alvacode

Install Unbound Dns on Centos

mesasina@gmail.com (mesasina) — Thu, 28 Jul 2011 16:59:00 +0000

First make repo

nano /etc/yum.repos.d/centalt.repo

[CentALT]
name=CentALT Packages for Enterprise Linux 5 - $basearch
baseurl=http://centos.alt.ru/repository/centos/5/$basearch/
enabled=1
gpgcheck=0

yum install unbound bind-utils -y
cd /etc/unbound
wget  ftp://FTP.INTERNIC.NET/domain/named.cache
unbound-control-setup
chown unbound:root unbound_*
chmod 440 unbound_*
nano /etc/unbound/unbound.conf

server:
         verbosity: 1
         statistics-interval: 120
         num-threads: 1
         interface: 0.0.0.0

         outgoing-range: 512
         num-queries-per-thread: 1024

         msg-cache-size: 16m
         rrset-cache-size: 32m 

         msg-cache-slabs: 4
         rrset-cache-slabs: 4

         cache-max-ttl: 86400
         infra-host-ttl: 60
         infra-lame-ttl: 120
         
         infra-cache-numhosts: 10000
         infra-cache-lame-size: 10k

         do-ip4: yes
         do-ip6: no
         do-udp: yes
         do-tcp: yes
         do-daemonize: yes

         #access-control: 0.0.0.0/0 allow
         access-control: 192.168.0.0/16 allow
         access-control: 172.16.0.0/12 allow
         access-control: 10.0.0.0/8 allow
         access-control: 127.0.0.0/8 allow
         access-control: 0.0.0.0/0 refuse
      
         chroot: "/etc/unbound"
         username: "unbound"
         directory: "/etc/unbound"
         #logfile: "/etc/unbound/unbound.log"
         #use-syslog: yes
         logfile: ""
         use-syslog: no
         pidfile: "/etc/unbound/unbound.pid"
         root-hints: "/etc/unbound/named.cache"
       
        identity: "DNS"
        version: "1.4"
        hide-identity: yes
        hide-version: yes
        harden-glue: yes
        do-not-query-address: 127.0.0.1/8
        do-not-query-localhost: yes
        module-config: "iterator"

        #zone localhost
        local-zone: "localhost." static 
        local-data: "localhost. 10800 IN NS localhost."
        local-data: "localhost. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800" 
        local-data: "localhost. 10800 IN A 127.0.0.1" 

        local-zone: "127.in-addr.arpa." static 
        local-data: "127.in-addr.arpa. 10800 IN NS localhost." 
        local-data: "127.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 2 3600 1200 604800 10800" 
        local-data: "1.0.0.127.in-addr.arpa. 10800 IN PTR localhost." 
       
        #zone alvacode.blogspot.com
        local-zone: "alvacode.blogspot.com." static
        local-data: "alvacode.blogspot.com. 86400 IN NS ns1.alvacode.blogspot.com."
        local-data: "alvacode.blogspot.com. 86400 IN SOA alvacode.blogspot.com. hostmaster.alvacode.blogspot.com.  3 3600 1200 604800 86400"
        local-data: "alvacode.blogspot.com. 86400 IN A 192.168.1.1"
        local-data: "www.alvacode.blogspot.com. 86400 IN A 192.168.1.1"
        local-data: "ns1.alvacode.blogspot.com. 86400 IN A 192.168.1.1"
      
        local-data: "mail.alvacode.blogspot.com. 86400 IN A 192.168.1.5"
        local-data: "alvacode.blogspot.com. 86400 IN MX 10 mail.alvacode.blogspot.com."
        local-data: "alvacode.blogspot.com. 86400 IN TXT v=spf1 a mx ~all"

       local-zone: "1.168.192.in-addr.arpa." static
       local-data: "1.168.192.in-addr.arpa. 10800 IN NS alvacode.blogspot.com."
       local-data: "1.168.192.in-addr.arpa. 10800 IN SOA alvacode.blogspot.com. hostmaster.alvacode.blogspot.com. 4 3600 1200 604800 864000"
       local-data: "1.1.168.192.in-addr.arpa. 10800 IN PTR alvacode.blogspot.com."

forward-zone: 
        name: "."
        forward-addr: 8.8.8.8
        forward-addr: 8.8.4.4

remote-control:
        control-enable: yes
        control-interface: 127.0.0.1
        control-port: 953
        server-key-file: "/etc/unbound/unbound_server.key"
        server-cert-file: "/etc/unbound/unbound_server.pem"
        control-key-file: "/etc/unbound/unbound_control.key"
        control-cert-file: "/etc/unbound/unbound_control.pem"

Before start unbound please change your nameserver

nano /etc/resolv.conf

uncomment your default nameserver

insert this nameserver

nameserver 127.0.0.1

reboot your server

to check your unbound active try this

nslookup 192.168.1.1

must be like this

Server:         127.0.0.1
Address:        127.0.0.1#53

1.1.168.192.in-addr.arpa       name =alvacode.blogspot.com.

nslookup alvacode.blogspot.com

Server:         127.0.0.1
Address:        127.0.0.1#53

Name:   alvacode.blogspot.com
Address: 192.168.1.1

unbound-control stats

thread0.num.queries=38
thread0.num.cachehits=7
thread0.num.cachemiss=31
thread0.num.recursivereplies=31
thread0.requestlist.avg=0.129032
thread0.requestlist.max=1
thread0.requestlist.overwritten=0
thread0.requestlist.exceeded=0
thread0.requestlist.current.all=0
thread0.requestlist.current.user=0
thread0.recursion.time.avg=0.088811
thread0.recursion.time.median=0.0185685
thread1.num.queries=10
thread1.num.cachehits=1
thread1.num.cachemiss=9
thread1.num.recursivereplies=9
thread1.requestlist.avg=0
thread1.requestlist.max=0
thread1.requestlist.overwritten=0
thread1.requestlist.exceeded=0
thread1.requestlist.current.all=0
thread1.requestlist.current.user=0
thread1.recursion.time.avg=0.049576
thread1.recursion.time.median=0.016384
total.num.queries=48
total.num.cachehits=8
total.num.cachemiss=40
total.num.recursivereplies=40
total.requestlist.avg=0.1
total.requestlist.max=1
total.requestlist.overwritten=0
total.requestlist.exceeded=0
total.requestlist.current.all=0
total.requestlist.current.user=0
total.recursion.time.avg=0.079984
total.recursion.time.median=0.0174763
time.now=1281681396.583885
time.up=7299.491047
time.elapsed=4177.655650

Make Startup Script on CentOS

mesasina@gmail.com (mesasina) — Sun, 14 Nov 2010 22:55:00 +0000

Sebenarnya membuat script startup bisa dengan mengedit file rc.local yang ada pada /etc/rc.d/
Namun ane lebih suka dengan menggunakan script, jadi sita bisa menggunakan command “service namaprogram start / stop / restart..

Dan semua jenis program bisa dijalankan lewat script iniLangsung aja ya..

1. Buat file baru yang bernamakan “NamaService” (boleh diganti sesuai dengan program yang ingin kalian buat) yang isinya sebagai berikut.

#!/bin/sh
#
# chkconfig: 345 99 01
#
# description: program startup script by seilent

##############################################
## GANTI sesuai dengan nama program kalian
## DAEMON menunjukkan lokasi dimana program kalian berada
## NamaProgram menunjukkan program yang ingin kalian jalankan
## NamaScript menunjukkan nama script yang kalian letakkan di /etc/init.d/
##############################################
DAEMON="/usr/bin/NamaProgram"

############# Ganti seperlunya saja ##############
# Untuk mengecek keberadaan program
test -f $DAEMON || exit 0

# The init commands
case "$1" in
start)
echo "Starting NamaProgram..."
$DAEMON > /dev/null 2>&1 &
;;
stop)
echo "Stopping NamaProgram..."
kill -9 `ps -C NamaProgram -o pid --no-headers`
;;
restart)
echo "Stopping NamaProgram..."
kill -9 `ps -C NamaProgram -o pid --no-headers`
echo "Starting NamaProgram..."
$DAEMON > /dev/null 2>&1 &
;;
*)
echo "usage: /etc/init.d/NamaScript"
echo "$0 {start | stop | restart}"
exit 1
;;
esac

2. Letakkan script tersebut di /etc/init.d/ dan CHMOD ke 755

chmod 755 /etc/init.d/NamaService

3. Sekarang meluncur ke direktori /etc/rc.d/rc5.d/ dan buat sebuah link yang mengarah ke service yang kita buat tadi

cd /etc/rc.d/rc5.d
ln -s ../init.d/NamaService S99NamaService

4. Kita register script tersebut agar dapat dijalankan saat startup

chkconfig --add NamaService

5. Sekarang kita tambahkan program tersebut agar dapat dijalankan secara otomatis pada saat startup.

chkconfig NamaService on

Info :
Untuk menambahkan service pada saat startup :

chkconfig NamaService on

Untuk mendisable service pada saat startup :

chkconfig NamaService off

Untuk menjalankan, menghentikan, dan merestart service

service NamaService start
service NamaService stop
service NamaService restart

Source Here

Port Forwarding Mikrotik Using DMZ or PPPoE

mesasina@gmail.com (mesasina) — Fri, 22 Oct 2010 19:16:00 +0000

if dial-in modem (you must download the DMZ interface Mikrotik)
use in-physical interface leading to the modem

modem = 192.168.1.1 (DMZ to 192.168.1.2)
ether1(modem) = 192.168.1.2
local webserver = 10.0.0.1/24

example DMZ

#port forwarding to local ssh
/ip firewall nat add chain=dstnat in-interface=ether1 dst-address=192.168.1.2 protocol=tcp dst-port=22 action=dst-nat to-address=10.0.0.1 to-port=22

if mikrotik dial
use a virtual interface that is formed from pppoe-client dial

example dial PPPoE
after you dial in your proxy using the name = pppoe-alva and you get Public IP = 0.0.0.0

/interface pppoe-client add name=pppoe-alva interface=ether1 add-default-route=yes use-peer-dns=yes dial-on-demand=no user=0.0.0.0@yourisp.net password=xxxxxxx
#port forwarding to local ssh
/ip firewall nat add chain=dstnat in-interface=pppoe-alva dst-address=0.0.0.0 protocol=tcp dst-port=22 action=dst-nat to-address=10.0.0.1 to-port=22

Redirect to www & vise versa (htaccess)

mesasina@gmail.com (mesasina) — Wed, 22 Sep 2010 09:17:00 +0000

Edit your .htaccess place this code after RewriteEngine On
This lines makes redirection to www

# Redirect if NOT www.example.com (exactly) to www.example.com
RewriteCond %{HTTP_HOST} .
RewriteCond %{HTTP_HOST} !^www\.example\.com
RewriteRule (.*) http://www.example.com/$1 [R=301,L]

# Redirect if example.com (case-insensitive) to www.example.com
RewriteCond %{HTTP_HOST} ^example\.com [NC]
RewriteRule (.*) http://www.example.com/$1 [R=301,L]

Use non-www redirect

# Redirect if NOT example.com (exactly) to example.com
RewriteCond %{HTTP_HOST} .
RewriteCond %{HTTP_HOST} !^example\.com
RewriteRule (.*) http://example.com/$1 [R=301,L]

# Redirect if www.example.com (case-insensitive) to example.com
RewriteCond %{HTTP_HOST} ^www\.example\.com [NC]
RewriteRule (.*) http://example.com/$1 [R=301,L]

Show hidden files in cPanel file manager

mesasina@gmail.com (mesasina) — Wed, 22 Sep 2010 09:05:00 +0000

When you click on File Manager, do you get a popup box asking where do you want to go to? (NOT THE FILE MANAGER ITSELF!)

If yes:

Check the box "Show Hidden Files", and then continue normally.

If no:

Close out File Manager, and go back to cPanel homepage.
Scroll down, and on the bottom where the cPanel copyright is,
click "reset all interface settings". Looks like nothing happened, right?
Now scroll back up, and click File Manager. The popup box will
now show! Check the box "Show Hidden Files", and then continue normally.

That's all!

Hide tray icon

mesasina@gmail.com (mesasina) — Fri, 17 Sep 2010 16:17:00 +0000

Do you need to hide a program running in the background that shows in your System Tray? Try this reg hack to hide all tray icons. It’s not anything like the Windows XP tray icon hider, this one shows no trace of any icons. It would look like someone closed all background programs.

1) Click on START>RUN and type "regedit" (without the quotes).

Navigate to the following key;

HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer

2) Add a "REG_DWORD" entry entitled "NoTrayItemsDisplay". Open it up and assign the Hex value of 1 to hide the Icons. The value of 0 is normal (default), showing the icons.

3) Close "regedit" and reboot computer and the icons should not be there anymore. Control Alt and Delete will bring up Windows Task Manager and items can be displayed and closed (if need be) from in there instead.

Hide tray icon download

Source

Daily update ESET NOD

mesasina@gmail.com (mesasina) — Fri, 17 Sep 2010 15:57:00 +0000

Update ESET NOD 1 | Update ESET NOD 2

If you see this

you can exclude your NOD antivirus, open NOD32 antivirus go to tab SETUP >> ADVANCED SETUP >> ANTIVIRUS AND ANTISPYWARE >> WEB ACCESS PROTECTION >> HTTP, HTTPS >> ADDRESS MANAGEMENT >> ADD and write *nod32sky* or *nod325* see picture.

ok you can copy and paste antivirus username & password and update your favorite nod.

Joomla Rockettheme Omnicron 1.5.1

mesasina@gmail.com (mesasina) — Thu, 16 Sep 2010 16:00:00 +0000

The Omnicron Joomla 1.5 template has been updated to version 1.5.1 with updates to RokFeatureTable and varioius other tweaks.
Version: 1.5.1

Fix for featuretable column widths not displaying properly
Fix for menu child text being cut off in some browsers
RokFeatureTable layout example tweaks

Changed Files (template) – Located in the /templates/rt_omnicron_j15 directory upon installation:

/admin/rft-templates/price-table.txt
/html/mod_rokfeaturetable/default.php
/css/fusionmenu.css
/templateDetails.xml

Extensions updates
Some extensions have been updated with fixes as part of the Omnicron update and must also be updated along with the Omnicron template files. They can be downloaded with the Omnicron extensions package.

RokFeatureTable 1.1

Download

Cracking mikrotik 3.30

mesasina@gmail.com (mesasina) — Thu, 16 Sep 2010 15:43:00 +0000

See tutorial on this video
http://www.youtube.com/watch?v=a0sBj2CRibk and http://www.youtube.com/watch?v=EpA98CjRvqU

Download mikrotik 3.20, 3.30 and Crack

PTunnel on CentOS run client Windows

mesasina@gmail.com (mesasina) — Thu, 16 Sep 2010 01:02:00 +0000

Let's install on centos server

yum install -y yum-priorities
wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.1-1.el5.rf.i386.rpm
rpm -i rpmforge-release-0.5.1-1.el5.rf.*.rpm
yum check-update
yum -y install ptunnel

after that run ptunnel on server

su root -c ptunnel

and for client download file for windows here

Start on client

ptunnel.exe -p $SERVER -lp 8000 -da $WEB-PROXY -dp 22

Start PuTTY and connect to 127.0.0.1:8000

Install openvpn on centos

mesasina@gmail.com (mesasina) — Wed, 15 Sep 2010 16:13:00 +0000

I'm using CentOS 5.5 because TUN/TAP is not available in CentOS 32bit and x86. Okay, the installation will be finish in approximately 30 minutes, after finished now login to root using ssh.

Before we're going to install OPENVPN, check your TUN/TAP whether it is active or not, if it's not you can try to install another CentOS or contact your vps provider to activate TUN/TAP.

cat /dev/net/tun

if you're TUN/TAP status is like that, then your TUN/TAP is ready, otherwise it's not.

Now we're begin the installation, first of all install gcc and make.

yum install gcc make

Download package for OPENVPN

wget http://openvpn.net/release/lzo-1.08-4.rf.src.rpm

Download repository for OPENVPN

if you're using 32bit version

wget http://dag.wieers.com/rpm/packages/rpmforge-release/rpmforge-release-0.3.6-1.el5.rf.i386.rpm

if you're using 64bit version

wget http://dag.wieers.com/rpm/packages/rpmforge-release/rpmforge-release-0.3.6-1.el5.rf.x86_64.rpm

you can check your server architecture with:

uname -a

lets install

cd /tmp
yum install -y wget iptables yum-priorities nano dnsmasq rpm-build autoconf.noarch zlib-devel pam-devel openssl-devel
wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.1-1.el5.rf.i386.rpm
yum check-update
yum install -y openvpn-2.0.9
cd /etc/openvpn/
cp -R /usr/share/doc/openvpn-2.0.9/easy-rsa/ /etc/openvpn/
cd /etc/openvpn/easy-rsa/2.0/
. ../vars
chmod +rwx *
source ./vars
nano ../vars
nano vars
./build-ca
source ./vars
./clean-all
./build-ca
./build-key-server server

Here is the example of configuration file.

nano /etc/openvpn/openvpn.conf

port 53
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "redirect-gateway def1"
ifconfig-pool-persist ipp.txt
keepalive 5 30
auth none
cipher none
comp-lzo
user nobody
group users
persist-key
persist-tun
status openvpn-status.log
verb 3

Build Diffie Hellman

cp keys/{ca.crt,ca.key,server.crt,server.key} /etc/openvpn/
./build-dh
cp keys/dh1024.pem /etc/openvpn/
/etc/init.d/openvpn start
cd /etc/openvpn/easy-rsa/2.0

make client key

./build-key alvacode

done, you can download ca.crt on /etc/openvpn/easy-rsa/2.0/keys

service iptables start
chkconfig dnsmasq on
nano /etc/sysctl.conf

just edit net.ipv4.ip_forward = 0 to net.ipv4.ip_forward = 1

for always start to next reboot use

nano /etc/rc.local

#!/bin/sh
#
# [...]
#

iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

touch /var/lock/subsys/local

adding user

adduser alva -m -s /bin/false
passwd alva

now you must restart server

/sbin/reboot

example for client configuration

client
dev tun
proto udp
remote 0.0.0.0 53
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
auth-user-pass
auth none
cipher none
comp-lzo
verb 3