Open Source Configuration

How to setup Asterisk 1.8.7.1 on CentOS 6 i386 with FreePBX, Hylafax, Avantfax, IAXModem, and A2billing

2014-05-16T07:17:00.002-07:00

Asterisk 1.8.7.1, FreePBX 2.8.1, HylaFAX 6.0.5, AvantFAX 3.3.3, IAXModem 1.2.0, A2Billing 1.9.4

If you have any questions or comments please leave a comment or contact me directly email jeffkingsley007 [at]gmail dot com or call 256782280084

DEMO LINES

A2Billing Working Example, US Calling ONLY
Access# 413-206-9861
PIN# 4320101553

IAXModem Fax over IP, Receive Line Only
Fax# 413-455-0155

Asterisk Incoming Line, Live Line
Access# 413-285-3050

#CentOS 6 Asterisk 1.8.8.0 PHP 5.3.2

http://mirror.centos.org/centos-6/6/os/i386
External Links icon

#Install New Kernel < 4GB Ram
yum -y install kernel kernel-devel kernel-headers system-config*

Install New Kernel > 4GB Ram
yum -y install kernel-PAE kernel-PAE-devel system-config*
reboot

#Firewall & Network Settings
setup

#Install Asterisk Dependencies
yum install -y make nano mgetty mgetty-voice cups-lpd perl-DBD-Pg subversion wget python python-devel glibc glibc-devel gcc gcc-c++ flex screen sox libxml2-devel libxml2 yum-utils ncurses-devel subversion libtiff libtiff-devel libusb-devel bison bison-devel ncurses ntp zlib zlib-devel openssl openssl-devel gnutls-devel httpd bind ghostscript-devel speex-devel libogg-devel libvorbis-devel curl-devel unixODBC-devel libtool-ltdl-devel net-snmp-devel bzip2-devel newt-devel lm_sensors-devel openldap-devel postgresql-devel gtk+-devel libtermcap termcap webalizer expect sendmail-cf ImageMagick ImageMagick-devel ghostscript libtiff netpbm-progs libungif cups lpr psutils libc-client dovecot java-1.6.0-openjdk java-1.6.0-openjdk-devel php php-devel php-common php-mysql php-pdo php-soap php-xml php-xmlrpc php-mbstring php-gd php-pear php-process php-imap mysql mysql-devel mysql-server php-mysql mysql-libs libmysqlclient15 mysql-connector-odbc memcached php-pecl-memcache php-adodb

#Ghostscript Fonts Fix
cd /usr/src
wget http://ghostscript.googlecode.com/files/ghostscript-fonts-std-8.11.tar.gz
External Links icon

tar zxf ghostscript-fonts-std-8.11.tar.gz
mv fonts/ /usr/share/ghostscript/
nano /usr/share/ghostscript/8.70/Resource/Init/Fontmap.GS

#REPLACE LINE 92
/Courier-Bold (n022004l.pfa) ;

#Add Asterisk User
useradd -c "Asterisk PBX" -d /var/lib/asterisk asterisk

#Install Webmin Development
cd /usr/src
wget http://download.webmin.com/devel/rpm/webmin-1.571-1.noarch.rpm
External Links icon

wget http://download.fedora.redhat.com/pub/epel/6/i386/epel-release-6-5.noarc...
External Links icon

wget http://rpms.famillecollet.com/enterprise/remi-release-6.rpm
External Links icon

rpm -ivh webmin-1.571-1.noarch.rpm
rpm -ivh epel-release-6-5.noarch.rpm
rpm -ivh remi-release-6.rpm

reboot

cd /usr/src
wget http://pypi.python.org/packages/2.6/s/setuptools/setuptools-0.6c11-py2.6...
External Links icon

sh setuptools-0.6c11-py2.6.egg

#Install libpri
cd /usr/src
wget http://downloads.asterisk.org/pub/telephony/libpri/releases/libpri-1.4.1...
External Links icon

tar zxf libpri-1.4.12.tar.gz
cd libpri-1.4.12
make && make install

#Install DAHDI
cd ..
wget http://downloads.asterisk.org/pub/telephony/dahdi-linux/releases/dahdi-l...
External Links icon

tar zxf dahdi-linux-2.5.0.2.tar.gz
cd dahdi-linux-2.5.0.2
make && make install

cd ..
wget http://downloads.asterisk.org/pub/telephony/dahdi-tools/releases/dahdi-t...
External Links icon

tar zxf dahdi-tools-2.5.0.2.tar.gz
cd dahdi-tools-2.5.0.2
./configure && make && make install && make config

#Setup Asterisk directories and startup files
mkdir -p /var/lib/digium/licenses/
chown asterisk /var/lib/php/session/
mkdir -p /etc/udev/permissions.d/
/sbin/udevd
chkconfig --add dahdi
/etc/init.d/dahdi start
chkconfig --add httpd
/etc/init.d/httpd start
chkconfig --add named
/etc/init.d/named start
chkconfig --add mysqld
/etc/init.d/mysqld start

#Install more Dependencies for Asterisk
cd ..
wget http://asterisk.gnuinter.net/files/asterisk-perl-1.01.tar.gz
External Links icon

tar zxf asterisk-perl-1.01.tar.gz
cd asterisk-perl-1.01
perl Makefile.PL
make all
make install

cd ..
wget http://mpg123.de/download/mpg123-1.13.4.tar.bz2
External Links icon

tar jxf mpg123-1.13.4.tar.bz2
cd mpg123-1.13.4
./configure && make && make install

cd ..
wget http://downloads.sourceforge.net/project/lame/lame/3.99/lame-3.99.1.tar.gz
External Links icon

tar zxf lame-3.99.1.tar.gz
cd lame-3.99.1
./configure && make && make install

cd ..
wget http://iksemel.googlecode.com/files/iksemel-1.4.tar.gz
External Links icon

tar zxf iksemel-1.4.tar.gz
cd iksemel-1.4
./configure && make && make install

echo "/usr/local/lib" > /etc/ld.so.conf.d/iksemel.conf
ldconfig

#Install Secure RTP Communications
cd ..
wget http://downloads.sourceforge.net/project/srtp/srtp/1.4.4/srtp-1.4.4.tgz
External Links icon

tar zxf srtp-1.4.4.tgz
cd srtp
./configure && make && make install

#Install Fax Capability
cd ..
wget http://soft-switch.org/downloads/spandsp/spandsp-0.0.6pre18.tgz
External Links icon

tar zxf spandsp-0.0.6pre18.tgz
cd spandsp-0.0.6
./configure --prefix=/usr && make && make install

cd ..
wget http://downloads.asterisk.org/pub/telephony/asterisk/releases/asterisk-1...
External Links icon

tar zxf asterisk-1.8.7.1.tar.gz
cd asterisk-1.8.7.1
contrib/scripts/get_mp3_source.sh
./configure
make menuconfig

#### app_mysql, app_saycountpl, cdr_mysql, format_mp3, res_config_mysql, res_srtp

make && make install

#Install g729 Codec

#For Server
cd /usr/lib/asterisk/modules
cat /proc/cpuinfo
wget -O codec_g723.so http://asterisk.hosting.lv/bin/codec_g723-ast18-gcc4-glibc-core2.so
External Links icon

wget -O codec_g729.so http://asterisk.hosting.lv/bin/codec_g729-ast18-gcc4-glibc-core2.so
External Links icon

chmod +x codec_g723.so
chmod +x codec_g729.so

#Install FreePBX
cd /usr/src
wget http://mirror.freepbx.org/freepbx-2.8.1.tar.gz
tar zxf freepbx-2.8.1.tar.gz
cd freepbx-2.8.1
mysqladmin create asterisk
mysqladmin create asteriskcdrdb
mysql asterisk < SQL/newinstall.sql
mysql asteriskcdrdb < SQL/cdr_mysql_table.sql
mysql
GRANT ALL PRIVILEGES ON asteriskcdrdb.* TO asterisk@localhost
Email links icon
IDENTIFIED BY 'changepassword';
GRANT ALL PRIVILEGES ON asterisk.* TO asterisk@localhost
Email links icon
IDENTIFIED BY 'changepassword';
flush privileges;
\q
pear channel-update pear.php.net
pear install DB MDB2 MDB2#mysql
mkdir -p /var/lib/asterisk/run

#Fix Asterisk Music On Hold
ln -s /var/lib/asterisk/moh /var/lib/asterisk/mohmp3

#Install FreePBX
cd /usr/src/freepbx-2.8.1
./install_amp

setenforce 0

#Username asterisk Password changepassword
#Change httpd apache user to asterisk

chmod 777 /etc/amportal.conf
cd /var/lib/asterisk
chown -R asterisk:asterisk *
chmod -R 777 *
cd /var/www/html
chown -R asterisk:asterisk *
chmod -R 777 *
chown -R asterisk:asterisk /var/lib/php/session
chown -R asterisk:asterisk /var/spool/asterisk/*

#Edit Asterisk IAX2 Settings Add Other Options in FreePBX
calltokenoptional = 0.0.0.0/0.0.0.0
maxcallnumbers = 16382
requirecalltoken = no

#Asterisk Settings for a2billing
nano /etc/asterisk/cdr_mysql.conf

[global]
hostname = localhost
dbname=asteriskcdrdb
password = changepassword
user = asterisk
userfield=1
loguniqueid=yes
;port=3306
;sock=/tmp/mysql.sock

nano /etc/asterisk/res_mysql.conf

[a2billing]
dbhost = localhost
dbname = a2billing
dbuser = root
dbpass =
dbport = 3306
dbsock = /var/lib/mysql/mysql.sock

#A2Billing Installation
cd /usr/src
mkdir a2billing
cd a2billing
wget --no-check-certificate https://github.com/Star2Billing/a2billing/tarball/v1-current
External Links icon

tar zxf v1-current
cd Star2Billing-a2billing-*
mv * ..
cd ..
rm -rf Star2Billing-a2billing-*
ln -s /usr/src/a2billing/a2billing.conf /etc/a2billing.conf
chmod 777 /etc/asterisk
touch /etc/asterisk/additional_a2billing_iax.conf
touch /etc/asterisk/additional_a2billing_sip.conf
echo \#include additional_a2billing_sip.conf >> /etc/asterisk/sip_custom.conf
echo \#include additional_a2billing_iax.conf >> /etc/asterisk/iax_custom.conf
chown asterisk:asterisk /etc/asterisk/additional_a2billing_iax.conf
chown asterisk:asterisk /etc/asterisk/additional_a2billing_iax.conf
cd addons/sounds/
./install_a2b_sounds.sh
ln -s /usr/src/a2billing/AGI/a2billing.php /var/lib/asterisk/agi-bin/a2billing.php
ln -s /usr/src/a2billing/AGI/lib/ /var/lib/asterisk/agi-bin/
chmod +x /var/lib/asterisk/agi-bin/a2billing.php
ln -s /usr/src/a2billing/customer/ /var/www/html/billing
ln -s /usr/src/a2billing/admin/ /var/www/html/billing
ln -s /usr/src/a2billing/agent/ /var/www/html/billing
ln -s /usr/src/a2billing/common/ /var/www/html/billing
chmod 777 /var/www/html/billing/admin/templates_c/
chmod 777 /var/www/html/billing/agent/templates_c/
chmod 777 /var/www/html/billing/templates_c/

nano /etc/asterisk/manager.conf

[myasterisk] ;FOR a2billing
secret = mycode
deny=0.0.0.0/0.0.0.0
permit=127.0.0.1/255.255.255.0
read = system,call,log,verbose,command,agent,user
write = system,call,log,verbose,command,agent,user

#Install Database for A2Billing
cd /usr/src/a2billing/DataBase/mysql-5.x
mysqladmin create a2billing
mysql
GRANT ALL PRIVILEGES ON a2billing.* TO a2billing@localhost
Email links icon
IDENTIFIED BY 'changepassword';
flush privileges;
\q
./install-db.sh

#USE a2billing/changepassword

#Secure MySQL
nano /etc/my.cnf

[mysqld]
bind-address = 127.0.0.1

nano /etc/asterisk/extensions_custom.conf

[a2billing]
; Set by Network staff for manual assignment
exten => _X.,1,AGI(a2billing.php,1)
exten => _X.,n,Wait()
exten => _X.,n,Hangup()

[a2billing-cc]
; Used by Calling Card Platform for incoming calls
exten => _X.,1,AGI(a2billing.php,2)
exten => _X.,n,Wait()
exten => _X.,n,Hangup()

[a2billing-passthrough]
; Set by website signup for automatic assignment
exten => _X.,1,AGI(a2billing.php,3)
exten => _X.,n,Wait()
exten => _X.,n,Hangup()

[a2billing-did]
; This is where inbound DID calls are pointed to if you plan to be a DID service provider
exten => _X.,1,AGI(a2billing.php,1,did)
exten => _x,1,Hangup()

[macro-dialout-trunk-predial-hook]
exten => s,1,GotoIf($["${OUT_${DIAL_TRUNK}:4:4}" = "A2B/"]?custom-freepbx-a2billing,${OUTNUM},1:2)
exten => s,2,MacroExit

[custom-freepbx-a2billing]
exten => _X.,1,AGI(a2billing.php|${OUT_${DIAL_TRUNK}:8})
exten => _X.,n,Hangup()

mkdir /var/run/a2billing

#Crontab

crontab -e
i

# update the currency
0 6 * * * php /usr/src/a2billing/Cronjobs/currencies_update_yahoo.php

# monthly services subscription
0 6 1 * * php /usr/src/a2billing/Cronjobs/a2billing_subscription_fee.php

# check account of users
0 * * * * php /usr/src/a2billing/Cronjobs/a2billing_notify_account.php

# did billing
0 2 * * * php /usr/src/a2billing/Cronjobs/a2billing_bill_diduse.php

# recurring service.
0 12 * * * php /usr/src/a2billing/Cronjobs/a2billing_batch_process.php

# generate invoices and for each user.
0 6 * * * php /usr/src/a2billing/Cronjobs/a2billing_batch_billing.php

# autodialer
*/5 * * * * php /usr/src/a2billing/Cronjobs/a2billing_batch_autodialer.php

# manage alarms
0 * * * * php /usr/src/a2billing/Cronjobs/a2billing_alarm.php

esc
:wq!

mkdir -p /var/lib/a2billing/script
touch /var/log/asterisk/a2billing-daemon-callback.log
touch /var/log/a2billing-daemon-callback.log
touch /var/log/cront_a2b_alarm.log
touch /var/log/cront_a2b_autorefill.log
touch /var/log/cront_a2b_batch_process.log
touch /var/log/cront_a2b_bill_diduse.log
touch /var/log/cront_a2b_subscription_fee.log
touch /var/log/cront_a2b_currency_update.log
touch /var/log/cront_a2b_invoice.log
touch /var/log/a2billing_paypal.log
touch /var/log/a2billing_epayment.log
touch /var/log/api_ecommerce_request.log
touch /var/log/api_callback_request.log
touch /var/log/a2billing_agi.log
LOAD_LOC=/usr/src/a2billing
easy_install sqlalchemy
cd $LOAD_LOC/CallBack/callback-daemon-py/
cp $LOAD_LOC/CallBack/callback-daemon-py/build/lib/callback_daemon/a2b-callback-daemon.rc /etc/init.d/a2b-callback-daemon
chmod +x /etc/init.d/a2b-callback-daemon
python setup.py build
python setup.py bdist_egg
easy_install dist/callback_daemon-1.0.prod-py2.6.egg

chkconfig --add a2b-callback-daemon
service a2b-callback-daemon start
chkconfig a2b-callback-daemon on

#FreePBX Custom Destinations in /etc/asterisk/extensions_custom.conf
Custom Destination: a2billing,${EXTEN},1
Description: a2billing

Custom Destination: a2billing-callback,${EXTEN},1
Description: a2billing-callback

Custom Destination: a2billing-cid-callback,${EXTEN},1
Description: a2billing-cid-callback

Custom Destination: a2billing-did,${EXTEN},1
Description: a2billing-did

Custom Destination: a2billing-sip,${EXTEN},1
Description: a2billing-sip

Custom Destination: a2billing-cc,${EXTEN},1
Description: a2billing-cc

Custom Destination: a2billing-passthrough,${EXTEN},1
Description: a2billing-passthrough

#Install Tesseract
cd /usr/src
wget http://www.leptonica.com/source/leptonica-1.68.tar.gz
External Links icon

tar zxf leptonica-1.68.tar.gz
cd leptonica-1.68
./configure && make && make install

cd ..
wget http://tesseract-ocr.googlecode.com/files/tesseract-3.00.tar.gz
External Links icon

tar zxf tesseract-3.00.tar.gz
cd tesseract-3.00
./configure && make && make install

#Install IAXModem
cd /usr/src
wget http://downloads.sourceforge.net/project/iaxmodem/iaxmodem/iaxmodem-1.2....
External Links icon

tar zxf iaxmodem-1.2.0.tar.gz
cd iaxmodem-1.2.0
./configure
./build static
mkdir -p /etc/iaxmodem
mkdir -p /var/log/iaxmodem
cp iaxmodem /usr/local/sbin/

nano /etc/iaxmodem/ttyIAX1

device /dev/ttyIAX1
owner uucp:uucp
mode 660
port 4570
refresh 300
server 127.0.0.1
peername 111
secret 111password
codec ulaw
cidname Fax
cidnumber 4132853050
nojitterbuffer

#Install Hylafax
cd ..
wget ftp://ftp.hylafax.org/source/hylafax-6.0.5.tar.gz
tar zxf hylafax-6.0.5.tar.gz
cd hylafax-6.0.5
./configure

make
make install
faxsetup

service hylafax restart

nano /var/spool/hylafax/etc/config.ttyIAX1

CountryCode: 1
AreaCode: 413
FAXNumber: 1.413.285.3050
LongDistancePrefix: 1
InternationalPrefix: 011
DialStringRules: "etc/dialrules"
ServerTracing: 1
SessionTracing: 1
RecvFileMode: 0600
LogFileMode: 0600
DeviceMode: 0600
RingsBeforeAnswer: 1
SpeakerVolume: off
GettyArgs: "-h %l dx_%s"
LocalIdentifier: "WTN"
TagLineFont: etc/lutRS18.pcf
TagLineFormat: "From %%l|%c|Page %%P of %%T"
MaxRecvPages: 200
JobReqNoCarrier: 180
JobReqNoAnswer: 180
FaxRcvdCmd: bin/faxrcvd.php
DynamicConfig: bin/dynconf.php
NotifyCmd: bin/notify.php
ModemType: Class1 # use this to supply a hint
ModemResetCmds: "ATH1\nAT+VCID=1" # enables CallID display
ModemReadyCmds: ATH0
Class1AdaptRecvCmd: AT+FAR=1
Class1TMConnectDelay: 400 # counteract quick CONNECT response
Class1RMQueryCmd: "!24,48,72,96" # V.17 fast-train recv doesn't work well
Class1TMQueryCmd: "!24,48,72,96" # V.17 fast-train recv doesn't work well
CallIDPattern: "NMBR="
CallIDPattern: "NAME="
CallIDPattern: "ANID="
CallIDPattern: "NDID="

cd /var/spool/hylafax/etc
chown uucp:uucp config.ttyIAX1

#Edit HylaFAX Verticle Resolution
nano /usr/local/lib/fax/hyla.conf

JobFmt: "%-5j %1a %15o %-15.15e %5P %5D %5i %7z %.25s"
RcvFmt: "%7o %-10t %-25s %-20f %5p %1z %-40e"
PageSize: na-let
VRes: 196

#ASTERISK MANAGER/DB PASSWORD
faxadduser -a changepassword asterisk
faxdeluser localhost
faxdeluser 127.0.0.1
echo 127.0.0.1 >> /var/spool/hylafax/etc/hosts.hfaxd

nano /etc/init/faxgetty1.conf

start on runlevel 2
start on runlevel 3
start on runlevel 4
start on runlevel 5
stop on runlevel 0
stop on runlevel 1
stop on runlevel 6
respawn
exec /usr/local/sbin/faxgetty ttyIAX1

nano /etc/init/faxgetty2.conf

start on runlevel 2
start on runlevel 3
start on runlevel 4
start on runlevel 5
stop on runlevel 0
stop on runlevel 1
stop on runlevel 6
respawn
exec /usr/local/sbin/faxgetty ttyIAX2

nano /etc/init/iaxmodem1.conf

start on runlevel 2
start on runlevel 3
start on runlevel 4
start on runlevel 5
stop on runlevel 0
stop on runlevel 1
stop on runlevel 6
respawn
exec /usr/local/sbin/iaxmodem ttyIAX1

nano /etc/init/iaxmodem2.conf

start on runlevel 2
start on runlevel 3
start on runlevel 4
start on runlevel 5
stop on runlevel 0
stop on runlevel 1
stop on runlevel 6
respawn
exec /usr/local/sbin/iaxmodem ttyIAX2

nano /etc/rc.local

/usr/local/sbin/amportal start
initctl start faxgetty1
initctl start faxgetty2
initctl start faxgetty3
initctl start faxgetty4
initctl start iaxmodem1
initctl start iaxmodem2
initctl start iaxmodem3
initctl start iaxmodem4

#Install AvantFAX
cd /usr/src
wget http://downloads.sourceforge.net/project/avantfax/avantfax-3.3.3.tgz
External Links icon

tar zxf avantfax-3.3.3.tgz
cd avantfax-3.3.3
chown -R asterisk:asterisk *
cd avantfax
ln -s /usr/src/avantfax-3.3.3/avantfax /var/www/html/fax
chown -R asterisk:asterisk /var/www/html/fax
chmod -R 0770 /var/www/html/fax/tmp /var/www/html/fax/faxes
chown -R asterisk:uucp /var/www/html/fax/tmp /var/www/html/fax/faxes
chown -R asterisk:asterisk /var/lib/php/session
mv /usr/local/bin/faxcover /usr/local/bin/faxcover.old
ln -s /var/www/html/fax/includes/faxcover.php /usr/local/bin/faxcover
ln -s /var/www/html/fax/includes/faxrcvd.php /var/spool/hylafax/bin/faxrcvd.php
ln -s /var/www/html/fax/includes/dynconf.php /var/spool/hylafax/bin/dynconf.php
ln -s /var/www/html/fax/includes/notify.php /var/spool/hylafax/bin/notify.php
pear install --alldeps Mail Net_SMTP Mail_mime MDB2_driver_mysql pear/Auth_SASL
cd ..
mysql < create_user.sql
mysql avantfax < create_tables.sql

nano /etc/cron.d/avantfax

# runs once an hour to update the phone book
0 * * * * /var/www/html/fax/public_html/includes/phb.php
# runs once a day to remove old files
0 0 * * * /var/www/html/fax/public_html/includes/avantfaxcron.php -t 2

cp /var/www/html/fax/includes/local_config-example.php /var/www/html/fax/includes/local_config.php

#Edit local_config.php
nano /var/www/html/fax/includes/local_config.php

#Time Server
time-b.timefreq.bldrdoc.gov

#FREEPBX
Custom Trunk

A2B local/$OUTNUM$@a2billing/n
8622466682 local/$OUTNUM$@8622466682
Google gtalk/8622466682/+$OUTNUM$@voice.google.com

Sip Trunk Free Toll-Free Calling
TollFree voiper.ipkall.com (10 digit) proxy.ideasip.com (11 digit)

How to install Asterisk and A2billing on Ubuntu Server 12.04LTS

2014-05-16T06:39:00.002-07:00

This installation was carried out on Ubuntu 12.04 LTS on 64bit

We need to upgrade apt-get

#apt-get upgrade
#apt-get update
Configure your timezone:
#dpkg-reconfigure tzdata

Install some pre-requisites:
#apt-get install libapache2-mod-php5 php5 php5-common
#apt-get install php5-cli php5-mysql mysql-server apache2 php5-gd (note the password for mysql, we will need it later)
#apt-get install php5-mcrypt
#apt-get install build-essential wget libssl-dev libncurses5-dev libnewt-dev libxml2-dev linux-headers-$(uname -r) libsqlite3-dev uuid-dev

Add jansson and install Asterisk 12.1.1
#apt-get install python-software-properties -y

#apt-key adv --keyserver pgp.mit.edu --recv-keys 175E41DF

#http://www.digip.org/jansson/releases/jansson-2.4.tar.gz

#tar -zxf jansson-2.4.tar.gz

#cd jansson-2.4/

#./configure --prefix=/usr/ && make clean && make && make install
asterisk-1.8.27.0-rc1.tar.gz

#add-apt-repository "deb http://packages.asterisk.org/deb `lsb_release -cs` main"
#sudo add-apt-repository "deb-src http://packages.asterisk.org/deb `lsb_release -cs` main" (If you get an error here just ignore and carry on)
#cd /usr/src/
#wget http://downloads.asterisk.org/pub/telephony/dahdi-linux-complete/dahdi-linux-complete-current.tar.gz
#wget http://downloads.asterisk.org/pub/telephony/libpri/libpri-1.4.14.tar.gz
#wget http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/asterisk-1.8.26.1.tar.gz
#wget http://downloads.asterisk.org/pub/telephony/asterisk/releases/asterisk-12.1.1.tar.gz

#tar zxvf dahdi-linux-complete*
#tar zxvf libpri*
#tar zxvf asterisk*

#cd /usr/src/dahdi-linux-complete*
#make && make install && make config

#cd ../libpri*
#make && make install

#cd ../asterisk*
#./configure && make menuselect && make && make install && make config && make samples

/etc/init.d/dahdi start

#/etc/init.d/asterisk start
#asterisk -rvvv

#*CLI> dahdi show version
+++++++++++++++DAHDI Version: 2.6.1 Echo Canceller: HWEC
#*CLI> pri show version
+++++++++++++++libpri version: 1.4.13

#apt-get update
#apt-get upgrade

# apt-get install asterisk

Download and install A2billing:
# cd /usr/local/src

# wget https://github.com/Star2Billing/a2billing/archive/master.tar.gz

# tar -zxvf master.tar.gz
rm master.tar.gz
mv a2billing-* a2billing

Prep the database:
#cd a2billing/DataBase/mysql-5.x

# mysql -uroot -p < a2billing-createdb-user.sql

# ./install-db.sh

You will be asked to enter details. Enter them as follows

database name : mya2billing
hostname : localhost
User : root
Password : mysqlpassword (This is the one we created earlier)
Copy and edit a2billing.conf:
# cp /usr/local/src/a2billing/a2billing.conf /etc/
# nano -w /etc/a2billing.conf

Make sure the first stanza looks like the following:

[database]
hostname = localhost
port = 3306
user = a2billinguser
password = mysqlpassword
dbname = mya2billing
dbtype = mysql

Additional files for A2billing:

# chmod 777 /etc/asterisk -R

#touch /etc/asterisk/additional_a2billing_iax.conf
#touch /etc/asterisk/additional_a2billing_sip.conf
#echo #include additional_a2billing_iax.conf >> /etc/asterisk/iax.conf
#chown -Rf www-data /etc/asterisk/additional_a2billing_iax.conf
#chown -Rf www-data /etc/asterisk/additional_a2billing_sip.conf

Install the A2billing sounds:
# cd /usr/local/src/a2billing/addons/sounds
./install_a2b_sounds_deb.sh

Asterisk ended with exit status 1
#chown -R asterisk:asterisk /usr/share/asterisk/sounds/

Edit manager.conf:
# nano -w /etc/asterisk/manager.conf
[myasterisk]
secret=mycode
read=system,call,log,verbose,command,agent,user
write=system,call,log,verbose,command,agent,user

Install the AGI etc:

# mkdir /usr/share/asterisk/agi-bin
#cd /usr/local/src/a2billing/AGI
#cp a2billing.php /usr/share/asterisk/agi-bin/
#chown -R asterisk:asterisk /usr/share/asterisk/agi-bin
#chmod 755 /usr/share/asterisk/agi-bin/a2billing.php
#cp /usr/local/src/a2billing/common/lib /usr/share/asterisk/agi-bin/lib -R

Install the webui:
# mkdir /var/www/a2billing
#chown www-data:www-data /var/www/a2billing
#cp -rf /usr/local/src/a2billing/admin /var/www/a2billing
#cp -rf /usr/local/src/a2billing/agent /var/www/a2billing
#cp -rf /usr/local/src/a2billing/customer /var/www/a2billing
#cp -rf /usr/local/src/a2billing/common /var/www/a2billing

#chmod 755 /var/www/a2billing/admin/templates_c
#chmod 755 /var/www/a2billing/customer/templates_c
#chmod 755 /var/www/a2billing/agent/templates_c

#chown -R www-data:www-data /var/www

Add contexts to extensions.conf: (For wholesale termination)
# nano -w /etc/asterisk/extensions.conf

[a2billing]
; CallingCard application
;exten => _X.,1,Answer
;exten => _X.,2,Wait(2)
;exten => _X.,3,deadAGI(a2billing.php)
;exten => _X.,4,Wait(2)
;exten => _X.,5,Hangup
exten => _X.,1,deadAGI(a2billing.php)
exten => _X.,n,Hangup

[did]
; CallingCard application
exten => _X.,1,deadAGI(a2billing.php,1,did)

Add some cron entries:
# crontab -e

# update the currency table
0 6 * * * php /usr/local/src/a2billing/Cronjobs/currencies_update_yahoo.php

# manage the monthly services subscription
0 6 1 * * php /usr/local/src/a2billing/Cronjobs/a2billing_subscription_fee.php

# To check account of each Users and send an email if the balance is
#less than the user have choice.
0 * * * * php /usr/local/src/a2billing/Cronjobs/a2billing_notify_account.php

# this script will browse all the DID that are reserve and check if
#the customer need to pay for it
# bill them or warn them per email to know if they want to pay in
#order to keep their DIDs
0 2 * * * php /usr/local/src/a2billing/Cronjobs/a2billing_bill_diduse.php

# This script will take care of the recurring service.
0 12 * * * php /usr/local/src/a2billing/Cronjobs/a2billing_batch_process.php

# To generate invoices and for each user.
0 6 * * * php /usr/local/src/a2billing/Cronjobs/a2billing_batch_billing.php

# to proceed the autodialer
*/5 * * * * php /usr/local/src/a2billing/Cronjobs/a2billing_batch_autodialer.php

# manage alarms
0 * * * * php /usr/local/src/a2billing/Cronjobs/a2billing_alarm.php

Make a logfile:

# mkdir /var/log/a2billing
#touch /var/log/a2billing/a2billing_agi.log
#chown -R asterisk:asterisk /var/log/a2billing
Add some rotation:
# cd /etc/logrotate.d
#nano -w a2billing

/var/log/a2billing/*.log {
daily
missingok
rotate 4
sharedscripts
postrotate
endscript
}

Enable SSL using default certificate for admin:

#ln -s /etc/apache2/sites-available/default-ssl /etc/apache2/sites-enabled/000-default-ssl

# a2enmod rewrite
# service apache2 restart

Browse to http://youripaddress/a2billing/admin and login with the following credentials:

Username: root

Password : changepassword

Any one Who Needs Help Feel free to contract me.

Easy way to Build FTP server in Ubuntu Server 12.04

2012-10-22T07:03:00.003-07:00

vsftp change root directory

FTP (File Transfer Protocol) is one way we communicate with remote computers. On this occasion I would share a tutorial onhow to build an FTP server ubuntu server LTS 12.04, Acctualy,there are many applications that can be used in building FTP server, but on this tutorial how to build an FTP server on ubuntu server LTS 12.04 I will use an application called vsftpd (Very Secure FTP Daemon).

sftpd uses the GPL license and can be used on all UNIX family, including in Linux. Other benefits of vstpd more “secure” (compared with) the other FTP server application, faster, and more stable.

Let’s Start It, Now login to server with ssh. then install vsftpd with command below

sudo apt-get install vsftpd

After vsftpd installation is complete. actually, you no longer need to configure the vsftpd, because the default configuration is very secure and can be directly used. But if you want to edit the configuration you can edit the file /etc/vsftpd.conf with command below:

nano /etc/vsftpd.conf

If you want your users can upload files on your FTP server, find and edit the following line:

# Uncomment this to enable any form of FTP write command.
write_enable=YES

If you do not want the anonymous FTP user free access to your server, please edit the following line:

# Allow anonymous FTP? (Disabled by default)
anonymous_enable=NO

save (CTRL+O) your configuration and Exit (Ctrl+X), then restart vsftpd service with commads below:

sudo service vsftpd restart

You can change the root directory in vsftp as you wish..

If you enable chroot_local_user=YES, it will restrict local users to their home directories.

Some time you may want to change your root form home directory to other directory.

To change the home directory from user home directory to other directory add following lines in your vsftpd.conf (/etc/vsftpd.conf).

anonymous_enable=YES

anonymous_root=/home/user/dir (hear you can set the directory as you wish)

Following is my vsftpd.conf

listen=YES
anonymous_enable=YES
local_enable=NO
write_enable=YES
dirmessage_enable=YES
use_localtime=YES
xferlog_enable=YES
connect_from_port_20=YES
secure_chroot_dir=/var/run/vsftpd/empty
pam_service_name=vsftpd
rsa_cert_file=/etc/ssl/private/vsftpd.pem
anon_root=/home/abc/mydir

-Sany

2012-09-05T11:24:00.000-07:00

Installation

System Requirements:

2 GB of hard disk space

128M or more memory, OpenVZ recommended 192MB or more (small memory Do not use the 64-bit systems)

Linux is case-sensitive, enter the command Note!

Installation steps:

1, landing putty or similar SSH tools;
After landing run: screen-S lnmp
If you are prompted to screen command does not exist can be executed: yum install screen or apt-get install screen installation, detailed screen tutorial click here .
2 Download LNMP a key installation package:
You can choose to use the download version (recommended foreign or American VPS) or the full version (recommended domestic VPS use)
For the download version execute the command: wget-c http://soft.vpser.net/lnmp/lnmp0.9.tar.gz
For the full version execute the command: wget-c http://soft.vpser.net/lnmp/lnmp0.9-full.tar.gz of
After the download is complete LNMP a key installation package will be downloaded to your server or VPS (generally not login as root then switch directories should be in / root below).
3, unpacked LNMP a key installation package:
Run: the tar zxvf lnmp0.9.tar.gz or tar zxvf lnmp0.9-full.tar.gz will LNMP a key installation package unzip.
4, begin installation LNMP a key installation package:
The In entering LNMP installation directory, execute: cd lnmp0.9 / or cd lnmp0.9-full /
Before running the installation program requires you to confirm your Linux distribution, you can do: cat / etc / issue see CentOS, Debian or Ubuntu, can also be viewed on the Control Panel by VPS service provider. Determined after the selection below corresponding system installation command:
CentOS system <br \> execute. / Centos.sh 2> & 1 | tee lnmp.log (if the system is Red Hat Enterprise Linux Server (RHEL) need to ensure that yum can the normal install software, RHEL install yum tutorial )
The <br \> perform under Debian system. / Debian.sh 2> & 1 | tee lnmp.log
The Ubuntu system <br \> perform. / Ubuntu.sh 2> & 1 | tee lnmp.log
After the install command is executed, the following interface will appear:

Input to bind the domain name (recommended to use a second-level domain name, the domain name will be bound to the / home / wwwroot /, easy management if the input error, you can hold down Ctrl and press the Backspace key to delete), the input is complete car, will display the following interface:
(Note: if Debian system, enter the domain name will prompt Where are your servers located? Asia, america, europe, oceania or africa here is to select the server or VPS in which continents are generally the U.S. the VPS, press Enter on the line directly If, enter asia, Enter.)

MySQL root password, and then enter to set the input is complete, press Enter, and will display the following interface:

If you need to install the InnoDB can enter y enter, do not need, then you can directly enter. Enter will display the following interface:

Prompt "Press any key to start ...", press the Enter key to start the installation.
LNMP script will automatically compile Nginx, MySQL, PHP, phpMyAdmin, Zend Optimizer installed several software.
5, the installation is complete, the following interface the <br \> If:

That have been installed successfully.

If you see the following interface:

The description is not installed successfully! ! Need to use winscp to lnmp0.9 directory under find lnmp.log, and downloaded to LNMP support forum posting indicate your system, 32-bit or 64-bit, and lnmp.log spread form as an attachment to a forum, we through logs to find the error, and feedback on the posts.

Web Host Manager

1, to add a virtual host, execute the following command: / root / vhost.sh prompted to enter the domain name to bind Enter, if you need to add more domain names, type y, and then enter additional binding domain, multiple The domain name can be separated by a space (Note: with www and without www different domain, with www and without www domain need to access the same site at the same time binding). Then enter the directory (absolute directory, such as / home / wwwroot / lnmp binding domain, if not filled by default is / home / wwwroot / binding domain, the directory does not necessarily have to be / home / wwwroot / if / data / below a lot of space can also fill in / data / www / lnmp the class.), and then choose whether to add a pseudo-static rule, default The already discuz discuzx, wordpress, sablog, emlog, dabr, the phpwind, wp2 (secondary directory wp pseudo-static), can directly enter the name of the above, if you need to add custom pseudo-static rules directly enter a desired name, the program will automatically create pseudo static files directly in the / usr / local / nginx / conf / pseudo-static custom name. conf which add a pseudo-static rules (Note: The finished adding the implementation of the / etc / init.d / nginx restart restart to take effect). Next will prompt the need to enable the log function, under normal circumstances do not need to start on the line directly input n For a start, enter y, then enter the name of the log file you want to define, and carriage returns will automatically add the virtual host.
2, delete the virtual host, ssh execute: rm / usr / local / nginx / conf / vhost / domain name. Conf

Install additional components

(Note: Install the following components must in lnmp0.9 installation directory, that lnmp compression unpack cd lnmp0.9 / directory!, If you can not find do find /-name eaccelerator.sh find.)
(Note: You need the following components are not necessarily your needs!) 1, the installation the PureFTPd and FTP management panel, execute the following command: your MySQL root password / pureftpd.sh When prompted, enter the password of the FTP user management panel, a MySQl The FTP database password (which can directly enter a password automatically generated) , press Enter, it will automatically install PureFTPd, suggesting installing PureFTPd perform http:// your domain name or IP / ftp / input before you set the password of the FTP user management panel, you can manage FTP browser.
2, install eAccelerator, execute the following command:. / Eaccelerator.sh, follow the prompts to select the version, press Enter, and it will automatically install and restart the web service.
Install ionCube, execute the following command:. / IonCube.sh press Enter, it will automatically install and restart the web service.
The installation imageMagick, execute the following command:. / ImageMagick.sh press Enter, it will automatically install and restart the web service.
5, install memcached, execute the following command: / memcached.sh press Enter, it will automatically install and restart the web service.

Upgrade program

Upgrade Nginx version, execute the following command: / upgrade_nginx.sh prompted nginx version number, such as 1.0.10, version number can from http://nginx.org/en/download.html get the. (Note: the upgrade process, MySQL, PHP-FPM will be suspended.)
7 upgrade PHP version, execute the following command:. / Upgrade_php.sh prompted, enter your php version number, such as 5.3.6. (Note: some websites, such as shopex have compatibility issues, before the upgrade, make sure you use the program to support the 5.3 version upgrade process Nginx, MySQL, PHP-FPM will be suspended. 5.4 version of the case of the test yet test version, production environment, do not upgrade to 5.4. *.)

State management

LNMP state management: / root / lnmp {start | stop | reload | restart | the kill | status}
Nginx state management :/ etc / init.d / nginx {start | stop | reload | restart}
PHP-FPM state management :/ etc / init.d / php-fpm {start | stop | quit | restart | reload | logrotate}
The PureFTPd state management: / etc / init.d / pureftpd {start | stop | restart | the kill | status}
MySQL state management :/ etc / init.d / mysql {start | stop | restart | reload | force-reload | status}
The Memcached state management :/ etc / init.d / memcached {start | stop | restart}

The related graphics interface program

phpinfo: http:// previously entered domain name or IP / phpinfo.php
phpMyAdmin: http:// the front input the domain name or IP / phpmyadmin /
The probe: http:// in front to enter the domain name or IP / p.php
PureFTP management domain name or IP interface: http:// the front input / ftp /
Memcached test page: http:// previously entered domain name or IP / memcached.php

LNMP related directory

nginx: / usr / local / nginx
mysql: / usr / local / mysql
php: / usr / local / php
Site Directory: / home / wwwroot /
Nginx log directory :/ home / wwwlogs /
/ Root / vhost.sh add virtual host configuration file directory where :/ usr / local / nginx / conf / vhost /

LNMP configuration file

Nginx main configuration file :/ usr / local / nginx / conf / nginx.conf
Add the virtual host configuration file / root / vhost.sh :/ usr / local / nginx / conf / vhost / domain name. Conf
MySQL configuration file :/ etc / my.cnf
PHP configuration file :/ usr / local / php / etc / php.ini
php-fpm configuration file :/ usr / local / php / etc / php-fpm.conf
PureFtpd configuration file :/ usr / local / pureftpd / pure-ftpd.conf
PureFtpd MySQL configuration file :/ usr / local / pureftpd / pureftpd-mysql.conf
Note: LNMP a key installation package 0.9 & LNMPA in DiaHosting (thanks to provide testing the VPS) VPSYOU (thank provided to test the VPS), PhotonVPS (thank provided to test the VPS) VPSZZ , the Linode , XeHost Regal open source VPS , YardVPS , Hostigation test by , MyHost123 , ThrustVPS BuyVM , DirectSpace and many other U.S. VPS, CentOS, Debian, Ubuntu 32-bit and 64-bit systems. Small memory Do not use the 64-bit system (Debian5 system source is a problem, please use Debian6!)

2012-09-05T01:13:00.000-07:00

How to set-up a VPS with nginx, PHP, mysql, phpMyAdmin, mail server, FTP, Webmin, Memcached and EAccelerator and then install WordPress

Here I explain how to set up a VPS with the features above and install WordPress on Ubuntu 10.04 LTS. It is always best to use a LTS (Long Term Support) version of Ubuntu since then you get security updates for 5 years, instead of 18 months. I got my VPS from IntoVPS, with 1024 MB of burstable RAM (512 MB guaranteed), 30GB disk space and 500GB monthly traffic for 10$/month. The steps I take here worked for me on this server, but if you have any problems either leave a comment or post in the forum.

1. Initial setup
First we have to get the server ready. I am assuming you have already logged in using PuTTY as root. First update the package repositary listing:
apt-get update
Now install any updates:
apt-get upgrade
Just in case:
apt-get install wget make
Now were ready to install nginx.
2. NGINX
nginx (pronounced “engine-x”) is a lightweight, fast and powerful HTTP server. More information here. If you are having second thoughts about switching to nginx, let´s put it this way: I still consider switching from Apache to nginx the best thing I´ve ever done to this VPS, and I can personally testify that WordPress, phpMyAdmin, Roundcube webmail and Simple Machines Forum work perfectly with nginx.
First we have to add the nginx repositary to the database, beacause at the time of writing the latest stable nginx is version 0.8.54 (Update: it is now 1.0.0), whereas the latest in the default Ubuntu repositary is 0.7. To add the repositary first we have to install python-software-properties:
apt-get install python-software-properties
Now add the repository:
add-apt-repository ppa:nginx/stable
Now update the database:
apt-get update
Now install nginx:
apt-get install nginx
We’ll configure it, and set up PHP5, in the next section.
3. PHP
If your planning to just serve static content from your server, you can stop here, or go on to set up the mail server. But if you´re going to install WordPress (or an other PHP application) then we have to install PHP.
(Update: see an alternative (better) way of installing PHP here)
First we install the PHP CGI and other components we may need:
apt-get install php5 php5-cgi php5-sqlite php5-tidy php5-xmlrpc php5-xs php5-dev
Now we have to create a PHP-FastCGI initialization script. Let´s first open the new file with nano:
nano /etc/init.d/php-fastcgi
Now paste the following code into the file (note: if you’re using PuTTY just copy this then right-click in the PuTTY window.) :

#!/bin/bash
BIND=127.0.0.1:9000
USER=www-data
PHP_FCGI_CHILDREN=6
PHP_FCGI_MAX_REQUESTS=1000
 
PHP_CGI=/usr/bin/php-cgi
PHP_CGI_NAME=`basename $PHP_CGI`
PHP_CGI_ARGS=“- USER=$USER PATH=/usr/bin PHP_FCGI_CHILDREN=$PHP_FCGI_CHILDREN PHP_FCGI_MAX_REQUESTS=$PHP_FCGI_MAX_REQUESTS $PHP_CGI -b $BIND”
RETVAL=0
 
start() {
echo -n “Starting PHP FastCGI: “
start-stop-daemon –quiet –start –background –chuid “$USER” –exec /usr/bin/env — $PHP_CGI_ARGS
RETVAL=$?
echo “$PHP_CGI_NAME.”
}
stop() {
echo -n “Stopping PHP FastCGI: “
killall -q -w -u $USER $PHP_CGI
RETVAL=$?
echo “$PHP_CGI_NAME.”
}
 
case “$1″ in
start)
start
;;
stop)
stop
;;
restart)
stop
start
;;
*)
echo “Usage: php-fastcgi {start|stop|restart}”
exit 1
;;
esac
exit $RETVAL

Things you may want to change:

PHP_FCGI_CHILDREN on line 4: This is the number of worker processes that FastCGI spawns to handle PHP requests. The more connections per second your site recieves, the higher you should set this setting. Keep this in mind: Connections per second * Seconds it takes to generate the page = PHP_FCGI_CHILDREN. If you are running out of memory decrease this value.
PHP_FCGI_MAX_REQUESTS on line 5: This is the number of requests before the worker proces(es) are respawned (restarted). If you are having any problems with memory leaks, blank pages, etc., try decreasing this to 500.

Now save the file (usualy by pressing CTRL+O) and exit nano. We now have to make this file executable:
chmod +x /etc/init.d/php-fastcgi
Now start the script:
/etc/init.d/php-fastcgi start
Now we have enable PHP in nginx. First open the config file:
nano /etc/nginx/sites-available/default
Now make the following changes:

On line 25, add index.php just before the semi-colon (;).
Change localhost on line 28 to your domain. If you do not have a domain name leave it as it is.
Uncomment the following lines:

location ~ .php$ {
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fastcgi_params;
}

Your config file should now look like this:

server {
#listen 80; ## listen for ipv4; this line is default and implied
#listen [::]:80 default ipv6only=on; ## listen for ipv6
 
# Document root:
root /usr/share/nginx/www;
 
index index.html index.htm index.php;
 
# Make site accessible from your-site.com and www.your-site.com (change to your domain name)
server_name your-site.com www.your-site.com;
 
location / {
 
# First attempt to serve request as file, then
# as directory, then fall back to index.html
try_files $uri $uri/ /index.html;
}
 
location /doc {
root /usr/share;
autoindex on;
allow 127.0.0.1;
deny all;
}
 
location /images {
root /usr/share;
autoindex off;
}
 
#error_page 404 /404.html;
 
# redirect server error pages to the static page /50x.html
#
#error_page 500 502 503 504 /50x.html;
#location = /50x.html {
# root /usr/share/nginx/www;
#}
 
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ .php$ {
# proxy_pass http://127.0.0.1;
#}
 
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
location ~ .php$ {
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fastcgi_params;
}
 
# deny access to .htaccess files, if Apache’s document root
# concurs with nginx’s one
#
#location ~ /.ht {
#deny all;
#}
}

Don’t forget to read the file to make shure everything is set up right.
Now restart nginx:
/etc/init.d/nginx restart
Now it´s time to create a test script:
nano /usr/share/nginx/www/test.php
Inside, insert the following:
<?php phpinfo() ?>
And save the file. Now go to your-site.com/test.php in your web browser. You should see a page with your PHP configuration information. We are now ready to install MySQL!
4. MySQL
Type:
apt-get install mysql-server mysql-client php5-mysql
And follow the instructions that appear on-screen. Now restart the PHP server:
/etc/init.d/php-fastcgi restart
Now it´s time to install phpMyAdmin
5. phpMyAdmin
phpMyAdmin is a browser-based MySQL database manager writen in PHP. First let´s install it:
apt-get install phpmyadmin
If the installer asks you what HTTP server to configure for, press enter without answering.
Now we have to be able to access phpMyAdmin through phpmyadmin.your-site.com. First create a new config file:
nano /etc/nginx/sites-available/phpmyadmin
And inside insert the following (don´t forget the right-click method):

server {
#listen 80; ## listen for ipv4; this line is default and implied
#listen [::]:80 default ipv6only=on; ## listen for ipv6
 
root /usr/share/phpmyadmin;
index index.php index.html index.htm;
 
# Make site accessible from http://localhost/
server_name phpmyadmin.your-site.com;
 
location / {
# First attempt to serve request as file, then
# as directory, then fall back to index.html
try_files $uri $uri/ /index.html;
}
 
location /doc {
root /usr/share;
autoindex on;
allow 127.0.0.1;
deny all;
}
 
location /images {
root /usr/share;
autoindex off;
}
 
#error_page 404 /404.html;
 
# redirect server error pages to the static page /50x.html
#
#error_page 500 502 503 504 /50x.html;
#location = /50x.html {
# root /usr/share/nginx/www;
#}
 
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ .php$ {
# proxy_pass http://127.0.0.1;
#}
 
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
location ~ .php$ {
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fastcgi_params;
}
 
# deny access to .htaccess files, if Apache’s document root
# concurs with nginx’s one
#
#location ~ /.ht {
# deny all;
#}
}

Change your-site.com on line 9 to your domain name. Don´t forget to set up the DNS record!!!
Now we have to enable this configuration using the following command:
ln -s /etc/nginx/sites-available/phpmyadmin /etc/nginx/sites-enabled/phpmyadmin
Now restart nginx and your done. Go to phpmyadmin.your-site.com in your web-browser and login with the username and password you specified in the MySQL installer (not the phpMyAdmin one).
6. Email server
Now it´s time to set up a Mail Transport Agent (MTA), in this case, Postfix; and a POP3/IMAP server, Dovecot, so we can read the mail. (Note: If your planning to use Google Apps for email, or not use your own email at all, you can skip this step.
First let´s install Postfix:
apt-get install postfix postfix-tls libsasl2-2 sasl2-bin libsasl2-modules popa3d
Follow the insructions on-screen until the installation completes. We´ll configure Postfix later. Now let´s install Dovecot:
apt-get install dovecot-imapd dovecot-pop3d dovecot-common
Open the config file:
nano /etc/dovecot/dovecot.conf
Find the following settings (using the CTRL+W function) and make shure they are set as below (uncomment if necesary):
protocols = imap pop3
ssl = no
mail_location = mbox:~/mail:INBOX=/var/mail/%u
pop3_uidl_format = %08Xu%08Xv
disable_plaintext_auth = no
Now replace this:
auth default {
With this:
auth default2 {
And just before that line add:

auth default {
mechanisms = plain login
passdb pam {
}
userdb passwd {
}
socket listen {
client {
path = /var/spool/postfix/private/auth
mode = 0660
user = postfix
group = postfix
}
}
}

Now enter the Postfix config file:
nano /etc/postfix/main.cf
And insert at the end:

smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = your-site.com
smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination
smtpd_sasl_security_options = noanonymous

Replacing your-site.com with your domain name.
Now add a new user to recieve and send email (If new user is joe then email address will be joe@your-site.com. Create as many users as you want):
adduser username
Now restart all components of the mail server:

/etc/init.d/saslauthd restart
/etc/init.d/postfix restart
/etc/init.d/dovecot restart

Now you can access your email through your email client, or through any webmail package. I recomend Roundcube webmail, since it is easy to set up and use, stylish and works great with nginx!
7. FTP server
I use vsftpd (Very Secure File Transfer Protocol Daemon) beacause it´s lightning fast and very easy to set up. First let´s install it:
apt-get install vsftpd
Now let´s edit the config file:
nano /etc/vsftpd.conf
Replace the entire contents with:

# Run standalone? vsftpd can run either from an inetd or as a standalone
# daemon started from an initscript.
listen=YES
#
# Run standalone with IPv6?
# Like the listen parameter, except vsftpd will listen on an IPv6 socket
# instead of an IPv4 one. This parameter and the listen parameter are mutually
# exclusive.
#listen_ipv6=YES
#
# Allow anonymous FTP? (Disabled by default)
anonymous_enable=NO
#
# Uncomment this to allow local users to log in.
local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
write_enable=YES
#
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd’s)
#local_umask=022
#
# Uncomment this to allow the anonymous FTP user to upload files. This only
# has an effect if the above global write enable is activated. Also, you will
# obviously need to create a directory writable by the FTP user.
#anon_upload_enable=YES
#
# Uncomment this if you want the anonymous FTP user to be able to create
# new directories.
#anon_mkdir_write_enable=YES
#
# Activate directory messages – messages given to remote users when they
# go into a certain directory.
dirmessage_enable=YES
#
force_dot_files=YES
# If enabled, vsftpd will display directory listings with the time
# in your local time zone. The default is to display GMT. The
# times returned by the MDTM FTP command are also affected by this
# option.
use_localtime=YES
#
# Activate logging of uploads/downloads.
xferlog_enable=YES
#
# Make sure PORT transfer connections originate from port 20 (ftp-data).
connect_from_port_20=YES
#
# If you want, you can arrange for uploaded anonymous files to be owned by
# a different user. Note! Using “root” for uploaded files is not
# recommended!
#chown_uploads=YES
#chown_username=whoever
#
# You may override where the log file goes if you like. The default is shown
# below.
#xferlog_file=/var/log/vsftpd.log
#
# If you want, you can have your log file in standard ftpd xferlog format.
# Note that the default log file location is /var/log/xferlog in this case.
#xferlog_std_format=YES
#
# You may change the default value for timing out an idle session.
idle_session_timeout=900
#
# You may change the default value for timing out a data connection.
#data_connection_timeout=120
#
# It is recommended that you define on your system a unique user which the
# ftp server can use as a totally isolated and unprivileged user.
#nopriv_user=ftpsecure
#
# Enable this and the server will recognise asynchronous ABOR requests. Not
# recommended for security (the code is non-trivial). Not enabling it,
# however, may confuse older FTP clients.
#async_abor_enable=YES
#
# By default the server will pretend to allow ASCII mode but in fact ignore
# the request. Turn on the below options to have the server actually do ASCII
# mangling on files when in ASCII mode.
# Beware that on some FTP servers, ASCII support allows a denial of service
# attack (DoS) via the command “SIZE /big/file” in ASCII mode. vsftpd
# predicted this attack and has always been safe, reporting the size of the
# raw file.
# ASCII mangling is a horrible feature of the protocol.
#ascii_upload_enable=YES
#ascii_download_enable=YES
#
# You may fully customise the login banner string:
ftpd_banner=Your welcome message
#
# You may specify a file of disallowed anonymous e-mail addresses. Apparently
# useful for combatting certain DoS attacks.
#deny_email_enable=YES
# (default follows)
#banned_email_file=/etc/vsftpd.banned_emails
#
# You may restrict local users to their home directories. See the FAQ for
# the possible risks in this before using chroot_local_user or
# chroot_list_enable below.
#chroot_local_user=YES
#
# You may specify an explicit list of local users to chroot() to their home
# directory. If chroot_local_user is YES, then this list becomes a list of
# users to NOT chroot().
#chroot_local_user=YES
#chroot_list_enable=YES
# (default follows)
#chroot_list_file=/etc/vsftpd.chroot_list
#
# You may activate the “-R” option to the builtin ls. This is disabled by
# default to avoid remote users being able to cause excessive I/O on large
# sites. However, some broken FTP clients such as “ncftp” and “mirror” assume
# the presence of the “-R” option, so there is a strong case for enabling it.
#ls_recurse_enable=YES
#
# Debian customization
#
# Some of vsftpd’s settings don’t fit the Debian filesystem layout by
# default. These settings are more Debian-friendly.
#
# This option should be the name of a directory which is empty. Also, the
# directory should not be writable by the ftp user. This directory is used
# as a secure chroot() jail at times vsftpd does not require filesystem
# access.
secure_chroot_dir=/var/run/vsftpd/empty
#
# This string is the name of the PAM service vsftpd will use.
pam_service_name=vsftpd
#
pasv_min_port=44950
pasv_max_port=45000
# This option specifies the location of the RSA certificate to use for SSL
# encrypted connections.
#rsa_cert_file=/etc/ssl/private/vsftpd.pem

Things to change:

On line 91, type your welcome message.
On lines 132 and 133 are the minimum and maximum ports passive connections. You´ll need them if you install a firewall later. Change them to any unspecified port range (see what ports are unspecified here).

Now restart vsftpd:
restart vsftpd
You can now login to your server using FTP (using the user account you created before. Root logins will not work.)
8. Webmin
Webmin is a server control panel similar to cPanel and Plesk, but it is free. First get the download path for the latest .tar.gz version here. Then download and install it on your server:

wget http://downloadpath/webmin-x.x.x.tar.gz
tar xzf webmin-x.x.x.tar.gz
cd /webmin
./setup.sh

After setup is complete go to your-site.com:10000 and login with the username and password you specified during the installation.
9.Things to set-up before continuing
Now is a good time to do certain tasks that should be performed.
First, I recommend, as a security precaution, to change the SSH port using Webmin (Servers > SSH server > Networking). Don´t forget to click apply changes after changing the port number, or to update the port number in the PuTTY configuration window.
We also have to add the user you use to make FTP connections to the www-data group, so that there isn´t any permission errors when we install WordPress. First go to System > Users and Groups and select the user account you use to make your FTP connections. Go to the Group membership section and set Primary Group to www-data. Now go to Secondary groups and add the group with the same name as the user account. Also add the sudo group if you want this user account to be able to use the sudo command. Now set Change group ID on files? to All files.

Settings should look like this

Now click save. Do this to all user accounts you use to upload files via FTP. So now nginx has group access to your users files (In other words, permission 774 means full permissions for owner, full permissions for nginx (and therefore WordPress, etc…) and read permissions for everybody else. We do this so the server can modify files when we use things like WordPress. Now go to the SSH terminal and type:
chown -R username /usr/share/nginx/www
Replacing username with the user you´ve just added to the www-data group.
We`re now ready to set up Memcached
10. Memcached
Memcached is a general-purpose distributed memory caching system. It is very easy to install. Just type:
apt-get install memcached php5-memcached
And you´re done! Instructions on how to integrate it into WordPress here.

11. EAccelerator
EAccelerator is a caching extension for PHP that stores PHP scripts in their compiled state in shared memory.
First, we need to download the latest version of EAccelerator:
wget http://bart.eaccelerator.net/source/0.9.6.1/eaccelerator-0.9.6.1.tar.bz2
Now let´s compile and install it:

tar xvjf eaccelerator-0.9.6.1.tar.bz2
 
cd eaccelerator-0.9.6.1
 
phpize
 
./configure –enable-eaccelerator=shared
 
make
 
make install

Now we have to enable it in the php.ini file. Open the php.ini file:
nano /etc/php5/cgi/php.ini
And insert this just after (PHP)

zend_extension = “/usr/lib/php5/20090626/eaccelerator.so”
eaccelerator.shm_size = “32″
eaccelerator.cache_dir = “/var/cache/eaccelerator”
eaccelerator.enable = “1″
eaccelerator.optimizer = “1″
eaccelerator.check_mtime = “1″
eaccelerator.debug = “0″
eaccelerator.filter = “”
eaccelerator.shm_max = “0″
eaccelerator.shm_ttl = “0″
eaccelerator.shm_prune_period = “0″
eaccelerator.shm_only = “0″
eaccelerator.compress = “1″
eaccelerator.compress_level = “9″
eaccelerator.allowed_admin_path = “/usr/share/nginx/www/eaccelerator/control.php”

Now restart PHP:
/etc/init.d/php-fastcgi restart
Now we´ll enable the EAccelerator control panel:

mkdir /usr/share/nginx/www/eaccelerator
 
mv control.php /usr/share/nginx/www/eaccelerator
 
chmod 644 /usr/share/nginx/www/eaccelerator/control.php
 
nano /usr/share/nginx/www/eaccelerator/control.php

Now find the $user and $pw settings and change them to a username and password.
12. And finally… WordPress
We are now ready to install WordPress. First we´ll configure nginx so pretty permalinks work. Open the config file:
nano /etc/nginx/sites-available/default
Now find:

location / {
 
# First attempt to serve request as file, then
# as directory, then fall back to index.html
try_files $uri $uri/ /index.html;

And just after that (before the }) add:

if (!-e $request_filename) {
rewrite ^(.+)$ /index.php?q=$1 last;
}

This will enable pretty permalinks. While we´re here we might as well block access to the wp-config.php file. Just before:
location /doc {
Add:

location /wp-config.php {
deny all;
}

And also block access to the .htaccess files that come with some WordPress plugins (while we´re on the subject, .htaccess files don´t work with nginx, instead you use location blocks in the config file, as you´ve probably already figured out). Uncomment the following lines:

location ~ /.ht {
deny all;
}

Now restart nginx:
/etc/init.d/nginx restart
Now we´re ready to install WordPress. Make shure you are logged in using the user account you added to the www-data group in step 9 (following this procedure wil install it in the root of your site):

cd /usr/share/nginx/www
 
wget http://wordpress.org/latest.tar.gz
 
tar xzf latest.tar.gz
 
cd wordpress
 
mv * ..
 
rm -rf wordpress
 
chmod -R 755 /usr/share/nginx/www
 
chmod -R 775 wp-content
 
chmod 664 wp-config.php

Now login to phpMyAdmin, click on the permisions tab and create a new user account and database for WordPress. Then go to your-site.com/wp-admin/install.php and complete WordPress´famous 5-minute install.
After installing go to SSH and type
chmod 640 /usr/share/nginx/www/wp-config.php
And you´re done! By following this tutorial you have (hopefully) gone from a blank box to a sophisticatedly set-up VPS capable of handling almost anything. I hope that this tutorial is both accurate and easy to understand. If you have any problems please leave a comment below.

2012-08-26T00:33:00.000-07:00

Jump to: Windows proxy - linux proxy instructions - Mac OS X proxy instructions - PHP script - submit, help, and share

Looking for a list of working proxies? See http://about.piratereverse.info/proxy/list.html - updated daily!

Background

This article will be explaining how to set up your own pirate bay proxy, as some ISPs in the UK have been ordered to block it by the High Court. In addition to this we will also be explaining how it is a good and low cost investment with a great outcome - we must fight censorship, we cannot let this continue.
For most of the article we'll be using a web server called nginx. It has been tested on Red Hat based and Debian based distributions but it works on pretty much all UNIX-based systems. Your server should not have anything else running on port 80 though, and of course it needs sufficient bandwidth. Don't use a precompiled binary from your distributions repos though as it will not have all the required modules. You can get good value VPS servers for next to nothing these days that will be more than capable of running it, ours costs less than £5 per month.
There is also a PHP script that proxies The Pirate Bay that has been designed specifically for this, and can be used on web hosting packages (i.e. does not require a server dedicated to it). If you are planning on doing this, make sure you aren't violating any terms of service that your provider has.
These guides were created in the spirit of The Hydra Bay. In ancient Greek mythology, the Hydra was a serpent that possessed many heads. Herakles was sent to destroy it as one of his twelve labours, but for each of the heads that he decapitated, two more grew. In a sense this is what we are trying to achive; ISPs block The Pirate Bay, and many more proxies appear.

Preconfigured Windows nginx proxy

We have preconfigured nginx for Windows into a Pirate Bay proxy. Just download it, run start.bat and configure your router and you have a fully functional proxy that you can share.
Download v1.0 based on nginx/1.2.0
This will only work if your ISP has not blocked The Pirate Bay, if they have then your proxy will be serving their block page rather than the actual Pirate Bay site. If your ISP has blocked it and you need to access The Pirate Bay, use https://piratereverse.info instead, or check out this list of proxies.
Once the software is running you will need to forward port 80 on your router or firewall to the IP of the computer with nginx. This guide about Apache will help as it uses the same port. You will also need to open nginx.conf in the conf directory and change where it says 127.0.0.1 to your external IP address or hostname. If you don't have a static IP address, use a service like no-ip.com to get a free hostname and dynamic DNS.

Guide for nginx proxy on linux

1. Once you've got your server set up and online you'll want to get nginx installed. Install the dependencies first, this is for a Red Hat based system.

yum install pcre-devel zlib-devel openssl-devel gcc make subversion

If you're using a Debian based operating system you should use this.

apt-get install libpcre3 libpcre3-dev zlib1g zlib1g-dev openssl gcc make subversion

2. Download the source. Latest version is 1.2.0 as of 04/05/2012.

wget http://nginx.org/download/nginx-1.2.0.tar.gz

3. Download the substitutions4nginx source using subversion.

svn checkout http://substitutions4nginx.googlecode.com/svn/trunk/ substitutions4nginx-read-only

4. Extract the source.

tar xzvf nginx-1.2.0.tar.gz cd nginx-1.2.0

5. Get ready to compile by configuring. Leave out --with-http_ssl_module if you aren't planning on using SSL. Change the path of the substitutions4nginx-read-only directory to where you've downloaded it to. If you haven't changed the path and are logged in as root it'll probably be /root/substitutions4nginx-read-only/

./configure --with-http_ssl_module --add-module=/path/to/substitutions4nginx-read-only

6. Compile it. It'll be installed to /usr/local/nginx/ by default.

make
make install

7. Test nginx is working by starting it then typing in your server IP in your web browser. You should see the "Welcome to nginx!" message.

cd /usr/local/nginx/
./sbin/nginx

8. If its working, we'll stop it so we can configure it. If you can't connect to it, make sure there isn't a firewall blocking it. For testing, see this shell script. You should configure iptables properly later but its not something in the scope of this article, instead see here.

./sbin/nginx -s stop

9. Rename the default config file so we've got a copy just in case something isn't quite right.

cd conf
mv nginx.conf nginx.conf-backup

10. Download this non-SSL config and open it. Have a look at it here online first if you're unsure.

wget http://about.piratereverse.info/proxy/nginx.conf
vi nginx.conf

If you are using SSL, download this config and open it. Have a look at it here online first if you're unsure. This is for SSL.

wget http://about.piratereverse.info/proxy/nginx-ssl.conf
mv nginx-ssl.conf nginx.conf
vi nginx.conf

11. If you aren't using SSL the only thing you should consider changing is the subs_filters, or you can remove them. They perform a find and replace. If you are using SSL change the paths of the SSL certificates as appropriate and edit the server_name so it is relevant.

12. Make the cache directory. By caching we'll be taking the stress off The Pirate Bay's servers and speeding up delivery of our site. If you changed the cache path above then make sure its the same here too.

mkdir /usr/local/nginx/cache

13. Test your config works by starting nginx. If there isn't any output then its started. If you get [emerg] errors, something needs changing. Usually the output will point you in the right direction. If you can't figure it out, try searching the internet as there are a lot of resources - otherwise email with as much detail as possible.

./usr/local/nginx/sbin/nginx

14. If it works, try it out. You've completed it. We recommend installing Webmin too, so you can see the error logs in the browser and manage the server with ease. If you are hosting this as a public proxy then see this section on contacting us as we are maintaining a list of known proxies.

Guide for nginx proxy on Mac OS X

One of the advantages with nginx is that it works on a Mac too. This guide will explain how to configure it. You'll need to have Xcode installed, but that is free from Apple.
1. Configure the dependencies by going to the Terminal (Applications > Utilities) and paste in the following. If it does not work, paste it in each line at a time (note that the long URL on the first line wraps over onto the second, but it should be treated as a single line).

sudo curl -OL h ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.30.tar.gz > /usr/local/src/pcre-8.30.tar.gz sudo mkdir -p /usr/local/src cd /usr/local/src tar xvzf pcre-8.30.tar.gz cd pcre-8.30 ./configure --prefix=/usr/local make sudo make install cd

2. Download nginx source and untar it.

sudo curl -OL h http://nginx.org/download/nginx-1.2.0.tar.gz > /usr/local/src/nginx-1.2.0.tar.gz tar xvzf /usr/local/src/nginx-1.2.0.tar.gz

3. Download the substitutions4nginx source using subversion.

cd /usr/local/src/ svn checkout http://substitutions4nginx.googlecode.com/svn/trunk/ substitutions4nginx-read-only

4. Get ready to compile by configuring. Leave out --with-http_ssl_module if you aren't planning on using SSL. Change the path of the substitutions4nginx-read-only directory to where you've downloaded it to.

cd nginx-1.2.0 ./configure --with-http_ssl_module --add-module=/path/to/substitutions4nginx-read-only

5. Compile it. It'll be installed to /usr/local/sbin/ by default.

make
sudo make install

6. Test nginx is working by starting it then typing in your server IP in your web browser. You should see the "Welcome to nginx!" message.

sudo /usr/local/sbin/nginx

7. If its working, we'll stop it so we can configure it. If there are any problems, try installing it again using this guide but make sure you include the "--add-module=/path/to/substitutions4nginx-read-only" parameter to ./compile

sudo /usr/local/sbin/nginx -s stop

8. Rename the default config file so we've got a copy just in case something isn't quite right.

cd /usr/local/conf/
mv nginx.conf nginx.conf-backup

9. Download this non-SSL config and open it. Have a look at it here online first if you're unsure.

wget http://about.piratereverse.info/proxy/nginx.conf
vi nginx.conf

If you are using SSL, download this config and open it. Have a look at it here online first if you're unsure. This is for SSL.

wget http://about.piratereverse.info/proxy/nginx-ssl.conf
mv nginx-ssl.conf nginx.conf
vi nginx.conf

10. If you aren't using SSL the only thing you should consider changing is the subs_filters, or you can remove them. They perform a find and replace. If you are using SSL change the paths of the SSL certificates as appropriate and edit the server_name so it is relevant.

11. Test your config works by starting nginx. If you get [emerg] errors, something needs changing. Usually the output will point you in the right direction. If you can't figure it out, try searching the internet as there are a lot of resources - otherwise email with as much detail as possible.

sudo /usr/local/sbin/nginx

12. Installation is complete, try it out. If you are hosting this as a public proxy then see this section on contacting us as we are maintaining a list of known proxies.

PHP script

This PHP script is a proxy designed specifically for providing access to The Pirate Bay. A great solution if you do not have a server that you can dedicate to the task. It was developed by UnblockedPirateBay.com and requires at least PHP5 and cURL. Just unzip it and upload it to your web server.
Download latest
The cookies.txt file should be chmod 755/777. There is no additional configuration required however in the file configurationfile.php there are some options you can change, such as the page title.

Tips for running a successful proxy

Do the following:

ensure your proxy is fast
ensure it is easily accessible, i.e. no complicated domains!
ensure it is available 24/7 - proxies that no longer work are removed from the list!

Don't do the following:

interfere with TPB's content
charge for access - you'll get blacklisted by TPB and your proxy will stop working!
insert many of your own ads
show any pages before TPB's homepage
use an open web proxy such as Glype or PHProxy
save POST data of any kind

Unfortunately some rouge sites have appeared, which is unacceptable and disappointing that people feel the need to abuse the situation. Any sites found to be in the best interest of the operators and not the visitors will be reported to The Pirate Bay so they can be dealt with! Find out more at http://torrentfreak.com/pirate-bay-slaps-pathetic-proxies-and-scammy-copies-120507/

Submit your site

Once you have created your site, we would appreciate it if you would share it with us by emailing nospam@piratereverse.info - this is so we can all build up a list of proxies. Our list is at http://about.piratereverse.info/proxy/list.html and will be shared on The Pirate Bay's Facebook wall.

Help

If anyone has any questions or suggestions please email nospam@piratereverse.info and we'll be happy to try and help. If we get a lot of similar questions we'll add a FAQ section here.
Likewise if anyone has any improvements to make the process easier then please submit them at the above email address. We're also looking for any alternative methods of creating proxies, so if you have wrote some code or are making a guide, let us know and we'll post it here. It is important we can get as many Pirate Bay proxies up as possible, that is what The Hydra Bay is all about.

Spread the word

Please let people know about this - the more proxies that work properly the better. If you use Twitter follow us, we are @piratereverse. Post about it, include the hashtag #thehydrabay. Let's see if we can get this trending! If you are able to donate, please do so below using flattr so we can keep providing a fast and reliable service with continually updated information. If you'd like to donate via PayPal, that is fine just send us an email and we'll discuss from there. You can donate via BitCoin too, our address is 1BsHaQccToKwN7LEr6kqVjPtZKxNu84SDg. All donations are very much appreciated, no matter how little you are able to send us. It is the only way we are able to keep the proxy going.

2012-08-22T06:25:00.003-07:00

2012-08-13T08:24:00.001-07:00

How to Install Linux, nginx, MySQL, PHP (LEMP) stack on CentOS 6

About Lemp

LEMP stack is a group of open source software to get web servers up and running. The acronym stands for Linux, nginx (pronounced Engine x), MySQL, and PHP. Since the server is already running CentOS, the linux part is taken care of. Here is how to install the rest.

Step One—Install the Required Repositories

We will be installing all of the required software with Yum. However, because neither nginx nor php-fpm are available straight from CentOS, we need to download two extra repositories first.

sudo rpm -Uvh http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-7.noarch.rpm
sudo rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm

Step Two—Install MySQL

The next step is to begin installing the server software, starting with MySQL and dependancies.

 sudo yum install mysql mysql-server

Once the download is complete, restart MySQL:

sudo /etc/init.d/mysqld restart

You can do some configuration of MySQL with this command:

sudo /usr/bin/mysql_secure_installation

The prompt will ask you for your current root password.

Since you just installed MySQL, you most likely won’t have one, so leave it blank by pressing enter.

Enter current password for root (enter for none): 
OK, successfully used password, moving on...

Then the prompt will ask you if you want to set a root password. Go ahead and choose Y and follow the instructions.

CentOS automates the process of setting up MySQL, asking you a series of yes or no questions.

It’s easiest just to say Yes to all the options. At the end, MySQL will reload and implement the changes.

By default, a MySQL installation has an anonymous user, allowing anyone
to log into MySQL without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n] y                                            
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] y
... Success!

By default, MySQL comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n] y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n] y
 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MySQL
installation should now be secure.

Thanks for using MySQL!

Step Three—Install nginx

As with MySQL, we will install nginx using yum:

sudo yum install nginx

nginx does not start on its own. To get nginx running, type:

sudo /etc/init.d/nginx start

You can confirm that nginx has installed on your web server by directing your browser to your IP address. You can run the following command to reveal your server’s IP address.

ifconfig eth0 | grep inet | awk '{ print $2 }'

Step Four—Install PHP

The php-fpm package is located within the REMI repository, which, at this point, is disabled. The first thing we need to do is enable the REMI repository and install php and php-fpm:

sudo yum --enablerepo=remi install php php-fpm php-mysql

Then start php-fpm up.

sudo service php-fpm start

Step Five—Configure php

We need to make one small change in the php configuration.Open up php.ini:

 sudo vi /etc/php.ini

Find the line, cgi.fix_pathinfo=1, and change the 1 to 0.

cgi.fix_pathinfo=0

If this number is kept as a 1, the php interpreter will do its best to process the file that is as near to the requested file as possible. This is a possible security risk. If this number is set to 0, conversely, the interpreter will only process the exact file path—a much safer alternative. Save and Exit.

Restart php-fpm:

sudo service php-fpm restart

Step Six—Configure nginx

Open up the default nginx config file:

sudo vi /etc/nginx/nginx.conf

Raise the number of worker processes to 4 then save and exit that file.

Now we should configure the nginx virtual hosts. In order to make the default nginx file more concise, the virtual host details are in a different location.

sudo vi /etc/nginx/conf.d/*.conf

The configuration should include the changes below (the details of the changes are under the config information):

#
# The default server
#
server {
    listen       80;
    server_name  _;

    #charset koi8-r;

    #access_log  logs/host.access.log  main;

    location / {
        root   /usr/share/nginx/html;
        index index.php  index.html index.htm;
    }

    error_page  404              /404.html;
    location = /404.html {
        root   /usr/share/nginx/html;
    }

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }

    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
    #
    #location ~ \.php$ {
    #    proxy_pass   http://127.0.0.1;
    #}

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    #
    location ~ \.php$ {
        root           /usr/share/nginx/html;
        fastcgi_pass   127.0.0.1:9000;
        fastcgi_index  index.php;
        fastcgi_param  SCRIPT_FILENAME   $document_root$fastcgi_script_name;
        include        fastcgi_params;
    }

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    #    deny  all;
    #}
}

Here are the details of the changes:

Add index.php within the index line.

Change the root to /usr/share/nginx/html;

Uncomment the section beginning with "location ~ \.php$ {",

Change the root to access the actual document root, /usr/share/nginx/html;

Change the fastcgi_param line to help the PHP interpreter find the PHP script that we stored in the document root home.

Save and Exit

Step Seven—RESULTS: Create a php info page

Although LEMP is installed, we can still take a look and see the components online by creating a quick php info page

To set this up, first create a new file:

sudo vi /usr/share/nginx/html/info.php

Add in the following line:

<?php
phpinfo();
?>

Then Save and Exit.

Restart apache so that all of the changes take effect:

sudo service nginx restart

Finish up by visiting your php info page (make sure you replace the example ip address with your correct one): http://12.34.56.789/info.php

It should look similar to this.

Step Eight—Set Up Autostart

You are almost done. The last step is to set all of the newly installed programs to automatically begin when the server boots.

sudo chkconfig --levels 235 mysqld on
sudo chkconfig --levels 235 nginx on
sudo chkconfig --levels 235 php-fpm on

2012-08-10T05:59:00.001-07:00

External Proxy Server for Mikrotik - fazar.net

External Proxy Server for Mikrotik

Mikrotik routerboard has a built-in proxy in it, but it has main constraint : very limited storage capacity. Therefore, most network administrators whom using mikrotik will use an external proxy to overcome this constraint. Here you can found an easy ways to implementing external proxy server for Mikrotik.

Squid is the most widely used proxy daemon for linux (including its derivative such as lusca). Some several advantages in the implementation of external proxy are :

Easy to adjust the configuration to suite your needs
The use of access control lists (ACLs) that can be used for specific purposes
Squid (especially version 2.7) can be “armed” with a url redirector. In some condition, url redirector can be used to force squid to cache dynamic content (such as Youtube videos).
Greater storage capacity as the general computer or server use the harddisk as data storage.

In this post, I’ll describe how to integrate external proxy with mikrotik using 2 methods : using NAT or using mangle.

Annotation :

Mikrotik to proxy IP address : 192.168.90.1
Proxy to Mikrotik IP address : 192.168.90.2
Clients IP address : 192.168.1.0/24

First method : Using NAT

We can used Mikrotik built in NAT to forward HTTP request (port 80) from clients to external proxy.

/ip firewall address-list add address=192.168.90.0/24 list=ip-proxy /ip firewall nat add action=dst-nat chain=dstnat comment="transparent proxy" dst-port=80 protocol=tcp src-address-list=!ip-proxy to-addresses=192.168.90.2 to-ports=3128

/ip firewall address-list

add address=192.168.90.0/24 list=ip-proxy

/ip firewall nat

add action=dst-nat chain=dstnat comment="transparent proxy" dst-port=80 protocol=tcp src-address-list=!ip-proxy to-addresses=192.168.90.2 to-ports=3128

Explanation :

First, we define IP address class for proxy server.

/ip firewall address-list
add address=192.168.90.0/24 list=ip-proxy

Then add new rule on NAT to forward http request to external proxy.

/ip firewall nat
add action=dst-nat chain=dstnat comment=”transparent proxy” dst-port=80 protocol=tcp src-address-list=!ip-proxy to-addresses=192.168.90.2 to-ports=3128

Second method : Using built-in mangle

/ip route add check-gateway=ping distance=1 gateway=192.168.90.2 routing-mark=to-ext-proxy /ip firewall mangle add action=mark-routing chain=prerouting comment="mark routing to proxy" dst-port=80 new-routing-mark=to-ext-proxy protocol=tcp src-address=192.168.1.0/24

/ip route

add check-gateway=ping distance=1 gateway=192.168.90.2 routing-mark=to-ext-proxy

/ip firewall mangle

add action=mark-routing chain=prerouting comment="mark routing to proxy" dst-port=80 new-routing-mark=to-ext-proxy protocol=tcp src-address=192.168.1.0/24

Another method to forward http requests from clients is using mangle by adding new route. This method will work if external proxy able to act as gateway.

Explanation :

First, add route to external proxy.

/ip route
add check-gateway=ping distance=1 gateway=192.168.90.2 routing-mark=to-ext-proxy

Then, mark http requests from all clients to use route to external proxy.

/ip firewall mangle
add action=mark-routing chain=prerouting comment=”mark routing to proxy” dst-port=80 new-routing-mark=to-ext-proxy protocol=tcp src-address=192.168.1.0/24

Proxy server requirements :

You may need to configure some options in order to make it works for both methods such as enabling IPv4 forwarding (by editing systcl.conf) and allowing access to port 3128 in iptables. Add the following lines into the file /etc/rc.local then save :

route add default gateway 192.168.90.1 iptables -A PREROUTING -t nat -j REDIRECT -p tcp -s 192.168.1.0/24 -d 0/0 --dport 80 --to-ports 3128 iptables -A INPUT -p tcp -s 0.0.0.0/0 -d 192.168.90.2 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A OUTPUT -p tcp -s 192.168.90.2 --sport 3128 -d 0.0.0.0/0 -m state --state ESTABLISHED -j ACCEPT

route add default gateway 192.168.90.1

iptables -A PREROUTING -t nat -j REDIRECT -p tcp -s 192.168.1.0/24 -d 0/0 --dport 80 --to-ports 3128

iptables -A INPUT -p tcp -s 0.0.0.0/0 -d 192.168.90.2 -m state --state NEW,ESTABLISHED -j ACCEPT

iptables -A OUTPUT -p tcp -s 192.168.90.2 --sport 3128 -d 0.0.0.0/0 -m state --state ESTABLISHED -j ACCEPT

2012-08-06T09:43:00.001-07:00

How To Remove Ubuntu’s Password Keyring

UPDATE: This post is almost 2 years old now and the method described below is somewhat obsolete (but still works). Borrowing from the comments posted below, do the following to remove the keyring in a more simple fashion:

1) Go click Applications > Accessories > Passwords and Encryption keys
2) The should be entries there listing an array of keyring password.
3) Right click on them and select change password
4) Enter the old password if you have one then leave the new password blank. (A warning message should appear)

I’ve not done this personally (I haven’t had to) but if I’m guessing correctly, the “warning message” mentioned above in step 4 is likely the same warning message pictured below, asking if you are sure you want to use “Unsafe Storage”. You can read more about what this means below.

—————-[Begin old post]—————-

I would have made the title of this post “How to remove the Keyring password manager in Ubuntu Linux” but that’s kinda long… Anyway, you might be wondering what the keyring password manager is. It is a built in feature of Ubuntu (specifically, a package called “Seahorse“) that remembers passwords for things like FTP account logins, Evolution Email accounts, your wireless network authentication passwords, etc., and locks them all behind a kind of Master Password of sorts. So for example, lets pretend that the password for your wireless network was 64 characters long and was just a bunch of random numbers and letters that you’d only be able to remember if you were some kind of freak savant mathematician. The keyring password manager would remember this for you, but will only allow the system to access and use that long password after you grant it access to the keyring.

As nice and handy as this might sound to security buffs, it’s struck me as a minor inconvenience. For starts, if I were to configure Ubuntu to automatically login to my account after I turn the computer on, I would then also be asked to type in my keyring password so it would connect to my wireless network. This becomes a bigger problem if, for instance, I were to connect to my computer remotely and had to reset it for some reason, like applying a recent kernel update. The snag there would be that after restarting, my computer would boot up, but since I’m not physically sitting in front of it, it would sit there waiting for me to enter a keyring password before it would reconnect to my wireless network, and I’d have to go home or ask someone else to type in the password for me.

So what I’ve always wanted to have happen is this:

I start or restart the computer by remote (such as through SSH or VNC).
After booting it automatically logs into my account and connects to my wireless network without asking for any passwords along the way so I can VNC right back into the system with no further trouble.

I’ve finally learned how to do this, and it’s stupid easy to do.

There is of course a few security drawbacks about doing this. For starts, if any person were to gain physical access to my machine they’d be able to connect to my wireless network without needing to enter a password. Then again, if someone I don’t trust has somehow gained physical access to my machine I might as well go ahead and consider it to be compromised.

Now, if the PC were in an office with a bunch of random co-workers always around, I’d be a lot more concerned. If that were the case, I’d have that puppy locked down with a power on password, disable booting from the CD-ROM/Ethernet/USB in the BIOS, perhaps have a GRUB password and be working from an encrypted HD with the required /boot partition on a USB key, and of course auto-login would be disabled so I would be required to enter anywhere from 2 to 3 different passwords just to login to the system. But this thing is in my house behind two large dogs and a dead-bolt locked door, functioning as a server that requires a password for me to access it by via SSH or VNC anyway. So for this particular PC, I see little harm in opting out of using this security feature.

So here’s how you get rid of the keyring manager. Please note: This will erase saved passwords you have so be sure you know or remember them before you make your computer forget them!

Open up your Home Folder by clicking Places>Home Folder
Press CTRL-H (or click View>Show Hidden Files)
Find a folder called .gnome2 (it has a period at the beginning of the name) and open it by double clicking on it
Inside of the .gnome2 folder, there is another folder called keyrings. Open it up.
Delete any files you find within the keyrings folder
Restart the computer

After you restart and login (if you’re automatically logging in) you’ll probably be asked to enter your wireless networks WPA/WEP encryption key (because we made it forget). After you type that password in, the keyring manager will appear to let you know that it would like to handle the storage of that password and lock it away with a new keyring. The box looks like this:

Instead of typing in a new password, leave both boxes completely empty and click Create.

You’ll then be asked if you know what the hell you’re doing:

Go ahead and click Use Unsafe Storage.

WARNING: Doing this creates a new file in your ~/.gnome2/keyrings/ folder called default.keyring and it will now house passwords IN CLEAR TEXT and not in an encrypted form. So it is imperative that you are certain no untrustworthy persons can access your user account (either physically or by remote) or they will be able to easily open and read this file and obtain many passwords (for things such as FTP accounts, SSH, e-mail accounts, etc). Proceed with caution.

From here on all keyring-stored passwords you enter will not safeguarded behind a master password or encryption. Whether or not you want to do this is entirely up to you. I personally have had enough of the keyring manager and consider it kind of annoying. But as I said before, you may have certain environmental factors that make having a master password over the rest of your passwords a good idea. Keep in mind that the keyring password manager has absolutely nothing to do with your administrative/root privilages password that has to be entered any time you want to apply updates, or add/remove software. You will still have to type your account password in for these actions, and that is something I am quite comfortable with. I’m just happy I don’t have to have to ask my girlfriend to type in a keyring password every time I want to restart the computer while I’m away from home.

2012-08-04T00:55:00.001-07:00

Installing & Configuring VSftpd

Applicable to Centos Versions:

Centos 5.x
Centos 6.x

Requirements

Explanation of requirements.

Root access to your server
Server running Centos 5.x or 6.x

Doing the Work

Basic description of what will be done and what is expected.

Install VSftpd and add a user:

yum install vsftpd
useradd ftpuser
passwd ftpuser

Configure VSftpd:

vi /etc/vsftpd/vsftpd.conf

Change these options to your liking, when finished making any changes here, restart the vsftpd service so they take effect.

# Example config file /etc/vsftpd/vsftpd.conf

# The default compiled in settings are fairly paranoid. This sample file

# loosens things up a bit, to make the ftp daemon more usable.

# Please see vsftpd.conf.5 for all compiled in defaults.

#
# READ THIS: This example file is NOT an exhaustive list of vsftpd options.

# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's

# capabilities.

# Allow anonymous FTP? (Beware - allowed by default if you comment this out).

anonymous_enable=YES

# Uncomment this to allow local users to log in.

local_enable=YES

# Uncomment this to enable any form of FTP write command.

write_enable=YES

# Default umask for local users is 077. You may wish to change this to 022,

# if your users expect that (022 is used by most other ftpd's)

local_umask=022

# Uncomment this to allow the anonymous FTP user to upload files. This only

# has an effect if the above global write enable is activated. Also, you will

# obviously need to create a directory writable by the FTP user.

#anon_upload_enable=YES

# Uncomment this if you want the anonymous FTP user to be able to create

# new directories.

#anon_mkdir_write_enable=YES

# Activate directory messages - messages given to remote users when they

# go into a certain directory.

dirmessage_enable=YES

# The target log file can be vsftpd_log_file or xferlog_file.

# This depends on setting xferlog_std_format parameter

xferlog_enable=YES

# Make sure PORT transfer connections originate from port 20 (ftp-data).

connect_from_port_20=YES

# If you want, you can arrange for uploaded anonymous files to be owned by

# a different user. Note! Using "root" for uploaded files is not

# recommended!
#chown_uploads=YES

#chown_username=whoever

# The name of log file when xferlog_enable=YES and xferlog_std_format=YES

# WARNING - changing this filename affects /etc/logrotate.d/vsftpd.log

#xferlog_file=/var/log/xferlog

# Switches between logging into vsftpd_log_file and xferlog_file files.

# NO writes to vsftpd_log_file, YES to xferlog_file

xferlog_std_format=YES

# You may change the default value for timing out an idle session.

#idle_session_timeout=600

# You may change the default value for timing out a data connection.

#data_connection_timeout=120

# It is recommended that you define on your system a unique user which the

# ftp server can use as a totally isolated and unprivileged user.

#nopriv_user=ftpsecure

# Enable this and the server will recognise asynchronous ABOR requests. Not

# recommended for security (the code is non-trivial). Not enabling it,

# however, may confuse older FTP clients.

#async_abor_enable=YES

# By default the server will pretend to allow ASCII mode but in fact ignore

# the request. Turn on the below options to have the server actually do ASCII

# mangling on files when in ASCII mode.

# Beware that on some FTP servers, ASCII support allows a denial of service

# attack (DoS) via the command "SIZE /big/file" in ASCII mode. vsftpd

# predicted this attack and has always been safe, reporting the size of the

# raw file.

# ASCII mangling is a horrible feature of the protocol.

#ascii_upload_enable=YES

#ascii_download_enable=YES

# You may fully customise the login banner string:

#ftpd_banner=Welcome to blah FTP service.

# You may specify a file of disallowed anonymous e-mail addresses. Apparently

# useful for combatting certain DoS attacks.

#deny_email_enable=YES

# (default follows)

#banned_email_file=/etc/vsftpd/banned_emails

# You may specify an explicit list of local users to chroot() to their home

# directory. If chroot_local_user is YES, then this list becomes a list of

# users to NOT chroot().
#chroot_list_enable=YES

# (default follows)
#chroot_list_file=/etc/vsftpd/chroot_list

# You may activate the "-R" option to the builtin ls. This is disabled by

# default to avoid remote users being able to cause excessive I/O on large

# sites. However, some broken FTP clients such as "ncftp" and "mirror" assume

# the presence of the "-R" option, so there is a strong case for enabling it.

#ls_recurse_enable=YES

# When "listen" directive is enabled, vsftpd runs in standalone mode and

# listens on IPv4 sockets. This directive cannot be used in conjunction

# with the listen_ipv6 directive.

listen=YES

# This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6

# sockets, you must run two copies of vsftpd whith two configuration files.

# Make sure, that one of the listen options is commented !!

#listen_ipv6=YES
pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES

Add the bolded lines below as shown and restart iptables:

service iptables stop

(assumes your ftp server has an IP of: 192.168.0.1. If not, change this IP.)

iptables -A INPUT -p tcp -s 0/0 --sport 1024:65535 -d 192.168.0.1 --dport 21 -m state --state NEW,ESTABLISHED -j ACCEPT

iptables -A OUTPUT -p tcp -s 192.168.0.1 --sport 21 -d 0/0 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT

iptables -A INPUT -p tcp -s 0/0 --sport 1024:65535 -d 192.168.0.1 --dport 1024:65535 -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -A OUTPUT -p tcp -s 192.168.0.1 --sport 1024:65535 -d 0/0 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT

iptables -A OUTPUT -p tcp -s 192.168.0.1 --sport 20 -d 0/0 --dport 1024:65535 -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -A INPUT -p tcp -s 0/0 --sport 1024:65535 -d 192.168.0.1 --dport 20 -m state --state ESTABLISHED -j ACCEPT

vi /etc/sysconfig/iptables-config

# Load additional iptables modules (nat helpers)
#   Default: -none-
# Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which
# are loaded after the firewall rules are applied. Options for the helpers are
# stored in /etc/modprobe.conf.
IPTABLES_MODULES="ip_conntrack_netbios_ns"
IPTABLES_MODULES="ip_conntrack_ftp"

service iptables start

Set VSftpd to start on boot and start it right now:

chkconfig --level 23 vsftpd on && service vsftpd start

Troubleshooting / How To Test

Explanation troubleshooting basics and expectations.

Make sure VSftpd is set to start at boot time and is running:

chkconfig --list | grep vsftpd; service vsftpd status

Check the firewall to make sure the required data and command ports are open and the correct modules are loading:

service iptables status; grep ip_conntrack_ftp /etc/sysconfig/iptables-config

2012-08-01T02:46:00.002-07:00

Native VLAN Mismatches

Error#1

Lets assume that one of the workstations on the network (PC 5) cannot connect to the internal web server WEB/TFTP, lets use the figure below as an example of a switched network, the first place you start will be at the Switch 2 to check if VLANs are properly configured. Looking at the diagram, switch port fa0/3 on Switch 2 is configured as a trunk port.

Native VLAN Mismatch

When you connect to switch S2, if there is an error on the switch port, it will appear on your console window, in this case there is and it looks like this:

S2#
#CDP-4-NATIVE VLAN_MISMATCH: Native VLAN mismatch discovered on
FastEthernet0/3 (100), with S1 FastEthernet0/3 (99).

Using the show interfaces fa0/3 switchport command will display connectivity detail on the port.

e.g

S2# show interfaces fa0/3 switchport
Name: fa0/3
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Nagotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 100 (Inactive)
…
Trunking VLANs Enabled: 10, 99

…

Looking at the above detail, you will notice that the native VLAN has been set to VLAN 100 and it is inactive.

As you look further down the output, you see that the allowed VLANs are 10 and 99.

To sum it up, this is a case of a mismatched native VLAN

The solution:

You need to reconfigure the native VLAN on the Fast Ethernet F0/3 trunk port to be VLAN 99. e.g

S2#config t
S2#interface fa0/3
S2#switchport trunk native vlan 99
S2#end

After you have done that, use the show interfaces fa0/3 switchport confirm you configuration.

And use the Ping to confirm connectivity with the server. e.g.

PC5> ping 192.168.10.30
Pinging 192.168.10.30 with 32 bytes of data:
Reply from 192.168.10.30: bytes-32 times-147ms TT-128
Reply from 192.168.10.30: bytes-32 times-147ms TT-128
Reply from 192.168.10.30: bytes-32 times-147ms TT-128
...

The screen output for the computer PC5 shows that connectivity has been restored to the WEB/TFTP server found at IP address 192.168.10.30.

2012-07-26T05:47:00.002-07:00

Daloradius server config

#yum -y update
#reboot
#yum -y install wget vim ntp man
#ntpdate pool.ntp.org
#yum -y install httpd mysql mysql-devel mysql-server php php-mysql php-gd php-imap php-ldap php-odbc php-pear php-xml php-xmlrpc \
#yum -y install freeradius freeradius-mysql freeradius-utils

#setenforce 0
chkconfig httpd on
chkconfig mysqld on
/etc/init.d/httpd start
/etc/init.d/mysqld start
#mysql_secure_installation mysqlpwd
#####Disallow root login remotely? [Y/n]n#####press 'n'
# iptables -F
# vi /var/www/html/test.php
<?php
phpinfo();
?>

PHPmyadmin
cd /var/www/html/
wget your-phpMyadmin.tar.gz
tar -zxvf your-phpMyadmin.tar.gz
mv your-phpMyadmin phpmyadmin
cd phpmyadmin
cp config.sample.inc.php config.inc.php
vi config.inc.php
$cfg['Servers'][$i]['auth_type'] = ¡®http¡®;
#/etc/init.d/httpd restart

#vi /etc/raddb/users
testuser Cleartext-Password := "testpassword"

#radiusd -X
#radtest testuser testpassword localhost 1812 testing123

####FR with MySQL
cp /etc/raddb/clients.conf /etc/raddb/clients.conf.bak
grep -v \# /etc/raddb/clients.conf.bak > /etc/raddb/clients.conf
vi /etc/raddb/clients.conf
client 192.168.1.0/24 {
            secret          = radiussecret
            shortname       = testfreeradius
     }

vim /etc/raddb/users
#testuser Cleartext-Password := "testpassword"
####commment out this line

cp /etc/raddb/sql/mysql/admin.sql /etc/raddb/sql/mysql/admin.sql.bak
grep -v \# /etc/raddb/sql/mysql/admin.sql.bak > /etc/raddb/sql/mysql/admin.sql
vim /etc/raddb/sql/mysql/admin.sql
CREATE USER 'radius'@'localhost';
SET PASSWORD FOR 'radius'@'localhost' = PASSWORD('radpass');
GRANT SELECT ON radius.* TO 'radius'@'localhost';
GRANT ALL on radius.radacct TO 'radius'@'localhost';
GRANT ALL on radius.radpostauth TO 'radius'@'localhost';

vim /etc/raddb/sql.conf
change the password 'radpass' to 'radpass'

mysql -u root -p
mysql>create database radius;
mysql>exit
mysql -u root -p radius < /etc/raddb/sql/mysql/admin.sql
mysql -u root -p radius < /etc/raddb/sql/mysql/schema.sql
mysql -u root -p radius < /etc/raddb/sql/mysql/nas.sql
mysql -u root -p radius < /etc/raddb/sql/mysql/ippool.sql

vi /etc/raddb/radiusd.conf
$INCLUDE sql.conf

vi /etc/raddb/sql.conf
server = "localhost"
        port = 3306
        login = "radius"
        password = "radpass"
        radius_db = "radius"
readclients = yes

vi /etc/raddb/sites-enabled/default
authorize {
          preprocess
          chap
          mschap
          suffix
          eap
          sql
          pap
}

accounting {
          detail
          sql
}

session {
radutmp
sql
}

mysql -u root -p

mysql> use radius;

INSERT INTO radcheck (UserName, Attribute, Value) VALUES ('user1', 'Password','password1');

mysql> exit

radiusd -X
radtest user1 password1 localhost 1812 testing123

wget http://download.pear.php.net/package/DB-1.7.14RC2.tgz
pear install DB-1.7.14RC2.tgz

###Notes daloradius 0.9-9 also works
wget http://nchc.dl.sourceforge.net/project/daloradius/daloradius/daloradius-0.9-8/daloradius-0.9-8.tar.gz
tar -zxvf daloradius-0.9-8.tar.gz
mv daloradius-0.9-8 daloradius
cp -rf daloradius /var/www/html/
chown apache:apache /var/www/html/daloradius/ -R
chmod 644 /var/www/html/daloradius/library/daloradius.conf.php
cd /var/www/html/daloradius/contrib/db/
mysql -u root -p radius < mysql-daloradius.sql
vi /var/www/html/daloradius/library/daloradius.conf.php

###########

$configValues['DALORADIUS_VERSION'] = '0.9-8';
$configValues['FREERADIUS_VERSION'] = '2';
$configValues['CONFIG_DB_ENGINE'] = 'mysql';
$configValues['CONFIG_DB_HOST'] = 'localhost';
$configValues['CONFIG_DB_USER'] = 'radius';
$configValues['CONFIG_DB_PASS'] = 'radpass';
$configValues['CONFIG_DB_NAME'] = 'radius';
$configValues['CONFIG_DB_TBL_RADCHECK'] = 'radcheck';
$configValues['CONFIG_DB_TBL_RADREPLY'] = 'radreply';
$configValues['CONFIG_DB_TBL_RADGROUPREPLY'] = 'radgroupreply';
$configValues['CONFIG_DB_TBL_RADGROUPCHECK'] = 'radgroupcheck';
$configValues['CONFIG_DB_TBL_RADUSERGROUP'] = 'radusergroup';
$configValues['CONFIG_DB_TBL_RADNAS'] = 'nas';
$configValues['CONFIG_DB_TBL_RADPOSTAUTH'] = 'radpostauth';
$configValues['CONFIG_DB_TBL_RADACCT'] = 'radacct';
...........
#############

Optionals:
touch /tmp/daloradius.log
chown apache.apache /tmp/daloradius.log
http://ip/daloradius
username: administrator
password: radius


GRANT ALL PRIVILEGES ON *.* TO 'radius'@'192.168.1.115' IDENTIFIED BY 'radpass' WITH GRANT OPTION;
FLUSH PRIVILEGES;

****************************************************************************##############

############################################################################
Hi
Thanks for last advices with freeradius installations + peap on debian lenny
Now i have no problem with enabling peap :)

this time I'm asking for help with some other problem:
I'm trying to enable WPA2 enterprice authentication on my accesspoints.
When trying to auth my wireless client I'm getting sth like this in log :

Wed May 5 15:09:25 2010 : Auth: Login incorrect: [karol/<no User-Password attribute>] (from client AP1 port 0 cli 0022431380c4)
where :
0022431380c4 is my wireless mac adress (laptop)
client AP1 is my Access Point client from clients.conf
karol - is my user from users.conf

it looks like freeradius don't want to look inside the password field and can't recognize a laptop ip (getting mac)

Please give me some advices - what's next ?

Here is my debug.

Kill-9:/home/kornel# freeradius -X
FreeRADIUS Version 2.1.8, for host i486-pc-linux-gnu, built on Jan 3 2010 at 15:51:52
Copyright (C) 1999-2009 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License v2.
Starting - reading configuration files ...
including configuration file /etc/freeradius/radiusd.conf
including configuration file /etc/freeradius/proxy.conf
including configuration file /etc/freeradius/clients.conf
including configuration file /etc/freeradius/snmp.conf
including configuration file /etc/freeradius/eap.conf
including configuration file /etc/freeradius/policy.conf
including files in directory /etc/freeradius/sites-enabled/
main {
    user = "freerad"
    group = "freerad"
    allow_core_dumps = no
}
including dictionary file /etc/freeradius/dictionary
main {
    prefix = "/usr"
    localstatedir = "/var"
    logdir = "/var/log/freeradius"
    libdir = "/usr/lib/freeradius"
    radacctdir = "/var/log/freeradius/radacct"
    hostname_lookups = no
    max_request_time = 30
    cleanup_delay = 5
    max_requests = 1024
    pidfile = "/var/run/freeradius/freeradius.pid"
    checkrad = "/usr/sbin/checkrad"
    debug_level = 0
    proxy_requests = yes
log {
    stripped_names = yes
    auth = yes
    auth_badpass = yes
    auth_goodpass = yes
}
security {
    max_attributes = 200
    reject_delay = 1
    status_server = yes
}
}
radiusd: #### Loading Realms and Home Servers ####
proxy server {
    retry_delay = 5
    retry_count = 3
    default_fallback = yes
    dead_time = 120
    wake_all_if_all_dead = no
}
radiusd: #### Loading Clients ####
client localhost {
    ipaddr = 127.0.0.1
    require_message_authenticator = no
    secret = "testing123"
    nastype = "other"
}
client 172.16.0.16 {                ----------------------Client ip adress
    require_message_authenticator = no
    secret = "tajne1234"
    shortname = "eee"
}
client 192.168.10.50 {            ----------------------AP ip adress
    require_message_authenticator = no
    secret = "tajne1234"
    shortname = "AP1"
}
radiusd: #### Instantiating modules ####
instantiate {
Module: Linked to module rlm_exec
Module: Instantiating exec
exec {
    wait = yes
    input_pairs = "request"
    shell_escape = yes
}
Module: Linked to module rlm_expr
Module: Instantiating expr
Module: Linked to module rlm_expiration
Module: Instantiating expiration
expiration {
    reply-message = "Password Has Expired "
}
Module: Linked to module rlm_logintime
Module: Instantiating logintime
logintime {
    reply-message = "You are calling outside your allowed timespan "
    minimum-timeout = 60
}
}
radiusd: #### Loading Virtual Servers ####
server {
modules {
} # modules
} # server
radiusd: #### Opening IP addresses and Ports ####
listen {
    type = "auth"
    ipaddr = *
    port = 1812
}
listen {
    type = "acct"
    ipaddr = *
    port = 0
}
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.

AND here is an authenticate attempt debug

rad_recv: Access-Request packet from host 192.168.10.50 port 2054, id=148, length=169
    User-Name = "karol"
    NAS-IP-Address = 192.168.10.50             ----------------------AP ip adress
    NAS-Port = 0
    Called-Station-Id = "00265abab28d"        ----------------------AP mac adress
    Calling-Station-Id = "0022431380c4"       ----------------------Client mac adress
    NAS-Identifier = "Realtek Access Point. 8186"
    Framed-MTU = 1400
    NAS-Port-Type = Wireless-802.11
    Service-Type = Framed-User
    Connect-Info = "CONNECT 11Mbps 802.11b"
    EAP-Message = 0x0200000b016d617263696e
    Message-Authenticator = 0x2ea50a302a451ed3b32b748a23fe00e3
WARNING: Empty section. Using default return values.
No authenticate method (Auth-Type) configuration found for the request: Rejecting the user
Failed to authenticate the user.
Login incorrect: [karol/<no User-Password attribute>] (from client AP1 port 0 cli 0022431380c4)
Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 148 to 192.168.10.50 port 2054
Waking up in 4.9 seconds.

Client's system is eeebuntu and i'm sure that's on client and on AP everything is ok because when i'm connecting to another freeradius server - it's working fine (unfortunatelly i don't have an acces to those confs) in addition - temporarily I accepted all connections from those two ip's on my firewall to have 100% sure that's not a connection issue.

Thank you for your time and knowledge share.

--
LAN Administrator of DS14
Kornel Kornatka
room 529

***************************************************************************
<?php
/*
*********************************************************************************************************
* daloRADIUS - RADIUS Web Platform
* Copyright (C) 2007 - Liran Tal <liran@enginx.com> All Rights Reserved.
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*
*********************************************************************************************************
* Description:
*              daloRADIUS Configuration File
*
* Modification Date:
*              Tue Sep 13 11:56:08 EAT 2011
*********************************************************************************************************
*/

$configValues['DALORADIUS_VERSION'] = '0.9-9';
$configValues['FREERADIUS_VERSION'] = '2';
$configValues['CONFIG_DB_ENGINE'] = 'mysql;
$configValues['CONFIG_DB_HOST'] = 'localhost';
$configValues['CONFIG_DB_PORT'] = '3306';
$configValues['CONFIG_DB_USER'] = 'radius';
$configValues['CONFIG_DB_PASS'] = 'radpass';
$configValues['CONFIG_DB_NAME'] = 'radius';
$configValues['CONFIG_DB_TBL_RADCHECK'] = 'radcheck';
$configValues['CONFIG_DB_TBL_RADREPLY'] = 'radreply';
$configValues['CONFIG_DB_TBL_RADGROUPREPLY'] = 'radgroupreply';
$configValues['CONFIG_DB_TBL_RADGROUPCHECK'] = 'radgroupcheck';
$configValues['CONFIG_DB_TBL_RADUSERGROUP'] = 'radusergroup';
$configValues['CONFIG_DB_TBL_RADNAS'] = 'nas';
$configValues['CONFIG_DB_TBL_RADHG'] = 'radhuntgroup';
$configValues['CONFIG_DB_TBL_RADPOSTAUTH'] = 'radpostauth';
$configValues['CONFIG_DB_TBL_RADACCT'] = 'radacct';
$configValues['CONFIG_DB_TBL_RADIPPOOL'] = 'radippool';
$configValues['CONFIG_DB_TBL_DALOOPERATORS'] = 'operators';
$configValues['CONFIG_DB_TBL_DALOOPERATORS_ACL'] = 'operators_acl';
$configValues['CONFIG_DB_TBL_DALOOPERATORS_ACL_FILES'] = 'operators_acl_files';
$configValues['CONFIG_DB_TBL_DALORATES'] = 'rates';
$configValues['CONFIG_DB_TBL_DALOHOTSPOTS'] = 'hotspots';
$configValues['CONFIG_DB_TBL_DALOUSERINFO'] = 'userinfo';
$configValues['CONFIG_DB_TBL_DALOUSERBILLINFO'] = 'userbillinfo';
$configValues['CONFIG_DB_TBL_DALODICTIONARY'] = 'dictionary';
$configValues['CONFIG_DB_TBL_DALOREALMS'] = 'realms';
$configValues['CONFIG_DB_TBL_DALOPROXYS'] = 'proxys';
$configValues['CONFIG_DB_TBL_DALOBILLINGPAYPAL'] = 'billing_paypal';
$configValues['CONFIG_DB_TBL_DALOBILLINGMERCHANT'] = 'billing_merchant';
$configValues['CONFIG_DB_TBL_DALOBILLINGPLANS'] = 'billing_plans';
$configValues['CONFIG_DB_TBL_DALOBILLINGRATES'] = 'billing_rates';
$configValues['CONFIG_DB_TBL_DALOBILLINGHISTORY'] = 'billing_history';
$configValues['CONFIG_DB_TBL_DALOBATCHHISTORY'] = 'batch_history';
$configValues['CONFIG_DB_TBL_DALOBILLINGPLANSPROFILES'] = 'billing_plans_profiles';
$configValues['CONFIG_DB_TBL_DALOBILLINGINVOICE'] = 'invoice';
$configValues['CONFIG_DB_TBL_DALOBILLINGINVOICEITEMS'] = 'invoice_items';
$configValues['CONFIG_DB_TBL_DALOBILLINGINVOICESTATUS'] = 'invoice_status';
$configValues['CONFIG_DB_TBL_DALOBILLINGINVOICETYPE'] = 'invoice_type';
$configValues['CONFIG_DB_TBL_DALOPAYMENTS'] = 'payment';
$configValues['CONFIG_DB_TBL_DALOPAYMENTTYPES'] = 'payment_type';
$configValues['CONFIG_DB_TBL_DALONODE'] = 'node';
$configValues['CONFIG_FILE_RADIUS_PROXY'] = '/etc/freeradius/proxy.conf';
$configValues['CONFIG_PATH_RADIUS_DICT'] = '';
$configValues['CONFIG_PATH_DALO_VARIABLE_DATA'] = '/var/www/daloradius/var';
$configValues['CONFIG_DB_PASSWORD_ENCRYPTION'] = 'cleartext';
$configValues['CONFIG_LANG'] = 'en';
$configValues['CONFIG_LOG_PAGES'] = 'yes';
$configValues['CONFIG_LOG_ACTIONS'] = 'yes';
$configValues['CONFIG_LOG_QUERIES'] = 'yes';
$configValues['CONFIG_DEBUG_SQL'] = 'yes';
$configValues['CONFIG_DEBUG_SQL_ONPAGE'] = 'yes';
$configValues['CONFIG_LOG_FILE'] = '/tmp/daloradius.log';
$configValues['CONFIG_IFACE_PASSWORD_HIDDEN'] = 'no';
$configValues['CONFIG_IFACE_TABLES_LISTING'] = '25';
$configValues['CONFIG_IFACE_TABLES_LISTING_NUM'] = 'yes';
$configValues['CONFIG_IFACE_AUTO_COMPLETE'] = 'yes';
$configValues['CONFIG_MAINT_TEST_USER_RADIUSSERVER'] = '127.0.0.1';
$configValues['CONFIG_MAINT_TEST_USER_RADIUSPORT'] = '1812';
$configValues['CONFIG_MAINT_TEST_USER_NASPORT'] = '0';
$configValues['CONFIG_MAINT_TEST_USER_RADIUSSECRET'] = 'testing123';
$configValues['CONFIG_USER_ALLOWEDRANDOMCHARS'] = 'abcdefghijkmnpqrstuvwxyzABCDEFGHJKMNPQRSTUVWXYZ23456789';
$configValues['CONFIG_MAIL_SMTPADDR'] = '127.0.0.1';
$configValues['CONFIG_MAIL_SMTPPORT'] = '25';
$configValues['CONFIG_MAIL_SMTPAUTH'] = '';
$configValues['CONFIG_MAIL_SMTPFROM'] = 'root@daloradius.xdsl.by';
$configValues['CONFIG_DASHBOARD_DALO_SECRETKEY'] = 'sillykey';
$configValues['CONFIG_DASHBOARD_DALO_DEBUG'] = '1';
$configValues['CONFIG_DASHBOARD_DALO_DELAYSOFT'] = '5';
$configValues['CONFIG_DASHBOARD_DALO_DELAYHARD'] = '15';

?>
*******************************************************************************
CREATE USER 'radius'@'localhost';

SET PASSWORD FOR 'radius'@'localhost' = PASSWORD('radpass');

GRANT SELECT ON radius.* TO 'radius'@'localhost';

GRANT ALL on radius.radacct TO 'radius'@'localhost';

GRANT ALL on radius.radpostauth TO 'radius'@'localhost';
*****************************************************************************
# -*- text -*-
##
## radiusd.conf    -- FreeRADIUS server configuration file.
##
##    http://www.freeradius.org/
##    $Id$
##

######################################################################
#
#    Read "man radiusd" before editing this file. See the section
#    titled DEBUGGING. It outlines a method where you can quickly
#    obtain the configuration you want, without running into
#    trouble.
#
#    Run the server in debugging mode, and READ the output.
#
#        $ radiusd -X
#
#    We cannot emphasize this point strongly enough. The vast
#    majority of problems can be solved by carefully reading the
#    debugging output, which includes warnings about common issues,
#    and suggestions for how they may be fixed.
#
#    There may be a lot of output, but look carefully for words like:
#    "warning", "error", "reject", or "failure". The messages there
#    will usually be enough to guide you to a solution.
#
#    If you are going to ask a question on the mailing list, then
#    explain what you are trying to do, and include the output from
#    debugging mode (radiusd -X). Failure to do so means that all
#    of the responses to your question will be people telling you
#    to "post the output of radiusd -X".

######################################################################
#
#     The location of other config files and logfiles are declared
#     in this file.
#
#     Also general configuration for modules can be done in this
#     file, it is exported through the API to modules that ask for
#     it.
#
#    See "man radiusd.conf" for documentation on the format of this
#    file. Note that the individual configuration items are NOT
#    documented in that "man" page. They are only documented here,
#    in the comments.
#
#    As of 2.0.0, FreeRADIUS supports a simple processing language
#    in the "authorize", "authenticate", "accounting", etc. sections.
#    See "man unlang" for details.
#

prefix = /usr
exec_prefix = /usr
sysconfdir = /etc
localstatedir = /var
sbindir = /usr/sbin
logdir = ${localstatedir}/log/radius
raddbdir = ${sysconfdir}/raddb
radacctdir = ${logdir}/radacct

#
# name of the running server. See also the "-n" command-line option.
name = radiusd

# Location of config and logfiles.
confdir = ${raddbdir}
run_dir = ${localstatedir}/run/${name}

# Should likely be ${localstatedir}/lib/radiusd
db_dir = ${raddbdir}

#
# libdir: Where to find the rlm_* modules.
#
#   This should be automatically set at configuration time.
#
#   If the server builds and installs, but fails at execution time
#   with an 'undefined symbol' error, then you can use the libdir
#   directive to work around the problem.
#
#   The cause is usually that a library has been installed on your
#   system in a place where the dynamic linker CANNOT find it. When
#   executing as root (or another user), your personal environment MAY
#   be set up to allow the dynamic linker to find the library. When
#   executing as a daemon, FreeRADIUS MAY NOT have the same
#   personalized configuration.
#
#   To work around the problem, find out which library contains that symbol,
#   and add the directory containing that library to the end of 'libdir',
#   with a colon separating the directory names. NO spaces are allowed.
#
#   e.g. libdir = /usr/local/lib:/opt/package/lib
#
#   You can also try setting the LD_LIBRARY_PATH environment variable
#   in a script which starts the server.
#
#   If that does not work, then you can re-configure and re-build the
#   server to NOT use shared libraries, via:
#
#    ./configure --disable-shared
#    make
#    make install
#
libdir = /usr/lib/freeradius

# pidfile: Where to place the PID of the RADIUS server.
#
# The server may be signalled while it's running by using this
# file.
#
# This file is written when ONLY running in daemon mode.
#
# e.g.: kill -HUP `cat /var/run/radiusd/radiusd.pid`
#
pidfile = ${run_dir}/${name}.pid

# chroot: directory where the server does "chroot".
#
# The chroot is done very early in the process of starting the server.
# After the chroot has been performed it switches to the "user" listed
# below (which MUST be specified). If "group" is specified, it switchs
# to that group, too. Any other groups listed for the specified "user"
# in "/etc/group" are also added as part of this process.
#
# The current working directory (chdir / cd) is left *outside* of the
# chroot until all of the modules have been initialized. This allows
# the "raddb" directory to be left outside of the chroot. Once the
# modules have been initialized, it does a "chdir" to ${logdir}. This
# means that it should be impossible to break out of the chroot.
#
# If you are worried about security issues related to this use of chdir,
# then simply ensure that the "raddb" directory is inside of the chroot,
# end be sure to do "cd raddb" BEFORE starting the server.
#
# If the server is statically linked, then the only files that have
# to exist in the chroot are ${run_dir} and ${logdir}. If you do the
# "cd raddb" as discussed above, then the "raddb" directory has to be
# inside of the chroot directory, too.
#
#chroot = /path/to/chroot/directory

# user/group: The name (or #number) of the user/group to run radiusd as.
#
#   If these are commented out, the server will run as the user/group
#   that started it. In order to change to a different user/group, you
#   MUST be root ( or have root privleges ) to start the server.
#
#   We STRONGLY recommend that you run the server with as few permissions
#   as possible. That is, if you're not using shadow passwords, the
#   user and group items below should be set to radius'.
#
# NOTE that some kernels refuse to setgid(group) when the value of
# (unsigned)group is above 60000; don't use group nobody on these systems!
#
# On systems with shadow passwords, you might have to set 'group = shadow'
# for the server to be able to read the shadow password file. If you can
# authenticate users while in debug mode, but not in daemon mode, it may be
# that the debugging mode server is running as a user that can read the
# shadow info, and the user listed below can not.
#
# The server will also try to use "initgroups" to read /etc/groups.
# It will join all groups where "user" is a member. This can allow
# for some finer-grained access controls.
#
user = radiusd
group = radiusd

# max_request_time: The maximum time (in seconds) to handle a request.
#
# Requests which take more time than this to process may be killed, and
# a REJECT message is returned.
#
# WARNING: If you notice that requests take a long time to be handled,
# then this MAY INDICATE a bug in the server, in one of the modules
# used to handle a request, OR in your local configuration.
#
# This problem is most often seen when using an SQL database. If it takes
# more than a second or two to receive an answer from the SQL database,
# then it probably means that you haven't indexed the database. See your
# SQL server documentation for more information.
#
# Useful range of values: 5 to 120
#
max_request_time = 30

# cleanup_delay: The time to wait (in seconds) before cleaning up
# a reply which was sent to the NAS.
#
# The RADIUS request is normally cached internally for a short period
# of time, after the reply is sent to the NAS. The reply packet may be
# lost in the network, and the NAS will not see it. The NAS will then
# re-send the request, and the server will respond quickly with the
# cached reply.
#
# If this value is set too low, then duplicate requests from the NAS
# MAY NOT be detected, and will instead be handled as seperate requests.
#
# If this value is set too high, then the server will cache too many
# requests, and some new requests may get blocked. (See 'max_requests'.)
#
# Useful range of values: 2 to 10
#
cleanup_delay = 5

# max_requests: The maximum number of requests which the server keeps
# track of. This should be 256 multiplied by the number of clients.
# e.g. With 4 clients, this number should be 1024.
#
# If this number is too low, then when the server becomes busy,
# it will not respond to any new requests, until the 'cleanup_delay'
# time has passed, and it has removed the old requests.
#
# If this number is set too high, then the server will use a bit more
# memory for no real benefit.
#
# If you aren't sure what it should be set to, it's better to set it
# too high than too low. Setting it to 1000 per client is probably
# the highest it should be.
#
# Useful range of values: 256 to infinity
#
max_requests = 1024

# listen: Make the server listen on a particular IP address, and send
# replies out from that address. This directive is most useful for
# hosts with multiple IP addresses on one interface.
#
# If you want the server to listen on additional addresses, or on
# additionnal ports, you can use multiple "listen" sections.
#
# Each section make the server listen for only one type of packet,
# therefore authentication and accounting have to be configured in
# different sections.
#
# The server ignore all "listen" section if you are using '-i' and '-p'
# on the command line.
#
listen {
    # Type of packets to listen for.
    # Allowed values are:
    #    auth    listen for authentication packets
    #    acct    listen for accounting packets
    #    proxy   IP to use for sending proxied packets
    #    detail Read from the detail file. For examples, see
    #               raddb/sites-available/copy-acct-to-home-server
    #    status listen for Status-Server packets. For examples,
    #        see raddb/sites-available/status
    #    coa     listen for CoA-Request and Disconnect-Request
    #        packets. For examples, see the file
    #        raddb/sites-available/coa-server
    #
    type = auth

    # Note: "type = proxy" lets you control the source IP used for
    #        proxying packets, with some limitations:
    #
    #    * A proxy listener CANNOT be used in a virtual server section.
    #    * You should probably set "port = 0".
    #    * Any "clients" configuration will be ignored.
    #
    # See also proxy.conf, and the "src_ipaddr" configuration entry
    # in the sample "home_server" section. When you specify the
    # source IP address for packets sent to a home server, the
    # proxy listeners are automatically created.

    # IP address on which to listen.
    # Allowed values are:
    #    dotted quad (1.2.3.4)
    #       hostname    (radius.example.com)
    #       wildcard    (*)
    ipaddr = *

    # OR, you can use an IPv6 address, but not both
    # at the same time.
#    ipv6addr = ::    # any. ::1 == localhost

    # Port on which to listen.
    # Allowed values are:
    #    integer port number (1812)
    #    0 means "use /etc/services for the proper port"
    port = 0

    # Some systems support binding to an interface, in addition
    # to the IP address. This feature isn't strictly necessary,
    # but for sites with many IP addresses on one interface,
    # it's useful to say "listen on all addresses for eth0".
    #
    # If your system does not support this feature, you will
    # get an error if you try to use it.
    #
#    interface = eth0

    # Per-socket lists of clients. This is a very useful feature.
    #
    # The name here is a reference to a section elsewhere in
    # radiusd.conf, or clients.conf. Having the name as
    # a reference allows multiple sockets to use the same
    # set of clients.
    #
    # If this configuration is used, then the global list of clients
    # is IGNORED for this "listen" section. Take care configuring
    # this feature, to ensure you don't accidentally disable a
    # client you need.
    #
    # See clients.conf for the configuration of "per_socket_clients".
    #
#    clients = per_socket_clients
}

# This second "listen" section is for listening on the accounting
# port, too.
#
listen {
    ipaddr = *
#    ipv6addr = ::
    port = 0
    type = acct
#    interface = eth0
#    clients = per_socket_clients
}

# hostname_lookups: Log the names of clients or just their IP addresses
# e.g., www.freeradius.org (on) or 206.47.27.232 (off).
#
# The default is 'off' because it would be overall better for the net
# if people had to knowingly turn this feature on, since enabling it
# means that each client request will result in AT LEAST one lookup
# request to the nameserver.   Enabling hostname_lookups will also
# mean that your server may stop randomly for 30 seconds from time
# to time, if the DNS requests take too long.
#
# Turning hostname lookups off also means that the server won't block
# for 30 seconds, if it sees an IP address which has no name associated
# with it.
#
# allowed values: {no, yes}
#
hostname_lookups = no

# Core dumps are a bad thing. This should only be set to 'yes'
# if you're debugging a problem with the server.
#
# allowed values: {no, yes}
#
allow_core_dumps = no

# Regular expressions
#
# These items are set at configure time. If they're set to "yes",
# then setting them to "no" turns off regular expression support.
#
# If they're set to "no" at configure time, then setting them to "yes"
# WILL NOT WORK. It will give you an error.
#
regular_expressions    = yes
extended_expressions    = yes

#

2012-07-20T07:26:00.002-07:00

How to configure FreeSWITCH with iCall

This quick tutorial will talk you through installing FreeSWITCH, setting up iCall as a gateway, and configuring outbound and inbound services. For the purposes of this walk through, we'll assume that you're using a Linux-based system. For Windows, FreeBSD, or OSX - all instructions other than the basic installation process are identical.

Getting FreeSWITCH

To download and install FreeSWITCH, perform the following. Note that the uncompressed directory name will change depending on the build version.

# wget http://latest.freeswitch.org/freeswitch-1.0.5-latest.tar.gz # tar zxvf freeswitch-1.0.5-latest.tar.gz # cd freeswitch-1.0.5-XXXX # ./configure # make # make install 

FreeSWITCH should now be installed in /usr/local/freeswitch.

Making some basic changes

By default, FreeSWITCH puts its "external" SIP profile on port 5080. While technically it will work fine, it's a bit confusing. At iCall, we default to 5060 but can handle any SIP port you'd like to use. Let's change some of the defaults to use port 5060 for the external profile. Open up/usr/local/freeswitch/conf/vars.xml. Change the following lines:

<X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/> <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/> ... <X-PRE-PROCESS cmd="set" data="external_sip_port=5080"/> <X-PRE-PROCESS cmd="set" data="external_tls_port=5081"/> 

To the following:

<X-PRE-PROCESS cmd="set" data="internal_sip_port=5080"/> <X-PRE-PROCESS cmd="set" data="internal_tls_port=5081"/> ... <X-PRE-PROCESS cmd="set" data="external_sip_port=5060"/> <X-PRE-PROCESS cmd="set" data="external_tls_port=5061"/> 

Adding the iCall gateways

Now that we have the system installed, we need to setup the iCall gateways. To do this, create a file in/usr/local/freeswitch/conf/sip_profiles/external/ called icall.xml. Put the following in the file:

 <include>   <gateway name="icall">     <!-- Replace these value with your iCall Carrier Services username and password. -->     <!-- Even if you use an IP-based sub-account, FreeSWITCH needs these values -->     <param name="username" value="cust_USERNAME" />     <param name="password" value="PASSWORD" />     <param name="from-user" value="cust_USERNAME" />     <param name="proxy" value="sbc01-car.dal.us.icall.net" />     <param name="realm" value="sbc01-car.dal.us.icall.net" />     <!-- Set to "false" for IP-based accounts, or "true" for registration based -->     <param name="register" value="false" />   </gateway>   <gateway name="icall_international">     <!-- Replace these value with your iCall Carrier Services username and password. -->     <!-- Even if you use an IP-based sub-account, FreeSWITCH needs these values -->     <param name="username" value="cust_USERNAME" />     <param name="password" value="PASSWORD" />     <param name="from-user" value="cust_USERNAME" />     <param name="proxy" value="gw01-car.dal.us.icall.net" />     <param name="realm" value="gw01-car.dal.us.icall.net" />     <!-- Set to "false" for IP-based accounts, or "true" for registration based -->     <param name="register" value="false" />   </gateway> </include> 

Setting up an inbound number

There are a number of ways to configure inbound DIDs, but the easiest is to put the number handling in icall.xml in the/usr/local/freeswitch/conf/public/ directory. Once you create this file, FreeSWITCH will automatically include it in the global configuration. Below is a sample of handling an inbound call to 2125551212 and echoing back all audio. Note: Since we're using the "public" context, anyone call call these numbers - not just iCall or your other SIP provider.

<include>   <extension name="icall_inbound">     <condition field="destination_number" expression="^2125551212$">       <action application="answer"/>       <action application="echo" />     </condition>   </extension> </include> 

Outbound dialing

The outbound dialplan syntax is identical to the inbound. One important thing is to make sure that you put your outbound dialing in a context that only your registered phones, customer, or other SIP devices have access to. Setting a "user_context" variable on each directory user will limit them to the specified context. For this example, we will assume that you've set the context on those users to "outbound". Place the following in/usr/local/freeswitch/conf/dialplan/outbound.xml.

<include>   <context name="outbound">     <extension name="outbound_international">       <condition field="destination_number" expression="^011?(\d+)$">         <action application="bridge" data="sofia/gateway/icall_international/011$1"/>       </condition>     </extension>     <extension name="outbound_domestic">       <condition field="destination_number" expression="^1?(\d{10})$">         <action application="bridge" data="sofia/gateway/icall/1$1"/>       </condition>     </extension>   </context> </include> 

The dialplan above tells FreeSWITCH to bridge any calls starting with "011" to iCall's international call gateway. Any calls that are 10-digit numbers, with or without a beginning "1", will be sent to the domestic gateway. Note that there are some 10-digit international destinations, so it's up to you to filter those out separately as needed.

Running FreeSWITCH

To run FreeSWITCH, simply type:

# /usr/local/freeswitch/bin/freeswitch

To exit, simply type "...". To run FreeSWITCH in the background then connect to the console, run:

# /usr/local/freeswitch/bin/freeswitch # /usr/local/freeswitch/bin/fs_cli

2012-07-19T09:05:00.001-07:00

If you are using the DEB version of webmin, first download the file from the downloads page , or run the command :wget http://prdownloads.sourceforge.net/webadmin/webmin_1.590_all.debthen run the command :dpkg --install webmin_1.590_all.debThe install will be done automatically to /usr/share/webmin, the administration username set to root and the password to your current root password. You should now be able to login to Webmin at the URLhttp://localhost:10000/. Or if accessing it remotely, replace localhost with your system's IP address.

If Debian complains about missing dependencies, you can install them with the command :

apt-get install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl apt-show-versions python

If you are installing on Ubuntu and the apt-get command reports that some of the packages cannot be found, edit /etc/apt/sources.list and make sure the lines ending with universe are not commented out.

Some Debian-based distributions (Ubuntu in particular) don't allow logins by the root user by default. However, the user created at system installation time can use sudo to switch to root. Webmin will allow any user who has this sudo capability to login with full root privileges.

If you want to connect from a remote server and your system has a firewall installed, see this page for instructions on how to open up port 10000.

Using the Webmin APT repository

If you like to install and update Webmin via APT, edit the /etc/apt/sources.list file on your system and add the lines :

deb http://download.webmin.com/download/repository sarge contrib
deb http://webmin.mirror.somersettechsolutions.co.uk/repository sarge contrib

You should also fetch and install my GPG key with which the repository is signed, with the commands :

cd /root
wget http://www.webmin.com/jcameron-key.asc
apt-key add jcameron-key.asc

You will now be able to install with the commands :

apt-get update
apt-get install webmin

All dependencies should be resolved automatically.

Supported Debian-based Distributions

Webmin has been tested on all regular Debian releases, Ubuntu Linux, and derivatives like Xandros and APLINUX.

Source Packages

The files needed to build the Debian package are deb/webmin_1.590.dsc, deb/webmin_1.590.diff, andwebmin-1.590.tar.gz .

2012-07-19T04:31:00.000-07:00

DaloRADIUS installed on Ubuntu.

Fronting the white conch.

According http://putudude.blogspot.com/2009/05/freeradius-on-ubuntu-904.html, http://daloradius.wiki.sourceforge.net/space/showimage/daloRADIUS+Users+Manual.pdf on trial. Ubuntu 9.04.

Recommended DaloRADIUS.
DaloRADIUS advanced RADIUS web plateform is intended to manage hotspots and the use of the ISP general management. user, graphical reporting, accounting for the (accounting) and billing engine to GoogleMaps for a management position.
DaloRADIUS. Eii user writes with the PHP language and JavaScript, and use of database systems like MySQL, PostgreSQL, Sqlite, MsSQL and other
safeguard FreeeRadius to develop a muted database server acts as a backend for other features, it can import. implement ACLs, GoogleMaps to locate. hotspots / access point and other features.
DaloRADIUS a Web Application to manage radius server based on principle and to manage radius server which has only a FreeRadius and Database structure of FreeRadius. the upgrade. upgrade daloRADIUS associated with the update. daloradius.conf.php it with newer options with a writable directory with all of the old daloradius. php / html / javascript code to the latest available daloradius package file to import the database scheme file update / insert new record into the databse. for details on upgrading the more I see the manual of daloRADIUS.

The process of installation.

A. If it is not installed, install apache with the command.

Apt-get Install apache2.2nd. are installed on php.

Apt-get Install PHP5 PHP5-GD-Common PHP-DB PHP Pear-libapache2-mod-PHP5.3rd. to install MySQL as follows.

Apt-get Install PHP5-MySQL MySQL-Server.fourth. If it is not installed, install FreeRadius command.

Apt-get Install Freeradius Freeradius-MySQL.fifth. download from daloRADIUS. Http://sourceforge.net/projects/daloradius. follows.

wget http://sourceforge.net/projects/daloradius/files/daloradius/daloradius-0.9-8.tar.gz.6. the file command.

tar-zxvf Daloradius-0.9-8.tar.gz.7th. to the directory of the web daloradius to the location of the command.

CP Daloiradius-xy-Z / / var / www-R.eight. set the permission.

chown www-data: www-data / var / www / Daloradius-XX-Z-R.the ninth. the chmod as follows.

the six hundred and forty fourth chmod / var / www / Daloradius-xy-Z / Library / Daloradius.conf.php.ten. to create a database called the radius.

11. The quit command to exit the base. MySQL.
12. the table to the database name. RADIUS. by using a script provided with the following command daloradius cups.

mysql-u root-p radius </ var/www/daloradius-0.9-8/contrib/db/fr2-mysql-daloradius-and-freeradius.sql.

The word. RADIUS. for Mau's name database. And when prompted for a password, enter the root password for the database name radius will not have to create the database. Use this command to run the script file as follows.

mysql-u root-p radius </ var/www/daloradius-0.9-8/contrib/db/mysql-daloradius.sql.

If it is an upgrade, see the guide as a reference to it.

13. Open the configuration file. / Var / www / daloradius-xy-z / library / daloradius.conf.php.แg prepaid fixed fee as follows.

CONFIG_DB_ENGINE = mysql.

CONFIG_DB_HOST = 127.0.0.1.

CONFIG_DB_USER = root.

CONFIG_DB_PASS = CONFIG_DB_NAME = radius.

14th. To configure freeradius.

1.14 file. / Etc / freeradius / sql.conf. To run the database with the radius of the root user password, which is defined as follows.

server = "localhost".

login = "root".

password = "xxxxxx".

radius_db = "radius".

14.2 The Client will provide the password to use FreeRadius file / etc / freeradius / clients.conf by the client 127.0.0.1 (or client localhost) is the secret = radiussecretclient.

localhost {.

secret = radiussecret.

Allow the machine to another client, such as Title FreeRadius client with the IP address is 172.24.51.16 configured it as follows.

client 172.24.51.16 {.

secret = radiussecret.

shortname = chilli.

3.14 file. / Etc / freeradius / sql.conf readclients = yes to set the radius client to read the values from the database.

14.4 Edit the file / etc / freeradius / site-enabled / default as follows.

The. Accounting. {......}. make a mark in front of the # sql out to retrieve the data from the database to verify the username, password and do the accounting.

A. Session. {......}. make a mark in front of the # sql out to retrieve the data from the database to verify the username, password in the session.

The. Authorize. {......}. to remove mark # in front of the files. and remove. #. out of it. SQL.

Command to restart FreeRadius 5.14.

/ Etc / init.d / freeradius restart.

15th. To restart apache with the command.

/ Etc/init.d/apache2 restart.

16. The Directory and the touch.

mkdir / var / log / freeradius / radacct /.

touch / var / log / freeradius / radacct / sql-relay.

17. Open the Browser. Http://ip_address/daloradius-xy-z.

user = administrator.

password = radius.

18. On the Login window is as follows.

The user can manage this. Examining the FreeRadius with the following command radtest radtest username password 127.0.0.1 0 mysecret If set up correctly and enter the result that they are correct. Access-Accept Fig.

2012-07-16T05:32:00.001-07:00

LINUX REQUIREMENTS AND A2BILLING
a2billing 1.4 includes the following third party software:

• phpagi 2.14 Copyright 2003, 2004, 2005 Matthew Asham and David Eder
• smarty 2.6.22 Copyright 20012005 New Digital Group, Inc
• jgraph 1.27 Copyright 2001, 2002, 2003, 2004 Johan Persson Aditus Consulting
• adodb 4.991 Copyright (c) 2000, 2001, 2002, 2003, 2004 John Lim
• html2pdf Copyright (C) 20042005 Renato Coelho
• famfamfam.com Icons from Mark James
• phpconfig (C) 2003 Dave Packham and Rob Birkinshaw
NOT GETTING LOST, WHAT IS THE INSTALLATION
ABOUT?
In a nutshell installing a2billing requires nine steps:
1.
2.
3.
4.
5.
6.
7.
8.
9.
Download and unpack source code
Setup the database
Edit a2billing.conf file. Setting up the database parameters
Fix permissions and folders
Installing the web based graphical user interfaces (Customer and Admin)
Place the AGI files
Prepare your dialplan
Add your cronjobs
Configure your callback daemon (only for callback)
To help you to understand what we are doing consider that:
1. The mother of all components of a2billing is an AGI file (a2billing.php) that is
called from asterisk dialplan. (See Step: 6, 7)
2. The overall goal of the installation is to make sure that the AGI file that is placed
in the asterisk agibin folder and invoked from the dialplan can (1) access a mysql
database and (2) connect to Asterisk manager to place and receive call related
commands and information. (See Step: 2, 3, 4)

3. A2billing is managed via three different user interfaces (admin, agent and customer)
that needs to run via the apache2 web browser with the right owner and permissions
(See Step: 5)
4. There are other components as cronjobs, callback daemon, etc that are needed for
advance added value services (See Step: 8, 9)
HOW ALL FITS TOGETHER?
A2billing is a complex software but the main idea can be summarized as follows:
When a call comes into Asterisk, it falls into a context (a part of the dialplan) that will
execute a2billing.php PHP file in one of its operational modes. The PHP file is the AGI
(Asterisk Gateway Interface) software that is responsible of retrieving information of the
call from the AMI (Asterisk Manager Interface) and interact with the Mysql database. All
actions related to the call (routing, playing a IVR, etc) are executed talking to Asterisk via
the AMI.
a2billing.php (the AGI code in the dialplan) uses a PHP class known as phpagi to talk
with the AMI and adodb to connect with the mysql database. To separate functionality
from presentation a2billing 1.4 is using smarty.

Prerequired Packages
A2billing requires the packages of a LAMP (PHP5) installation.
To install the necessary packages, run the following commands:
#aptget install libapache2modphp5 php5 php5common
#aptget install php5cli php5mysql mysqlserver apache2 php5gd
#aptget install opensshserver
Version 1.4 requires Mcrypt for PHP5
#aptget install php5mcrypt
Asterisk is of course also needed.
#aptget install asterisk
PART 2. INSTALLATION OF A2BILLING
In a nutshell installing a2billing requires seven steps:
1. Download and unpack source code
2. Setup the database
3. Edit a2billing.conf file. Setting up the database parameters
4. Fix permissions and folders
5. Place the AGI files
6. Installing the web based graphical user interfaces (Customer, Agent and Admin)
7. Prepare your dialplan
8. Add your cronjobs
9. Configure your callback daemon (only for callback)

STEP 1. GET A2BILLING SOURCE CODE
Download the source code (wget) and unpack it (tar).2
#cd /usr/local/src/
#wget http://www.asterisk2billing.org/downloads/A2Billing_1.4.0.tar.gz
#tar zxvf A2Billing_1.3.4.tar.gz
We will now create a symbolic link to the new directory
#ln s /usr/local/src/a2billing_1.4.0 /usr/local/src/a2billing
Make sure you have all the code under /usr/local/src/a2billing
STEP 2. PREPARE THE DATABASE
We will now create a MySQL database (mya2billing) for the billing software. The file
a2billingMYSQLcreatedbuser.sql includes a script that creates the database with the
correct access control users and permissions.
#cd /usr/local/src/a2billing
#mysql u root p < DataBase/mysql/Mysql5.x/a2billingMYSQLcreatedb
user.sql
After creating the database structure, we will create a set of tables and insert some initial
basic data that A2Billing needs to work.
#mysql u root p mya2billing < DataBase/mysql/Mysql5.x/a2billing
schemaMYSQL.5.Xv1.4.0.sql
Checkpoint 1: Check that the database (my2billing) and that (89 ?) tables have been
created.
#mysql u root p mya2billing
mysql>show tables
mysql>exit
2 If you are a developer consider using the SVN version
svn co username guest password guest http://svn.a2billing.net/svn/asterisk2billing/trunk

STEP 3. EDIT A2BILLING CONFIGURATION FILE
We need to edit the A2Billing configuration file (a2billing.conf file). The file contains all
the configuration information for the Asterisk2Billing to connect to the database.
First, we need to copy the default configuration file from the source code (/usr/local/src)
to Asterisk (/etc). Notice that in previous versions the a2billing.conf was under
/etc/asterisk
#cp /usr/local/src/a2billing/a2billing.conf /etc/
Open the file with your favorite text editor (vi is used in this example). If you are new to
Linux, we recommend you to use the text editor Gedit3.
#vi /etc/asterisk/a2billing.conf
The only parameters that you need to change here is the database connection information,
an example follows:
[database]
hostname = localhost
port = 3306
user = a2billinguser
password = a2billing
dbname = mya2billing
;dbtype = postgres
dbtype = mysql
3 Gedit is a graphical text editor and can not be run from a console. In that case, we recommend vi.

STEP 4. FIX PERMISSIONS, FILES AND FOLDERS
In this step, we will tweak the file permissions of Asterisk to fit the A2Billing software. We
will also create a number of additional files and folders that A2Billing needs, which does
not come with the default installation.
1. SIP and IAX
First we will set a few file permissions (chmod, chown) and create (touch) the SIP and
IAX configuration files for Asterisk.
chmod 777 /etc/asterisk
touch /etc/asterisk/additional_a2billing_iax.conf
touch /etc/asterisk/additional_a2billing_sip.conf
echo \#include additional_a2billing_sip.conf >> /etc/asterisk/sip.conf
echo \#include additional_a2billing_iax.conf >> /etc/asterisk/iax.conf
chown Rf wwwdata /etc/asterisk/additional_a2billing_iax.conf
chown Rf wwwdata /etc/asterisk/additional_a2billing_sip.conf
2. Sound files
We need to copy (cp) a few files from A2Billing package to Asterisk sounds folder. Use the
installation script as follows:
/usr/local/src/a2billing/addons/install_a2b_sounds_deb.sh
chown R asterisk:asterisk /usr/share/asterisk/sounds/
3. Configure Asterisk Manager
Configure the Asterisk Manager by editing the manager.conf file.
#vi /etc/asterisk/manager.conf
[general]
enabled = yes
port = 5038
bindaddr = 0.0.0.0
[myasterisk]
secret=mycode
read=system,call,log,verbose,command,agent,user
write=system,call,log,verbose,command,agent,user

STEP 5. INSTALL THE AGI COMPONENTS
Place the entire content of the directory AGI into your agibin directory.
mkdir /usr/share/asterisk/agibin
cd /usr/local/src/a2billing/AGI
cp a2billing.php /usr/share/asterisk/agibin/
cp Rf lib /usr/share/asterisk/agibin/
Make sure the script is executable
chmod +x /usr/share/asterisk/agibin/a2billing.php
STEP 6. INSTALL WEBBASED GRAPHICAL INTERFACES
In this step, we will install the three graphical interfaces of A2Billing, the Administration
(admin), Agent (agent) and the Customer interface (customer).
Place the directories admin, customer, agent and common into your webserver document
root.
mkdir /var/www/a2billing
cp rf /usr/local/src/a2billing/admin /var/www/a2billing
cp rf /usr/local/src/a2billing/agent /var/www/a2billing
cp rf /usr/local/src/a2billing/customer /var/www/a2billing
cp rf /usr/local/src/a2billing/common /var/www/a2billing

chmod 755 /var/www/a2billing/admin/templates_c
chmod 755 /var/www/a2billing/customer/templates_c
chmod 755 /var/www/a2billing/agent/templates_c
chown Rf wwwdata:wwwdata /var/www/a2billing/admin/templates_c
chown Rf wwwdata:wwwdata /var/www/a2billing/customer/templates_c
chown Rf wwwdata:wwwdata /var/www/a2billing/agent/templates_c
Restart your webserver (Apache).
/etc/init.d/apache2 restart
Checkpoint 2: Direct a browser to the administrative web interface (http://<ip
addr>/a2billing/admin) and login (check for all default passwords at the end of this
document).

STEP 7. CREATE DIALPLAN
The extensions.conf is the Asterisk dialplan. Calls that interact with the billing software
need to be handled inside of one or many a2billing related contexts.
The calls that reach the context are processed using the a2billing.php AGI script. The
a2billing.php script can be invoked in many different modes (standard, did, voucher,
callback, etc). In the example, we create two different contexts, the first context [a2billing]
handles all the calls from our VoIP clients. When a call arrives, any extension number _X.
(2 digits or more) reaches the script a2billing.php
The second context [did], will be used to route incoming calls back to the users. Calls to
the clients (DID) are handled inside of the [did] context. The script a2billing.php in did
mode is responsible of routing the call back to one of our users.4
Edit extension.conf (/etc/asterisk) and add the following two extensions.
[a2billing]
; CallingCard application
exten => _X.,1,Answer
exten => _X.,2,Wait,2
exten => _X.,3,DeadAGI,a2billing.php
exten => _X.,4,Wait,2
exten => _X.,5,Hangup
[did]
; CallingCard application
exten => _X.,1,DeadAGI(a2billing.php|1|did)
4 DeadAGI is a variant of AGI that you use when the channel is hung up.

STEP 8. CONFIGURE RECURRING SERVICES
Recurring services are handled via the /etc/crontab
You can add the following cron jobs to your /etc/crontab or create a file with the jobs in
/var/spool/cron/a2billing
# update the currency table
0 6 * * * php /usr/local/src/a2billing/Cronjobs/currencies_update_yahoo.php
# manage the monthly services subscription
0 6 1 * * php
/usr/local/src/a2billing/Cronjobs/a2billing_subscription_fee.php
# To check account of each Users and send an email if the balance is
less than the user have choice.
0 * * * * php /usr/local/src/a2billing/Cronjobs/a2billing_notify_account.php
# To check all the accounts and send an notification email if the
balance is less than the first argument.
0 */6 * * php /usr/local/src/a2billing/Cronjobs/a2billing_check_account.php
# this script will browse all the DID that are reserve and check if the
customer need to pay for it
# bill them or warn them per email to know if they want to pay in
order to keep their DIDs
0 2 * * * php /usr/local/src/a2billing/Cronjobs/a2billing_bill_diduse.php
# This script will take care of the recurring service.
0 12 * * * php /usr/local/src/a2billing/Cronjobs/a2billing_batch_process.php
# To generate invoices and for each user.
0 6 * * * php /usr/local/src/a2billing/Cronjobs/a2billing_invoice_cront.php
# to proceed the autodialer
*/5 * * * * php
/usr/local/src/a2billing/Cronjobs/a2billing_batch_autodialer.php
# manage alarms
0 * * * * php /usr/local/src/a2billing/Cronjobs/a2billing_alarm.php

STEP 9. CALL BACK DAEMON (ONLY FOR CALL BACKS)
The call back daemon is responsible of reading from the database the pool of calls stored
for call back and trigger those calls periodically. The daemon is written in Python. Install
the pythonsetuptools and use easy_install to install the callback_daemon
aptget install pythonsetuptools pythonmysqldb pythonpsycopg2
pythonsqlalchemy
cd /usr/local/src/a2billing/CallBack
easy_install callbackdaemonpy/dist/callback_daemon1.0.prod_r1527
py2.5.egg

Install the init.d startup script
cd /usr/local/src/a2billing/CallBack/callbackdaemonpy/callback_daemon/
cp a2bcallbackdaemon.debian /etc/init.d/a2bcallbackdaemon
chmod +x /etc/init.d/a2bcallbackdaemon
Make sure the daemon starts

updaterc.d a2bcallbackdaemon defaults 40 60
If you need to remove the daemon in the future run

updaterc.d f a2bcallbackdaemon remove
PART 3. DEFAULT PASSWORDS AND URL
Type Username Password
Admin UI root changepassword
Manager myasterisk mycode
MySQL database a2billinguser a2billing
Database
mya2billing
Note! The first character in all usernames and passwords is a small letter (not capital).

2012-07-16T05:10:00.002-07:00

Download and install FreeSWITCH and vBilling
Note: Currently, this installer is only supports CentOS > 6 and Debian based distros.

# wget --no-check-certificate http://goo.gl/ap7KV -O install.sh
# chmod +x install.sh
# ./install.sh

Please note that we prefer vBilling and all of it’s components to be installed on a fresh OS.

You may follow the prompts from the install script and it will install and configure vBilling management interface along with all other necessary components for you.

2012-07-16T04:47:00.003-07:00


1. Setup EPEL Yum Repositories with newer packages and install Git:



    rpm -Uvh http://dl.fedoraproject.org/pub/epel/6/i386/epel-release-6-7.noarch.rpm




2. Install YUM packages



    yum install git




3. Install Freeswitch : 



      



    * Install Freeswitch pre-requisite packages using YUM



    



      yum clean all



      



      yum install autoconf automake  expat-devel gnutls-devel libtiff-devel libX11-devel unixODBC-devel python-devel zlib-devel libzrtpcpp-devel alsa-lib-devel libogg-devel libvorbis-devel perl perl-libs gdbm-devel libdb-devel uuid-devel @development-tools gdbm-devel db4-devel libjpeg libjpeg-devel libtermcap libtermcap-devel ncurses ncurses-devel ntp screen sendmail sendmail-cf gcc-c++



    

#Install Freeswitch
cd /usr/src/
wget https://raw.github.com/Star2Billing/newfies-dialer/master/install/install-freeswitch.sh -O install-freeswitch.sh
bash install-freeswitch.sh
/etc/init.d/freeswitch start
    * Download latest freeswitch version 
      cd /usr/local/src       
      git clone git://git.freeswitch.org/freeswitch.git
      cd freeswitch
      ./bootstrap.sh
      
    * Edit modules.conf
      Enable mod_xml_curl, mod_xml_cdr, mod_perl (If you want to use calling card features)
    
    * Compile the Source
      ./configure
      make
    
    * Install Freeswitch with sound files
make all install cd-sounds-install cd-moh-install
    * Create symbolic links for Freeswitch executables
ln -s /usr/local/freeswitch/bin/freeswitch /usr/local/bin/freeswitch
ln -s /usr/local/freeswitch/bin/fs_cli /usr/local/bin/fs_cli
    * Configure Freeswitch Startup Script
cp <ASTPP SOURCE DIR>/freeswitch/init/freeswitch.init to /etc/init.d/freeswitch
chmod 755 /etc/init.d/freeswitch
chkconfig --add freeswitch
chkconfig --level 345 freeswitch on
         
4. ASTPP Install :
    1. Download ASTPP 
cd /usr/src/
git clone https://github.com/ASTPP/ASTPP.git
    
    2. * Install ASTPP pre-requisite packages using YUM
yum install bzip2 cpio curl curl-devel fileutils gettext-devel libtool make nmap openssl openssl-devel libxml2 libxml2-devel php php-devel php-common php-cli php-gd php-pear php-mysql php-pdo php-pecl-json mysql mysql-server mysql-devel
    
    3. Goto ASTPP Folder & Run Make Command
1. cd ASTPP
2. make (Here you will get the instructions)
Note : To install ASTPP with Freeswitch below command needs to be run. (Steps will be improved later)
yum install perl-CPANPlease use 'make install_perl' to install perl packages (It will prompt you many times. So, please be here with installation process)
Please use 'make install_freeswitch_conf' if you are using Freeswitch
Please use 'make install_asterisk_conf' if you are using Asterisk (Not Stable)
Please use 'make install_astpp' to install web interface & configuration file.         
    4. Start Services
      1. Apache (/etc/init.d/httpd start)
      2. Mysql (/etc/init.d/mysqld start)
      3. Freeswitch (/etc/init.d/freeswitch start)      
      
    5. Setup MySQL For ASTPP
* Set Root Password 
mysqladmin -u root password '<SET YOUR PASSWORD>'
* Create astpp, fs(Freeswitch Database) and fscdr(Freeswitch CDR DB) databases
* Create new mysql for above databases
GRANT ALL PRIVILEGES ON astpp.* TO astppuser@localhost IDENTIFIED BY '<SET YOUR PASSWORD>';
GRANT ALL PRIVILEGES ON fs.* TO astppuser@localhost IDENTIFIED BY '<SET YOUR PASSWORD>';
GRANT ALL PRIVILEGES ON fscdr.* TO astppuser@localhost IDENTIFIED BY '<SET YOUR PASSWORD>';
flush privileges;
Note : If already have Freeswitch & Freeswitch CDR database installated with any other application and you want to use that databases then no need to install that databases from ASTPP. Just install ASTPP database and then configure your freeswitch cdr & freeswitch databases from System -> Configuration page later on once GUI starts working ;)
    7. Install ASTPP Database
cd <ASTPP SOURCE DIR>/sql
./install.sh 
Enter appropriate values in prompt
    8. Setup database credential in /var/lib/astpp/astpp-config.conf    
Note : Default we are running astpp on 8081 port.
    
    You are done with GUI installation. Enjoy :)
    
    Visit the astpp admin page in your web browser. It can be found here: http://server_ip:8081/ Please change the ip address depending upon your box. 
    The default password is " Passw0rd! ". you do not need to enter username.    
    Note : In case of any issue please refer apache error log.    
      
    7. ASTPP Freeswitch Configuration    
    
cd <ASTPP SOURCE DIR>/freeswitch/conf
cp autoload_configs/xml_curl.conf.xml /usr/local/freeswitch/conf/autoload_configs/
Note : Edit xml_curl.conf.xml file and change localhost to your ip or domain name.
cp autoload_configs/xml_cdr.conf.xml /usr/local/freeswitch/conf/autoload_configs/
Note : Edit xml_cdr.conf.xml file and change localhost to your ip or domain name.
cp autoload_configs/cdr_csv.conf.xml /usr/local/freeswitch/conf/autoload_configs/  
cp dialplan/default/astpp_callingcards.xml /usr/local/freeswitch/conf/dialplan/default/
Note : Edit astpp_callingcards.xml file to change acccess number for calling card.  
Enable mod_xml_curl, mod_xml_cdr, mod_cdr_csv, mod_perl in /usr/local/freeswitch/conf/autoload_configs/modules.conf.xml file. 
Once above setting are done, restart freeswitch and check if above modules are loaded or not. If not then please load it manually.
    8. Setup Cron 
      
Add these lines to cron:
# Run @ Hourly 
# Update calling cards and expire them and mark them as being empty.
@hourly /usr/local/astpp/astpp-update-balance.pl
# Run @ Daily
# Check which dids have been assigned but have not been billed yet.
# Update account balance if any chage is any periodic charge applied 
@daily /usr/local/astpp/astpp-update-balance.pl sweep=0
# Run @ Weekly
# Update account balance if any chage is any periodic charge applied 
0 0 * * 0 /usr/local/astpp/astpp-update-balance.pl sweep=1
# Run @ Monthly
# Process for DID Montly billing
# Update account balance if any chage is any periodic charge applied 
0 0 1 * * /usr/local/astpp/astpp-update-balance.pl sweep=2   
# Run @ quarterly   
# Update account balance if any chage is any periodic charge applied 
0 0 1 1,4,7,10 * /usr/local/astpp/astpp-update-balance.pl sweep=3
# Run @ semi-quarterly
# Update account balance if any chage is any periodic charge applied 
0 0 * 1,7 * /usr/local/astpp/astpp-update-balance.pl sweep=4
# Run @ annually
# Update account balance if any chage is any periodic charge applied 
0 0 * 1 * /usr/local/astpp/astpp-update-balance.pl sweep=5
# Run @ Daily
# Generate Invoice Daily 
@daily /usr/local/astpp/astpp-generate-invoices.pl sweep=0
# Run @ Weekly
# Generate Invoice Weekly
0 0 * * 0 /usr/local/astpp/astpp-generate-invoices.pl sweep=1
# Run @ Monthly
# Generate Invoice Monthly
0 0 1 * * /usr/local/astpp/astpp-generate-invoices.pl sweep=2
# Run @ quarterly
# Generate Invoice quarterly
0 0 1 1,4,7,10 * /usr/local/astpp/astpp-generate-invoices.pl sweep=3
# Run @ semi-quarterly
# Generate Invoice semi-quarterly
0 0 * 1,7 * /usr/local/astpp/astpp-generate-invoices.pl sweep=4
# Run @ annually
# Generate Invoice annually
0 0 * 1 * /usr/local/astpp/astpp-generate-invoices.pl sweep=5
# Run @ Hourly
# Update currency rate
@hourly /usr/local/astpp/astpp-currency-update.pl
# Run @ Daily
# Low balance notification
@daily /usr/local/astpp/astpp-low-balance.pl minbalance=5
# Run @ Daily
# Update calling card charges & status
@daily /usr/local/astpp/astpp-callingcards-daily.pl
# Run @ Daily
# (Optional) To do bulk rating of calls
@daily /usr/local/astpp/astpp-rate-engine.pl runtype=sweep
Manually install the script to rotate the cdrs. 
cp <ASTPP SOURCE DIR>/freeswitch/contrib/wasim/cdrload.pl /usr/local/astpp 
Then add the following line to crontab,
* * * * * /usr/local/astpp/cdrload.pl
=========== Additional Configuration ============
Opensips configuration :
We have addup opensip version 1.7.1's opensips.cfg file.
1. Modify subscriber table of opensips
    ALTER TABLE `subscriber` ADD `accountcode` VARCHAR( 20 ) NOT NULL
2. Enable opensips support in ASTPP
    1. Goto System -> Configuration
    2. Chagne opensips variable to 1 (1 to enable opensips support and 0 to disable. Default 0)
    3. Configure opensips database and domain variables from same page (Variables : opensips_dbname, opensips_dbuser, opensips_dbhost, opensips_dbpass, opensips_domain)
Note : If you are running opensips on seperate server then please make sure ASTPP server should have grant to access opensips database.
3. Copy opensip.cfg file to appropriate opensips folder.
    cp <ASTPP SOURCE DIR>/opensips/opensips.cfg /usr/local/etc/opensips/opensips.cfg
===================================================
ASTPP Support :
Please email us at info@astpp.org for support.
ASTPP Forums : 
http://astpp.org/index.php/forum/index
Refer astpp.org for more information.

2012-07-16T03:26:00.002-07:00

Asterisk Realtime setup for A2billing 1.9.4 !

It is useful to use Asterisk Realtime with A2billing. It does not require Asterisk to reload each time when you add/remove/change a customer. Also it allows you to share the A2billing database between multiple servers if you needed to do that. There are some performance advantages as well. If you need to create many customers it just makes more sense to use a database instead of putting them all in a flat text file.

*Assume you have already installed asterisk+a2billing

First add the following in /etc/asterisk/extconfig.conf

iaxusers => mysql,general,cc_iax_buddies

iaxpeers => mysql,general,cc_iax_buddies

sipusers => mysql,general,cc_sip_buddies

sippeers => mysql,general,cc_sip_buddies

extensions => mysql,general,cc_sip_buddiesThen add the following in /etc/asterisk/res_config_mysql.conf
[general]
dbhost = 127.0.0.1
dbname = mya2billing
dbuser = a2billinguser
dbpass = password (your defined password for a2billing database)dbport = 3306
;dbsock = /var/lib/mysql/mysql.sock
Now restart asterisk :

#CLI core reload

To test it if working or not:

From Asterisk CLI>

>core show config mappings

Should show below lines:

Config Engine: mysql

===> extensions (db=general, table=cc_sip_buddies)

===> iaxpeers (db=general, table=cc_iax_buddies)

===> iaxusers (db=general, table=cc_iax_buddies)

===> sippeers (db=general, table=cc_sip_buddies)

===> sipusers (db=general, table=cc_sip_buddies)

In the A2Billing GUI go into System settings>Global and search for “realtime”. Change that setting to “yes”.

2012-07-16T03:07:00.000-07:00

A2billing 1.9.4 Installation on Centos 6 !

Posted on July 10, 2012 by moderator

Installation was tested using below given applications :

CentOS Linux v6
Asterisk v1.8
A2Billing v1.9.4

First update your system :
#yum update

Install additional required packages:

#yum -y install php-mcrypt perl-DBD-Pg

Change php folder permission:

#chown -R asterisk:asterisk /var/lib/php/session

Add php timezone:
#nano +639 /etc/php.iniUncomment date.timezone =
Use your area time zone from here: your timezone from this link
Restart apache for the changes to take effect

#service httpd restart

Get a2billing source

cd /usr/src
wget –no-check-certificate https://github.com/Star2Billing/a2billing/tarball/v1-current

Un-zip a2billing source:

#tar zxvf Star2Billing-a2billing-v1-current-*.tar.gz

Rename the directory:

#mv Star2Billing-a2billing-* a2billing

Prepare MySQL database for a2billing:

cd /usr/src/a2billing

(a2billing is our renamed directory)

If you did not create a mysql root password during the asterisk install you should create it now.
mysqladmin -u root password ‘myrootpass’ (or any password)

Use this password for below commands :

#mysql -u root -p < DataBase/mysql-5.x/a2billing-createdb-user.sql

Which will create:
Database name: mya2billing
Database user: a2billinguser
Database user password: mya2bpass (or any)

Now run script to create tables and insert some basic configuration data

#cd /usr/src/a2billing/DataBase/mysql-5.x
./install-db.sh

Answer questions as follows:
Enter Database Name: mya2billing
Enter Hostname: localhost
Enter UserName: root
Enter Password: ‘myrootpass’

Now check that the database and 97+ tables have been created:

#mysql -u root -p mya2billing

>show tables;

+—————————+

| Tables_in_mya2billing |

+—————————+

| cc_agent |

| cc_agent_commission |
.
.
.
.
.
| cc_version |

| cc_voucher |

+—————————+

97 rows in set (0.00 sec)

>exit

cp /usr/src/a2billing/a2billing.conf /etc/
nano /etc/a2billing.conf

Make sure the following parameters are set as shown.

[database]

hostname = localhost

port = 3306

user = a2billinguser

password = mya2bpass

dbname = mya2billing

dbtype = mysql

Create files and set permissions

Only required if not using Asterisk Realtime. #chmod 777 /etc/asterisk

#touch /etc/asterisk/additional_a2billing_iax.conf

#touch /etc/asterisk/additional_a2billing_sip.conf

#echo \#include additional_a2billing_sip.conf >> /etc/asterisk/sip_custom.conf

#echo \#include additional_a2billing_iax.conf >> /etc/asterisk/iax_custom.conf

#chown -Rf asterisk:asterisk /etc/asterisk/additional_a2billing_iax.conf

#chown -Rf asterisk:asterisk /etc/asterisk/additional_a2billing_sip.conf

Run sound installation script :

#cd /usr/src/a2billing/addons/sounds
./install_a2b_sounds.sh
#chown -R asterisk:asterisk /var/lib/asterisk/sounds/

Add following settings to /etc/asterisk/manager.conf

[myasterisk]
secret=mycode
deny=0.0.0.0/0.0.0.0
permit=127.0.0.1/255.255.255.0
read=system,call,log,verbose,command,agent,user
write=system,call,log,verbose,command,agent,user

Set up a2billing web folder:

#mkdir /var/www/html/a2billing
#cp -Rf /usr/src/a2billing/admin /var/www/html/a2billing/admin
#cp -Rf /usr/src/a2billing/agent /var/www/html/a2billing/agent
#cp -Rf /usr/src/a2billing/customer /var/www/html/a2billing/customer
#cp -Rf /usr/src/a2billing/common /var/www/html/a2billing/common

#chown -R asterisk:asterisk /var/www/html/a2billing
#chmod 755 /var/www/html/a2billing/admin/templates_c

#chmod 755 /var/www/html/a2billing/customer/templates_c

#chmod 755 /var/www/html/a2billing/agent/templates_c

Set up AGI:

#mkdir /var/lib/asterisk/agi-bin

#cd /usr/src/a2billing/AGI

#cp a2billing.php /var/lib/asterisk/agi-bin/

#chown -R asterisk:asterisk /var/lib/asterisk/agi-bin

#chmod 755 /var/lib/asterisk/agi-bin/a2billing.php

#ln -s /var/www/html/a2billing/common/lib /var/lib/asterisk/agi-bin/lib

Add the following extensions to /etc/asterisk/extensions.conf. :

*********************************************************************

[a2billing]

exten => _X.,1,Answer

exten => _X.,n,Wait(1)

exten => _X.,n,deadAGI(a2billing.php,1)

exten => _X.,n,Hangup

[a2billing-callback]

exten => _X.,1,deadAGI(a2billing.php,1,callback)

exten => _X.,n,Hangup

[a2billing-all-callback]

exten => _X.,1,deadAGI(a2billing.php,1,all-callback,34) ;last parameter is the callback area code

exten => _X.,n,Hangup

***********************************************************************
Copy cron files to some permanent location such as /usr/local :
#mkdir -p /usr/local/a2billing
#cp -R /usr/src/a2billing/Cronjobs /usr/local/a2billing/
#ln -sf /var/www/html/a2billing/common/lib /usr/local/a2billing/Cronjobs/lib
#chown -R asterisk:asterisk /usr/local/a2billing

Add the cron jobs to /var/spool/cron/asterisk :

# update the currency table

0 6 * * * php /usr/local/a2billing/Cronjobs/currencies_update_yahoo.php

# manage the monthly services subscription

0 6 1 * * php /usr/local/a2billing/Cronjobs/a2billing_subscription_fee.php

# To check account of each Users and send an email if the balance is less than the user have choice.

0 * * * * php /usr/local/a2billing/Cronjobs/a2billing_notify_account.php

# this script will browse all the DID that are reserve and check if the customer need to pay for it.

# bill them or warn them per email to know if they want to pay in order to keep their DIDs.

0 2 * * * php /usr/local/a2billing/Cronjobs/a2billing_bill_diduse.php

# This script will take care of the recurring service.

0 12 * * * php /usr/local/a2billing/Cronjobs/a2billing_batch_process.php

# To generate invoices and for each user.

0 6 * * * php /usr/local/a2billing/Cronjobs/a2billing_batch_billing.php

# to proceed the autodialer

*/5 * * * * php /usr/local/a2billing/Cronjobs/a2billing_batch_autodialer.php

# manage alarms

0 * * * * php /usr/local/a2billing/Cronjobs/a2billing_alarm.php

# manage archive

0 12 * * * php /usr/local/a2billing/Cronjobs/a2billing_archive_data_cront.php

#autorefill
0 10 21 * * php /usr/local/a2billing/Cronjobs/a2billing_autorefill.php

15 * * * * php /usr/local/a2billing/Cronjobs/a2billing_batch_cache.php

Add log files:

#mkdir -p /var/log/a2billing

touch /var/log/a2billing/cront_a2b_alarm.log

touch /var/log/a2billing/cront_a2b_autorefill.log

touch /var/log/a2billing/cront_a2b_batch_process.log

touch /var/log/a2billing/cront_a2b_archive_data.log

touch /var/log/a2billing/cront_a2b_bill_diduse.log

touch /var/log/a2billing/cront_a2b_subscription_fee.log

touch /var/log/a2billing/cront_a2b_currency_update.log

touch /var/log/a2billing/cront_a2b_invoice.log

touch /var/log/a2billing/cront_a2b_check_account.log

touch /var/log/a2billing/a2billing_paypal.log

touch /var/log/a2billing/a2billing_epayment.log

touch /var/log/a2billing/a2billing_api_ecommerce_request.log

touch /var/log/a2billing/a2billing_api_callback_request.log

touch /var/log/a2billing/a2billing_api_card.log

touch /var/log/a2billing/a2billing_agi.log

#chown -R asterisk:asterisk /var/log/a2billing

Log into the webpage

http://<ip-addr>/a2billing/admin

user: root

pass: changepassword

Change password

After installation required some necessary setting :

Go into System settings>Global list. Change a2billing ver “1_6″

Go into System settings>Global search for “realtime”. Change that setting to “no”.

Now restart asterisk:

#asterisk -r

# CLI>core reload

####################################################################

################################################################

##########################################################

*****************************************

2012-07-14T08:10:00.001-07:00

Download Huawei EC150 Dashboard
Download Huawei EC150 Driver
Download Huawei EC150 Dashboard Update
Download Huawei EC150 Firmware Update

2012-07-14T08:03:00.002-07:00

Unlock Huawei EC152

Download Huawei EC152 Dashboard
Download Huawei EC152 Driver
Download Huawei EC152 Dashboard Update
Download Huawei EC152 Firmware Update

2012-07-14T08:01:00.004-07:00

Download Huawei E1732 Dashboard (Windows)
Download Huawei E1732 Dashboard (Mac)
Download Huawei E1732 Dashboard Update
Download Huawei E1732 Firmware Update
Download Huawei E1732 Driver

2012-07-14T07:58:00.000-07:00

Unlock Huawei E1731

Download Huawei E1731 Dashboard (Windows)
Download Huawei E1732 Dashboard (Mac)
Download Huawei E1731 Dashboard Update
Download Huawei E1731 Firmware Update
Download Huawei E1731 Driver