brekele.INC

make sure pgpool node/instance is up ( with bash script )

isach_xx@yahoo.com (sakti) — Wed, 21 Dec 2011 19:53:38 PST

--idea--
this idea came to me when some one ask " how do we ensure that postgresql's node has been activated again ? ". by asking google and with have no answer, finally why we don't make a happy script with bash ^_^...

--scenario--
as simple as i love to, this script is run as background service that check node's status every 3 second. And if one of node/both is down, script is automatic bring it UP/ON again.

--1--
must to know how to chek node status:
*> node UP/ON

$ tail /var/log/pgpool.log
2011-12-22 10:06:18 DEBUG: pid 8726: starting health checking
2011-12-22 10:06:18 DEBUG: pid 8726: health_check: 0 th DB node status: 1
2011-12-22 10:06:18 DEBUG: pid 8726: health_check: 1 th DB node status: 1

$ pcp_node_info 10 localhost 9898 postgres password 1
xxx.xxx.xxx.xxx. xxxx 1 1073741823.500000
$ pcp_node_info 10 localhost 9898 postgres password 1 | awk '{print $3}'
1

*> node Down

$ tail /var/log/pgpool.log
2011-12-22 10:14:41 DEBUG: pid 8726: starting health checking
2011-12-22 10:14:41 DEBUG: pid 8726: health_check: 0 th DB node status: 1
2011-12-22 10:14:41 DEBUG: pid 8726: health_check: 1 th DB node status: 3

$ pcp_node_info 10 localhost 9898 postgres password 1
10.10.130.17 5432 3 1073741823.500000
$ pcp_node_info 10 localhost 9898 postgres password 1 | awk '{print $3}'
3

--script--

#!/bin/bash
# brekele.inc

Node_stat=`pcp_node_info 10 localhost 9898 postgres password 0 | awk '{print $3}'`
Node_stat2=`pcp_node_info 10 localhost 9898 postgres password 1 | awk '{print $3}'`

echo "PID: $$ : `date` : daemon check \" $0 \" is running"
echo "=========== Hit Ctl-C to exit ============"

start(){
#echo "jalankan"
pcp_attach_node  90 localhost 9898 postgres password 0 && echo "node UP" || echo "node Down"
}

start2(){
#echo "jalankan"
pcp_attach_node  90 localhost 9898 postgres password 1 && echo "node UP" || echo "node Down"
}

if [ $Node_stat -eq 3 ]
then
start
fi

if [ $Node_stat2 -eq 3 ]
then
start2
fi

sleep 3
exec $0

echo "This line will never echo!"
exit 99

--cek & jajal--
try run on your own terminal/console and with your awn risk ^_^

$ ./script
PID: 26284 : Thu Dec 22 10:43:06 WIT 2011 : daemon check " /mnt/script " is running
=========== Hit Ctl-C to exit ============
PID: 26284 : Thu Dec 22 10:43:09 WIT 2011 : daemon check " /mnt/script " is running
=========== Hit Ctl-C to exit ============

send oracle 11g audit log to syslog server ( on other PC)

isach_xx@yahoo.com (sakti) — Wed, 21 Dec 2011 18:16:40 PST

--preparation--
well...... this time i will write about syslog, and for this experiment what we need is :
- kiwi syslog server get from here and install it on your PC( i use xp for this server syslog)
- oracle db
- and of course, a cup of coffee is a must and other thing that make you relax and comfortable ( :p )

--scema--
first thing to do is redirect oracle audit log to syslog, and than from syslog send to syslog server( kiwi syslog)

--1--
edit initSID.ora and add this folowing config :
create "/var/log/oracle/" firs

audit_file_dest='/var/log/oracle/'
audit_trail='OS'
AUDIT_SYSLOG_LEVEL=local1.warning

after that edit /etc/syslog.conf, and add this folowing config :

#Save oracle rdbms audit trail to oracle_audit.log
local1.warning          /var/log/oracle/oracle_audit.log
#Send oracle rdbms audit trail to remote syslog server
local1.warning       @1.1.1.1 #<= ip your syslog server

--2--
restart syslog service with command :

/sbin/service syslog restart     # or 
/etc/init.d/init.d/syslog restart

oracle DB must be restart to

CONNECT SYS / AS SYSOPER
Enter password: password

SHUTDOWN IMMEDIATE
STARTUP
-----------------
SQL> shutdown IMMEDIATE
Database closed.
Database dismounted.
ORACLE instance shut down.

SQL> STARTUP
ORACLE instance started.

Total System Global Area 1075527680 bytes
Fixed Size                  1304704 bytes
Variable Size             264243072 bytes
Database Buffers          805306368 bytes
Redo Buffers                4673536 bytes
Database mounted.
Database opened.

--test and jajal--
try to login to your Oracle DB and log must be create on syslog and kiwi syslog ono other server like this folowing pict

-source -
oracle doc

pgpoolAdmin, web interface for pgpool

isach_xx@yahoo.com (sakti) — Thu, 22 Sep 2011 03:15:41 PDT

--preparation--
next capter of pgpool from my last post ( here), now i wanna post about a tool that can manage pgpool from web interface called pgpoolAdmin. next... enjoy the post... ^_^

--1--
first we need to download pgpooladmin from here, extrak and copy or move to http directory( for exp : /var/www)

$wget http://pgfoundry.org/frs/download.php/2964/pgpoolAdmin-3.0.3.tar.gz
$tar zxvf pgpoolAdmin-3.0.3.tar.gz
$sudo cp -Rf pgpoolAdmin-3.0.3 /var/www/test

--2--
install pgpooladmin via web on: http://localhost/test/install

make sure owner of that file is "www-data"(of course have write akses) and check again

and done.ya.. tooo.......!!!
^_^

my unity desktop

isach_xx@yahoo.com (sakti) — Mon, 12 Sep 2011 05:44:24 PDT

take a look at my desktop unity with conky and AWN

postgresql replication with pgpool2 on ubuntu

isach_xx@yahoo.com (sakti) — Thu, 29 Sep 2011 02:43:58 PDT

--preparation--
next capter from may last post, now we'll make repication of postgreSQL with pgpool on ubuntu. assumtion, we have 2 server with postgresql installed ( n running well ) on each server.
--1--
first install pgpooll2, with

sudo apt-get install pgpool2

--2--
edit config file on /etc/pgpool.conf

# Host name or IP address to listen on: '*' for all, '' for no TCP/IP
# connections
listen_addresses = '*'

# Port number for pgpool
port = 5433

# Port number for pgpool communication manager
pcp_port = 9898

parallel_mode = false

# Replication mode
replication_mode = true

# Load balancing mode, i.e., all SELECTs are load balanced.
# This is ignored if replication_mode is false.
load_balance_mode = true

backend_hostname0 = '1.1.1.1'
backend_port0 = 5432
backend_weight0 = 1
backend_data_directory0 = ''
backend_hostname1 = '1.1.1.2'
backend_port1 = 5432
backend_weight1 = 1
backend_data_directory1 = ''

edit config file on /etc/pcp.conf Append the following line

postgres:ee26005a83e958c153b095a080b52d14
#postgres is user of your postgresql 
#and ee26005a83e958c15.. bla... bla... is postgres password in md5.

*Note:
to get/convert password in md5, you can use this ex command :
PG1:~$ pg_md5 your_pass
ee26005a83e958c153b095a080b52d14

--3--
restart the service

/etc/init.d/postgresql restart
 /etc/init.d/pgpool2 restart

--cek 'n jajal--
create database on pgpool port

createdb db_test –p 9898 –h 1.1.1.1 –U postgres

If replication is working properly, in both machines a new database called “db_test” should be created. use this command to check it up:

$ psql –l –p 5432 –h 1.1.1.1 –U postgres
$ psql –l –p 5432 –h 1.1.1.2 –U postgres

next chapter : .: here:.

source :
http://sameerajayalath.blogspot.com
google.com

install lighttp + postgresql di ubuntu

isach_xx@yahoo.com (sakti) — Wed, 24 Aug 2011 23:14:04 PDT

-- back from old day--
long time since write my latest post. Now, it's time to write again.... ^_^
starting with this tittle..

--1--
just simple as usually, type this command on your terminal

$ sudo apt-get install postgresql postgresql-client libpq-dev postgresql-client-common lighttpd php5-cgi php5-pgsql php5-cli

--2--
edit "php.ini" on

vi /etc/php5/cgi/php.ini

; of zero causes PHP to behave as before.  Default is 1.  You should fix your scripts
; to use SCRIPT_FILENAME rather than PATH_TRANSLATED.
; http://php.net/cgi.fix-pathinfo
cgi.fix_pathinfo=1

then run this command To enable the fastcgi configuration

sudo lighttpd-enable-mod fastcgi
  sudo lighttpd-enable-mod fastcgi-php
  sudo /etc/init.d/lighttpd force-reload

--test & jajal--
create php file on /var/www containing :

<?php
phpinfo();
?>

Webalizer - Statistik trafik/kunjungan web (ubuntu)

isach_xx@yahoo.com (sakti) — Mon, 13 Jun 2011 20:17:53 PDT

--goal--
make subdomain trafik statistik

--install--
run this command :

sudo apt-get install webalizer

edit "/etc/apache2/apache2.conf" , set

HostnameLookups Off

into :

HostnameLookups On

--1--
All we need is already prepared, now set log of vhost in "/etc/apache2/sites-enabled" to spesifict folder.

exp. $sudo vi /etc/apache2/sites-enabled/monitor
CustomLog ${APACHE_LOG_DIR}/access.log
into:
CustomLog ${APACHE_LOG_DIR}/vhost/monitor/access.log

restart service

$sudo /etc/init.d/apache2 restart

--2--
create another file config of webalizer in /etc/webalizer
exp. vi /etc/webalier/monitor.conf
set the LogFile to apache2 logfile:

LogFile /var/log/apache2/vhost/monitor/access.log # apache log
OutputDir /var/webalizer/monitor/     #webalizer report
Incremental     yes
ReportTitle Usage statistics for
HostName monitor.brekele.co.cc

--3--
create script to run webalizer via crontab
exp. vi /etc/webalizer/cron_job

#!/bin/bash

echo "di jalankan pada: `date +"%d-%B-%Y  %r"` " > /etc/webalizer/log
for i in /etc/webalizer/*.conf; do webalizer -c $i ; done 
#will run all *.conf file of webalizer config

and add to crontab
crontab -e

*/3 * * * *     root    /etc/webalizer/cron_job > /dev/null
#sesuakan dengan jam anda :D

--test & jajal--

my Desktop ~ ubuntu 10.10

isach_xx@yahoo.com (sakti) — Tue, 26 Apr 2011 02:13:14 PDT

just wanna share, this is may desktop :D:

list directori on NginX

isach_xx@yahoo.com (sakti) — Mon, 13 Jun 2011 19:39:10 PDT

-- goal --
we can list a directory under web root folder

-- 1 --
edit /etc/nginx/sites-enabled/default

sudo vi /etc/nginx/sites-enabled/default

-- 2 --
add this following config :

server {

        listen   80; ## listen for ipv4
        listen   [::]:80 default ipv6only=on; ## listen for ipv6
        server_name  localhost;
        autoindex on;         # add this to your config
        access_log  /var/log/nginx/localhost.access.log;

--3--
then restart your services:

sakti@sakti-sama:~$ sudo /etc/init.d/nginx restart
Restarting nginx: nginx..

-- test&jajal --

blok domain dengan bind

isach_xx@yahoo.com (sakti) — Fri, 25 Mar 2011 01:37:03 PDT

nb: mungkin dah ada yang publish, tetapi ini berdasar pengalaman pribadi ( dah lama cuman baru mod nulisnya :D )

--goal--

intinya adalah untuk mem- blok domain yang kita inginkan sehingga user tidak bisa meng- akses.

--peralatan--

peralatan yang perlu disiapkan antaralain :
- secangkir kopi
- cemilan apa aja ( rilex can be fun :D )
- http://dns-bh.sagadc.org/files/spywaredomains.zones
*sesuaikan letak file zone nya dengan file zone settingan anda
- bind sudah ter-install dengan baik di server(gateway). intinya, ready to use.

--1--

tambahkan pada file /etc/bind/named.conf.local

include "/etc/bind/spywaredomains.zones";

--2--

restart bind anda :

/etc/init.d/bind9 restart

--cek n jajal--

root@traficmng# nslookup facebook.com
Server:  192.168.1.112
Address: 192.168.1.112#53

Name: facebook.com
Address: 192.168.1.112

NB: - facebook.com sudah inputkan dalam file spywaredomains.zones.
- Uji coba pada kubuntu 10.04 :D

--saran--

bisa di gabung dengan crontab atau yang script lain, untuk penjadwalan jam berapa saja domain di block :D

have fun..

Set Up manual ip address in kubuntu

isach_xx@yahoo.com (sakti) — Thu, 24 Feb 2011 18:58:28 PST

Do the following things to get kubuntu connection working :

1) Disable Network Manager:

sudo update-rc.d -f NetworkManager remove
sudo apt-get remove network-manage

2) Edit /etc/network/interfaces:

auto lo eth0
iface lo inet loopback
iface eth0 inet static
address 192.168.2.2
netmask 255.255.255.0
gateway 192.168.2.1
dns-domain 192.168.2.1

3) Edit /etc/resolv.conf:

domain Home
nameserver 192.168.2.1

4) Restart networking:

sudo /etc/init.d/networking restart

Finally, test it with your own risk :D

source : ubuntu forum

Disabling/Enabling startup of a service in Ubuntu

isach_xx@yahoo.com (sakti) — Mon, 13 Jun 2011 00:27:14 PDT

-preparation-

get a cup of coffee and some snacks to accompany you :D

-goal-

wee can disabled and enabled startup service on ubuntu

-more info-

The procedure for disabling a service in Ubuntu is very simple: all you have to do is remove the symlinks from all the runlevel-specific directories, /etc/rc*.d, so that no links are pointing to the original /etc/init.d script for your service.

-for to do-

This example below shows how a service called "bind9" was disabled on my system:

-for disabled-

root@traficmng:/home/momod# update-rc.d -f bind9 remove
 Removing any system startup links for /etc/init.d/bind9 ...
   /etc/rc0.d/K20bind9
   /etc/rc1.d/K20bind9
   /etc/rc2.d/S20bind9
   /etc/rc3.d/S20bind9
   /etc/rc4.d/S20bind9
   /etc/rc5.d/S20bind9
   /etc/rc6.d/K20bind9

-for enabled-

root@traficmng:/home/momod# update-rc.d bind9 defaults
 Adding system startup for /etc/init.d/bind9 ...
   /etc/rc0.d/K20bind9 -> ../init.d/bind9
   /etc/rc1.d/K20bind9 -> ../init.d/bind9
   /etc/rc6.d/K20bind9 -> ../init.d/bind9
   /etc/rc2.d/S20bind9 -> ../init.d/bind9
   /etc/rc3.d/S20bind9 -> ../init.d/bind9
   /etc/rc4.d/S20bind9 -> ../init.d/bind9
   /etc/rc5.d/S20bind9 -> ../init.d/bind9

-testing n checking-

just tray on your computer/server for more practice and testing .. :D

-nb-

tested by me... ^_^

script monitoring & auto start service with bash script

isach_xx@yahoo.com (sakti) — Wed, 24 Nov 2010 19:14:45 PST

masih mengacu pada artikel sebelumnya ==>

-- Goal --

untuk me-monitor-ing suatu service dalam hal ini lebih di khususkan pada "port", yang entah karena apa port tersebut mati, maka service akan di restart ulang ( ato kirim email ke juragan server untuk pemberitahuan ).

-- modal --

cukup copy paster script dibawah ini. kasih akses execusi dan taruh di crontab. :D

-- script --

#!/bin/bash

#brekele.inc .: underdarkonsole.blogspot.com:.
# ^_^
# GPL
# edit lah sesui kebutuhan 

TIMEOUT=1
ATTEMPT=2
RETRY=0
PORT_SERVER="80"
logtemp=/var/log/a
logFile=/var/log/brekele.log
if [ ! -e $logtemp ]; then
   echo "done" > $logtemp
fi

p=`cat $logtemp`

cekPORT() {

  i=1
  while [ $i -le $ATTEMPT ]
  do
    if ( lsof -w -n -i TCP:$1 > /dev/null 2>&1 )
    then
        echo "ON"
        echo "done" > $logtemp
    break 1
    fi
    i=$((i+1))
    sleep 1
  done
  RETRY=$i
}

loging() {
echo "`date +"%d-%B-%Y  %r"` Port server mati" >> $logFile
#tambahkan script lain sesuai kebutuhan seperti kirim email ato kalo dah suport sms gateway bisa kirim sms :D
/etc/init.d/httpd restart
}

cekPORT $PORT_SERVER

if [ $RETRY -gt $ATTEMPT ]
then
echo "OFF"
if [ "$p" = done ]
        then
        echo " loging "
        loging
        echo "not_done" > $logtemp
fi
fi

-- cek & jajal --

untuk percobaan silahkan di coba sendiri sendiri,bisa di taruh di crontab ato bikin script PHP nya :D

NginX redirect http url to https url

isach_xx@yahoo.com (sakti) — Wed, 08 Dec 2010 20:14:18 PST

--more info--
see other info on http://nginx.org/

--knowing issue--
it is assumed that nginx is installed perfectly and https config is ready

--1--
open your nginx configuration

# vi /usr/local/nginx/conf/nginx.conf

take a look on this config

server {
        listen       80;
        server_name 192.168.1.152;
        #charset koi8-r;
        #access_log  logs/host.access.log  main;
        location / {
        rewrite ^/aku(.*) https://192.168.1.152/aku$1 permanent;
            root   html;
            index  index.html index.htm;
       }

on the red line is the configuration. add that config to your configuration file

--check n jajal --

source : http://markmail.org

Mengetahui proses ID from port yang di buka

isach_xx@yahoo.com (sakti) — Wed, 24 Nov 2010 19:14:05 PST

--base--

Untuk mengetahui suatu proses yang sedang berjalan, dalam linux kita bisa mengetahuinya dengan command "ps". Akan tetapi bagaimana jika kita ingin mematikan suatu proses tetapi kita hanya tahu port yang di buka oleh port tersebut.
Berikut singkatnya

--1--

Sebagai contoh dengan nmap kita melihat data sebagai berikut
[root@database1 bin]# nmap localhost

Starting nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2010-07-22 14:50 WIT
Interesting ports on database1 (127.0.0.1):
(The 1642 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
22/tcp   open ssh
25/tcp   open smtp
111/tcp open rpcbind
631/tcp open ipp
3306/tcp open mysql
8009/tcp open ajp13
8080/tcp open http-proxy
8082/tcp open blackice-alerts

--2--

misal kita ingin mematikan proses untuk port 8082
[root@database1 bin]# lsof -w -n -i tcp:8082
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
java 20131 root 75u IPv6 769223 TCP *:8082 (LISTEN)

--selanjut nya--

terserah anda bisa di kill ato di liatin doang
:D

--ceck n jajal --

[root@database1 bin]# kill -9 20131

[root@database1 bin]# nmap localhost

Starting nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2010-07-22 14:50 WIT
Interesting ports on database1 (127.0.0.1):
(The 1643 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
22/tcp   open ssh
25/tcp   open smtp
111/tcp open rpcbind
631/tcp open ipp
3306/tcp open mysql
8009/tcp open ajp13
8080/tcp open http-proxy

Nmap run completed -- 1 IP address (1 host up) scanned in 0.214 seconds

Clear The Cache From Memory ubuntu linux

isach_xx@yahoo.com (sakti) — Sat, 17 Jul 2010 20:47:30 PDT

---musabab--

lack of RAM memory for some people who have little RAM, might become problematic in linux. on linux technology, cache of memory that store in RAM can also make a system provide an unoptimal response. And this happened to me: D
soo... what should we do now......

--1--

let's check the memory usage

root@tH3-unD3r:/home/game# free -m
total used free shared buffers cached
Mem: 497 482 15 0 45 180
-/+ buffers/cache: 256 240
Swap: 1004 18 985

--2--

then run this command

root@tH3-unD3r:/home/game# sync; echo 3 > /proc/sys/vm/drop_caches

--check n jajal--

and see the results

tested by mee on xubuntu linux 10.04 LTS

setting snmpd di ubuntu n enterprise linux

isach_xx@yahoo.com (sakti) — Tue, 20 Jul 2010 00:15:36 PDT

-- info --

take a look on here to gain more experiance about it... :D

-- 1 --

first step all you have to do is preparation the software what is needed. on the way i will split it into 2 way, ubuntu and enterprise way.

-- ubuntu way --

install it with

$ sudo apt-get install snmpd snmp

make backup and edit file snmp.conf

#mv /etc/snmp/snmp.conf  /etc/snmp/snmp.conf_old

#vi /etc/snmp/snmp.conf

this is the sample config of snmp.conf

# First, map the community name (COMMUNITY) into a security name

# (local and mynetwork, depending on where the request is coming

# from):

#       sec.name  source          community

com2sec local     localhost        public

com2sec localNet  192.168.1.0/24   public

com2sec localhost localhost        public

#com2sec readonly  default         public

#com2sec readwrite default         private

####

# Second, map the security names into group names:

#               sec.model  sec.name

group MyROSystem v1        local

group MyROSystem v2c       local

group MyROSystem usm       local

group MyROGroup v1         localNet

group MyROGroup v2c        localNet

group MyROGroup usm        localNet

group MyRWGroup v1         local

group MyRWGroup v2c        local

group MyRWGroup usm        local

####

# Third, create a view for us to let the groups have rights to:

#           incl/excl subtree                          mask

view all    included  .1                               80

view system included  .1.3.6.1.2.1.1

also edit file /etc/default/snmpd

# This file controls the activity of snmpd and snmptrapd

# MIB directories.  /usr/share/snmp/mibs is the default, but

# including it here avoids some strange problems.

export MIBDIRS=/usr/share/snmp/mibs

# snmpd control (yes means start daemon).

SNMPDRUN=yes

# snmpd options (use syslog, close stdin/out/err).

#SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1'

SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid'

# snmptrapd control (yes means start daemon).  As of net-snmp version

# 5.0, master agentx support must be enabled in snmpd before snmptrapd

# can be run.  See snmpd.conf(5) for how to do this.

TRAPDRUN=no

# snmptrapd options (use syslog).

TRAPDOPTS='-Lsd -p /var/run/snmptrapd.pid'

# create symlink on Debian legacy location to official RFC path

SNMPDCOMPAT=yes

and restart service

/etc/init.d/snmpd restart

-- enterprise way --

install it using

# yum install net-snmp net-snmp-utils net-snmp-devel

make backup and edit file snmp.conf

#mv /etc/snmp/snmp.conf /etc/snmp/snmp.conf_old

#vi /etc/snmp/snmp.conf

this is a sample of snmp.conf

rocommunity  public

syslocation  "monitor DataCenter"

syscontact  sakti.dwi@localhost

com2sec notConfigUser default public

group notConfigGroup v1 notConfigUser

group notConfigGroup v2c notConfigUser

view systemview included .1.3.6.1.2.1.1

view systemview included .1.3.6.1.2.1.25.1.1

com2sec mynetwork 192.168.1.0/24 mycommunity

group MyRWGroup v2c local

group MyROGroup v2c mynetwork

group MyRWGroup v2c otherv3user

view mib2 included .iso.org.dod.internet.mgmt.mib-2 fc                            

access MyROGroup "" any noauth 0 all none none

access MyRWGroup "" any noauth prefix all all all                               

com2sec notConfigUser default public

com2sec notConfigUser default public                                   

group notConfigGroup v1 notConfigUser

group notConfigGroup v2c notConfigUser

and restart service

 /etc/init.d/snmpd restart

-- cek n jajal --

run this command

#snmpwalk -Os -c public -v 1 192.168.1.212 system

sysDescr.0 = STRING: Linux localhost.localdomain 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686

sysObjectID.0 = OID: netSnmpAgentOIDs.10

sysUpTimeInstance = Timeticks: (925895) 2:34:18.95

sysContact.0 = STRING: sakti.dwi@localhost

sysName.0 = STRING: localhost.localdomain

sysLocation.0 = STRING: "monitor DataCenter"

sysORLastChange.0 = Timeticks: (17) 0:00:00.17

sysORID.1 = OID: snmpFrameworkMIBCompliance

sysORID.2 = OID: snmpMPDCompliance

sysORID.3 = OID: usmMIBCompliance

sysORID.4 = OID: snmpMIB

sysORID.5 = OID: tcpMIB

sysORID.6 = OID: ip

sysORID.7 = OID: udpMIB

sysORID.8 = OID: vacmBasicGroup

sysORDescr.1 = STRING: The SNMP Management Architecture MIB.

sysORDescr.2 = STRING: The MIB for Message Processing and Dispatching.

sysORDescr.3 = STRING: The management information definitions for the SNMP User-based Security Model.

and so on

this out put mean that snmpd is work

-- other chek --

this is monitoring tool that use snmp

ssh tunnel on linux mechine

isach_xx@yahoo.com (sakti) — Mon, 13 Jun 2011 00:26:23 PDT

-- pertama --

base on tunneling on my previous post ( if you wanna see it)

-- next --
in my case, how to tunnel ssh connection is a must. ans this is the story..

-- basically --
all you need to know is the right formula. n the formula is

ssh -L localport:host:hostport user@ssh_server

-- on check n jajal --

ssh -L 1122:1.2.3.4:22 user@brekele.inc

the explanation is we make local port 1121. it redirect our connection to 1.2.3.4 on port 22 ( how simple it is)

--other option --
you can put -L more than one. maybe you wanna make tunnel to vnc port or another else

ssh -L 1122:1.2.3.4:22 -L 1123:1.2.3.4:5901 user@brekele.inc

source : www.linuxhorizon.ro

Block Desktop aplikasi dengan linux-firewall

isach_xx@yahoo.com (sakti) — Mon, 13 Jun 2011 00:26:15 PDT

-- pRakata --
pembatasan suatu aplikasi untuk akses internet mungkin kadang di perlukan untuk pengamanan dan penghematan bandwidt. Dan berikut mungkin bisa menjadi alternativ tersendiri :D mari kita kemon....

-- lEbih lanjut--

untuk info lebih lanjut silahkan kunjungi situs berikut

-- 1 --

download aplikasi nya pada situs diatas dan install... Karena base on ubuntu tinggal double klik aja dan klik install, reboot dan siap digunakan.

-- screenshoot --

selamat mencicipi

sumber :
http://www.linux-firewall.org/

setting mail di motorola ROKR E1 ( kirim dan terima yahoo mail dari hand phone )

isach_xx@yahoo.com (sakti) — Thu, 17 Jun 2010 02:02:09 PDT

-- perihal --
mAsih takjub dengan kemampuan ROKR E1 kesayangan, ternyata HP yang jadul ini mampu mengirim dan menerima email dari yahoo. saluuuutttttt...... !!!!!!!!!!!!!!!!!!
tak hanya bikin gatal di tangan untuk Modding HP ini lumayan juga tuk mail nya ( baru tau saya .. setelah setahun lebih menggunakan :D )

--1--
gak usah kepanjanga so langsung aja ke tahap installasi accoun nya :
yang penting settingan gprs nya dah berfungis dengan baik.

--2--
fasilitas email yang dulu saya kira tidak bisa di gunakan ternyata bisa juga di gunakan, dengan yahoo lagi yang free heheheheeeehhe berikut settingannya :
masuk ke menu message, dari menu ini tekan tombol menu untuk masuk ke dalam msg center trus pilih email msg setup.
Connection type : GPRS
Account setting => pilih menu ini ( ini yang perlu untuk di setting )

* settingan pada Account setting :
Account Name : yahoo_id
status : aktive
Name : yahoo_id
User ID : yahoo_id ( account yahoo anda )
Password : yahoo_password ( pass yahoo anda )
Return Address : yahoo_mail ( email yahoo anda )
Email provider : custom
Protocol : IMAP4
Sending host : smtp.mobile.mail.yahoo.com
Sending port : 25
Receiving host : imap.n.mail.yahoo.com
Receiving port : 143
Cleanup : none ( sesuai selera )
save on server : yes ( sesuai selera )
Security ( biarkan default )
size restriction : 10240 ( sesuai selera)
Receive date range : none ( sesuai selera )
Attachments : None

kemudian simpan dan mail pun siap di gunakan

-- cek n jajal --
silahkan lakukan send & receive untuk mencobanya .

-- dari hasil experiment --
email yang di receive hanya bisa yang berada pada folder inbox saja
karena pake gprs n gak ada wifi nya soo makan pulsa dah :-P

--tested by mee--

semoga bermanfaat .. :D

load balancing network di Linux

isach_xx@yahoo.com (sakti) — Tue, 15 Jun 2010 22:00:27 PDT

-- sekilas info --

untuk detail mengenai penjelasan load balancing bisa langsung ke sini

-- persiapan --

untuk menjadikan linux sebagai mesin loadbalancing, yang di butuhkan adalah software balancing. Software ini bisa di dapatkan di sini.

--1--

download balacer , extrak kemudian install.

# tar -zxvf balance-x.xx.tar.gz

# cd balance-x.xx

# make

# make install

-- sample --

* Load balancing port 1500
balance -f 1500 192.168.1.71:1500 192.168.1.86:1500 &
opsi & di maksudkan untuk mengaktifkan mode background.

moga bermanfaat

sumber:
http://www.inlab.de/balance.html

IP n Port Redirection dengan iptables

isach_xx@yahoo.com (sakti) — Sun, 23 May 2010 20:19:24 PDT

--base--

Berdasar pengalaman karena hanya memiliki 1 ip publik dan banyak server di dalam nya yang harus di remote, maka tips ini dengan berhasil telah di uji cobakan by mee

--1--

Pakage yang perlu di persiapkan adalah iptables ( sudah ter install otomatis dalam kernel).

--2--

yang perlu di lakukan adalah membuat rule di iptables sebagai berikut :

# iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 3389 -j DNAT --to-destination 11.1.1.1:3389

--testing n kerjanya--

perintah di atas akana meredirect akses yang masuk lewat eth1 dengan port 3389 ke ip 11.1.1.1 dengan port 3389

selamat mengembangkan :P

DNS BIND " view" - memisahkan source view client

isach_xx@yahoo.com (sakti) — Mon, 13 Jun 2011 00:25:39 PDT

--perihal--

( ngomong nya gimana ya .... ??? )h...m.... Berdasarkan kasus : untuk membedakan hasil resolve dari client yang berbeda. Yang intinya jika dari loclahost hasil resolv nya 192.168.1.2 jika dari network lain hasil resolv nya 1.1.1.234. Ataupun sebalik nya sesuai selera. ( tergantung kebutuhan pribadi masing masing )

nb : dalam kasus ini saya memakai windows ;D

--1--

download bind dari site nya : http://www.isc.org/index.pl?/sw/bind/index.php
untuk installasi bisa mengarah ke sini
download file sample konfigurasi ke sini
setelah di download, simpan file sample configurasi ke dalam directory etc ( dalam kasus saya berada di directory : "C:\WINDOWS\dns\etc" )
file yang di butuhkan antara lain :
- named.conf
- rndc.key
- named.ca
- basiczone.com.zone
- 127.0.0.rev
- basiczone.com.in ( untuk internal )
- basiczone.com.ex ( untuk external )

sekarang mari kita kemon....

--2--

yang perlu di perhatikan adalah config sebagai berikut

untuk named.conf

options {

    #

    # Working directory from which all relative paths are based

    #

    directory "C:\WINDOWS\dns\etc";

    #

dan settingan intinya berada pada bagian "view"

view "dalam" {

    #

    # Handler for clients who exist on our local subnet(s) or loopback.

  match-clients { localhost; };

    #

    # Lookup requests we are not authoritative for.

    #

    recursion yes;

    # Specify the root name servers

    #

    zone "." IN {

        type hint;

        file "named.ca";

    };

    #

    # RFC 1537 recommended loopback zone, helps broken clients.

    #

    zone "0.0.127.in-addr.arpa" IN {

        type master;

        file "127.0.0.rev";

    };

    #

    # The internal split for basiczone.com

    #

    zone "basiczone.com" IN {

        type master;

        file "basiczone.com.in";

    };

};

####################################

# Authoritative Server Configuration

#

view "luar" {

    #

    # Handler for anyone that doesn't match the above.

    #

    match-clients { 192.168.1.0/24; any; };

    #

    # We are not a public resolver.

    #

    recursion no;

    # Should BIND provide IP address information found in zones other than the

    # one that was queried?  Say yes if you trust the content of all of your

    # zones.

    #

    additional-from-auth yes;

    # Should BIND provide answers gotten from cache?  By saying no, you refuse

    # to provide answers for zones you're not authoritative for.

    #

    additional-from-cache no;

    # RFC 1537 recommended loopback zone, helps broken clients.

    #

    zone "0.0.127.in-addr.arpa" IN {

        type master;

        file "127.0.0.rev";

    };

    # The external split for basiczone.com

    #

    zone "basiczone.com" IN {

        type master;

        file "basiczone.com.ex";

    };

};

singkatnya :
pada konfigurasi diatas di buat dua "view" dalam dan luar.
- view dalam match-clients nya adalah localhost yang berarti jika ada akses dari localhost maka yang di resolv menggunakan file basiczone.com.in
- view luar match-clients nya adalah network 192.168.1.0/24 yang berarti jika ada akses dari network tersebut, maka file yang digunakan untuk meresolv adalah file basiczone.com.ex

file basiczone.com.in

$TTL 900  ; 900 seconds default record (T)ime (T)o (L)ive in cache

; Authored by SilentRage

; Download Location:

; http://www.dollardns.net/bind/views/

@  SOA ns (  ; ns.basiczone.com is the primary server for basiczone.com

   postmaster ; contact email for basiczone.com is postmaster@basiczone.com

   2004041700 ; Serial ID in reverse date format

   21600  ; Refresh interval for slave servers

   1800  ; Retry interval for slave servers

   604800  ; Expire limit for cached info on slave servers

   900 )  ; Minimum Cache TTL in zone records

@  NS ns          ; ns.basiczone.com is a host for basiczone.com

@  A 192.168.1.2 ; basiczone.com's IP address is 192.168.1.2

@  MX 10 mail  ; Mail for *@basiczone.com is sent to mail.basiczone.com

ns  A 192.168.1.1 ; ns1.basiczone.com's IP address is 192.168.1.1

mail  A 192.168.1.254 ; mail.basiczone.com's IP address is 192.168.1.3

www A 192.168.1.2 ; www.basiczone.com's IP address is 192.168.1.2

file basiczone.com.ex

$TTL 900  ; 900 seconds default record (T)ime (T)o (L)ive in cache

; Authored by SilentRage

; Download Location:

; http://www.dollardns.net/bind/views/

@  SOA ns1 (  ; ns1.basiczone.com is the primary server for basiczone.com

   postmaster ; contact email for basiczone.com is postmaster@basiczone.com

   2004041700 ; Serial ID in reverse date format

   21600  ; Refresh interval for slave servers

   1800  ; Retry interval for slave servers

   604800  ; Expire limit for cached info on slave servers

   900 )  ; Minimum Cache TTL in zone records

@  NS ns1          ; ns1.basiczone.com is a host for basiczone.com

@  A 1.1.1.234  ; basiczone.com's IP address is 123.45.6.2

@  MX 10 mail  ; Mail for *@basiczone.com is sent to mail.basiczone.com

ns1  A 1.1.1.234  ; ns1.basiczone.com's IP address is 123.45.6.1

mail  A 1.1.1.234  ; mail.basiczone.com's IP address is 123.45.6.3

www A 1.1.1.234  ; www.basiczone.com's IP address is 123.45.6.2

--testing n jajal--

nslookup dari local komputer

nslookup dari net 192.168.1.227/24

sumber :
http://www.zytrax.com/books/dns/ch7/view.html

tcpdump monitoring Traffic Analysis

isach_xx@yahoo.com (sakti) — Tue, 11 May 2010 21:24:58 PDT

The tcpdump is simple command that dump traffic on a network. However, you need good understanding of TCP/IP protocol to utilize this tool. For.e.g to display traffic info about DNS, enter:

# tcpdump -i eth1 'udp port 53'

To display spesifik port

# tcpdump -i eth1 dst port 8686

To display all IPv4 HTTP packets to and from port 80, i.e. print only packets that contain data, not, for example, SYN and FIN packets and ACK-only packets, enter:

# tcpdump 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)'

To display all FTP session to 202.54.1.5, enter:

# tcpdump -i eth1 'dst 202.54.1.5 and (port 21 or 20)'

To display all HTTP session to 192.168.1.5:

# tcpdump -ni eth0 'dst 192.168.1.5 and tcp and port http'

Use wireshark to view detailed information about files, enter:

# tcpdump -n -i eth1 -s 0 -w output.txt src or dst port 80

source : http://www.cyberciti.biz

ssh tunnels with putty

isach_xx@yahoo.com (sakti) — Mon, 13 Jun 2011 00:25:26 PDT

--pendahuluan--

Dah lama gak nulis blog, akhirnya ada sedikit bahan tuk di document kan. sEkedar untuk mengingat dikala lupa.
So..... mari di mulai......

--~~kaskus~~ ehh.. kasus--

pLaning awal sih untuk dapet meremote komputer yang ada nun jauh disana guna menginstall oracle via X mode. karena port yang di pake ip public cuman di sediain prot ssh maka tunnel ini di gunakan.

--1--

neh penampakan puTTY

yang perlu disettng cuman ini neh :

isikian source port sebagai pengganti port akses dan destination adalah ip dan port tujuan ( ip dan port asli komputer tujuan)
Nb: source port di isi sesui selera

--test n jajal--

connect kan putty n login ke sistem.
kemudian akses X mode dengan vncviewer dengan alamat : localhost:20003

* tested by mee n' semoga berguna.....