Dianseh searching something ...

How To Integrate HTB-tools with Squid + ZPH (ver. 2)

noreply@blogger.com (Dianse H) — Mon, 25 Aug 2008 04:48:34 PDT

This section about howto integrate squid + zph + htb-tools on my slackware 12.0. What different ver.1 and ver.2 ?
User can't using q_show to monitoring cache hit from squid in ver.1
User will be seeing Cache_HIT as additional class in q_show result for ver.2

Here the steps:

Assumption : User already have squid + zph + htb-tools installed.
squid-2.7Stable4 (zph_local 0x30 included)
HTB-tools-0.3.0a

1. I've replace original /sbin/q_parser with my new q_parser
2. Inserting several lines inside eth1-qos.conf (interface for LAN)

   #---this lines put on the top -----
class Cache_HIT {
bandwidth 10000;
limit 10000;
burst 2;
priority 1;
};

# --- LAN Rules ---
# make your own rule

3. Generate your config with q_parser and apply on system
root@dianseh# q_parser eth1 100000 100000 /etc/htb/eth1-qos.conf > /usr/local/bin/eth1-qos.sh
root@dianseh# chmod +x /usr/local/bin/eth1-qos.sh
root@dianseh# /usr/local/bin/eth1-qos.sh

or

root@dianseh# /sbin/htb eth1 stop
root@dianseh# /sbin/htb eth1 start

5. Monitoring q_show
root@dianseh# /sbin/htb eth1 stats

the picture shown users who get HIT from squid have 6mbps of 10mbps guarantee.

Note :
Tested on Slackware 12.0 and working properly. What about you?

references :
1.http://www.vivaolinux.com.br/perguntas/
2.http://google.com

Thanks to Mr'Ipung who asked me todo.

How To Integrate HTB-tools with Squid + ZPH (ver. 1)

noreply@blogger.com (Dianse H) — Mon, 25 Aug 2008 02:40:18 PDT

I'm goin to tell you my search result @ google that i've implemented on my friend's server. It begins when my friend has asked me to integrate Squid + zph with HTB-tools in same machine.
"3 In One, no need many servers for warnet laaaah" as he said.

This time it's about Linux Ubuntu not Slackware as usual.

Illustration :

1. Internet <> Linux <> Lan

2. Linux as gateway, Proxy and Shaper server.
O/s : Ubuntu
Proxy : squid-2.7.STABLE4 with ZPH included
Limiter : HTB-Tools
Kernel : 2.6.21

3. HTB has been installed on System.

My experience begins at HTB with Squid+zph integration.

Steps :

1. Extract and Install Squid 2.7. How to install for squid 2.6 can found at here. Edit squid.conf and insert these line below.
zph_mode tos
zph_local 0x30

2. Installing HTB-tools and make your own rule to shape LAN's ip.

3. Generate htb config eg. eth1-qos.conf
root@dianseh# q_parser eth1 100000 100000 /etc/htb/eth1-qos.conf > /usr/local/bin/eth1-qos.sh
root@dianseh# chmod +x /usr/local/bin/eth1-qos.sh

4. Edit eth1-qos.sh
----find this line---
tc qdisc add dev eth0 parent 1;0x10 handle 0x10: pfifo limit 5
----insert these line----
tc class add dev eth0 parent 1;1 classid 1;0x15 htb rate 10Mbit
tc filter add dev eth0 parent 1;0 protocol ip prio 1 u32 match ip protocol 0x6 0xff match ip tos 0x30 0xff flowid 1;15

5. Excute eth1-qos.sh to starting.
6. Put it into startup script
7. Done.

Please tell me if any additional information or missconfiguration.


Good Luck



References :

1. squid + zph

2. http://zph.bratcheda.org/eg_tos_marking.html

3. htb-tools

Missing Link on Detik dot Com

noreply@blogger.com (Dianse H) — Wed, 13 Aug 2008 04:55:04 PDT

Today about 9:24 I've tried to open some link url on detik.com and got blank page. That page about "langkah jitu menghindari spam "

Don't know why, but still get blank page until now.

[update] resolve

Notes for Wireless Client Mode

noreply@blogger.com (Dianse H) — Wed, 20 Aug 2008 18:47:56 PDT

The IEEE 802.11 standard limitation makes it impossible for wireless cards in station mode to work as expected when bridged. That means that if you need to create a bridge, you should not use station mode on that machine. In case you need a bridge on a wireless station, use station-wds mode (may only be used in the AP supports WDS). Bridging on the AP side works fine. (mikrotik docs).

Someone have different opinion ?

SSH Tunnel Using Putty

noreply@blogger.com (Dianse H) — Wed, 20 Aug 2008 18:51:04 PDT

How to make a secure tunnel from your personal computer using SSH. It's compatible with your ssh client software like putty.

The step is :
1. Lauch your putty. We'll try insert code on cmd console.
"putty -D 3128 -C user@server.ip.com"

2. Set your proxy on Internet Explorer options using Socks proxy. "Localhost" for proxy address, and 3128 for Port number.

3. Done! Starting your browser using Sock Proxy and make your surf anonymously.

Note :
-D options will create dynamic port on your localhost / personal pc.
-C options requests compression of all data. Compression is desirable on modem lines and other slow connections, but will only slow down things on fast networks.

Let me know if you are done.

Good Luck.

Reference :
man ssh, google.com, Putty document

How To Limit New Incoming Connections With Iptables (Slackware)

noreply@blogger.com (Dianse H) — Wed, 20 Aug 2008 18:52:14 PDT

Linux box with iptables installed can apply this scenario.

Someday i have to add rule on my iptables to controlling any new incoming connections on my Slackware. This is needed because my server starting recived many unused incoming connection from outside. Flooding on my telnet port every minutes made fullfill my log. I need a smart way to manage it. Search from Google for a while and get some resources that can resolve my situation.

Let me share for you all.

Tested on Slackware 12.0, iptables v1.3.8 and work properly.

That is:

1. Ilustration :
We need rule to manage only 2 new connections allowed in 60 second entering our Linux system from same source address for some security reasons.

2. Code :
# iptables -I INPUT -p tcp --dport 23 -i eth1 -m state --state NEW -m recent --set
# iptables -I INPUT -p tcp --dport 23 -i eth1 -m state --state NEW -m recent --update \
--seconds 60 --hitcount 2 -j DROP

3. Brief Explanation :
- First line match for any new connection to port 23 from some source addresses and the rule will adding that source address into entry list Default variable.

- Line two will make linux box not available for new incoming connection on port 23 from source address who have make 2 new connections on port 23 in last 60seconds.

note :
Need more little work for some advanced rules. These iptables rule effective when applied to TCP Protocols. Other protocols has not been tested yet. I haven't found the right and effective method to test those rules other than tcp. When you did, please notify me about the results.

Good Luck, Selamat mencoba

Referensi ; google.com, iptables howto, debian firewall howto, etc
Thanks to Indonesian's Linuxer Comunity. Bravo!

How to add Swap on Running system (Linux Slackware)

noreply@blogger.com (Dianse H) — Wed, 20 Aug 2008 18:53:35 PDT

Swap needed by our system even not recomended for better runnings. Sometimes we have not enough our SWAP for some reason, so we need add more space SWAP for our Linux Box. The Question is "how to add swap on Running System without shutdown or restart?"

Tidak sedikit kita menemukan kasus dimana Linux Box kita yang sedang running kehabisan SWAP. Saya tidak akan menjelaskan kenapa itu terjadi, namun akan mencoba membagi informasi mengenai penambahan swap pada system linux yang sedang running (hasil pencarian dari google.com).

Tested on Slackware 12.0 and working properly.

That is :

1. Check your swap capacity

root@dianseh:~# free -m
total used free shared buffers cached
Mem: 2025 2021 4 0 158 453
-/+ buffers/cache: 1942 83
Swap: 3988 3988 0

2. Make sure the system have enough space Hardisk

root@dianseh:~# df -H
Filesystem Size Used Avail Use% Mounted on
/dev/hda2 21G 2.1G 19G 10% /
/dev/hda3 56G 949M 55G 2% /home

3. We'll alocated 1GB for SWAP from directory /home

root@dianseh:/home# dd if=/dev/zero of=swapfile bs=1024 count=1048576
1048576+0 records in
1048576+0 records out
1073741824 bytes (1.1 GB) copied, 30.0159 s, 35.8 MB/s

4. Please check swapfile in directory /home

root@dianseh:/home# ls -l
total 1049600
drwxr-x--- 18 root root 464 2008-07-07 17:57 /master
-rw-r--r-- 1 root root 1073741824 2008-07-10 14:19 swapfile

5. You need change swapfile's privilages for security reason

root@dianseh:/home# chmod 600 swapfile

6. Now, make swapfile active on your system

root@dianseh:/home# mkswap swapfile
Setting up swapspace version 1, size = 1073737 kB
no label, UUID=58de3638-3a1d-4a3d-a559-fcf40054367

7. This time how to get swapfile running on Linux Box.

root@dianseh:/home# swapon swapfile

8. We have 1GB added on system.

root@dianseh:~# free -m
total used free shared buffers cached
Mem: 2025 2021 4 0 158 453
-/+ buffers/cache: 1942 83
Swap: 3988 3988 1024

9. Finishing, need add one line entry to /etc/fstab :

/home/swapfile swap swap defaults 0 0

10. Done, Good Luck

What about your steps?

"Google search can help you find something"

reference :

1. Linux Howto

2. www.slackware.org

3. www.netadmintools.com

Script Auto SCP/SFTP On Linux

noreply@blogger.com (Dianse H) — Wed, 20 Aug 2008 19:01:43 PDT

We need a script that can send username / password in our Linux Box to transfer files through SFTP or SCP.

Requirement
1. OpenSSH
2. Expect

Illustrations :

We want to get "passwd" file on Server-A (192.168.1.1) and saved to /home/dianseh/passwd-Server-A on Server-B (192.168.1.2).

Server-B 192.168.1.2 ingin mengambil file di Server-A 192.168.1.1.
File Yang akan diambil dan disimpan adalah "passwd" dan di simpan pada direktori /home/dianseh pada server-B dengan nama file "passwd-Server-A"

The script is :

---- Script Start -----

#!/usr/bin/expect --
#spawn sftp dianseh@192.168.1.1:/etc/passwd /home/dianseh/passwd-Server-A
spawn scp dianseh@192.168.1.1:/etc/passwd /home/dianseh/passwd-Server-A
expect "dianseh@192.168.1.1's password:"
send "passwordnya\r"
expect "%$"

---- Script End -----

Note :
Let me know if it's working.

Good Luck

How To Install Cacti on Slackware

noreply@blogger.com (Dianse H) — Sat, 09 Aug 2008 02:34:32 PDT

This sections about mini how to install cacti on Slackware (12.0). Isone mung iki, Peace!

All done with simple step :

Packages was installed on my system:
1. Apache/2.2.4 (Unix) 2.PHP 5.2.5 (cli) enables : with-snmp, with-zlib, with-gd, enable-ucd-snmp-hack 3.Mysql-5.0.27 4.rrdtool-1.2.23-i486-1gds 5.Net-snmp-5.4
1. Extract the cacti distribution tarball on web directory
root@dianseh:# cd /var/www/htdocs/
root@dianseh:# tar zxvf cacti-version.tar.gz
root@dianseh:# mv cacti-version cacti
root@dianseh:# cd cacti

2. Created the user and group
root@dianseh:# groupadd cacti
root@dianseh:# useradd -g cacti cacti

3. Create the MySQL database, import the default database, create username and password for cacti:
root@dianseh:# mysqladmin --user=root -p create cacti
root@dianseh:# mysql cacti <> GRANT ALL ON cacti.* TO cactiuser@localhost IDENTIFIED BY 'yourpassword';
mysql> flush privileges;

4. Edit include/config.php and specify the database type, name, host, user and password for your Cacti configuration.
$database_type = "mysql";
$database_default = "cacti";
$database_hostname = "localhost";
$database_username = "cactiuser";
$database_password = "yourpassword";

5. Change directory permissions
root@dianseh# chown -R cacti:cacti rra/ log/

6. Add a line to your crontab
root@dianseh# su - cacti
cacti@dianseh# crontab -e
*/5 * * * * php /var/www/htdocs/cacti/poller.php > /dev/null 2>&1

cacti@dianseh# exit

7. Try to open full path url http://cactiserver/cacti/

All done with following those step carefully.

Begitu ceritanya, cacti saya sudah dapat berjalan dengan mengikuti langkah-langkah tersebut di atas.

Selamat mencoba, Good Luck

Reference :
1. http://www.cacti.net/downloads/docs/html/unix_configure_cacti.html

Howto remove ip address on Windows XP via "cmd"

noreply@blogger.com (Dianse H) — Sat, 09 Aug 2008 02:34:54 PDT

Let me share abot how to remove ip address on Windows XP via "CMD".

Saya akan berbagi cara mengenai penghapusan ip address pada windows XP melalui "cmd", bukan melalui control pannel seting ethernet.

Mengapa repot tidak menggunakan control panelnya saja? Karena saya ingin coba "different way".

The story is:

1.Check your ip configuration
c:\>ipconfig /all
Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetLink (TM) Fast Ethernet
Physical Address. . . . . . . . . : 00-1C-23-FA-A2-87
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 121.121.121.1
Subnet Mask . . . . . . . . . . . : 255.0.0.0
IP Address. . . . . . . . . . . . : 222.222.222.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0

2. Starting remove your ip (ex : 121.121.121.1)

c:\>netsh interface ip delete address "Local Area Connection" addr=121.121.121.1
c:\>ipconfig /all
Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetLink (TM) Fast Ethernet
Physical Address. . . . . . . . . : 00-1C-23-FA-A2-87
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 222.222.222.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0

3. Ip address 121.121.121.1 have been removed from system, Done.

Note : "Local Area Connection" is your interface name.

Good Luck

Listen to the music

noreply@blogger.com (Dianse H) — Sat, 09 Aug 2008 02:35:17 PDT

Starting daily working at office with listening the music. What kind of music ? This time the "dangdut" show. Next time can be different laaaa *LoL*