah coba yang gratis deh yaitu:

  1. Virtual PC 2007 punya Microsoft
  2. Virtual Box
  3.  

Monday, July 21st, 2008

Linux VNC Server rasa KDE dan Gnome

Secara default, vnc server jika dipasang pada Linux akan running dibawah tvm.  Padahal ga asyik banget tuh tvm.  Kalah banget tampilannya dengan KDE ataupun Gnome.  Ya sudah mari kita coba vnc-nya ber-rasa KDE dan Gnome.

  1.  Edit ~/.vnc/xstartup
  2.  For KDE, replace "twm &" with "startkde &"
  3.  For Gnome, replace "twm &" with "exec gnome-session &"
  4.  Start a new server.

Note:

  • set password
    # vncpassword
  • Kill any existing VNC servers
    # vncserver -kill :1" where 1 is the display number.

Tuesday, April 29th, 2008

NOC, connection has been lost!

Sebuah pesan yang tidak pernah di harapkan muncul.  Karena jika pesan ini muncul berarti maju perang.

Sunday, April 27th, 2008

EyeOS

nGgak sengaja sih nemuin ini.  Awalnya googling cari-cari cpanel dan whm gratis.  Eh,malah akhirnya nemu eyeOS ini.

Gimana rasanya kalau dengan membuka web browser saja seolah-olah kita berada di depan komputer desktop dimana didalamnya sudah terdapat aplikasi Office (Word Processor, Spreadsheet, Presentations) Email Client, dan masih banyak lainnya.

Jika sebelumnya bingung harus menggunakan aplikasi dengan OS apa  macam Linux, Windows, Mac, dan lainnya.  Maka dengan eyeOS ini syaratnya adalah ada browser di komputer kita. Syarat kedua adalah ada jaringan entah LAN atau WAN dan satu lagi Web Server.

Satu orang satu desktop sepertinya menjadi hal yang sangat-sangat bisa dengan eyeOS ini.

Instalasinya cukup mudah dengan membacanya Anda pasti bisa eyeOS

Berikut adalah screenshoot dengan browser Firefox

Jadi… bisa dong gak bajakan?

Thursday, April 17th, 2008

Jam system di linux tidak sesuai harapan

Pusing juga nih, Centosku waktunya dan sesuai dengan waktu WIB.  Jika dilakukan setting manual dengan perintah "date MMDDhhmmyyyy"  maka beberapa saat akan berubah lagi menjadi ngaco.

Mari kita trace:

  1. Cek dengan command date
    [root@localhost ~]# date
    Wed Apr  9 00:21:04 CDT 2008
  2. Cek jam bios
    [root@localhost ~]# /sbin/hwclock
    Wed 09 Apr 2008 12:43:57 AM CDT  -0.312123 seconds

Wah ndak bener, di bios udah betul tetapi di sistem kok begitu.

Coba tambahkan perintah ini:

[root@localhost ~]# ln -sf ../usr/share/zoneinfo/Asia/Jakarta /etc/localtime

Dan kita cek lagi :

[root@localhost ~]# date
Wed Apr  9 12:47:43 WIT 2008
[root@localhost ~]#

Sip sudah benar :)

 

Wednesday, April 9th, 2008

No-ip untuk IP Public Dynamic

Copy paste aja dari www.no-ip.com  biar tidak lupa kalo install lagi.

This file describes noip2, a second-generation Linux client for the
no-ip.com dynamic DNS service.

NEW:    This code will build and run on Solaris/Intel and BSD also.
    Edit the Makefile for Solaris and the various BSDs.
    For BSD users wanting to use a tun interface, see below.
    Let me know about any other changes needed for noip2 to
    operate correctly on your non-Linux OS.
    Mac OS X is a BSD variant.

Please read this short file before using noip2.

###########################################################################
HOW TO BUILD AN EXECUTABLE FOR YOUR SYSTEM

The command
    make
will build a binary of the noip2 client that will run on your system.

If you do not have ‘make’ installed and you have an i686 Linux machine
with libc6, a binary for i686 systems is located in the binaries
directory called noip2-Linux. Copy that binary to the build directory
  ‘cp binaries/noip2-Linux noip2′

The command
    make install
(which must be run as root) will install the various pieces to their
appropriate places.  This will ask questions and build a configuration
data file. 
See below if you can’t become root or can’t write in /usr/local/*.

###########################################################################
HOW TO USE THE CLIENT WITHOUT READING THE REST OF THIS TEXT

Usual operation?
/usr/local/bin/noip2 -C            configure a client
/usr/local/bin/noip2            run a client
/usr/local/bin/noip2 -S            display info about running clients
/usr/local/bin/noip2 -D pid        toggle the debug state for client pid
/usr/local/bin/noip2 -K pid        terminate client pid

Have more than one internet access device?
/usr/local/bin/noip2 -M -c file        start additional instances

###########################################################################
HOW TO START THE CLIENT

The noip2 executable can be run by typing /usr/local/bin/noip2

If you want it to run automatically when the machine is booted, then
place the following script in your startup directory. (/etc/init.d/rcX.d
or /sbin/init.d/rcX.d or ???)

    #######################################################
    #! /bin/sh
    # . /etc/rc.d/init.d/functions    # uncomment/modify for your killproc
    case "$1" in
        start)
        echo "Starting noip2."
        /usr/local/bin/noip2
        ;;
        stop)
        echo -n "Shutting down noip2."
        killproc -TERM /usr/local/bin/noip2
        ;;
        *)
        echo "Usage: $0 {start|stop}"
        exit 1
    esac
    exit 0
    #######################################################

Where the ‘X’ in rcX.d is the value obtained by running the
following command
    grep initdefault /etc/inittab | awk -F: ‘{print $2}’

Killproc can be downloaded from ftp://ftp.suse.com/pub/projects/init
Alternatively, you can uncomment the line after #! /bin/sh

If you have a recent RedHat version, you may want to use the startup script
supplied by another user.  It’s in this package called redhat.noip.sh
It may need some modification for your system.

There is a startup script for Debian called debian.noip2.sh.
It also has been supplied by another user and is rumored to fail in some
situations.

Another user has supplied a proceedure to follow for MAc OS X auto startup.
It’s called mac.osx.startup.  Mac users may wish to read that file.

Here is a script which will kill all running copies of noip2.
  #!/bin/sh
  for i in `noip2 -S 2>&1 | grep Process | awk ‘{print $2}’ | tr -d ‘,’`
  do
    noip2 -K $i
  done
These four lines can replace ‘killproc’ and ’stop_daemon’ in the other scripts.

If you are behind a firewall, you will need to allow port 8245 (TCP) through
in both directions.
#######################################################################

IMPORTANT!!  Please set the permissions correctly on your executable.
If you start noip2 using one of the above methods, do the following:
chmod 700 /usr/local/bin/noip2
chown root:root /usr/local/bin/noip2
If you start noip2 manually from a non-root account, do the chmod 700 as
above but chown the executable to the owner:group of the non-root account, and
you will need to substitute your new path if the executable is not in
/usr/local/bin.

###########################################################################
SAVED STATE

Noip2 will save the last IP address that was set at no-ip.com when it ends. 
This setting will be read back in the next time noip2 is started. The
configuration data file must be writable for this to happen!  Nothing
happens if it isn’t, the starting 0.0.0.0 address is left unchanged.
If noip2 is started as root it will change to user ‘nobody’, group
‘nobody’.  Therefore the file must be writeable by user ‘nobody’ or
group ‘nobody’ in this case!

###########################################################################
BSD USING A TUN DEVICE

Recent BSD systems will use getifaddrs() to list ALL interfaces.  Set the
‘bsd_wth_getifaddrs’ define in the Makefile if using a version of BSD
which supports getifaddrs() and ignore the rest of this paragraph.
Mac OS X users should have a versdion of BSD which supports getifaddrs().
Otherwise set the ‘bsd’ define.
The ‘bsd’ setting will not list the tun devices in BSD.  Therefore a tun
device cannot be selected from the menu.  If you want to use a tun device
you will need to edit the Makefile and change the line
    ${BINDIR}/${TGT} -C -Y -c /tmp/no-ip2.conf
to
    ${BINDIR}/${TGT} -C -Y -c /tmp/no-ip2.conf -I ‘your tun device’

###########################################################################
COMMAND LINE ARGUMENTS WHEN INVOKING THE CLIENT

The client will put itself in the background and run as a daemon.  This
means if you invoke it multiple times, and supply the multiple-use flag,
you will have multiple instances running.

If you want the client to run once and exit, supply the ‘-i IPaddress’
argument.  The client will behave well if left active all the time even on
intermittent dialup connections; it uses very few resources.

The actions of the client are controlled by a configuration data file.  It is
usually located in /usr/local/etc/no-ip2.conf, but may be placed anywhere if
the ‘-c new_location’ parameter is passed on the startup line.

The configuration data file can be generated with the ‘-C’ parameter.

There are some new command line arguments dealing with default values in the
configuration data file.  They are  -F, -Y and -U.

The interval between successive testing for a changed IP address is controlled
the ‘-U nn’ parameter.  The number is minutes, a minimum of 1 is enforced
by the client when running on the firewall machine, 5 when running behind
a router/firewall.  A usual value for clients behind a firewall is 30.
One day is 1440, one week is 10080, one month is 40320, 41760, 43200 or 44640.
One hour is left as an exercise for the reader :-)

The configuration builder code will allow selection among the hosts/groups
registered at no-ip.com for the selected user.  The ‘-Y’ parameter will
cause all the hosts/groups to be selected for update.

Some sites have multiple connections to the internet.  These sites confuse
the auto NAT detection.  The ‘-F’ parameter will force the non-NAT
or "firewall" setting.

The client can be invoked with the ‘-i IPaddress’ parameter which will force
the setting of that address at no-ip.com.  The client will run once and exit.

The -I parameter can be used to override the device name in the configuration
data file or to force the supplied name into the configuration data file while
it is being created.  Please use this as a last resort!

The ‘-S’ parameter is used to display the data associated with any running
copies of noip2.  If nothing is running, it will display the
contents of the configuration data file that is selected. It will then exit.

The ‘-K process_ID’ parameter is used to terminate a running copy of noip2.
The process_ID value can be obtained by running noip2 -S.

The ‘-M’ parameter will permit multiple running copies of the noip2 client.
Each must have it’s own configuration file.  Up to 4 copies may run
simultaneously.

All errors and informational messages are stored via the syslog facility.
A line indicating a successful address change at no-ip.com is always
written to the syslog. The syslog is usually /var/log/messages.

If the client has been built with debugging enabled, the usual state, the ‘-d’
parameter will activate the debug output.  This will produce a trace of the
running program and should help if you are having problems getting the
connection to no-ip.com established.  All errors, messages and I/O in both
directions will be displayed on the stderr instead of syslog.
The additional ‘-D pid’ parameter will toggle the debug state of a running
noip2 process.  This will not change where the output of the process is
appearing; if it was going to the syslog, it will still be going to the syslog.

One final invocation parameter is ‘-h’.  This displays the help screen as
shown below and ends.                     

USAGE: noip2 [ -C [ -F][ -Y][ -U #min]][ -c file]
        [ -d][ -D pid][ -i addr][ -S][ -M][ -h]

Version Linux-2.x.x
Options: -C               create configuration data
         -F               force NAT off
         -Y               select all hosts/groups
         -U minutes       set update interval
         -c config_file   use alternate data path
         -d               increase debug verbosity
         -D processID     toggle debug flag for PID
         -i IPaddress     use supplied address
         -I interface     use supplied interface
         -S               show configuration data
         -M               permit multiple instances
         -K processID     terminate instance PID
         -h               help (this text)

###########################################################################
HOW TO CONFIGURE THE CLIENT

The command
    noip2 -C
will create configuration data in the /usr/local/etc directory.
It will be stored in a file called no-ip2.conf.

If you can’t write in /usr/local/*, or are unable to become root on
the machine on which you wish to run noip2, you will need to include
the ‘-c config_file_name’ on every invocation of the client, including
the creation of the datafile.  Also, you will probably need to put the
executable somewhere you can write to.  Change the PREFIX= line in the
Makefile to your new path and re-run make install to avoid these problems.

You will need to re-create the datafile whenever your account or password
changes or when you add or delete hosts and/or groups at www.no-ip.com
Each invocation of noip2 with ‘-C’ will destroy the previous datafile.

Other options that can be used here include ‘-F’ ‘-Y’ -U’

You will be asked if you want to run a program/script upon successful update
at no-ip.com.  If you specify a script, it should start with #!/bin/sh or
your shell of choice.  If it doesn’t, you will get the ‘Exec format error’
error.  The IP address that has just been set successfully will be delivered
as the first argument to the script/program.  The host/group name will be
delivered as the second argument.

Some machines have multiple network connections.  In this case, you will be
prompted to select the device which connects to outside world. The -I flag
can be supplied to select an interface which is not shown.  Typically, this
would be one of the pppx interfaces which do not exist until they are active.

The code will prompt for the username/email used as an account identifier
at no-ip.com.  It will also prompt for the password for that account.

The configuration data contains no user-serviceable parts!!

IMPORTANT!!  Please set the permissions correctly on the configuration data.
chmod 600 /usr/local/etc/no-ip2.conf.
chown root:root /usr/local/etc/no-ip2.conf.
If you start noip2 manually from a non-root account, do the chmod as
above but chown the no-ip2.conf file to the owner:group of the non-root
account.  Make sure the directory is readable!

The program will drop root privileges after acquiring the configuration data
file.
###########################################################################

I would like to see this README.FIRST text translated to other languages. 
If you can convert this file from English to another language, please send
the translated file to me.  Thank you.

###########################################################################

Bugs should be reported to johna@onevista.com

Email me if you need help, but be aware I have extensive spam filtering.
If your mailserver is blocked, send your message thru no-ip support.
Don’t send mail in html; no one will see it. 

You can make a trace file and examine it for error messages. 
Here’s how to do that.  
Type:     script noip2.out
Type:     ’your noip command line with the -d parameter added’
Type:     exit
Examine the file noip2.out.  Send it to me if you’re still puzzled.

    johna@onevista.com  January 2004

Friday, February 29th, 2008