Kamlesh Gosavi

How to share internet over WiFi from wvdial Adhoc

2012-10-17T03:36:00.000-07:00

-->
You must separate eth1 and wlan0 and configure DHCP/STATIC IP accordingly for client.

/etc/network/interfaces:

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
 address 192.168.1.15
 netmask 255.255.255.0
 gateway 192.168.1.1

auto wlan0
iface wlan0 inet static
 address 10.0.1.15
 netmask 255.255.255.0

Configure following in hostapd /etc/hostapd/hostapd.conf
with WPA authentication options for wireless users

01 interface=wlan0

02 driver=nl80211

03 ssid=dontMessWithVincentValentine

04 hw_mode=g

05 channel=6

06 macaddr_acl=0

07 auth_algs=1

08 ignore_broadcast_ssid=0

09 wpa=3

10 wpa_passphrase=KeePGuessinG

11 wpa_key_mgmt=WPA-PSK
(Try changing encryption method if u can see the wirless connection but cant browse to the WEP encryption)

12 wpa_pairwise=TKIP

13 rsn_pairwise=CCMP

sudo hostapd /etc/hostapd/hostapd.conf

Configure Postfix, Dovecot IMAP/POP3, Fetchmail server on ubuntu 10.04

2012-03-12T00:44:00.000-07:00

The below is the material that help me to configure Postfix, Dovecot IMAP/POP3, Fetchmail on Ubuntu 10.04 server

PostfixVirtualMailBoxClamSmtpHowto

Contents

Introduction

In this setup you will be running a small to medium sized email server with Postfix virtual mailboxes for Separate domains and non-Linux Accounts. I do not intend teach you basic stuff with Postfix here. If you are new to Postfix please work on my PostfixBasicSetupHowto to understand basics and proceed with this howto. Also I will tell you howto integrate with ClamSMTP, an SMTP filter for Postfix and other mail servers that checks for viruses using the ClamAV anti-virus software. It aims to be lightweight, reliable, and simple and easy to configure

Example Setup

In this howto I assume that your are going to host mails for two example domains. Namely domain1.com and domain2.com. Be ready to replace these with your actual domains.

Install Postfix

To install postfix
Install the postfix package.
Install mailx package for use as command line mail utility program.

Setting Postfix Support for Maildir-style Mailboxes

Maildir is a format for an e-mail spool that does not require file locking to maintain message integrity because the messages are kept in separate files with unique names. A Maildir is a directory (often named Maildir) with three subdirectories named tmp, new, and cur. The subdirectories should all reside on the same filesystem.

Please find out more about Maildir here

 sudo  vi /etc/postfix/main.cf

Add the following code segment:

home_mailbox = Maildir/

Remove the Line mailbox_command = procmail -a "$EXTENSION". We are not going to use it.
Restart Postfix to make changes effect.

sudo  /etc/init.d/postfix restart

Postfix virtual Mailboxes for Separate Domains and Non-Linux Accounts

As a system hosts more and more domains and users, it becomes less desirable to give every user their own Linux system account.

With the Postfix virtual mailbox delivery agent, every recipient address can have its own virtual mailbox. Unlike virtual alias domains, virtual mailbox domains do not need the translation from each recipient addresses into a different address, and owners of a virtual mailbox address do not need to have a Linux system account.

The Postfix virtual mailbox delivery agent looks up the user mailbox pathname, uid and gid via separate tables that are searched with the recipient's mail address. Maildir style delivery is turned on by terminating the mailbox pathname with "/".

Look at the following figure and it will be our directory structure for mailboxes.

I suggest you to transfer all domains into virtual mailboxes. Even if you have setup postfix with one domain , we will make that domain a virtual domain. Actually you do not need to do this ,but doing this way you will have well organized mail system , and no need to avoid this. Having Postfix host one real domain and the rest virtual means that you will always need to configure Postfix twice: once for each type of domain.

To do that, let's change our myhostname line in main.cf to read:

myhostname = localhost

Note: Using localhost as myhostname can cause problems since this variable is used in the EHLO message the server sends. If you are unable to send messages due to

550 Access denied - Invalid HELO name (See RFC2821 4.1.1.1) (in reply to MAIL FROM command))

then this is the cause.

Create Virtual Mailbox Owner

In our setup all virtual mailboxes are owned by a fixed uid and gid 5000. If this is not what you want, specify lookup tables that are searched by the recipient's mail address.

To create virtual mailbox group:

sudo groupadd -g 5000 vmail

To create virtual mailbox owner:

sudo useradd -m -u 5000 -g 5000 -s /bin/bash vmail

Open main.cf

sudo vi /etc/postfix/main.cf

Setup Postfix to Use Virtual Mailboxes

Then add the following code segment to main.cf

virtual_mailbox_domains = /etc/postfix/vhosts
virtual_mailbox_base = /home/vmail
virtual_mailbox_maps = hash:/etc/postfix/vmaps
virtual_minimum_uid = 1000
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000

In the first line, we're using a text file called vhosts. You can actually name this anything you want. Inside this text file will be a simple one-column list of all the domains you are hosting. For example, add your all domains there.

sudo vi /etc/postfix/vhosts

Add the the following codes:

domain1.com
domain2.com

This is my example use your own domains here.

The next line virtual_mailbox_base specifies the base directory where we shall store all of our mail. Again, you can choose anything you want. In our case it will be our '''vmail''' owners's home directory /home/vmail
The third line points to a text file I called '''vmaps'''. This is a two column text file. The first column specifies a virtual email address. The second column specifies that persons mailbox location. Just like with real domain hosting, if you specify a / at the end of the location, it becomes Maildir format. If not, it is mbox. Any way in this howto we use Maildir format.

Setup this file as in this example:

sudo vi /etc/postfix/vmaps

Format of this file should look like:

info@domain1.com  domain1.com/info/
alias@domain1.com  domain1.com/info/
sales@domain1.com  domain1.com/sales/
info@domain2.com  domain2.com/info/
sales@domain2.com  domain2.com/sales/

Note: To make an alias, map to same folder as another user.

Convert vmaps into a hash file by running:

sudo postmap /etc/postfix/vmaps

Remember to execute the above command every time when you add new map.

Restart Postfix to make changes effect.

sudo  /etc/init.d/postfix restart

My example config look like the following

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

myhostname = localhost
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = $myhostname
mynetworks = 127.0.0.0/8, 10.0.0.0/24
mailbox_size_limit = 0
home_mailbox = Maildir/
virtual_mailbox_domains = /etc/postfix/vhosts
virtual_mailbox_base = /home/vmail
virtual_mailbox_maps = hash:/etc/postfix/vmaps
virtual_minimum_uid = 1000
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
recipient_delimiter = +
inet_interfaces = all

Test Virtual Mailbox Setup

Remember that the directory structure for a particular user is created when he gets his first mail.

Send a mail to info@domain1.com

In a terminal you can type:

mail info@domain1.com

Check the mailbox

cd /home/vmail/domain1/info/new
ls

You see a mail file there. If so, Cheers!!!, you have done it.

Setup Non-Linux Accounts

Now it's time to work on the non-unix accounts.
There are several popular techniques to do this using services such as OpenLDAP or MySQL and mixing that with Courier IMAP. We won't be using any of those. Instead, we're going to be using something much more simple: plain text files.
In order to do this, we'll be using Dovecot. If you've never heard of it, you will now. Dovecot is extremely lightweight, flexible, and from what the author says, secure.
Remember the following command will install Dovecot but removes Courier IMAP/POP3 which if you have installed already them. Take it easy ,let's continue to install it.

Install Dovecot IMAP/POP3 server

Install the following packages: dovecot-common dovecot-imapd dovecot-pop3d

Configure Dovecot

You need to setup the dovecot to work with our setup. If your are following my steps , the best is to backup your original dovecot config file and create a one for you getting a copy of my file which I will list here.
Let's backup original config file:

sudo mv /etc/dovecot/dovecot.conf /etc/dovecot/dovecot.conf.orig

Create a new config file and copy my config file into it:

sudo vi /etc/dovecot/dovecot.conf

Copy the following code segment and save the file:

base_dir = /var/run/dovecot/
protocols = imap pop3
disable_plaintext_auth = yes
shutdown_clients = yes
log_path = /var/log/dovecot
info_log_path = /var/log/dovecot.info
log_timestamp = "%Y-%m-%d %H:%M:%S "
ssl_disable = yes
#In Ubuntu 10.04 Lucid Lynx: ssl = no
login_dir = /var/run/dovecot/login
login_chroot = yes
login_user = dovecot
login_greeting = Dovecot ready.
mail_location = maildir:/home/vmail/%d/%n
mmap_disable = no
valid_chroot_dirs = /var/spool/vmail
protocol imap {
  login_executable = /usr/lib/dovecot/imap-login
  mail_executable = /usr/lib/dovecot/imap
}
protocol pop3 {
  login_executable = /usr/lib/dovecot/pop3-login
  mail_executable = /usr/lib/dovecot/pop3
  pop3_uidl_format = %08Xu%08Xv
}
auth_executable = /usr/lib/dovecot/dovecot-auth
auth_verbose = yes
auth default {
  mechanisms = plain cram-md5
  passdb passwd-file {
    args = /etc/dovecot/passwd
  }
  userdb passwd-file {
    args = /etc/dovecot/users
  }
  user = root
}

Note: If you are using/testing with Dapper Drake (Ubuntu 6.06), please use Dovecot config file for Dapper

Most of the above config lines are pretty self-explanatory . Few of them I need to explain for your understanding.

The line "mail_location = maildir:/home/vmail/%d/%n" is particularly important. In our virtual hosting set up, the way we distinguish one user from another is to have them log in with their full email address. For example, when the email account is "info@domain1.com", Dovecot does some guessing on its end with your user name. If it just sees something like "info", it set's a variable called "%n"to "info". If it sees "info@domain1.com", it will split it up and set "%d" to domain1.com and "%n" to "info". Going off of that, if we replace the variables in this line , we get something like: maildir:/home/vmail/domain1.com/info
The lines "args = /etc/dovecot/passwd" and "args = /etc/dovecot/users" are similar /etc/passwd and /etc/shadow file.

The format of these files goes like this:
::

/etc/dovecot/users:
info@domain1.com::5000:5000::/home/vmail/domain1.com/:/bin/false::
/etc/dovecot/passwd:
info@domain1.com:$1$G/FqlOG5$Vj0xmc9fKY.UVr8OWr/7C1

The 5000:5000 corresponds to the uid and gid of the "virtual" called vmail who owns all the mailboxes in the system . The home directory includes everything but the word before the @ in the email address.

Note: It is possible to use a single file for the users/passwd with a format as following:

/etc/dovecot/passwd:
info@domain1.com:$1$G/FqlOG5$Vj0xmc9fKY.UVr8OWr/7C1:5000:5000::/home/vmail/domain1.com/:/bin/false::

Create Dovecot Users

There are no commands like useradd and passwd to add users and passwords for our mail system. I will provide small and quick solution with a bash script.
Files:
/etc/dovecot/users - Similar to /etc/passwd
/etc/dovecot/passwd - Similar to /etc/shadow
/etc/postfix/vmaps - Map virtual users to mail directory (for postfix). If changes are made, use postmap /etc/postfix/vmaps && service postfix reload.

Scripts to Add and Delete Users

Create file:

sudo vi /usr/local/sbin/adddovecotuser

Add the following code segment and save the file:

#!/bin/sh
if [ ! $# = 1 ]
 then
  echo "Usage: $0 username@domain"
  exit 1
 else
  user=`echo "$1" | cut -f1 -d "@"`
  domain=`echo "$1" | cut -s -f2 -d "@"`
  if [ -x $domain ]
   then
    echo "No domain given\nUsage: $0 username@domain"
    exit 2
  fi
  echo "Adding user $user@$domain to /etc/dovecot/users"
  echo "$user@$domain::5000:5000::/home/vmail/$domain/$user/:/bin/false::" >> /etc/dovecot/users

  # Create the needed Maildir directories
  echo "Creating user directory /home/vmail/$domain/$user"
  # maildirmake.dovecot does only chown on user directory, we'll create domain directory instead
  if [ ! -x /home/vmail/$domain ]
   then
    mkdir /home/vmail/$domain
    chown 5000:5000 /home/vmail/$domain
    chmod 700 /home/vmail/$domain
  fi
  /usr/bin/maildirmake.dovecot /home/vmail/$domain/$user 5000:5000
  # Also make folders for Drafts, Sent, Junk and Trash
  /usr/bin/maildirmake.dovecot /home/vmail/$domain/$user/.Drafts 5000:5000
  /usr/bin/maildirmake.dovecot /home/vmail/$domain/$user/.Sent 5000:5000
  /usr/bin/maildirmake.dovecot /home/vmail/$domain/$user/.Junk 5000:5000
  /usr/bin/maildirmake.dovecot /home/vmail/$domain/$user/.Trash 5000:5000

  # To add user to Postfix virtual map file and relode Postfix
  echo "Adding user to /etc/postfix/vmaps"
  echo $1  $domain/$user/ >> /etc/postfix/vmaps
  postmap /etc/postfix/vmaps
  postfix reload
fi
echo "\nCreate a password for the new email user"
passwd=`dovecotpw`
echo "Adding password for $user@$domain to /etc/dovecot/passwd"
if [ ! -x /etc/dovecot/passwd ]
 then
  touch /etc/dovecot/passwd
  chmod 640 /etc/dovecot/passwd
fi
echo  "$user@$domain:$passwd" >> /etc/dovecot/passwd

exit 0

Make the file executable:

sudo chmod +x /usr/local/sbin/adddovecotuser

Add a user like this:

sudo adddovecotuser info@domain1.com

We'll create one for deleting users too:

sudo vi /usr/local/sbin/deldovecotuser

Add the following code segment and save the file:

#!/bin/bash
#
# deldovecotuser - for deleting virtual dovecot users
#
if [ ! $# = 1 ]
 then
  echo -e "Usage: $0 username@domain"
  exit 1
 else
  user=`echo "$1" | cut -f1 -d "@"`
  domain=`echo "$1" | cut -s -f2 -d "@"`
  if [ -x $domain ]
   then
    echo -e "No domain given\nUsage: $0 username@domain: "
    exit 2
  fi
fi
read -n1 -p "Delete user $user@$domain from dovecot? [Y/N]? "
echo
case $REPLY in
 y | Y)
  new_users=`grep -v $user@$domain /etc/dovecot/users`
  new_passwd=`grep -v $user@$domain /etc/dovecot/passwd`
  new_vmaps=`grep -v $user@$domain /etc/postfix/vmaps`
  echo "Deleting $user@$domain from /etc/dovecot/users"
  echo "$new_users" > /etc/dovecot/users
  echo "Deleting $user@$domain from /etc/dovecot/passwd"
  echo "$new_passwd" > /etc/dovecot/passwd
  echo "Deleting $user@$domain from /etc/postfix/vmaps"
  echo "$new_vmaps" > /etc/postfix/vmaps
  postmap /etc/postfix/vmaps
  postfix reload
  read -n1 -p "Delete all files in /home/vmail/$domain/$user? [Y/N]? " DELETE
  echo
  case $DELETE in
   y | Y)
    echo "Deleting files in /home/vmail/$domain/$user"
    rm -fr /home/vmail/$domain/$user
   ;;
   * )
    echo "Not deleting files in /home/vmail/$domain/$user"
   ;;
  esac
 ;;
 * )
  echo "Aborting..."
 ;;
esac

Make the file executable:

sudo chmod +x /usr/local/sbin/deldovecotuser

Delete a user like this:

sudo deldovecotuser info@domain1.com

To start Devecot for the first time

sudo /etc/init.d/dovecot start

C#/Mono Application to Add Users

An alternative to the scripts below for adding users and creating passwords, there is an Open Source tool written in C# and compiles in Mono to do this same task. It offers a few more error checks and prompts. It incorporates the scripts into one tool for Postfix and Dovecot. You can find it here

Postfix SASL

If you would like your mail users to authenticate to Postfix too, we need to configure Postfix for SASL. In that way, the mail server can relay email from users not in local network.

Make Dovecot listen for authenticating request

In /etc/dovecot/dovecot.conf edit the auth section to:

auth default {
  mechanisms = plain cram-md5
  passdb passwd-file {
    args = /etc/dovecot/passwd
  }
  userdb passwd-file {
    args = /etc/dovecot/users
  }
  user = root
  socket listen {
    client {
      # The client socket is generally safe to export to everyone. Typical use
      # is to export it to your SMTP server so it can do SMTP AUTH lookups
      # using it.
      path = /var/spool/postfix/private/auth-client
      mode = 0660
      user = postfix
      group = postfix
    }
  }
}

Restart dovecot.

sudo service dovecot restart

HERE LINE 8 GIVES PROBLEM WORKS FINE AFTER COMMENTING TO # IT

Configuring Postfix for SASL

Configure Postfix SASL.

sudo postconf -e 'smtpd_sasl_auth_enable = yes'
sudo postconf -e 'smtpd_sasl_security_options = noplaintext,noanonymous'
sudo postconf -e 'smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'
sudo postconf -e 'smtpd_sasl_type = dovecot'
sudo postconf -e 'smtpd_sasl_path = private/auth-client'
sudo echo "mech_list: cram-md5" > /etc/postfix/sasl/smtpd.conf

Restart Postfix.

sudo service postfix restart

Testing Your Setup

Let's test our system before going production.

With mutt

Type in a terminal:

mutt -f  pop://mail.domain1.com

or:

mutt -f  imap://mail.domain1.com

Input your user name and password as requested. When logged in, shortcuts are displayed in top of window. Press q to quit.
Tip1: If your DNS lookup doesn't work yet, you can use mutt -f pop://localhost when on server.
Tip2: You can use auth_default_realm = domain1.com in dovecot.conf and omit @domain1.com in your user name when logging in.

With telnet

Telnet is more verbose. Type in a terminal:

telnet localhost 110

Note: This only works when traffic is local, since we have set disable_plaintext_auth = yes.

Type the following code segment in the prompt provided by the Dovecot POP3 server

user info@domain1.com
pass password
quit

Final output should be something like this

Trying 127.0.0.1...
Connected to mail.domain1.com.
Escape character is '^]'.
+OK dovecot ready.
user info@domain1.com
+OK
pass password
+OK Logged in.
quit
+OK Logging out.

SMTP through ISP

Postfix relayhost

These are the basic steps to set up Postfix to use SMTP Authentication to send mail through a relay host.

Set up a password maps file (/etc/postfix/sasl_passwd) as follows:
mail.ispserver.com username:password

chown root:root /etc/postfix/sasl_passwd; chmod 600 /etc/postfix/sasl_passwd

postmap /etc/postfix/sasl_passwd

In /etc/postfix/main.cf:
relayhost = mail.ispserver.com
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =

postfix reload

Also, if this is the first SASL service installed on the machine, make sure there's an appropriate SASL plugin installed:

urpmi --media main libsasl2-plug-login libsasl2-plug-plain

That should do it! Postfix will log into the relay host using the smtp auth username and password. It's possible to set different logins for different servers, by adding more lines to the map file. Security options must be cleared to allow plaintext logins.

Doesnt works check
http://ubuntu-tutorials.com/2009/03/13/configure-postfix-for-multiple-isp-client-smtp-authentication/

Installing Fetchmail

http://www.howtoforge.com/debian_etch_fetchmail
http://library.linode.com/email/fetchmail/
https://help.ubuntu.com/community/DialupEmailHowto

To install fetchmail on Debian and Ubuntu systems, issue the following command:

apt-get update
apt-get upgrade --show-upgraded
apt-get install fetchmail

3 Configure fetchmail

There are two ways of configuring fetchmail. We can make it run as a daemon with a global configuration file, or we can create a cron job to run fetchmail together with per-user configuration files. I will describe both methods here.

3.1 Run fetchmail As A Daemon With A Global Configuration File

To make fetchmail run as a daemon, we have to edit /etc/default/fetchmail and set START_DAEMON to yes:

vi /etc/default/fetchmail

# This file will be used to declare some vars for fetchmail
#
# Uncomment the following if you dont want localized log messages
# export LC_ALL=C

# Declare here if we want to start fetchmail. 'yes' or 'no'
START_DAEMON=yes

Next we must create the configuration file /etc/fetchmailrc because the fetchmail daemon won't start if this file doesn't exist. In this file we can specify how the fetchmail daemon should behave as well as the details fetchmail needs to know to retrieve emails from foreign email accounts.
Let's assume falko has two email accounts from which we want to retrieve emails:

First account: server pop.someprovider.tld, protocol POP3, username falko@someprovider.tld (yes, the username is an email address in this case), password secret.
Second account: server mail.otherprovider.tld, protocol POP3, username ftimme, password verysecurepassword.

till has one email account:

Server mailin.tillsprovider.tld, protocol POP3, username tbrehm, password iwonttellyou.

So our file /etc/fetchmailrc could look like this:
vi /etc/fetchmailrc

------------------------------------------------------
# /etc/fetchmailrc for system-wide daemon mode
# This file must be chmod 0600, owner fetchmail

set daemon        300                # Pool every 5 minutes
set syslog                        # log through syslog facility
set postmaster  root

set no bouncemail                # avoid loss on 4xx errors
                                # on the other hand, 5xx errors get
                                # more dangerous...

##########################################################################
# Hosts to pool
##########################################################################

# Defaults ===============================================================
# Set antispam to -1, since it is far safer to use that together with
# no bouncemail
defaults:
timeout 300
antispam -1
batchlimit 100

poll pop.someprovider.tld protocol POP3 user "falko@someprovider.tld" there with password "secret" is falko here
poll mail.otherprovider.tld protocol POP3 user "ftimme" there with password "verysecurepassword" is falko here fetchall
poll mailin.tillsprovider.tld protocol POP3 user "tbrehm" there with password "iwonttellyou" is till here keep

-----------------------------------------------------------------------------------------------------
At the beginning of the file we have some global options such as set daemon 300 (which means fetchmail should retrieve emails every 300 seconds) that control the operation of the program. The meanings of the above options are as follows:

set daemon: Set a background poll interval in seconds.
set syslog: Do error logging through syslog.
set postmaster: Give the name of the last-resort mail recipient (default: user running fetchmail, "postmaster" if run by the root user).
set no bouncemail: Direct error mail to the local postmaster (as per the "postmaster" global option above).

Then we have the server and the user options options. These go together into the lines beginning with poll; if there are options that are the same for each poll line, we can as well specify them before the poll lines in a section that begins with defaults: (such as timeout, antispam, and batchlimit in our example).

timeout: Server inactivity timeout in seconds (default 300).
antispam: Specify what SMTP returns are interpreted as spam-policy blocks.
batchlimit: Specify the maximum number of messages that will be shipped to an SMTP listener before the connection is deliberately torn down and rebuilt (defaults to 0, meaning no limit).

The poll lines are self-explanatory; as you see fetchmail retrieves emails from both of falko's external email accounts and puts them into one account.
You will notice that the poll lines have different endings (e.g. nofetchall (default), fetchall, keep, nokeep). The meanings are as follows:

nofetchall: Retrieve only new messages (default). If nothing else is specified (e.g. fetchall, keep), this means nofetchall.
fetchall: Fetch all messages whether seen or not.
keep: Don't delete seen messages from server.
nokeep: Delete seen messages from server.

To learn more about all available configuration settings, take a look at

sudo chmod 600 /etc/fetchmailrc
sudo chown vmail /etc/fetchmailrc
fetchmail -f /etc/fetchmailrc
fetchmail -q /etc/fetchmailrc
sudo tail -f /var/log/syslog
CHECK THIS
sudo chmod ugo+rw /var/log/dovecot
sudo chmod ugo+rw /var/log/dovecot.info

Forwarding mail to other user

sudo vi /etc/postfix/main.cf
virtual_alias_maps = dbm:/etc/postfix/virtual
virtual_alias_maps = hash:/etc/postfix/virtual

sudo vi /etc/postfix/virtual
kamlesh@justxports.com admin@justxports.com
kamlesh@justxports.com admin@justxports.com,info@justxports.com
If you use this feature with indexed files, run "postmap /etc/postfix/virtual" after changing the file.
Mail send to kamlesh will be forwarded to admin

sudo /etc/init.d/postfix reload

Forwarding mail to other domain
sudo vi /etc/postfix/transport
kamlesh@justxports.com smtp:mail.justxports.com
( for domain we can use @ justxports.com smtp:mail.justxports.com)
sudo postmap /etc/postfix/transport
sudo /etc/init.d/postfix reload

ClamSMTP SMTP Virus Filter

https://help.ubuntu.com/community/PostfixVirtualMailBoxClamSmtpHowto

ClamSMTP is an SMTP filter that allows you to check for viruses using the ClamAV anti-virus software. It accepts SMTP connections and forwards the SMTP commands and responses to another SMTP server. The 'DATA' email body is intercepted and scanned before forwarding.
ClamSMTP aims to be lightweight, reliable, and simple rather than have a myriad of options. It's written in C without major dependencies.
ClamSMTP can also be used as a transparent proxy to filter an entire network's SMTP traffic at the router.

Installing ClamAV

We need ClamAV daemon to work with ClamSMTP. Let's install ClamAV first, with the following packages: clamav-daemon clamav
sudo apt-get install clamav-daemon clamav

Installing ClamSMTP

You need to install the clamsmtp package.
sudo apt-get install clamsmtp

Setting Postfix to use ClamSMTP

Postfix supports filtering mail through a filter that acts like an SMTP server. Put the following lines in your Postfix main.cf file:
Open the file:

sudo vi /etc/postfix/main.cf

If you have doubt where to add the codes look at my example main.cf file
Add the codes:

content_filter = scan:127.0.0.1:10026
receive_override_options = no_address_mappings

The content_filter tells Postfix to send all mail through the service called 'scan' on port 10026. We'll set up clamsmtpd to listen on this port later.
Next we add the following to the Postfix master.cf file:
Open the file:

sudo vi /etc/postfix/master.cf

If you have doubt where to add the codes look at my example master.cf file
Add the codes:

# AV scan filter (used by content_filter)
scan      unix  -       -       n       -       16      smtp
        -o smtp_send_xforward_command=yes
# For injecting mail back into postfix from the filter
127.0.0.1:10025 inet  n -       n       -       16      smtpd
        -o content_filter=
        -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
        -o smtpd_helo_restrictions=
        -o smtpd_client_restrictions=
        -o smtpd_sender_restrictions=
        -o smtpd_recipient_restrictions=permit_mynetworks,reject
        -o mynetworks_style=host
        -o smtpd_authorized_xforward_hosts=127.0.0.0/8

Make sure there's no spaces around the equal signs or commas in the text you added. Best way is to copy and my codes here.
The first 2 lines create the scan service. The rest set up a service for accepting mail back into postfix. All the options prevent a mail loop as well as relax address checking and the like, since that's already been done.
Make sure to run it as the same user as you run clamd or they'll have problems accessing each other's temporary files. You can use the the following accomplish that.

sudo adduser clamsmtp clamav

Restart Postfix, ClamSMTP, and ClamAV Daemon to make your changes effect:

sudo /etc/init.d/postfix restart
sudo /etc/init.d/clamsmtp restart
sudo /etc/init.d/clamav-daemon restart

Test ClamSMTP for outgoing mail

We need to test the our outgoing mail for viruses. Best way is to download eicar test virus and attach to a mail and send. Let's do it.
Download eicar to you home directory:

wget http://eicar.org/download/eicar_com.zip

Send this file as an attachment to info@domain1.com
Then check your mail.log file:

tail /var/log/mail.log

You should see something like in your log file.

Mar  8 17:12:02 localhost clamsmtpd: 100004: from=info@domain1.com, to=info@domain1.com, status=VIRUS:Eicar-Test-Signature
Mar  8 17:12:02 localhost postfix/smtp[15634]: 4A6C852110: to=, relay=127.0.0.1[127.0.0.1], delay=0, status=sent (250 Virus Detected; Discarded Email)

Clam AV option to scan the PC

To check files in the all users home directories: clamscan -r /home

To check all files on the computer, displaying the name of each file: clamscan -r /

To check all files on the computer, but only display infected files and ring a bell when found: clamscan -r --bell -i /

Links I refer

https://help.ubuntu.com/community/PostfixVirtualMailBoxClamSmtpHowto

http://flurdy.com/docs/postfix/

https://help.ubuntu.com/community/PostfixCompleteVirtualMailSystemHowto

https://help.ubuntu.com/community/PostfixBasicSetupHowto

https://help.ubuntu.com/community/Postfix

http://ubuntuforums.org/showthread.php?t=185913&highlight=email+server

Network is not accessible. You might not have permission to use

2012-03-12T00:37:00.000-07:00

when accessing with \\
Like "\\192.168.0.2 is not accessible. You might not have permission to use
this network resource. Contact the administrator of this server to find
out if you have access permission. Logon failure: the user has not
been granted the requested logon type at this computer"

when accessing with net use \\192.168.0.2
error 1385
Logon failure: the user has not been granted the requested logon type
at this computer.

I was trying to use file sharing, I could port scan from either
computer, and see the other's port 139 (file sharing port) open.

I set up identical accounts on each system

firewall is not an issue 'cos i turned it off, and anyhow, i can see
port 139 from either comp on either comp.
both are win xp sp2, both have the built in guest account enabled,
both have simple file sharing, both share an account with the same
user/full name/password

Solution for me was b, but here are 3 things to check
Things to check under
Administrative tools...local security policy...user rights and
assignments

a)"Access this computer from the network" includes Everyone and
Administrators and many others.

b)"Deny access to this computer from the network" make sure that Guest
is not listed there. If you still have problems, then maybe make sure
that nothing is listed there. I had Guest listed there, and it was the
cause of my problems. I have no idea how it got there.
note- the "Deny access" policy is the second policy beginning with D. a
It after "Debug Programs"

c) maybe try this, 'cos i've seen it recommended.
Administrative tools...local security policy..security options
"Network access sharing and security model for local accounts" there
are 2 options either classic or 'guest only'. try the other option. I
found it only works on Guest. But i recall seeing somebody saying it
only worked with 'classic'. I think you shoudl keep it as Guest! Make
sure that the Guest is enabled and not Denied access (See point b)

Solution 'b' worked for me. IT makes sense, 'cos I could see one comp
from the other comp but not vice versa. The one i couldn't see was
denying access to Guest. THe Guest accont is improtant for networking,
it shouldn't have been denied network access.

Regarding other longer solutions - for if those fail
somebody also mentioned a form of reinstalling windows that solved it
in post subject "Networking between 2computers" they recommended
against a repair. Though another author mentinoed doing a repair.

How to Reset Microsoft Outlook View to default

2012-03-12T00:31:00.000-07:00

How to Reset Microsoft Outlook View to default

Start > Run > outlook.exe /cleanviews > OK button

How to Disable Write Access to USB Hard Disk and Flash Key Drives

2012-03-12T00:25:00.000-07:00

How to Disable Write Access to USB Hard Disk and Flash Key Drives

There is a registry hack that able to disable the USB drive access to USB mass storage device such as flash drive, USB key, thumb drive, pendrive and portable hard disk while keeping the USB hardware device such as webcam, mouse, keyboard, printer and scanner connected to USB ports working as usual. However, the hack disable the USB access to disk drive completely. User cannot copy data to the USB disk storage, nor able to read any files and documents from the USB drive.

For user who just want to disable write access to the external removable USB mass storage disk drive, there is another registry hack of WriteProtect in StorageDevicePolicies registry key that able to restrict Windows system from writing to the USB disk drive, and hence effectively user to copy any sensitive or private data from the PC to USB key stick. The trick works in a similar way to write-protect feature used in floppy disk and backup tape which make the disk read-only, only that in this case, it’s system wide implementation that block any writing and recording of data to USB mass storage device.

To disable writing access to USB drives and make all USB drives has only read-only access, follow these steps:

Run Registry Editor (regedit).
Navigate to the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
Create a New Key named as StorageDevicePolicies.
Highlight StorageDevicePolicies, and then create a New DWORD (32-bit) Value named as WriteProtect.
Double click on WriteProtect, and set its value data to 1.

Once set, all users on the computer is now blocked and prevented from copying, transferring or writing any files, documents and data to the USB disk drives, without the need to restart or reboot computer. Any attempt to download or copy files to USB drive will return the following error message:

The disk is write protected.
The media is write-protected.
Remove the write protection or use another disk.

To revert and remove the blocked write access to USB drivers, just delete the StorageDevicePolicies registry key, or delete the WriteProtect registry entry, or change the value data for WriteProtect to 0.

Traffic monitoring tool in ubuntu

2012-03-12T00:19:00.001-07:00

Traffic monitoring tool in ubuntu

1. Trafshow
sudo trafshow

2. Darkstat
http://127.0.0.1:667

3. Etherape
sudo etherape

4. Bandwidthd
http://10.0.0.15/bandwidthd/

Restore Panels In Ubuntu Back To Their Default Settings

2012-03-12T00:16:00.000-07:00

How To Save And Restore Your Panel In Ubuntu Linux

If you are a new Ubuntu user, then it is quite possible that you have either messed up or accidentally deleted your Ubuntu panel. Unfortunately, the Gnome desktop is not as generous as Windows when it comes to providing options for retaining the desktop panel. A simple context menu click can end up deleting the panel and a Linux user may find it frustratingly hard to get it back. In this post we will teach you how to restore your Gnome panel to the default settings via the Terminal and explain the utility of Gnome Panel – Save / Restore, which is an application that saves the state of your Ubuntu Panel, which can restored later to the previously saved state.

First of all lets start with the command line that you can use to get your deleted or messed up panel back to its default form. Open the Terminal from Applications –> Accessories and type in the following command:

sudo apt-get install gconf2

Enter your password, followed by the following commands:

gconftool-2 --recursive-unset /apps/panel

rm -rf ~/.gconf/apps/panel
  pkill gnome-panel

This will recover your Ubuntu Panel back to the default form and even recover it if was accidentally deleted.

VPN Server on Ubuntu

2011-01-27T02:14:00.000-08:00

VPN Server on Ubuntu

Firstly install pptpd

Code:

sudo apt-get install pptpd

Now edit pptpd's config (/etc/pptpd.conf). At the bottom you'll find settings for localip and remoteip. Here's what mine looks like:

Code:

localip 172.198.1.4
remoteip 172.198.2.50-51

localip is the IP of an adapter in the server (yours might be 192.168.0.10 for example)
remoteip: the IPs that clients are allowed to use (i allowed mine to use 172.198.2.50 through 172.198.2.51)

Now we'll set up some users, so edit the chap-config config file(/etc/ppp/chap-secrets). I want to allow two users, so my chap-secrets file looks like this:

Code:

# client        server  secret                  IP addresses
rich             pptpd   apassword                80.40.0.0/13
geoff             pptpd   apassword                212.219.0.0/14

... which allows users rich and geoff, with the passwords 'apassword' to be accepted from those IP subnets. * can be used to allow all IPs. see pppd/chap-secrets man page for more info

You may be good to go at this point. Restart pptpd (sudo /etc/init.d/pptpd restart) and attempt to connect.

And you should be good to go!

All you need to do now is add a VPN network connection and connect with the username/password that you set up. Don't forget to hit the IPv4 TCP/IP settings on your client machines for the VPN connection and to untick "Use default gateway on remote network" if you need to (you probably will).

You will also need to change some security settings (image):

VPN Connection > Properties > [Security Tab] -> Advanced

Original Link
http://forums.bit-tech.net/showthread.php?t=132029

How to Install and Configure DHCP Server in Ubuntu Server

2011-01-27T01:56:00.000-08:00

How to Install and Configure DHCP Server in Ubuntu Server

Install DHCP server in ubuntu

sudo apt-get install dhcp3-server

This will complete the installation.
Configuring DHCP server
If you have two network cards in your ubuntu server you need to select which interface you want to use for DHCP server listening.By default it listens to eth0.
You can change this by editing /etc/default/dhcp3-server file

sudo vi /etc/default/dhcp3-server

Find this line
INTERFACES=”eth0″
Replace with the following line
INTERFACES=”eth1″
Save and exit.This is optional.
Next you need to make a backup copy of /etc/dhcp3/dhcpd.conf file
cp /etc/dhcp3/dhcpd.conf /etc/dhcp3/dhcpd.conf.back
Edit /etc/dhcp3/dhcpd.conf file using the following command

sudo vi /etc/dhcp3/dhcpd.conf

Using address pool method
You need to change the following sections in /etc/dhcp3/dhcpd.conf file

default-lease-time 600;
max-lease-time 7200;
option subnet-mask 255.255.255.0;
option broadcast-address 192.168.1.255;
option routers 192.168.1.254;
option domain-name-servers 192.168.1.1, 192.168.1.2;
option domain-name “yourdomainname.com”;
subnet 192.168.1.0 netmask 255.255.255.0 {
range 192.168.1.10 192.168.1.200;
}

save and exit the file
This will result in the DHCP server giving a client an IP address from the range 192.168.1.10-192.168.1.200 . It will lease an IP address for 600 seconds if the client doesn’t ask for a specific time frame. Otherwise the maximum (allowed) lease will be 7200 seconds. The server will also “advise” the client that it should use 255.255.255.0 as its subnet mask, 192.168.1.255 as its broadcast address, 192.168.1.254 as the router/gateway and 192.168.1.1 and 192.168.1.2 as its DNS servers.
Using MAC address method
This method is you can reserver some of the machines or all the machines with fixed ip address.In the following example i am using fixed ip address for server1,server2,printer1 and printer2

default-lease-time 600;
max-lease-time 7200;
option subnet-mask 255.255.255.0;
option broadcast-address 192.168.1.255;
option routers 192.168.1.254;
option domain-name-servers 192.168.1.1, 192.168.1.2;
option domain-name “yourdomainname.com”;
subnet 192.168.1.0 netmask 255.255.255.0 {
range 192.168.1.10 192.168.1.200;
}
host server1 {
hardware ethernet 00:1b:63:ef:db:54;
fixed-address 192.168.1.20;
}
host server2 {
hardware ethernet 00:0a:95:b4:d4:b0;
fixed-address 192.168.1.21;
}
host printer1 {
hardware ethernet 00:16:cb:aa:2a:cd;
fixed-address 192.168.1.22;
}
host printer2 {
hardware ethernet 00:0a:95:f5:8f:b3;
fixed-address 192.168.1.23;
}

Now you need to restart dhcp server using the following command
sudo /etc/init.d/dhcp3-server restart
Configure Ubuntu DHCP Client
If you want to configure your ubuntu desktop as DHCP client following this procedure
You need to open /etc/network/interfaces file
sudo vi /etc/network/interfaces
make sure you have the following lines (eth0 is an example)

auto lo eth0
iface eth0 inet dhcp
iface lo inet loopback

Save and exit the file
You need to restart networking services using the following command

sudo /etc/init.d/networking restart

How to find DHCP server IP address
You need to use the following commands
sudo dhclient
or
tail -n 15 /var/lib/dhcp3/dhclient.*.leases

ORIGINAL LINK
http://www.ubuntugeek.com/how-to-install-and-configure-dhcp-server-in-ubuntu-server.html

Dansguardian Content Filtering With Squid Transparent Proxy On Ubuntu

2011-01-23T03:00:00.000-08:00

Dansguardian Content Filtering With Squid Transparent Proxy On Ubuntu

sudo apt-get install squid3
sudo nano /etc/squid3/squid.conf

(Search for http_port 3128 and add following )
http_port 3128 transparent

(Search for INSERT and add following )

acl localnet src 192.168.2.0/24

http_access allow localnet
http_access allow localhost

sudo /etc/init.d/squid3 restart
For squid in detail follow the below link dont follow the IPtable part from this link

http://kamleshgosavi.blogspot.com/2011/01/squid3-transparent-proxy-setup.html

Set Up DansGuardian; Internet Content Filter

While most "Internet filtering" programs merely ban certain blacklisted URLs, DasGuardian actually looks at the content as well as the blacklist so that you don't have to subscribe to a service to have updated blacklist. What's more, DansGuardian is free! Are you getting exhausted from all the programs you've had to set up? Well this is the meat of the proxy server that we wanted to build. Unless you'd like to have more features than Internet filtering and caching, this is the last page of instructions you have to follow. Let's get started.

apt-get install dansguardian

Now the configuration file is /etc/dansguardian/dansguaridan.conf.

vim /etc/dansguardian/dansguaridan.conf

Find the following 4 entries and set the values to be the same as shown below. Note that the value for filterip is supposed to be blank.

# Network Settings
#
# the IP that DansGuardian listens on. If left blank DansGuardian will
# listen on all IPs. That would include all NICs, loopback, modem, etc.
# Normally you would have your firewall protecting this, but if you want
# you can limit it to only 1 IP. Yes only one.
filterip =

# the port that DansGuardian listens to.
filterport = 8080

# the ip of the proxy (default is the loopback - i.e. this server)
proxyip = 127.0.0.1

# the port DansGuardian connects to proxy on
proxyport = 3128

Finally comment out (put # in front of it) the following line (bolded) and you are all set!

# DansGuardian config file for version 2.8.0 with Anti-Virus plug-in 6.4.3
# **NOTE** as of version 2.7.5 most of the list files are now in dansguardianf1.conf
#UNCONFIGURED - Please comment this line after configuration

Now we must restart Dansguarian. For unknown reasons to me, I have had troubles (not always) with restarting Dansguardian. However, stopping and starting Dansguardian always worked. Weird, huh? But that's what I'm going to show here.

/etc/init.d/dansguardian stop
/etc/init.d/dansguardian start

Test Proxy

Open Firefox.
Go to http://tits.com or any other known bad site.
The site should display.
Now in Firefox select:

Edit > Preferences > Advanced > Connection > Settings

Select Manual proxy configuration.
In the HTTP Proxy box type: 127.0.0.1(IP address of proxy) Port: 8080
Place a check in the box labeled Use this proxy server for all protocols.
Click OK then Close.
Go to http://google.com and Google should be displayed. Click Refresh and verify it's still working.
Go to http://tits.com or any other known bad site.
The site should show as blocked. You may have to hit refresh for this to work.
At this point, the proxy is working.
Now in Firefox select:

Edit > Preferences > Advanced > Connection > Settings

Select No proxy.
Click OK then Close.

To exclude the Particular Machine add the IP and restart the service
sudo vi /etc/dansguardian/lists/exceptioniplist

Starting Dansguardian may take a long time (a few minutes), but that is normal in my experience.
The default settings for Dansguardian are fairly strict and there might be legitimate websites that you are blocked from viewing.
In that case, you can configure the files within /etc/dansguardian/list/ directory.
For instance, if you want to explicitly allow a website, you can add the site URL to the file "exceptionsitelist." Also you probably want to comment out most of the MIME file types and file extensions, which have to do with streaming media and downloading respectively. The files for MIME and extensions are "bannedmimetypelist" and "bannedextensionlist." As always, I recommend commenting out entries rather than erasing them.

For Changing the Access Denied page
sudo vi /etc/dansguardian/languages/ukenglish/template.html

If you change these configuration files, remember to restart Dansguardian.

For Transparent proxy

Edit the /etc/sysctl.conf

sudo nano /etc/sysctl.conf

Uncomment the line that enable packet forwarding for IPv4 and IPv6

Net.ipv4.ip_forward = 1
Net.ipv6.conf.all.forwarding = 1

Step 7. Edit rc.local

sudo nano /etc/rc.local

iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 8080
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

Squid3 Transparent Proxy

2011-01-22T02:02:00.000-08:00

Steps in Setting up UBUNTU Server 10 with SQUID 3 as a Transparent Proxy.

Step 1. Install the Ubuntu Server 10, include LAMP if you want
Step 2. Change the network interfaces from dhcp to static

sudo nano /etc/network/interfaces

auto eth0
iface eth0 inet static
address 192.168.1.250
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.88

auto eth1
iface eth1 inet static
address 192.168.2.1
netmask 255.255.255.0
network 192.168.2.0
broadcast 192.168.2.255

(Note For web Admin below steps may wont work)
Step 3. Install Web Admin (webmin) (Optional)

wget http://prdownloads.sourceforge.net/webadmin/webmin_1.510-2_all.deb
dpkg –install webmin_1.510-2_all.deb
sudo apt-get -f install

https://localhost-IP ADDRES:10000
*Note Make sure you give permission to the IPTABLES ruleset to for you to access webmin over the net.

Step 4. Install ClamAV and ClamAV-freshclam

sudo apt-get install clamav clamav-freshclam

Step 5. The first step is to install squid 3

sudo apt-get install squid3

edit the squid 3 configuration file in your favorite editor

sudo nano /etc/squid3/squid.conf

and set the transparency and the allowed hosts

(Search for http_port 3128 and add following )
http_port 3128 transparent

(Search for INSERT and add following )

(If you want to block acess to particular ip or range else leave the first 2 lines)
acl lan_bad_users src 192.168.2.10
http_access deny lan_bad_users

acl localnet src 192.168.2.0/24
http_access allow localnet
http_access allow localhost

visible_hostname localhost ( your hostname )
where 192.168.2.0/24 is the IP range of local network. Probably you need to adjust the swap size

cache_dir ufs /var/spool/squid3 7000 16 256

here the first number denotes the size of cache in megabytes. Save you changes and restart the squid proxy by

sudo /etc/init.d/squid3 restart

Step 6. Edit the /etc/sysctl.conf

sudo nano /etc/sysctl.conf

Uncomment the line that enable packet forwarding for IPv4 and IPv6

Net.ipv4.ip_forward = 1
Net.ipv6.conf.all.forwarding = 1

Step 7. Edit rc.local

sudo nano /etc/rc.local

iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

Howto clear/Flush DNS Cache in Ubuntu

2011-01-19T00:52:00.000-08:00

Howto clear/Flush DNS Cache in Ubuntu

Some distributions run a caching nameserver in the background out of the box while some do not. To clear the cache if you have such a daemon running, simply restart the nscd service in ubuntu.
Why would you clear your cache?
Most DNS clients will cache the results of name resolution request to speed up multiple lookups to the same URL. Just think about how many requests are made to the same domain when visiting a single web page. Every file, image, style sheet, etc. that is on that page and served from the same domain requires a DNS lookup.
So if you have an invalid DNS entry cached on your local client you’ll need to flush it out of the cache so your client can do a new lookup and get the correct information. Or your other option is to wait until that DNS entry expires and the cache flushes it automatically… which typically takes about 24 hours.
In ubuntu if you want to flush DNS cache you need to restart nscd daemon

Install nscd using the following command

sudo aptitude install nscd

Flush DNS Cache in Ubuntu Using the following command

sudo /etc/init.d/nscd restart

ORIGINAL LINK
http://www.ubuntugeek.com/howto-clearflush-dns-cache-in-ubuntu.html

Local DNS Cache for Faster Browsing on Ubuntu Server 10.04

2011-01-18T23:23:00.000-08:00

Local DNS Cache for Faster Browsing on Ubuntu Server 10.04

A DNS server resolves domain names into IP addresses. So when you request “yahoo.com” for example, the DNS server finds out the address for the domain, and sends your request the right way.
You can run a DNS cache on your computer. This will speed up the process of looking up domain names when browsing. The difference is about 30-60 ms. Multiply that difference by the number of websites you visit a day for an approximate estimate of the speed improvement.
The following instructions are for someone with a broadband internet connection, where the computer gets it’s local IP address using DHCP from the router in your home or office.

Install dnsmasq in Ubuntu

Dnsmasq is a lightweight, easy to configure, DNS forwarder and DHCP server. It is designed to provide DNS and optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with DHCP-allocated addresses to appear in the DNS with names configured either in each host or in a central configuration file. Dnsmasq supports static and dynamic DHCP leases and BOOTP for network booting of diskless machines.
First you need to make sure that Universe repository is enabled in your sources.list file
Install dnsmasq Using the following command

sudo apt-get install dnsmasq

uncomment the following line (remove “#” in the beginning) in the file /etc/dnsmasq.conf
listen-address=127.0.0.1

Now edit
/etc/dhcp3/dhclient.conf

and make sure the section below exactly like this, especially the line that says “prepend domain-name-servers 127.0.0.1;”
#supersede domain-name “fugue.com home.vix.com”;
prepend domain-name-servers 127.0.0.1;
request subnet-mask, broadcast-address, time-offset, routers,
domain-name, domain-name-servers, host-name,
netbios-name-servers, netbios-scope;

In the normal case, when you get a new dhcp lease, the dhcp3 client (tool) on your computer gets a new lease, and updates the

/etc/resolv.conf

file on your computer with the right values for the DNS servers to use (usually some machine in the network of your hosting provider). Adding the “prepend” option as we did above ensures that “127.0.0.1″ will appear on the top of the list of DNS servers. That magic number refers to your own computer. So in the future, whenever your computer needs to resolve a domain name, it will forward that request to dnsmasq (which is running at 127.0.0.1 - your computer). If the details for the domain name are already in you cache, well and good, dnsmasq will serve it up and make the process real fast. If it is not in the cache, then dnsmasq will look at the /etc/resolv.conf file and use the nameservers listed below the “127.0.0.1?. I hope that explains things.
Now open the file

/etc/resolv.conf

in your text editor. It probably looks like:
search yourisp.com
nameserver 217.54.170.023
nameserver 217.54.170.024
nameserver 217.54.170.026

The 127.0.0.1 is missing right now since you haven’t renewed your lease after you edited the /etc/dhcp3/dhclient.conf file. So, let us add that in manually this one time. After you do, your /etc/resolv.conf file will look like the following:
search yourisp.com

nameserver 127.0.0.1
nameserver 217.54.170.023
nameserver 217.54.170.024
nameserver 217.54.170.026

Now you need to restart the dnsmasq using the following command

sudo /etc/init.d/dnsmasq restart

Now you are running a local DNS cache.
Testing Your Local DNS Cache
If you want to measure your speed improvement, type the command

dig yahoo.com
also
dig @127.0.0.1 yahoo.com (From particular IP address )
You will see something like “;; Query time: 38 msec” there.
Now type the command again, and you should see something like:”;; Query time: 2 msec”

ORIGINAL LINK
http://www.ubuntugeek.com/local-dns-cache-for-faster-browsing-on-ubuntu-machine.html

Funny SMS & Quotes

2010-10-20T22:04:00.000-07:00

I cannot be good enough for everybody,
but I will always be the best for the one who deserves me.

I'm not scared anymore. Because I know
In the end,
Fate will bring us together
or bring us something better

You can't upload love.

You can't download time.

You can't Google all of life's answer.
...
You must actually live some of your life.

I really can't picture anyone
having a crush on me. It's just weird to think someone
actually taking time to think of me

I felt special until i saw you talk to everyone like that...

‎"Never use Mind in relations those made by heart..."

You can close your eyes from the things you don’t want to see
but you can never close your heart from the things you don’t want to feel.

मन गुंतायला वेळ लागत नाही
मन तुटायला वेळ लागत नाही
वेळ लागतो ते गुंतलेले मन आवरायला !
आणि तुटलेले मन सावरायला . ..... -

Love doesn’t count on the laughter that you shared 

but on the pain and tears you tried to get over with just for the sake of holding on.

Every day may not be Good.,.

But There's Something good in Every Day.,.

Start Ur day with Smile on Ur Face :) ♥

Keep Shining keep Smiling ♥Guzare Huve Kal Ki Yaad aati hai,

kuch lamhon se aankhen bhar aati hain,

woh subah rangeen shaam nirali doob jati hain,

jab aap jaise doston ki yaad aati hai....!kabhi yaroo ki mehfil me bait ke hum bhi piya karte the

Kabh yaroo ke yaar ban ke hum bi jiya karte the

Zindagi ne ki bewafi ,warna

hum bhi zingadi se pyar kiya karte the...!Every heart has a pain..

Only the way of expression is different..

Some hide it in eyes while some hide in their smile...!'Jo dost, kaminey nahi hote..

.

.

.

.

... .

.

.

.

.

Wo kaminey,

dost hi nahi hote...!Third Person Never Creates Any Misunderstanding

Between Two Peoples.

But...

... Misunderstanding Between Two People Creates Space for Third Person.Words and hearts should be handled with care for words when spoken and hearts when broken are the hardest things to repair.Rabba Tune Dil Cheez Banai Na Hoti Zindagi Jo Apni thi Wo Aaj Parai na Hoti....Most relationships fail not because of absence of love;

but because girls love too much

& boys love too many.Girl: So is it gonna be me, or her?

Boy: If you loved me, you wouldn't make me choose.

Girl: If you loved me, there wouldn't even be an option.“These days many relationships are like flowers, they are beautiful at first till they die a week later"If I could be any part of you,

I’d be your tear. 

To be conceived in your heart, 

born in your eyes,

live on your cheeks, 

and die on your lips.Learn to appreciate the rainbow after cursing the rain. It’s just like loving again after experiencing the pain."Mohobbat" bhi Tune Ajib Cheez Banai Hai A"KHUDA".....!

Teri Hi Mandir Me, Tere Hi Log, Tere Hi Samne.,

Rote Hain Kisi Ajnabi K Liye........!!Larkiyo'n Ki Specialty ...

UK: Dressing

Spain Beautiful

... 

America: Stylish

Italy: Friendly

Brazil: Hot

Indian : Kuch Ho Na Ho

Par ATTITUDE Ki Koi Kami Nahi

Mile Gi ...When you are in love, 

you wish you were married. 

When you are married, 

you wish you were in loveGuess :)

The Minimum Area with Maximum number of color paints

Girl face :D

It is also one of the smallest areas with maximum spectatorsI Can Calculate Everything

Even The Velocity Of Light

But

Cannot Calculate The Hate

Of The People Behind Their

SMILE ... !!!Man: Hello 911 !!!

Police: Yes, what's your emergency???

.

.

... ... Man: Two girls r fighting for me

.

.

Police: What is the problem with it Sir???

.

.

Man: The ugly one is winningGirls improve their looks,

not their minds, because they know guys are stupid, not blind" Love" Ur frnds, Not their sisters..

&

Love Ur sisters, Not their Frnds..!True Lines-

"Don't expect a perfect love from any of your close ones...

Just show them what it is..."'The Size Of Candles May Differ

But They Yield The Same Brightness.

It's Not The Matter Of Your Position,

But Your Ability That Shines.'A famous poet ELIOT said:

"When u get little

You want more,

When u get more,

You desire even more,

but when u lose it, u realize

LITTLE was enough"The basic difference b/w GOD & Human?

GOD; gives,gives,gives and 4gives.

HUMAN; GETS,gets,gets and 4gets.Tajmahal kisi ke liye ek AJOOBA hai,

To kisi ke liye pyar ka EHSAS hai,

Hamare tumhare liye to BAKWAS hai,

Kyun ki ki roz badalti humari MUMTAZ hai.There are things we dont want to happen, but have to accept.

Things we dont want to know, but have to learn.

There are people that we cant live without, but have to let go...Dealing with backstabbers, there was one thing I learned. 

They’re only powerful when you got your back turned.There's a reason why they say

teenage years are the toughest

friendships get ruined.

rumors are told.

hearts get broken.

... trust becomes impossible.

judgment is around every corner.

& hope is what keeps you going.Who is a boy?

A boy is the most beautiful part of Gods creation.

He starts compromising at a very tender age.

... 

He sacrifices his chocolates & toys for his sister.

Then he sacrifices his pocket money 4 his gf.

He also sacrifices his cigarette and beer for friends.

He sacrifices his full youth for his wife and children without complaining silently.

Boy's life is tough and full of sacrifices! See not only girls can overreact, we have a tough life too :DAzmaish pyar mein zaruri hoti hai,

Na mil pana kisi ki Majburi hoti hai,

Yaad dur se toh App kar sakte hai,

Lekin dil ki hasrat milne se puri hoti hai. True Lines:

Never go back into an old love,

No matter how strong it is,

Coz its like reading a book over &

over again when u already know

How it Ends..... Easy to have someone who talks to U,

Easy to have someone who likes U,

Still easy to have someone who loves U,

But its hardest to find someone who understands U............Meri 1 Baat Hamesha Yaad Rakhna...

Zindagi Mein Kuch Mile Na Mile.

1 Cheez Hamesha Haq Se Mang Lena.

... 

.

.

Panipuri Khane Ke Baad Sukhi Puri ............When I was a Child,

None of my friends had a watch.

But they had time.

.

.

Now they all have Branded watches...

But none of them have time..:-PQue: Why Do We See

"Maa Ki Dua"

Written On Trucks n Buses..??

Because

... 

Mercedez, CIVICs n C0R0LLAs Are Usually The Result 0F

"Baap Ka Paisa" ;-)Very Very True Message,

But,

Unspoken. . . .

"Love Is On Lips Of Many. . . .

But In The Heart Of Fewaapko pa kar khona nahi chahte,

itna pass ho kar abb rona nahi chahte,

ye alam humara aapki judai k,

aankhoo main neend hai magar sona nahi chahte,The Difference Between

A Corrupt And Honest Person

Is :

The Corrupt Person Has

... PRICE

And

The Honest Person Has

VALUE ... !Definition 0f A Holiday...

A Holiday Is A Day

When A Man Stops Doing

What His BOSS Wants

And

Starts Doing What His WIFE/GF

Wants ... !Accountancy Fact :

What is the difference between Liability & Asset ?

A drunk Guy is a Liability..

But

A drunk Girl is an Asset..!!!Simple line but great meaning...

"Empty Pockets teaches million things in life..."

But,

"Full Pockets spoil's you in million ways..." :-)

Friends R dA Most Dangerous People In dA World.

Bcoz

They Will Do Anything For Friendship, Even Die.!

... ... ...

But

Before dat dey Will Ask

'TREAT"Recent study between four men:

1: White men:

White men will have two girlfriends and have a wife, and he will still love his wife the most.

... 2: Coloured men:

Coloured men will have three girlfriends and a wife, and he will still love his wife the most.

3: Black men:

Black men will have five to ten girlfriends and still love his wife the most.

No. 4 tops the list.

4: Indian men:

Indian men will have two girlfriends and a wife, but he will still love his mother the most.नेहमी लोक म्हणतात कि "जगलो तर भेटू" .......... 

पण 

तुला पाहिल्यापासून सारख वाटत आहे कि "आपण भेटत राहिलो तरच जगू"Lady in phone: Hi sir............ I want to meet & talk to You.,

You are the Father oF 1 oF

my kids...,,

Man stunned OMG,,,

Are you Seema??

... ... No

Reema?

No.

Reena?

No.

Mariya?

No.

Anitha?

No.

Sandhya?

No.

Rani?

No.

Rose?

No.

Rinu?

Lady in confuse,

No sir, I am the class teacher of your Son.!!!Girl Wearing Very Short Skirt,

Boy Asks:Wont Ur Mom Say Anything About Ur Dress? 

Girl:My Mom will b Very Angry,

Bcoz Iam Wearing Her Dress. ye intezzar ka tufan guzarta kyu nai ,

dil toot gaya hai to bikhrta kyu nai,

ek hi shakhs ko chahte hai kyu

itna , koi dusra is dil me utarta kyu naiKuch yaadain yaad rakhna..

Kuch baatain yaad rakhna..

Umar bhar sath rahin ya na rahain hum..

... AE DOSTO

Hum sath rahe thy kabhi..

“BAS WO PAL”

“Yaad rakhna”Never forget my sincere friends

When i see some faults in them

I keep patient & just realize that

.

.

... .

.

“Ab har koi meri terha perfect

tou nahi ho sakta na” ;)Wikipedia: I know about everything happening around 

Google: I can search any thing you desire

Facebook: I know every single person around 

... 

Internet: You are all useless without me

Maharashtra Vij Mandal: Chayla, Kaunala Masti Ali ReSee More

At Some Point,

You Have To Realize That

Some People Can Stay In Your Heart,

But Not In Your Life...Ultimate fact

Diplomacy of girls

They hate It when you ask their age!!

... 

but they would kill you

if you forget their birthdayBachelor:

I don't want to be married

because

I am afraid of ALL

women. !!!!!

... ...

Married friend:

Get married.

Then u will be afraid of

only 1 woman

&

start loving the RESWhat is the difference between poetry and essay???

.

Every word spoken by girlfriend is POETRY....,,

... And

.

.

.

.

.

.

.

A single word spoken by wife is an ESSAY!!!!WOMEN are like Wi-Fi

- They see all available devices but connect to the Best one!

.

.

MEN are like bluetooth

... - No network required.

- Pairs with everyone who is active.

- When they are with u, they are connected.

- When they are away they automatically SEARCH FOR NEW DEVICES !! :Dhusband: when i fight ,you never fight back , why.

wife: i clean the toilet bowl.

husband: how does that help

wife: i use your toothbrush for cleaningNever Laugh at your Girlfriends Choices

.

.

.

.

... .

.

.

You are one of them ;-);-)How times have changed...

Now, 10 year old girls crying, because they broke up with their boyfriends...

.

.

... .

.

.

.

.

When we were 10 years old we cried when we missed the morning cartoons!!!...........When a girl loves a boy, No one knows except the girl.

and 

when a boy loves a girl. Everyone knows except the girl :)Boy To Girl :

You Look Like A Barbie !

Girl :

Thanks!

... ... So You Mean

I m Tall And Beautiful ?

Boy :

No, Plastic And Without Brain...!! :Kismat se apni mujko hamesha Shikayat rahegi,

Jo nahi mil sakta usse mohabbat hamesha rahegi,

kitne hi kyun na aa jaye raho mein,

Phir bhi dil ko usi se chahat rahegi....!Nice Marketing Tip

One day in a super market:

Promo girl: Ma'am free taste here!

... ...

Lady: I'll try one.

(After tasting it)

Lady: Gross! It's already spoiled!

Promo girl: Yes ma'am, that's what will happen to your food if you  don't get a refrigerator! Come and I'll show you our cheapest fridge! :D  :Dow much is 1 + 1?.

.

.

.

.

... .

.

.

.

.

.

.

.

.

.

.

.

are you looking for the answer?

Very good... Which school beta? :PKuch Log Yadon Ko Dil Ki Tasveer Banate Hai,

Doston Ki Yadon Me Mehfil Sajate Hain,

Hum Thode Alag Hai Jo Kisiko Yad Anay

Se Pehle Unko Apni Yad Dilate Hai!For A GIRL Who Says, All MEN Are The SAME

Should Be Asked

.

.

... ... .

Who Told HER To Try

ALL OF THEM..!! ;) :PThere are 3 kind of Men..

Do you know...?

1-The ASIANS-

They have 1 wife & 1 girlfriend but they love their wife the most.

... ...

2-The AMERICANS-

They have 1 wife & 1 girlfriend but they love their girlfriend the most.

3-The INDIAN-

They have 1 wife & 4 girlfriends but they love their house-maid the most...Dosti Ke Bhi Kuch Andaaz Hote Hain

Jagti Aankhon Mein Bhi Khawaab Hote Hain

Zaroori Nahi Ki Gam Mein Aansu Niklein

Muskurati Aankhon Mein Bhi Sailaab Hote Hain

Judge: Why do you want divorce?

Man: She doesn't satisfy me!.

Judge: Is it true madam?

Lady: Damn it! The whole colony is happy, only this idiot has problems.2 Ladkiya bus me seat ke liye lad rahi thi .......... .

Conductor :- Kyun lad rahi ho ?

Jo umar me badi ho wo baith jaaye .......... ..

... 

Bas phir kya tha ,

Dono poore raaste khadi hi rahi .......... .!!!!!!!!! !!!!AMERICA 2 INDIA: "India kitna Garib hai.

INDIA replied :-Beta.!

Tumara Desh Jitna OIL pure sal me Khata h na,,, Utna To Shanivar Ko hum SHANI MAHARAJ Ko Chada Dete hai.....

:) :) :) :)Relationships would be easier if people come

..

..

..

... ..

..

..

..

..

With a "Clear History" buttonA beggar found 100 rs.

He went to 5 star hotel for dinner bill - 3000 rs.

Manager handed him to police.

... 

He gave 100 rs. to police and free.

Its called FINANCIAL MANAGEMENT without MBA.Dosti Ke Nam Pe Diwane Chale Aate Hai.

Shama Ke Piche Parwane Chale Aate Hai.

Tumhe Yad Na Aayee Khair. Aana Meri Maut Par.

Us Din To Begane Bhi Chale Aate Hai....When a Boy and Girl Fall in Love, Who is the one that is benefited most.

.

Is it Boy

.

No

... .

Is it Girl

.

No

.

Than who else any guess

.

The one who receives the most benefits is the Mobile service providerमाणूस म्हणून जगताना

हा एक हिशोब करुन तर बघा !!

“किती जगलो” याऐवजी “कसे जगलो”?

हा एक प्रश्न जरा मनाला विचारुन तर बघा !Phul Lekar Gaye Jab Mandir Toh Ye Ehsas Hua

Ke Patthroko Khush Karne K Liye Phulo Ka Katal Kar aye Hum

Gaye Theh Apne Paap Mitane

Waha or Ek Paap Kar Aye HumLady to bhikhari: mujhe lagata h shayad maine tumhe kahi dekha h. ! !

.

.

.

Bhikhari: kya mamsab bhul gaye. . Kal to aapke sath facebook par chat kar raha tha.. .Daughter: mom. . My boyfriend doesn't believe in heaven and hell.

Mom: alright. . You marry your bf and let him experience heaven in you. . 

I'll take care of the hell part.When a person develop the ability to listen to anything, unconditionally,

without losing his temper or self confidence,

it means he is MARRIED

E x c e l l e n t T h o u g h t
~~ No One Can Ever Fail In...TRUE LOVE ...
We Just Fail ToChoose TheREAL PERSON ... ~~

Seven Fundamentals Of Life For Today …

1. Money is not everything. There’s also Mastercard & Visa.

2. One should love animals.They are tasty too.

3. Save water. Drink beer.

4. Studying is healthy, So leave it for the sick.

5. Books are holy. So don’t touch them.

6. Love your neighbour but never get caught.

7. Everyone should marry because happiness is not the only thing in life.

The worst thing in life is ATTACHMENT, it
hurts when you lose it.
The best thing in life is LONELINESS as it
teaches you everything and when you lose it. u get everything

Suggestion from Narada
If your lover sends you romantic messages don't be very happy.
But...think who is sending those messages to your lover?
My job is over; Narayana ... Narayana

The Truth about Human Tongue:-
It Takes 3 yrs to Learn how to use it.
But,
It takes Lifetime
to Learn

U never get a person of your type In this World
U will either have to adjust
or U will have to Compromise
U adjust when Someone wants to be with U and U compromise when u want to be with some one. .. ..
Amazing but true..

'Everything comes with a price', so do Relationships!"

Sometime or Most of time

The Audience see a Joker As A Joker,
But the Joker Sees Himself
As a Performer.

The sign of maturity is not
when U start speaking big things..
But, actually it is,
When U start understanding Small things…

Pandit: I am so kanjoos
that I went alone for my honeymoon and
saved half the money.
Bania: That is nothing, I saved full money. I sent my wife for honeymoon...

Wife: You tell a man something, it
goes in one ear & comes out of the other.HusbandJi: You tell a woman something, it goes in both ears & comes out
of the mouth.

There were two desi lovers: Champu & Champi. They loved each other so
much that they planned to do Suicide. Champu jumped first.
Now it was Champies
turn.Champi closed her eyes, and returned backsaying
... Loveis Blind.Champu, in mid-air
opened his parachute saying Love never Dies.

Santa: What is the difference between �complete and finish�?
Banta: When you marry
a right person you are complete and when you marry
the wrong one you are finished !!!!!

Management Lesson
You spent 100% income on your wife and get 10%
satisfaction.
on the other hand
... You spent 10% income on your girlfriend and get
100% satisfaction.
your money, your decision.

You must be a good runner because you are
always running in my mind, you must be a good thief because you have stolen my heart, and i am always a bad shooter
because I Miss You Always...

Swap Partition

2010-02-13T04:18:00.000-08:00

Swap

Using Fdisk to create partition

2010-02-10T23:38:00.000-08:00

Determine The Partition Types

fdisk -l command to view all the mounted

or

df -l or df -k

Create partitions on desired hard drive:

# fdisk /dev/sdb
specify the harddrive in case where there is more than one harddrive /dev/sdb drive

'm' is for help

'n' - to add a new partition

'p' - primary

'1' - start cylinder

'+1024M' - to indicate 1 Gigabytes

If we want to change the partition system id than use

't'
the default partition system id is 83 that is linux partition
If you wish to go through default than skip this step

'w' - to save changes to the disk

Re-read the partition table without rebooting Linux system

#partprobe /dev/sda4

Format the raw partition with a ext3 file system

#mke2fs -j /dev/sda4

Mount the file system

#mkdir /users

#mount -o /dev/sda4 /users

#mount or df -h to check that /dev/sda4 is mounted or not

Auto-mount when the system boots

#vi /etc/fstab
/dev/sda4 /users ext3 defaults 0 2

Now reboot the system and than check

Modify /etc/fstab in init1

2010-02-10T22:21:00.000-08:00

Make a not whenever there is a problem and we boot the system in init 1 mode in that case we need to remount the root / partition in read write mode so we are able to modify the files

mount -o remount,rw (root partition) /dev/sda2 /

than modify the files
I was not able to modify /etc/fstab unless i remounted the partition in read write mode

Quota on Centos

2010-02-07T22:25:00.001-08:00

Configuring Disk Quotas

To implement disk quotas, use the following steps:

Enable quotas per file system by modifying the /etc/fstab file.

Remount the file system(s).

Create the quota database files and generate the disk usage table.

Assign quota policies.

Enabling Quotas

As root, using a text editor, edit the /etc/fstab file. Add the usrquota and/or grpquota options to the file systems that require quotas:

/dev/VolGroup00/LogVol00 /         ext3    defaults        1 1 
LABEL=/boot              /boot     ext3    defaults        1 2 
none                     /dev/pts  devpts  gid=5,mode=620  0 0 
none                     /dev/shm  tmpfs   defaults        0 0 
none                     /proc     proc    defaults        0 0 
none                     /sys      sysfs   defaults        0 0 
/dev/VolGroup00/LogVol02 /home     ext3    defaults,usrquota,grpquota  1 2 
/dev/VolGroup00/LogVol01 swap      swap    defaults        0 0 . . .

In this example, the /home file system has both user and group quotas enabled.

Remounting the File System

mount -o remount

Creating the Quota Database Files

The quotacheck command examines quota-enabled file systems and builds a table of the current disk usage per file system.

quotacheck -cug /home

To generate the table of current disk usage per file system with quotas enabled:

quotacheck -avug

Enabling and Disabling

It is possible to disable quotas without setting them to 0. To turn all user and group quotas off, use the following command:

quotaoff -vaug

To enable quotas again, use the quotaon command with the same options.

quotaon -vaug

To enable quotas for a specific file system, such as /home, use the following command:

quotaon -vug /home

If neither the -u or -g options are specified, only the user quotas are enabled. If only -g is specified, only group quotas are enabled.

NOTE 1BLOCK IS APPROX 1kb

Assigning Quotas per User

To configure the quota for a user, as root in a shell prompt, execute the command:

edquota  testuser (username)
          
Disk quotas for user testuser (uid 501):   
Filesystem                blocks     soft     hard    inodes   soft   hard   
/dev/VolGroup00/LogVol02  440436        0        0     37418      0      0

The first column is the name of the file system that has a quota enabled for it.
The second column shows how many blocks the user is currently using.
The next two columns are used to set soft and hard block limits for the user on the file system.
The inodes column shows how many inodes the user is currently using.
The last two columns are used to set the soft and hard inode limits for the user on the file system.

The hard block limit is the absolute maximum amount of disk space that a user or group can use. Once this limit is reached, no further disk space can be used.

The soft block limit defines the maximum amount of disk space that can be used. However, unlike the hard limit, the soft limit can be exceeded for a certain amount of time.

If any of the values are set to 0, that limit is not set. In the text editor, change the desired limits. For example:

Disk quotas for user testuser (uid 501):   Filesystem                blocks     soft     hard   inodes   soft   hard   /dev/VolGroup00/LogVol02  440436   500000   550000    37418      0      0

To verify that the quota for the user has been set, use the command:

quota testuser

Assigning Quotas per Group

edquota -g devel

This command displays the existing quota for the group in the text editor:

Disk quotas for group devel (gid 505):   
Filesystem                blocks    soft     hard    inodes    soft    hard   
/dev/VolGroup00/LogVol02  440400       0        0     37418       0       0
   
Modify the limits, then save the file.

To verify that the group quota has been set, use the command:

quota -g devel

Setting the Grace Period for Soft Limits

edquota -t

While other edquota commands operate on a particular user's or group's quota, the -t option operates on every filesystem with quotas enabled.

Reporting on Disk Quotas

repquota -a /home

Keeping Quotas Accurate
Whenever a file system is not unmounted cleanly (due to a system crash, for example), it is necessary to run quotacheck. However, quotacheck can be run on a regular basis, even if the system has not crashed. Running the following command periodically keeps the quotas more accurate

quotacheck -avug

The easiest way to run it periodically is to use cron.

Windows 2003 GPO Not Working Properly

2010-02-04T04:21:00.000-08:00

Group policy was not getting applied to one of Machine in the network

I run following command on the server:
C:\>gpupdate /force
Refreshing Policy...
User Policy Refresh has completed.
Computer Policy Refresh has completed.
To check for errors in policy processing, review the event log.

Then I run gpresult on both machines

From the Windows 2003 Server:
C:\>gpresult /s spare11 >gp-spare11.txt
ERROR: The RPC server is unavailable.

From the PC itself:
C:\>gpresult
INFO: The policy object does not exist

The Solution to this is DNS Server

On the Server-side PC I removed the external DNS IP address and entered it in DNS server properties, under the forwarders tab I entered the external IP

On the Client-side I entered the server-side IP address as the DNS. The Windows server picked up the client-side PC. And it worked!!!

WINDOWS 2003 RESTRICT USER TO LOGON TO SPECIFIC COMPUTER

2010-02-03T23:23:00.000-08:00

IN WINDOWS 2003 RESTRICT USER TO LOGIN TO PARTUCAR COMPUTER ONLY

Open Active Directory Users and Computers from Administrative Tools

Double click the user and go to Account tab and click on Log on To and then select the computer or computers you want to allow the user to logon

Block Different types of Files type on windows 2003 server

2010-01-10T23:30:00.000-08:00

Thanks to guy who originally posted it

At A Glance:
It can be challenging to keep users from totally consuming all available disk space on your servers—or worse, saving files that pose a threat to your servers’ security. With Windows Server 2003 R2’s new file screening capabilities, you can now protect your servers by preventing users from saving specific types of files.

To help you implement file screening, we’ll:

• Describe what file screening is and why you should consider implementing it.
• Discuss the default file screen templates and file groups available to you.
• Walk you through creating a typical file screen on your server.

At one time or another, every network administrator has faced the problem of dealing with users downloading unwanted files. If the files are extremely large, such as rich content media files, the server can quickly run out of disk space. Wouldn’t it be nice if you could prevent users from saving such files to your servers without having to go through the hassle of implementing disk quotas? In this article, we’ll show you how to screen files to avoid such a problem.

File screening in a nutshell

File screening, one of the new features implemented in Windows Server 2003 R2, enables you to define lists of unauthorized file types and then either:

Prevent users from saving the unauthorized file types (called active file screening).

Permit users to save the unauthorized file types, but record these activities and notify the user, administrator, or both (called passive file screening).

You configure a file screen by selecting a file screen template. The file screen template, in turn, defines the following:

The type of screening you want to perform (active or passive).

The types of files to which you want the screen to apply.

Whether you want to notify a user, administrator, or both when a user attempts to save an unauthorized file type.

Whether you want to log a message in the Application log regarding the attempt to save an unauthorized file type.

Whether you want Windows Server 2003 to run a specific command when a user attempts to save an unauthorized file type.

The types of reports you want Windows Server 2003 to generate based on a user’s activity.

File screen templates and file groups

Windows Server 2003 includes five default file screening templates. It identifies the file types on which each template acts by file groups. A file group is simply a collection of file extensions that are either included (meaning the template’s action applies to these files) or excluded (meaning the template doesn’t apply).

In Table A, we list the default file screen templates included with Windows Server 2003 R2, along with the default file groups to which they apply. In Table B, we list the default file groups and the types of files associated with them.

Table A: Default file screen templates

Template name	Screen type	Applies to file groups
Block Audio And Video Files	Active	Audio And Video Files
Block E-Mail Files	Active	E-Mail Files
Block Executable Files	Active	Executable Files
Block Image Files	Active	Image Files
Monitor Executable And System Files	Passive	Executable Files and System Files

Table B: Default file groups

File group name	File extensions included
Audio And Video Files	.aac, .aif, .aiff, .asf, .asx, .au, .avi, .m3u, .mid, .midi, .mov, .mp1, .mp2, .mp3, .mp4, .mpe, .mpeg, .mpeg2, .mpeg3, .mpg, .qt, .qtw, .ram, .rm, .rmi, .rmvb, .snd, .swf, .wav, .wax, .wma, .wmv, .wvx
Backup Files	.bak, .bck, .bkf, .old
Compressed Files	.ace, .arc, .arj, .bhx, .bz2, .cab, .gz, .gzip, .hpk, .hqx, .lha, .lzh, .lzx, .pak, .pit, .rar, .sea, .sit, .sqz, .tar, .tgz, .uu, .uue, .z, .zip, .zoo
E-Mail Files	.eml, .idx, .mbx, .msg, .ost, .otf, .pag, .pst
Executable Files	.bat, .cmd, .com, .cpl, .exe., .inf, .js, .jse, .msi, .msp, .ocx, .pl, .reg, .vb, .vbs, .wsf, .wsh
Image Files	.bmp, .dib, .gif, .img, .jfif, .jpe, .jpeg, .jpg, .pcx, .png, .psd, .raw, .rif, .spiff, .tif, .tiff
Office Files	.doc, .dot, .mad, .maf, .mda, .mdb, .mdm, .mdt, .mdw, .mdz, .mpd, .mpp, .mpt, .pot, .ppa, .pps, .ppt, .pwz, .rqy, .rtf, .rwz, .slk, .vdx, .vsd, .vsl, .vss, .vst, .vsu, .vsw, .vsx, .vtx, .wbk, .xla, .xlb, .xlc, .xld, .xlk, .xll, .xlm, .xls, .xlt, .xlv, .xlw
System Files	.acm, .dll, .ocx, .sys, .vxd
Temporary Files	.temp, .tmp, ~*
Text Files	.asc, .text, .txt, .wri
Web Page Files	.asp, .aspx, .css, .dhtml, .hta, .htm, .html, .mht, .shtml, .url

Although these templates and file groups are already defined for you in Windows Server 2003 R2, keep in mind that they aren’t active until you configure a file screen. A file screen is where you activate a file screen template.

Manage file screen templates and file groups

You can use either the File Server Management or the File Server Resource Manager consoles to manage the components of file screens. These consoles aren’t installed unless you’ve configured your server as a file server.

To configure your server as a file server:

Choose Start | Administrative Tools | Configure Your Server Wizard.

Click Next on the Welcome page of the wizard.

Click Next on the Preliminary Steps page.

Select File Server in the Server Role list and click Next.

Select the check boxes for the file server components you want to install on the File Server Environment page, and then click Next.

Click Finish when the installation completes, and then click Yes to restart the server.

To access file screen templates and file groups:

Choose Start | Administrative Tools | File Server Management.

In the console tree, expand File Server Resource Manager and then File Screening Management. You now see the nodes for configuring file screens, templates, and file groups.

Select File Screens. As you can see, Windows Server 2003 R2 doesn’t define any default file screens.

In the console tree, select File Screen Templates to review the default templates, as shown in Figure A.

Select File Groups. You now see the default file groups listed in the details pane.

Figure A: The default file screen templates enable you to easily prevent users from saving files that could jeopardize your server’s security.

Configure notifications

For your file server to notify a user, administrator, or both whenever the user attempts to save an unauthorized file, you must first configure the server with an SMTP server’s name or IP address. In addition, you can specify a default administrator email address to which the file server will send its notifications.

To configure the file server with an SMTP server:

In the File Server Management console, right-click on the File Server Resource Manager node and choose Configure Options.

In the SMTP Server Name Or IP Address text box, type the name or IP address of the SMTP server to which you want the server to send its emails.

In the Default Administrator Recipients text box, you can optionally type the email address of at least one administrator (or use an administrative distribution list). If you want to enter multiple recipients, type each email address separated by a semicolon. We show you the completed dialog box in Figure B.

Click Send Test E-Mail to verify the server’s configuration. If necessary, correct any mistakes.

Click OK to save your changes.

Figure B: Before your file server can notify you when a user attempts to save an unauthorized file type, you must first configure it to use an SMTP server.

File screening in practice

Your first step in protecting your servers by screening unauthorized file types is to develop a strategy. Next, you create the custom file groups and file screen templates (if necessary) to implement your strategy. Finally, you create one or more file screens to use your templates. If you want to permit users to create certain file types in only a certain folder and its subfolders, you must also create a file screen exception.

Develop a strategy

There are two factors you should consider when designing your file screen strategy. These include:

Which file types do you want to prevent users from saving on your servers? Can you use one of the default file groups or do you need to create a custom file group?

In what folders do you want to prevent users from saving these files? Is it all folders on the server, or only certain folders?

Prevent users from saving audio and video files

For the sake of an example, you’re concerned about users wasting disk space on your file server. So, you’ve decided that you don’t want to permit users to store audio or video files in the shared data and user profile locations on the server. The good news is that we can use one of the default file screen templates, Block Audio And Video Files, to implement this strategy. We’d like Windows Server 2003 R2 to notify both the user and the administrator by email whenever the user attempts to save an unauthorized file. To do so, we must first modify the properties of the template.

Note: If you’ve already defined file screens that use a default file screen template, you shouldn’t modify this template. Instead, you should copy the template, make the changes you want, and then create a file screen that uses this new template.

To modify the default audio and video template to send email notifications:

In the File Server Management console, select the File Screen Templates node.

In the details pane, right-click on the Block Audio And Video Files template and choose Edit Template Properties.

Select the E-Mail Message tab.

Select the Send E-Mail To The Following Administrators check box, and then specify an administrator email account.

Verify that the Send E-Mail To The User Who Attempted To Save An Unauthorized File check box is selected, as shown in Figure C.

Edit the Subject and Message Body text boxes as desired. You can use the Select Variable To Insert In Your Text dropdown list to select any of the predefined variables. We describe the key variables you might use in Table C.

Click OK twice to save your changes.

Figure C: You can modify any of the default file screen templates to enable them to send notifications via email.

Table C: Key variables for email subject and message

Variable	Use to insert
[Admin Email]	The email address(es) of the administrator(s) you defined by selecting Configure Options on the File Server Resource Manager node.
[File Screen Path]	The local folder in which the user attempted to save the unauthorized file (such as C:\Projects).
[File Screen Remote Paths]	The remote folder in which the user attempted to save the unauthorized file (such as \\server\share_name).
[Server Domain]	The domain name of the server on which the user attempted to save the file.
[Server]	The server on which the user attempted to save the file.
[Source File Owner Email]	The email address of the user who attempted to save the file.
[Source File Owner]	The username of the user who attempted to save the file.

To create a file screen to block files:

In File Server Management, select and then right-click on the File Screens node. Choose Create File Screen.

In the File Screen Path text box, type or browse to select the path to which you want the file screen to apply. In our example, we want to prevent users from storing audio and video files in the shared data folder on our server, so we typed C:\SharedData.

From the Derive Properties From This File Screen Template (Recommended) dropdown list, select the appropriate template is selected (Block Audio And Video Files in our example), as shown in Figure D.

Click Create to save the file screen.

Repeat steps 1 through 4 to block files in other paths as necessary.

Test the file screen by attempting to save an unauthorized file type in the appropriate folder.

Figure D: You’ll find it easiest to create a file screen by selecting a file screen template.

Define exceptions

In some cases, you might find that you want to exclude certain subfolders from blocking specific file types. For example, you might find that some of your users have legitimate reasons for saving audio and video files on your server. In this scenario, you should define an exception.

To create an exception to a file screen:

In File Server Management, select the File Screens node.

Right-click on the File Screens node and choose Create File Screen Exception.

In the Exception Path text box, type or browse to select the path in which you want to permit users to store the previously blocked files.

In the File Groups list, select the check box(es) for the files you want to permit users to store in the selected folder, as shown in Figure E.

Click OK.

Test the exception by verifying that you can save the file type in the selected folder.

Figure E: If necessary, you can define exceptions to permit users to store blocked files in certain folders.

Design your own file screens

You should be aware that you can apply only one file screen to a given folder. So, if you want to block multiple file types within a folder, such as audio and video files as well as executable files, you should create a custom file group that contains the extensions for all those file types. Then, create a template that applies to this file group. And finally, create a file screen using the template.

Configure Centos 5 Server Practical Steps

2009-12-23T22:13:00.000-08:00

Steps to Configure Centos 5 Server Steps in Practical world

Kamlesh Gosavi

How to share internet over WiFi from wvdial Adhoc

Configure Postfix, Dovecot IMAP/POP3, Fetchmail server on ubuntu 10.04

Introduction

Example Setup

Install Postfix

Setting Postfix Support for Maildir-style Mailboxes

Postfix virtual Mailboxes for Separate Domains and Non-Linux Accounts

Create Virtual Mailbox Owner

Setup Postfix to Use Virtual Mailboxes

Test Virtual Mailbox Setup

Setup Non-Linux Accounts

Install Dovecot IMAP/POP3 server

Configure Dovecot

Create Dovecot Users

Scripts to Add and Delete Users

C#/Mono Application to Add Users

Postfix SASL

Make Dovecot listen for authenticating request

HERE LINE 8 GIVES PROBLEM WORKS FINE AFTER COMMENTING TO # IT

Configuring Postfix for SASL

Testing Your Setup

With mutt

With telnet

SMTP through ISP

Postfix relayhost

Installing Fetchmail

3 Configure fetchmail

3.1 Run fetchmail As A Daemon With A Global Configuration File

ClamSMTP SMTP Virus Filter

Installing ClamAV

Installing ClamSMTP

Setting Postfix to use ClamSMTP

Test ClamSMTP for outgoing mail

Network is not accessible. You might not have permission to use

How to Reset Microsoft Outlook View to default

How to Disable Write Access to USB Hard Disk and Flash Key Drives

How to Disable Write Access to USB Hard Disk and Flash Key Drives

Traffic monitoring tool in ubuntu

Restore Panels In Ubuntu Back To Their Default Settings

How To Save And Restore Your Panel In Ubuntu Linux

VPN Server on Ubuntu

How to Install and Configure DHCP Server in Ubuntu Server

How to Install and Configure DHCP Server in Ubuntu Server

Dansguardian Content Filtering With Squid Transparent Proxy On Ubuntu

Set Up DansGuardian; Internet Content Filter

Test Proxy

For Transparent proxy

Edit the /etc/sysctl.conf

Squid3 Transparent Proxy

Howto clear/Flush DNS Cache in Ubuntu

Local DNS Cache for Faster Browsing on Ubuntu Server 10.04

Funny SMS & Quotes

I cannot be good enough for everybody, but I will always be the best for the one who deserves me.

I'm not scared anymore. Because I know In the end, Fate will bring us together or bring us something better

You can't upload love. You can't download time. You can't Google all of life's answer. ... You must actually live some of your life.

I really can't picture anyone having a crush on me. It's just weird to think someone actually taking time to think of me

I felt special until i saw you talk to everyone like that...

You can close your eyes from the things you don’t want to see but you can never close your heart from the things you don’t want to feel.

मन गुंतायला वेळ लागत नाही मन तुटायला वेळ लागत नाही वेळ लागतो ते गुंतलेले मन आवरायला ! आणि तुटलेले मन सावरायला . ..... -

Love doesn’t count on the laughter that you shared but on the pain and tears you tried to get over with just for the sake of holding on.

Every day may not be Good.,. But There's Something good in Every Day.,. Start Ur day with Smile on Ur Face :) ♥ Keep Shining keep Smiling ♥

Guzare Huve Kal Ki Yaad aati hai, kuch lamhon se aankhen bhar aati hain, woh subah rangeen shaam nirali doob jati hain, jab aap jaise doston ki yaad aati hai....!

kabhi yaroo ki mehfil me bait ke hum bhi piya karte the Kabh yaroo ke yaar ban ke hum bi jiya karte the Zindagi ne ki bewafi ,warna hum bhi zingadi se pyar kiya karte the...!

Every heart has a pain.. Only the way of expression is different.. Some hide it in eyes while some hide in their smile...!

'Jo dost, kaminey nahi hote.. . . . . ... . . . . . Wo kaminey, dost hi nahi hote...!

Third Person Never Creates Any Misunderstanding Between Two Peoples. But... ... Misunderstanding Between Two People Creates Space for Third Person.

Words and hearts should be handled with care for words when spoken and hearts when broken are the hardest things to repair.

Rabba Tune Dil Cheez Banai Na Hoti Zindagi Jo Apni thi Wo Aaj Parai na Hoti....

Most relationships fail not because of absence of love; but because girls love too much & boys love too many.

Girl: So is it gonna be me, or her? Boy: If you loved me, you wouldn't make me choose. Girl: If you loved me, there wouldn't even be an option.

“These days many relationships are like flowers, they are beautiful at first till they die a week later"

If I could be any part of you, I’d be your tear. To be conceived in your heart, born in your eyes, live on your cheeks, and die on your lips.

Learn to appreciate the rainbow after cursing the rain. It’s just like loving again after experiencing the pain.

"Mohobbat" bhi Tune Ajib Cheez Banai Hai A"KHUDA".....! Teri Hi Mandir Me, Tere Hi Log, Tere Hi Samne., Rote Hain Kisi Ajnabi K Liye........!!

Larkiyo'n Ki Specialty ... UK: Dressing Spain Beautiful ... America: Stylish Italy: Friendly Brazil: Hot Indian : Kuch Ho Na Ho Par ATTITUDE Ki Koi Kami Nahi Mile Gi ...

When you are in love, you wish you were married. When you are married, you wish you were in love

Guess :) The Minimum Area with Maximum number of color paints Girl face :D It is also one of the smallest areas with maximum spectators

I Can Calculate Everything Even The Velocity Of Light But Cannot Calculate The Hate Of The People Behind Their SMILE ... !!!

Man: Hello 911 !!! Police: Yes, what's your emergency??? . . ... ... Man: Two girls r fighting for me . . Police: What is the problem with it Sir??? . . Man: The ugly one is winning

I cannot be good enough for everybody,
but I will always be the best for the one who deserves me.

I'm not scared anymore. Because I know
In the end,
Fate will bring us together
or bring us something better

You can't upload love.

You can't download time.

You can't Google all of life's answer.
...
You must actually live some of your life.

I really can't picture anyone
having a crush on me. It's just weird to think someone
actually taking time to think of me

You can close your eyes from the things you don’t want to see
but you can never close your heart from the things you don’t want to feel.

मन गुंतायला वेळ लागत नाही
मन तुटायला वेळ लागत नाही
वेळ लागतो ते गुंतलेले मन आवरायला !
आणि तुटलेले मन सावरायला . ..... -

Love doesn’t count on the laughter that you shared
but on the pain and tears you tried to get over with just for the sake of holding on.

Every day may not be Good.,.

But There's Something good in Every Day.,.

Start Ur day with Smile on Ur Face :) ♥

Keep Shining keep Smiling ♥

Guzare Huve Kal Ki Yaad aati hai,
kuch lamhon se aankhen bhar aati hain,
woh subah rangeen shaam nirali doob jati hain,
jab aap jaise doston ki yaad aati hai....!

kabhi yaroo ki mehfil me bait ke hum bhi piya karte the
Kabh yaroo ke yaar ban ke hum bi jiya karte the
Zindagi ne ki bewafi ,warna
hum bhi zingadi se pyar kiya karte the...!

Every heart has a pain..
Only the way of expression is different..
Some hide it in eyes while some hide in their smile...!

'Jo dost, kaminey nahi hote..
.
.
.
.
... .
.
.
.
.
Wo kaminey,
dost hi nahi hote...!

Third Person Never Creates Any Misunderstanding
Between Two Peoples.

But...

... Misunderstanding Between Two People Creates Space for Third Person.

Most relationships fail not because of absence of love;
but because girls love too much
& boys love too many.

Girl: So is it gonna be me, or her?
Boy: If you loved me, you wouldn't make me choose.
Girl: If you loved me, there wouldn't even be an option.

If I could be any part of you,
I’d be your tear.
To be conceived in your heart,
born in your eyes,
live on your cheeks,
and die on your lips.

"Mohobbat" bhi Tune Ajib Cheez Banai Hai A"KHUDA".....!

Teri Hi Mandir Me, Tere Hi Log, Tere Hi Samne.,

Rote Hain Kisi Ajnabi K Liye........!!

Larkiyo'n Ki Specialty ...

UK: Dressing

Spain Beautiful
...
America: Stylish

Italy: Friendly

Brazil: Hot

Indian : Kuch Ho Na Ho
Par ATTITUDE Ki Koi Kami Nahi
Mile Gi ...

When you are in love,
you wish you were married.
When you are married,
you wish you were in love

Guess :)
The Minimum Area with Maximum number of color paints

Girl face :D

It is also one of the smallest areas with maximum spectators

I Can Calculate Everything
Even The Velocity Of Light
But
Cannot Calculate The Hate
Of The People Behind Their
SMILE ... !!!

Man: Hello 911 !!!

Police: Yes, what's your emergency???
.
.
... ... Man: Two girls r fighting for me
.
.
Police: What is the problem with it Sir???
.
.
Man: The ugly one is winning

Girls improve their looks,
not their minds, because they know guys are stupid, not blind

" Love" Ur frnds, Not their sisters..

&

Love Ur sisters, Not their Frnds..!

True Lines-

"Don't expect a perfect love from any of your close ones...
Just show them what it is..."

'The Size Of Candles May Differ
But They Yield The Same Brightness.
It's Not The Matter Of Your Position,
But Your Ability That Shines.'

A famous poet ELIOT said:
"When u get little
You want more,
When u get more,
You desire even more,
but when u lose it, u realize
LITTLE was enough"

The basic difference b/w GOD & Human?
GOD; gives,gives,gives and 4gives.
HUMAN; GETS,gets,gets and 4gets.

Tajmahal kisi ke liye ek AJOOBA hai,
To kisi ke liye pyar ka EHSAS hai,
Hamare tumhare liye to BAKWAS hai,
Kyun ki ki roz badalti humari MUMTAZ hai.

There are things we dont want to happen, but have to accept.
Things we dont want to know, but have to learn.
There are people that we cant live without, but have to let go...

Dealing with backstabbers, there was one thing I learned.
They’re only powerful when you got your back turned.

There's a reason why they say
teenage years are the toughest
friendships get ruined.
rumors are told.
hearts get broken.
... trust becomes impossible.
judgment is around every corner.
& hope is what keeps you going.

Azmaish pyar mein zaruri hoti hai,
Na mil pana kisi ki Majburi hoti hai,
Yaad dur se toh App kar sakte hai,
Lekin dil ki hasrat milne se puri hoti hai.

True Lines:
Never go back into an old love,
No matter how strong it is,
Coz its like reading a book over &
over again when u already know
How it Ends.....

Easy to have someone who talks to U,

Easy to have someone who likes U,

Still easy to have someone who loves U,

But its hardest to find someone who understands U............

Meri 1 Baat Hamesha Yaad Rakhna...

Zindagi Mein Kuch Mile Na Mile.

1 Cheez Hamesha Haq Se Mang Lena.
...
.
.

Panipuri Khane Ke Baad Sukhi Puri ............

When I was a Child,
None of my friends had a watch.
But they had time.
.
.
Now they all have Branded watches...
But none of them have time..:-P

Que: Why Do We See
"Maa Ki Dua"
Written On Trucks n Buses..??

Because
...
Mercedez, CIVICs n C0R0LLAs Are Usually The Result 0F
"Baap Ka Paisa" ;-)

Very Very True Message,
But,
Unspoken. . . .

"Love Is On Lips Of Many. . . .
But In The Heart Of Few

aapko pa kar khona nahi chahte,
itna pass ho kar abb rona nahi chahte,
ye alam humara aapki judai k,
aankhoo main neend hai magar sona nahi chahte,

The Difference Between
A Corrupt And Honest Person
Is :

The Corrupt Person Has
... PRICE
And
The Honest Person Has
VALUE ... !

Definition 0f A Holiday...
A Holiday Is A Day
When A Man Stops Doing
What His BOSS Wants
And
Starts Doing What His WIFE/GF
Wants ... !

Accountancy Fact :

What is the difference between Liability & Asset ?

A drunk Guy is a Liability..
But
A drunk Girl is an Asset..!!!

Simple line but great meaning...

"Empty Pockets teaches million things in life..."

But,

"Full Pockets spoil's you in million ways..." :-)

Friends R dA Most Dangerous People In dA World.

Bcoz

They Will Do Anything For Friendship, Even Die.!
... ... ...
But
Before dat dey Will Ask

'TREAT"

नेहमी लोक म्हणतात कि "जगलो तर भेटू" ..........
पण
तुला पाहिल्यापासून सारख वाटत आहे कि "आपण भेटत राहिलो तरच जगू"

Lady in phone: Hi sir............ I want to meet & talk to You.,
You are the Father oF 1 oF
my kids...,,
Man stunned OMG,,,
Are you Seema??
... ... No
Reema?
No.
Reena?
No.
Mariya?
No.
Anitha?
No.
Sandhya?
No.
Rani?
No.
Rose?
No.
Rinu?
Lady in confuse,
No sir, I am the class teacher of your Son.!!!

Girl Wearing Very Short Skirt,

Boy Asks:Wont Ur Mom Say Anything About Ur Dress?

Girl:My Mom will b Very Angry,

Bcoz Iam Wearing Her Dress.

ye intezzar ka tufan guzarta kyu nai ,
dil toot gaya hai to bikhrta kyu nai,
ek hi shakhs ko chahte hai kyu
itna , koi dusra is dil me utarta kyu nai

Kuch yaadain yaad rakhna..

Kuch baatain yaad rakhna..

Umar bhar sath rahin ya na rahain hum..
... AE DOSTO
Hum sath rahe thy kabhi..

“BAS WO PAL”
“Yaad rakhna”

Never forget my sincere friends
When i see some faults in them
I keep patient & just realize that
.
.
... .
.
“Ab har koi meri terha perfect
tou nahi ho sakta na” ;)

Wikipedia: I know about everything happening around

Google: I can search any thing you desire

Facebook: I know every single person around
...
Internet: You are all useless without me

Maharashtra Vij Mandal: Chayla, Kaunala Masti Ali ReSee More

At Some Point,
You Have To Realize That
Some People Can Stay In Your Heart,
But Not In Your Life...

Ultimate fact

Diplomacy of girls

They hate It when you ask their age!!
...
but they would kill you

if you forget their birthday

Bachelor:
I don't want to be married
because
I am afraid of ALL
women. !!!!!
... ...
Married friend:
Get married.
Then u will be afraid of
only 1 woman
&
start loving the RES

What is the difference between poetry and essay???
.

Every word spoken by girlfriend is POETRY....,,

... And
.
.
.
.
.
.
.
A single word spoken by wife is an ESSAY!!!!

WOMEN are like Wi-Fi
- They see all available devices but connect to the Best one!
.
.
MEN are like bluetooth
... - No network required.
- Pairs with everyone who is active.
- When they are with u, they are connected.
- When they are away they automatically SEARCH FOR NEW DEVICES !! :D

husband: when i fight ,you never fight back , why.
wife: i clean the toilet bowl.
husband: how does that help
wife: i use your toothbrush for cleaning

Never Laugh at your Girlfriends Choices
.
.
.
.
... .
.
.
You are one of them ;-);-)

How times have changed...

Now, 10 year old girls crying, because they broke up with their boyfriends...
.
.
... .
.
.
.
.
When we were 10 years old we cried when we missed the morning cartoons!!!...........

When a girl loves a boy, No one knows except the girl.

and

when a boy loves a girl. Everyone knows except the girl :)

Boy To Girl :
You Look Like A Barbie !

Girl :
Thanks!
... ... So You Mean
I m Tall And Beautiful ?

Boy :
No, Plastic And Without Brain...!! :

Kismat se apni mujko hamesha Shikayat rahegi,
Jo nahi mil sakta usse mohabbat hamesha rahegi,
kitne hi kyun na aa jaye raho mein,
Phir bhi dil ko usi se chahat rahegi....!

ow much is 1 + 1?.
.
.
.
.
... .
.
.
.
.
.
.
.
.
.
.
.
are you looking for the answer?

Very good... Which school beta? :P

Kuch Log Yadon Ko Dil Ki Tasveer Banate Hai,
Doston Ki Yadon Me Mehfil Sajate Hain,
Hum Thode Alag Hai Jo Kisiko Yad Anay
Se Pehle Unko Apni Yad Dilate Hai!

For A GIRL Who Says, All MEN Are The SAME

Should Be Asked
.
.
... ... .
Who Told HER To Try
ALL OF THEM..!! ;) :P

Dosti Ke Bhi Kuch Andaaz Hote Hain
Jagti Aankhon Mein Bhi Khawaab Hote Hain
Zaroori Nahi Ki Gam Mein Aansu Niklein
Muskurati Aankhon Mein Bhi Sailaab Hote Hain

Judge: Why do you want divorce?

Man: She doesn't satisfy me!.

Judge: Is it true madam?

Lady: Damn it! The whole colony is happy, only this idiot has problems.

2 Ladkiya bus me seat ke liye lad rahi thi .......... .

Conductor :- Kyun lad rahi ho ?

Jo umar me badi ho wo baith jaaye .......... ..
...
Bas phir kya tha ,

Dono poore raaste khadi hi rahi .......... .!!!!!!!!! !!!!

AMERICA 2 INDIA: "India kitna Garib hai.

INDIA replied :-Beta.!
Tumara Desh Jitna OIL pure sal me Khata h na,,, Utna To Shanivar Ko hum SHANI MAHARAJ Ko Chada Dete hai.....
:) :) :) :)

Relationships would be easier if people come

..
..
..
... ..
..
..
..
..

With a "Clear History" button

A beggar found 100 rs.

He went to 5 star hotel for dinner bill - 3000 rs.

Manager handed him to police.
...
He gave 100 rs. to police and free.

Its called FINANCIAL MANAGEMENT without MBA.

Dosti Ke Nam Pe Diwane Chale Aate Hai.
Shama Ke Piche Parwane Chale Aate Hai.
Tumhe Yad Na Aayee Khair. Aana Meri Maut Par.
Us Din To Begane Bhi Chale Aate Hai....

When a Boy and Girl Fall in Love, Who is the one that is benefited most.
.
Is it Boy
.
No
... .
Is it Girl
.
No
.
Than who else any guess
.
The one who receives the most benefits is the Mobile service provider

माणूस म्हणून जगताना
हा एक हिशोब करुन तर बघा !!

“किती जगलो” याऐवजी “कसे जगलो”?
हा एक प्रश्न जरा मनाला विचारुन तर बघा !

Phul Lekar Gaye Jab Mandir Toh Ye Ehsas Hua

Ke Patthroko Khush Karne K Liye Phulo Ka Katal Kar aye Hum

Gaye Theh Apne Paap Mitane

Waha or Ek Paap Kar Aye Hum