LINUX--FIXES

How to Find SETUID && SETGID Files.

2012-06-22T02:39:00.000-07:00

Use below given script :--

find / -type f $ -perm -04000 -o -perm -02000 $ \-exec ls -lg {} \;

Syn Attack

2012-02-08T09:14:00.000-08:00

#SYN ATTACK :--

***********************************************
If under a SYN flood attack, it would look like this : --

tcp        0      0 12.34.56.78:80        211.48.6.244:1048   SYN_RECV
tcp        0      0 12.34.56.78:80        128.223.93.135:1167     SYN_RECV
tcp        0      0 12.34.56.78:80        194.15.197.170:1192     SYN_RECV
tcp        0      0 12.34.56.78:80        199.155.53.109:1039     SYN_RECV
tcp        0      0 12.34.56.78:80        4.168.188.28:1048   SYN_RECV

when you run : netstat -an |grep :80 |more
but with several hundred of them, not five :)
Assuming your kernel was built with syncookie support, type the following as root.
echo 1 > /proc/sys/net/ipv4/tcp_syncookies
If it's not enabled, there isn't much you can do other than build a new kernel and reboot and use it or wait out the attack,

Some data centers can help with this as well....

----------------------------------------------------------------------------

HardDisk Parameters (DMA/UDMA/CAPABILITIES)

2012-01-22T11:46:00.000-08:00

Commands are given below :-

----------------------

* To enable DMA for a hard drive: hdparm -d1 /dev/hda

* To disable DMA for a hard drive: hdparm -d0 /dev/hda

* To measure transfer rate of a hard drive: hdparm -Tt /dev/hda

* To see what options are enabled for a hard drive: hdparm /dev/hda

* To see more info on your drive than you wanted to know: (this will show which UDMA modes are supported/enabled) hdparm -i /dev/hda

Default locations for most commonly used configuration files and important directories:

2012-01-18T13:09:00.000-08:00

**/ There are some important configuration files :--

..............***.................

#Exim
/etc/exim.conf
/var/log/exim_mainlog
/var/log/exim_rejectlog
/etc/valiases/
/etc/vfilters/
/home/username/.forward

..............***.................

#MySQL
/root/.my.cnf
/etc/my.cnf
/var/lib/mysql/
...............***................

#Apache
/usr/local/apache/conf/httpd.conf
/usr/local/apache/domlogs/
..............***.................

#System
/var/log/messages
/var/log/dmesg

..............***.................

#Proftpd
/etc/proftpd.conf
/var/log/xferlog
/etc/proftpd/
................***...............

#sshd
/etc/ssh/sshd_config
...............***................

#PureFtp Config File
/etc/sysconfig/pure-ftpd
...............***................

#Disable SMART Error in Cpanel
touch /var/cpanel/disablesmartcheck
/scripts/updatenow

How to clear a full partition

2012-01-11T12:42:00.000-08:00

-->tail -5000 filename > filename.new

mv filename.new filename sync

This will copy the last 5000 lines from the file to a temporary file.

Now you probably want to restart whatever service it is that created the file to release it's file lock on the file.

/usr also fills up sometimes because of apache. The first thing you should look at is usually the apache logs.

cd to /usr/local/apache

and type "du -sh *" and chances are you'll find that the logs/error_log or logs/access_log is very large.

Feel free to delete them or use the tail trick above.

-----****-----****------****------****------

How to install a Perl Module

2012-01-08T12:42:00.000-08:00

--: Steps are given below :--

--> On a server with CPanel, you can log into the WHM and install it there,

If that for some reason doesn't work for you, you can log into the shell as root ,

and install it via the command line. Once logged in, from any directory,
type: echo "HTML::Template" | /usr/local/cpanel/whostmgr/bin/perlmod -i

(in this case, the module we want to install is HTML::Template).

Cpanel License File Expired

2012-01-06T12:09:00.001-08:00

-------------------------------

service iptables stop

/usr/local/cpanel/cpkeyclt

service iptables start

------------------------------

C-panel license expired

2012-01-05T14:18:00.000-08:00

Please refer to the following link to confirm that the CPanel License is active: -
http://verify.cpanel.net/

***********

Please refer to the following link to confirm that the CPanel License is active: -
http://verify.cpanel.net/

***********

Try running the program /usr/local/cpanel/cpkeyclt
to re-initialize the license again if you encounter any other licensing errors.

***********

Lastly : Flush your iptables and try again. Or disable your firewall.
------------------------------------------------------------------

how to install RMP

2012-01-03T13:06:00.000-08:00

Rmp:--
----------------------

To install RMP:--
[root@deep] /#rpm -ivh foo-1.0-2.i386.rpm
--------------

To uninstall rmp:--
[root@deep] /#rpm -e foo
----------------

To upgrade rmp:--
[root@deep] /#rpm -Uvh foo-1.0-2.i386.rpm
----------------

To check rmp:--
[root@deep] /#rpm -q foo

-----------------------------------------------

Change Hostname in < FreeBSD >

2012-01-02T12:02:00.000-08:00

** Simple steps are given to change Host name is given below :--

******************
To change your hostname to example myhostname.mydomain.com

Run the command 'hostname myhostname.mydomain.com'

Edit the file /etc/hosts

Edit the file /etc/rc.conf

*******************

Done ...

Mirrors for fedora core 2

2012-01-01T11:53:00.000-08:00

Base

baseurl=http://fedora.server4you.net/fedora/core/2/$releasever/$basearch/os/

Update_ Release
baseurl=http://fedora.server4you.net/fedora/core/2/$releasever/$basearch/
----------------------*****************************--------------------------
Previous
(baseurl=http://download.fedora.redhat.com/pub/fedora/linux/core/$releasever/$basearch/os/

baseurl=http://download.fedora.redhat.com/pub/fedora/linux/core/updates/$releasever/$basearch/)

--------------------------************************-------------------------------

How to Deleting mails from mail queue

2011-12-30T13:26:00.000-08:00

* Just fire the following command * :--

------------

rm -rf /var/spool/exim/input/

------------

How to Modify LogWatch

2011-12-29T13:03:00.000-08:00

<< Logwatch is a customizable log analysis system It parses through your system's logs for a given period of time and creates a report analyzing areas that you specify, in as much detail as you require. Logwatch is already installed on most CPanel servers. >>

---------------------
To modify LogWatch, SSH into server and login as root.

At command prompt type: pico -w /etc/log.d/conf/logwatch.conf

Scroll down to

MailTo = root

and change to

Mailto = your@email.com

<Note >: Set the e-mail address to an offsite account incase you get hacked.

Now scroll down to

Detail = Low

Change that to Medium, or High...

Detail = 5 or Detail = 10

Note: High will give you more detailed logs with all actions.

Save and exit.

-----------------------------------

Server e-mail everytime someone logs in as root

2011-12-18T06:59:00.000-08:00

** < Just follow the steps given below >**-- :--

-----------------

To have the server e-mail you everytime someone logs in as root, SSH into server and login as root.
---------------------------------
At command prompt type: pico .bash_profile
---------------------------------
Scroll down to the end of the file and add the following line:
---------------------------------
echo 'ALERT - Root Shell Access on:' `date` `who` | mail -s "Alert: Root Access from `who | awk '{print $6}'`" your@email.com
---------------------------------
Save and exit

*-------*******------------******---*****-----------*******-------*

Disable Telnet steps

2011-12-14T12:15:00.001-08:00

*-* Disable Telnet :-

To disable telnet, SSH into server and login as root.

At command prompt type: pico -w /etc/xinetd.d/telnet

change disable = no to disable = yes

Save and Exit

At command prompt type: /etc/init.d/xinetd restart

what is db4 error

2011-12-03T10:05:00.000-08:00

Steps are as follows :-
********----------*********
rpm --rebuilddb

rpm --initdb

OR

Click "Rebuild RPM Database" in WHM manager under "Software".
********----------*********

Installing port collection

2011-11-20T12:28:00.001-08:00

How to Installing port collection steps are given below :-

# sysinstall
-----------
Scroll down and select Configure, press Enter.
-----------
Scroll down and select Distributions, press Enter.
-----------
Scroll down to ports, press Space.
-----------
Scroll up to Exit, press Enter.
-----------
Select your desired installation media, such as CDROM, FTP, and so on.
-----------
Scroll up to Exit and press Enter.
-----------
Press X to exit sysinstall

*******************************************

Steps to set reverse< Dns >

2011-11-10T13:34:00.000-08:00

Steps are as follows :-

--------------------------------

1. >

ssh to ns1.loudpacket.net OR ssh to 207.71.120.250
Username: root
Password : #k53mPog

****************

2.>

cd /var/named/rev

****************
3.>

****************

4.>

pico 148.43.67.in-addr.arpa
(Edit the network you want to change such as 148.43.67.in-addr.arpa for 67.43.148.*)
syntax is like this: 68 (last part of the IP) PTR mail.netdotsolutions.com.(Domain name)
Do not forget to put .(dot) after the domain name
Eg: So to set 67.43.159.16 = inets.com.br
Add this line: 16 PTR inets.com.br.

****************

5.>

Save and quit,

****************

6.>

rndc reload

****************
7.>

host 67.43.159.16 localhost

/////////////////////////////////////////////////////////////////////////

How to edit welcome messages on your computer

2011-10-31T14:23:00.001-07:00

Steps to Editing Welcome Messages:--

**************

Type: pico /etc/motd

"This computer system is for authorized users only."Save.

**************

If you want to transfer account X from server A to server B

2011-10-25T10:56:00.000-07:00

**- Steps to transfer account X from server A to server B is given below -**:--

---------------------------------/////**************************

Go to cpanel (port 2082) for account X on server A

Go to the backup page, and generate a backup.

[it will tell you to wait, depending on the account size on disk and server load could take several minutes to complete]

After is finished, note the name of the generated file (should be something like

backup_TIMESTAMP_username.tar.gz

If you have root access to both servers

SSH to server B, and issue the following:--

scp SERVER_A_IPADDRESS:/home/username/backup_TIMESTAMP_username.tar.gz .

[notice the dot at the end]

[This will put the file in the folder you were in when you logged in on server B - usually /root]

Then go in the WHM of server B, click "Restore a Full Backup/cpmove file", It should show a list of possible files to restore.

Type the username that you want restored, and click Restore

Give it some time, and it should end with "Account restore complete"

Then you should go to the DNS functions, and view the zone of the domain created, to make sure everithing is ok.

That's about it.

The backup contains everithing needed to re-create the account on the other server < site, emails, email accounts, databases, .htaccess files, addon-domains, subdomains etc >

how to install & uninstall RMP

2011-10-24T13:59:00.000-07:00

----------------------------------------------------
Rmp:

To install RMP:
[root@deep] /#rpm -ivh foo-1.0-2.i386.rpm

To uninstall rmp:
[root@deep] /#rpm -e foo

To upgrade rmp:
[root@deep] /#rpm -Uvh foo-1.0-2.i386.rpm

To check rmp:
[root@deep] /#rpm -q foo

How to Config server Mail Manager

2011-10-15T02:59:00.000-07:00

Config server Mail Manager :--

*** Installation :--

1). wget http://configserver.com/free/cmm.tgz

Upload the cmm.tgz file to your server

2). Untar the distribution:

tar -xzf cmm.tgz

3). cd into the directory created and run the install script:

cd cmm/

sh install.sh

4). Login to WHM and scroll to the bottom of the left hand menu and you should see "ConfigServer Mail Manage"

*****************************

If you want to uninstall, simply :--

rm -fv /usr/local/cpanel/whostmgr/docroot/cgi/addon_cmm.cgi

rm -fv /usr/local/cpanel/whostmgr/docroot/cgi/cmmversion.txt

rm -Rfv /usr/local/cpanel/whostmgr/docroot/cgi/cmm/

----------------------------

How to check the mails are blocked by abuse

2011-09-25T04:57:00.000-07:00

/// To check the mails which are blocked by abuse link is given below /// :--

-------------------------

http://www.mail-abuse.com/cgi-bin/lookup?ip_address=mke.ck.com

-------------------------

how to change the date

2011-09-23T12:59:00.000-07:00

< Simple steps to change the date is given below >:--

------------------------

[root@mybox me]# date

Linux yields the current settings:

[root@mybox me]# Wed Apr 7 12:03:45 EDT 2004

Change the current time and date of the Linux box by entering:

[root@mybox me]# date 040713032004

would change the time and yield:

[root@mybox me]$ Wed Apr 7 13:03:00 EDT 2004

-------------------------------------

cdosys mail

2011-09-22T05:09:00.000-07:00

///*** << cdosys mail >> ***/// :--

----------------------------------

<!--

function MM_goToURL() { //v3.0

var i, args=MM_goToURL.arguments; document.MM_returnValue = false;

for (i=0; i<(args.length-1); i+=2) eval(args[i]+".location='"+args[i+1]+"'");

}

//-->

</script>

Set oMail = Server.CreateObject("CDO.Message")

Set iConf = Server.CreateObject("CDO.Configuration")

Set Flds = iConf.Fields

'Local service (dont change)

iConf.Fields.Item("http://schemas.microsoft.com/cdo/configuration/sendusing") = 2

iConf.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpserver") = "localhost"

iConf.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpconnectiontimeout") = 10

iConf.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpserverport") = 25

iConf.Fields.Update

Set oMail.Configuration = iConf

oMail.To = "tx.gallery@mb21.co.uk"

oMail.From = "tx.gallery@mb21.co.uk"

oMail.Subject = "Subject: "

oMail.TextBody = "Body: just some message"

oMail.Send

Set iConf = Nothing

Set Flds = Nothing

MM_goToURL('parent','http://mb21.co.uk/');

</script>

-----------------------------------------------------