Fred Chu

Filezilla 3.5.3 连接VsFTPd TLS问题

Fred — Mon, 30 Jan 2012 02:48:55 +0000

Response arg: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher

/etc/vsftpd/vsftpd.conf

ssl_ciphers=HIGH

原因是

The default is DES-CBC3-SHA which seems that is not supported anymore by FileZilla

December 16, 2011 -- NFS quick howto for centos 5
September 19, 2011 -- thinkpad只插电源适配器会锁频
August 9, 2010 -- 苹果
August 6, 2010 -- 在Linux中把前台程序放到后台运行
July 8, 2010 -- 怎样在linux下修改ID3信息
July 7, 2010 -- 6个Linux性能监控命令行工具
May 26, 2010 -- Linux For Thinkpad 下投影仪使用
March 1, 2010 -- cpulimit – 限制进程的 CPU 占用率
February 25, 2010 -- Bash Shell Keyboard shortcuts
February 24, 2010 -- Logging In to Xen Console After Receiving “xenconsole: Could not open tty” Error

MySQL regex_replace Function

Fred — Wed, 18 Jan 2012 04:03:19 +0000

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

<pre>DELIMITER $$
CREATE FUNCTION `regex_replace`(pattern VARCHAR(1000),replacement VARCHAR(1000),original VARCHAR(1000))

RETURNS VARCHAR(1000)
DETERMINISTIC
BEGIN
DECLARE temp VARCHAR(1000);
DECLARE ch VARCHAR(1);
DECLARE i INT;
SET i = 1;
SET temp = '';
IF original REGEXP pattern THEN
loop_label: LOOP
IF i>CHAR_LENGTH(original) THEN
LEAVE loop_label;
END IF;
SET ch = SUBSTRING(original,i,1);
IF NOT ch REGEXP pattern THEN
SET temp = CONCAT(temp,ch);
ELSE
SET temp = CONCAT(temp,replacement);
END IF;
SET i=i+1;
END LOOP;
ELSE
SET temp = original;
END IF;
RETURN temp;
END$$
DELIMITER ;pre>

June 9, 2011 -- 一天总结
September 13, 2010 -- MySQL锁表机制分析
September 9, 2010 -- HOWTO: configure MySQL’s my.cnf file
September 8, 2010 -- MySQL性能优化21 – 使用随机函数产生采样
September 8, 2010 -- MySQL性能优化20 – ORDER BY 操作的优化
September 8, 2010 -- MySQL性能优化19 – GROUP BY 操作的优化
September 8, 2010 -- MySQL性能优化18 – 使用 GROUP BY WITH ROLLUP 改善统计性能
September 8, 2010 -- MySQL性能优化17 – INSERT操作的优化
September 8, 2010 -- MySQL性能优化16 – InnoDB 存储引擎
September 8, 2010 -- MySQL性能优化15 – MyISAM 存储引擎

FreeBSD PF 防火墙简单配置

Fred — Fri, 06 Jan 2012 07:39:14 +0000

1
2
3
4
5
6

oif="em0"
block in
pass out
pass in on $oif proto tcp to ($oif) port = 5631
pass in on $oif proto tcp from 192.168.0.0/24 to ($oif) port = 3128
pass in on $oif proto tcp to ($oif) port = 80

Random Posts

June 14, 2006 -- Song: 醉青楼
June 3, 2007 -- 专辑：王子 – 张栋梁
October 20, 2007 -- Hello & Goodbye
August 5, 2008 -- windows不能登录samba问题
April 8, 2007 -- Python Programming: An Introduction to Computer Science
May 1, 2007 -- 劳动节快乐～
September 8, 2010 -- MySQL性能优化7 – 索引选择性
November 10, 2005 -- 在Wordpress中发表日志后可接受更新消息的服务器
September 22, 2008 -- 恢复Windows系统音频服务
November 27, 2010 -- PHP组合排列数组函数

Gentoo emerge 更新系统方法

Fred — Tue, 27 Dec 2011 11:42:23 +0000

更新Portage树
# emerge --sync
更新系统
# emerge --update --deep --newuse world
移除依赖包
# emerge --depclean
# revdep-rebuild

September 19, 2011 -- thinkpad只插电源适配器会锁频
November 26, 2008 -- 你应该尝试的高级Linux系统
September 22, 2006 -- Slackware or Gentoo?

小心重庆美联英语的注册金骗局

Fred — Tue, 20 Dec 2011 08:49:19 +0000

上周末去重庆观音桥的美联英语咨询情况，结果被里面的要求交什么注册金，300元（因为我只带了300元）。但我第二天回来在Google、百度上搜索他们情况后发现并不是我理想中的那样。当我提到退款时，就说不能退的啦。我立马打12315电话。我说明情况之后，重庆12315的工作人员，只问了一句“他是培训机构吗?”。我说“是”。“那你打教委的电话”，“请问教委的电话是多少呢？”。“你自己打114查询啊”。

……

天啊，这也叫便民？难道真把我们当便民了？当然我没有打教委的电话，说实话，我是第一次打12315在我心中一直是能够为消费者办事的电话，结果呢？我已经对这些所谓的“服务”失去信心了。以后还是小心点算了吧。

让我们来看看一些有趣的东西吧：

『重庆』美联英语是骗子啊！！同学们千万不要上当啊来自天涯论坛
美联国际英语霸王条款:扣除1900元注册费不可退来自重庆晨报 (这个人居然交了1900注册金，到底是300还是1900啊，就没政府部门管管这些乱收费的英语培训机构吗)
我美联英语交的注册金我想退款我该怎么办
美联英语注册金可以退回吗
原创美联英语告诉我：没钱别学英语重庆美联英语解放碑店
『G4在线』广州美联英语，没签合同却不能退款
美联英语霸王条款欺骗学生，不退学费。
美联英语是骗子啊！！同学们千万不要上当啊_重庆_天涯社区

更多相关信息请看留言。

Random Posts

September 21, 2010 -- 更改Linux启动磁盘检测频率
October 20, 2005 -- Google推出在线RSS阅读器
September 14, 2008 -- 如何理解 Web2.0
October 20, 2005 -- Why Olympic Champion loses gold at national games
November 9, 2005 -- OSWD.org的攻击？
October 21, 2006 -- Ubuntu in my life
May 13, 2006 -- Movie: My Girl And I
August 8, 2009 -- links for 2009-08-07
July 20, 2008 -- 我的第一篇博客
December 7, 2005 -- Bye-bye, SNDA

NFS quick howto for centos 5

Fred — Fri, 16 Dec 2011 07:57:26 +0000

NFS quick howto for centos 5

To use nfs successfully, you have to configure the server and the client. In this example, the client is 192.168.0.3 and the server is 192.168.0.1. The folder to be shared is /home/sharing, and to be mounted to /mnt on the client

On the server

Make directory that you want to use.

# mkdir /home/sharing

Edit /etc/exports, insert the client machine’s ip

# vi /etc/exports

Add this line:

/home/sharing 192.168.0.3/255.255.255.255(rw,sync)

Save

Edit /etc/hosts.allow

# vi /etc/hosts.allow

Add this line:

portmap: 192.168.0.0/255.255.255.0

Save

Start nfs and portmap

# /etc/init.d /nfs start
# /etc/init.d/portmap start

On the client

Start portmap

# /etc/init.d/portmap start

Mount the nfs folder

# mount 192.168.0.1:/home/sharing /mnt

Check /var/log/messages for any error that might occur

# tailf /var/log/messages

Use mount to check if the folder is mounted properly

# mount

This should be the output:

192.168.0.1:/home/sharing on /mnt type nfs (rw,addr=192.168.0.1)

Edit /etc/fstab to mount the shared folder on boot

# vi /etc/fstab

Add this line

192.168.0.1:/mnt/sdb1/backup /mnt nfs rw,hard,intr 0 0

Save

You can use 'man exports' to see the options available for /etc/exports

Linux Iptables Allow NFS Clients to Access the NFS Server

Configure NFS Services to Use Fixed Ports

However, NFS and portmap are pretty complex protocols. Firewalling should be done at each host and at the border firewalls to protect the NFS daemons from remote
access, since NFS servers should never be accessible from outside the organization. However, by default, the portmapper assigns each NFS service to a port dynamically at service startup time.

Dynamic ports cannot be protected by port filtering firewalls such as iptables. First, you need to configure NFS services to use fixed ports. Open /etc/sysconfig/nfs, enter:
# vi /etc/sysconfig/nfs
Modify config directive as follows to set TCP/UDP unused ports:

# TCP port rpc.lockd should listen on.
LOCKD_TCPPORT=lockd-port-number
# UDP port rpc.lockd should listen on.
LOCKD_UDPPORT=lockd-port-number
# Port rpc.mountd should listen on.
MOUNTD_PORT=mountd-port-number
# Port rquotad should listen on.
RQUOTAD_PORT=rquotad-port-number
# Port rpc.statd should listen on.
STATD_PORT=statd-port-number
# Outgoing port statd should used. The default is port is random
STATD_OUTGOING_PORT=statd-outgoing-port-numbe

Here is sample listing from one of my production NFS server:

LOCKD_TCPPORT=32803
LOCKD_UDPPORT=32769
MOUNTD_PORT=892
RQUOTAD_PORT=875
STATD_PORT=662
STATD_OUTGOING_PORT=2020

Save and close the files. Restart NFS and portmap services:
# service portmap restart
# service nfs restart
# service rpcsvcgssd restart

Update /etc/sysconfig/iptables files

Open /etc/sysconfig/iptables, enter:
# vi /etc/sysconfig/iptables
Add the following lines, ensuring that they appear before the final LOG and DROP lines for the RH-Firewall-1-INPUT chain:

-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -m state --state NEW -p udp --dport 111 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -m state --state NEW -p tcp --dport 111 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -m state --state NEW -p tcp --dport 2049 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24  -m state --state NEW -p tcp --dport 32803 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24  -m state --state NEW -p udp --dport 32769 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24  -m state --state NEW -p tcp --dport 892 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24  -m state --state NEW -p udp --dport 892 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24  -m state --state NEW -p tcp --dport 875 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24  -m state --state NEW -p udp --dport 875 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24  -m state --state NEW -p tcp --dport 662 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -m state --state NEW -p udp --dport 662 -j ACCEP

Save and close the file. Replace 192.168.1.0/24 with your actual LAN subnet /mask combo. You need to use static port values defined by /etc/sysconfig/nfs config file. Restart iptables service:
# service iptables restart

June 30, 2009 -- Linux VLM how to
November 25, 2008 -- Yellow Dog发布新版本
July 10, 2006 -- NFS服务器与客户端设置
January 30, 2012 -- Filezilla 3.5.3 连接VsFTPd TLS问题
September 19, 2011 -- thinkpad只插电源适配器会锁频
August 9, 2010 -- 苹果
August 6, 2010 -- 在Linux中把前台程序放到后台运行
July 8, 2010 -- 怎样在linux下修改ID3信息
July 7, 2010 -- 6个Linux性能监控命令行工具
May 26, 2010 -- Linux For Thinkpad 下投影仪使用

Web应用安全分析工具

Fred — Thu, 27 Oct 2011 06:06:04 +0000

http://sectools.org/web-scanners.html

October 20, 2011 -- HTML颜色图表
March 4, 2010 -- 微软SQL注入测试工具（ASP）
February 9, 2010 -- MSSQL Injection Cheat Sheet
February 9, 2010 -- Use nmap scan FTP server how to
August 18, 2008 -- 使用自由软件测试HTTP服务
August 2, 2008 -- 5 个充满想象力的 Web 调色板
April 14, 2008 -- Hello, Catalyst!
July 29, 2007 -- Web Development Toolbox: 120+ Web Development Resources
November 19, 2006 -- 11个网络声明的真实含义
September 21, 2006 -- Top 100 Network Security Tools 2006

Squid 2.7 通过域名反向代理多个服务器配置

Fred — Wed, 26 Oct 2011 09:12:47 +0000

visible_hostname squid1.abc.com

#设定squid的主机名,如无此项squid将无法启动

http_port 80 accel vhost vport

#设定squid为accel加速模式,vhost必须要加.否则将无法将主机头转发至后端服务器,访问时就会出现无法找到主机头的错误

cache_peer 192.168.1.88 parent 80 0 no-query originserver name=contentchina

cache_peer 192.168.1.88 parent 80 0 no-query originserver name=bbs

cache_peer 192.168.1.1 parent 80 0 no-query originserver name=ihompy

#定义不同的父节点,将节点设为no-query以及originserver说明这些节点是实际服务器

cache_peer_domain contentchina aaa.abc.com

cache_peer_domain bbs bbb.abc.com

cache_peer_domain ihompy ccc.abc.com

#设定不同域名转发到不同的cache_peer上,如果没有这项.不同域名的域名可能被分发到同一台服务器上.

acl all src 0.0.0.0/0.0.0.0

no_cache deny all

http_access allow all

#允许所有客户端访问

cache_log /var/log/squid/cache.log

#记录日志

#***********ACL存取控制*************

#acl QueryString url_regex .php?

#***********缓冲存取控制*************

#no_cache deny QueryString

#不对符合QueryString的ACL内容进行缓冲

#***********性能优化配置*************

maximum_object_size 320010 KB

#大于此容量的对象将不会被保存在磁盘上,默认大小是4M,如果squid服务器用于缓冲flash等大型文件,建议将此值变大.否则过大的文件在下次重启后将需要重新获取

maximum_object_size_in_memory 100 KB

#最大位于内存中的对象的大小,默认大小是8K,如果服务器内存很大.可以适当提高此值的大小,建议根据网站的80%图片的大小来定.或者根据WEB服务器实际存取文件中最常访问的文件大小来定制

#***********其他可选配置*************

#dns_nameservers 10.0.0.1 192.172.0.4

#配置DNS服务器地址.获取后端时将从此dns获取IP地址

#cache_mgr ggg_g@tom.com

#在错误日志中出现的webmaster地址.

September 27, 2009 -- Squid缓存PHP页面方法
September 27, 2009 -- Squid对访问特定域名的验证
September 18, 2009 -- Don’t cache this, squid !
July 22, 2008 -- PHP配合Squid缓存动态页面Header写法
April 9, 2008 -- PHP header work with Squid cache server
April 6, 2008 -- Squid freenode helper!

HTML颜色图表

Fred — Thu, 20 Oct 2011 06:34:46 +0000

http://fred.oracle1.com/~fred/pages/colors.html

做网站配色的好工具。

August 2, 2008 -- 5 个充满想象力的 Web 调色板
October 27, 2011 -- Web应用安全分析工具
October 22, 2008 -- 10+设计资源和灵感的必备网站
August 18, 2008 -- 使用自由软件测试HTTP服务
April 14, 2008 -- Hello, Catalyst!
July 29, 2007 -- Web Development Toolbox: 120+ Web Development Resources
November 19, 2006 -- 11个网络声明的真实含义
July 17, 2006 -- A free new web template
December 19, 2005 -- gimp技巧：怎么制作水晶按钮

rsync 增量备份

Fred — Thu, 29 Sep 2011 06:19:30 +0000

rsync --force --ignore-errors --delete --delete-excluded --exclude "logs/" --exclude "umslog/" 192.168.254.221::www-back /Datas/Backup/Rsync-YuKuai/app-daily --log-file=/Datas/Backup/Rsync-YuKuai/logs/`date +%Y-%m-%d`.log -azv -backup --backup-dir=/Datas/Backup/Rsync-YuKuai/app-daily-arch/`date +%Y-%m-%d`

Random Posts

December 19, 2005 -- gimp技巧：怎么制作水晶按钮
September 12, 2011 -- Cloud computing software
July 8, 2007 -- 全球国家/地区级域名地理分布情况图
December 20, 2011 -- 小心重庆美联英语的注册金骗局
October 20, 2005 -- 挑战微软,OpenOffice 2.0正式版下载
October 20, 2005 -- Why Olympic Champion loses gold at national games
January 27, 2007 -- links for 2007-01-27
March 2, 2010 -- Drupal的theme开发
July 24, 2008 -- 几个Python爬虫库
March 25, 2007 -- Japan moto girls

Fred Chu

Filezilla 3.5.3 连接VsFTPd TLS问题

Related Posts

MySQL regex_replace Function

Related Posts

FreeBSD PF 防火墙简单配置

Random Posts

Gentoo emerge 更新系统方法

Related Posts

小心重庆美联英语的注册金骗局

Random Posts

NFS quick howto for centos 5

NFS quick howto for centos 5

Linux Iptables Allow NFS Clients to Access the NFS Server

Configure NFS Services to Use Fixed Ports

Update /etc/sysconfig/iptables files

Related Posts

Web应用安全分析工具

Related Posts

Squid 2.7 通过域名反向代理多个服务器配置

Related Posts

HTML颜色图表

Related Posts

rsync 增量备份

Random Posts