tag:blogger.com,1999:blog-86637577656123657942024-10-03T10:19:02.384-07:00黑豬的呻吟一個3x 歲台北人奮鬥打拚熱血青春的過程.....(誤呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.comBlogger19125tag:blogger.com,1999:blog-8663757765612365794.post-71965803099458481822010-08-27T02:03:00.000-07:002010-08-27T02:10:09.701-07:00在FreeBSD 上使用 Zend frameworkZend framework 真的很棒, 使用過後的感想只有棒一個字
寫一下我在FreeBSD 上架設的過程
提供給有需要的人參考
我的環境
FreeBSD dns.usnei.net 8.0-RELEASE-p4 FreeBSD 8.0-RELEASE-p4
apache-2.2.13 Version 2.2.x of Apache web server with prefork MPM. (聽說worker 會跟php5衝突)
php5-5.3.3_1 PHP Scripting Language
其它應該沒差吧
apache 修改的部分有
DirectoryIndex index.php 要記得加入
DocumentRoot "/htdocs" 呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-50739655357253033552010-08-24T18:18:00.000-07:002010-08-24T18:18:48.578-07:00婚前與婚後自從小明結婚後, 老婆規定每個月薪水都要繳回家用再領零用錢
小明某天忽然感嘆的跟小華在MSN 上聊到
小明 : e04 , 我今天早上忽然覺得我自己好有錢, 錢包有1千多塊
小華 : ................
小明 : e04 婚前我根本覺得1千多塊不算甚麼錢啊
小華: 你被馴服了 ...
我絕對不會承認我跟小明有任何關連...呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-79173769132419114652010-05-26T18:17:00.000-07:002010-05-26T18:17:28.276-07:00BruteForceBlocker今天無聊裝的
其實最主要想以daemon的方式來把一些惡意的ssh attempt attack block 掉同時這套搭配packet filter 使用
基本上僅是一隻perl 程式
要準備好的條件有
1 加入以下到你現在在運行的pf rule
table persist file "/var/db/ssh-bruteforce" block in log quick proto tcp from to any port ssh
2 加入以下在 /etc/syslog.conf
auth.info;authpriv.info | exec /usr/local/sbin/bruteforceblocker
3 安裝缺少的perl 模組
perl -MCPAN -e shell&呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-8825519448261566302010-05-12T22:57:00.000-07:002010-05-12T22:57:24.182-07:00今天make world 發現 -j4 參數餵了以後
會出現錯誤
重新make 一次不加任何參數就ok 了
gcc 版本是
Using built-in specs.
Target: i386-undermydesk-freebsd
Configured with: FreeBSD/i386 system compiler
Thread model: posix
gcc version 4.2.1 20070719 [FreeBSD]呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-35903396226567500422009-04-01T17:39:00.000-07:002009-04-01T22:26:24.290-07:00....這陣子這陣子 沒寫blog心血來潮打算寫一下才發現blog 不能開當下以為是辜狗的問題後來才發現....我自己的灰塵機上次上pre-release 7.2因為套件有些問題自己耍笨下了pkg_delete -af 清掉所有套件只把php nginx php-cgi 編回去就丟著了XD完全忘了dns 掛在那台呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-24172537502852940072009-02-20T00:20:00.000-08:002009-02-22T23:29:05.340-08:00使用google 服務 讓你也有一台mail server 還不用管理出神入化的google 又一讓我大驚的創舉若我們擁有以下條件即可達成輕鬆, 不需任何成本只要一杯咖啡的時間, 完成這個工作1. gmail account (這個應該大家都有吧)2. 自己的domain (這個不貴吧)以下以funnyd.idv.tw 為例, 因我本身已提供funnyd.idv.tw 的mail services故以下使用mail.funnyd.idv.tw 環境是BSD6.13 設定DNS . 新增MX 記錄 開啟funnyd.idv.tw 的zone filemail IN MX 1 ASPMX.L.GOOGLE.COM.mail IN MX 5 ALT1.ASPMX.L.GOOGLE.COM.mail IN MX 5 ALT2.ASPMX.L.GOOGLE.COM.mail IN MX 10 ASPMX2.GOOGLEMAIL.COM.mail IN MX 10呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-26395180985362858932009-02-20T00:18:00.000-08:002009-02-20T00:24:17.466-08:00ldapLDAP 在原本的設計是整合多個伺服器的帳號, 不過其實LDAP 可以使用在通訊錄的整合這些通訊錄或帳號也許可以不用是本機的實體帳號但藉由OE or thundbird 此MUA 軟體, 也可以輕鬆達到自通訊錄尋找符合特定條件的人員相關資料STEP 1查詢是否有安裝LDAP 相關套件rpm -qa | grep openldapopenldap-devel-2.3.19-4openldap-servers-2.3.19-4openldap-2.3.19-4openldap-clients-2.3.19-4STEP 2修改openldap server端的設定檔vi /etc/openldap/sldap.conf找到以下database bdbsuffix "dc=EXAMPLE,dc=com"rootdn "cn=Manager,dc=呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-63108372655270633272009-02-20T00:17:00.002-08:002009-02-20T00:18:14.045-08:00由ms 備份至linux需求: Windows WebServer 要備份至Linux Server 建立folder 就叫backup 置放rar.exe至backup folder 內建立一Backup.bat 內容如下:@echo offrar a -ag[YYYYMMDD] backup @backup.lstftp -n -s:myfile.scrdel backup[*].rar建立backup.lst 檔案內容為你要備份的完整路徑如D:\IWANNABACKUPTHISFOLDER建立myfile.scr內容:open YourLinuxServerIPuser backup ->You must create before usebackup -> passwd about accout backuphashpromptmput backup[*].rarbye建立完成呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-44562336915874905362009-02-20T00:17:00.001-08:002009-02-20T00:17:26.577-08:00mutt db to gmail#!/bin/shDATESTR=`date "+%Y%m%d%H"`/usr/bin/mysqldump --add-locks btwoe > /root/tmp/backupb2e.$DATESTR.sql/bin/tar -zcvf /root/tmp/etcbackup$DATESTR.tar.gz /etc/bin/tar -zcvf /tmp/mybackup.tgz /root/tmpecho "etc and sql backup" | mutt -a /tmp/mybackup.tgz yourgmailaccout@gmail.com "etc and sql backup" 呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-41234718087364552752009-02-20T00:16:00.001-08:002009-02-20T00:16:42.751-08:00iptables block ssh attempt attackiptables block ssh attempt 適用於RedHat,Fedora#容忍值可以調高一點(粗體字) #! /bin/bash VAL=`grep Failed /var/log/secure | awk '{print $(NF-3)}' |cut -d: -f4 | sort | uniq -c |awk '{print $1"="$2}'` for i in $VAL do NUM=`echo $i|awk -F= '{print $1}'` IP=`echo $i|awk -F= '{print $2}'` if [ $NUM -gt 5 ] && [ -z "`iptables -vnL INPUT|grep $IP`" ] then呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com2tag:blogger.com,1999:blog-8663757765612365794.post-61588617638307708292009-02-20T00:15:00.001-08:002009-02-20T00:15:41.033-08:00SMTP protocol synchronization error (next input sent too soon: pipelining was not advertised)在某些硬體spam 設備做將被隔離的信件撈回動作時, 會被exim 擋掉錯誤訊息如下SMTP protocol synchronization error (next input sent too soon: pipelining was not advertised)可以將exim 的檢查選項關閉default 是開啟的在main configure 內加入smtp_enforce_sync = false可避免再發生上敘問題呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-32484044471830980132009-02-20T00:14:00.000-08:002009-02-20T00:15:09.160-08:00exim with DNS SPF在exim 配置DNS SPF 檢查在EXIM 上的應用在exim configure acl sector 加入acl_check_rcpt:#...# Use spfquery to perform a pair of SPF checks (for details, see# http://www.openspf.org/)## This is quite costly in terms of DNS lookups (~6 lookups per mail). Do not# enable if that's an issue. Also note that if you enable this, you must# install "libmail-spf-query-perl" which provides the spfquery command.# Missing 呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-83939038442124351252009-02-20T00:12:00.000-08:002009-02-20T00:14:44.049-08:00exim with maildirplatform :centos 5 , exim 4.69begin routers 區段localuser: driver = accept check_local_user# local_part_suffix = +* : -*# local_part_suffix_optional transport = maildir_delivery cannot_route_message = Unknown userbegin transports 區段maildir_delivery: driver = appendfile directory = /home/$local_part/maildir delivery_date_add envelope_to_add return_path_add 呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-43312874789437853272009-02-11T22:35:00.000-08:002009-02-12T22:43:09.662-08:00更新完ports tree 後記得 portsdb -Fu 更新ports tree index db 給我自己看的XD呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-21356950631447235192009-02-11T22:19:00.000-08:002009-02-12T22:43:31.922-08:00FreeBSD 更新security patchFreeBSD 7.1 STABLE cp /usr/share/examples/cvsup/stable-supfile /path/cvsupfile/vi stable-supfile *default host=CHANGE_THIS.FreeBSD.org -> *default host=cvsup.tw.freebsd.org *default release=cvs tag=RELENG_7 -> *default release=cvs tag=RELENG_7_1cvsup -g -L 2 /path/cvsupfile/stable-supfile 縮小pietty ....站起來倒咖啡 . 回去座位 放咖啡 走到窗戶旁. 看綠色 .....更新完後cd /usr/src make -j4 buildworld (j4 :用4個process 處理呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-10706154958961050902009-02-08T16:50:00.000-08:002009-02-12T22:44:03.481-08:00更新完perl , openwebmail 無法開啟 -.-cd /var/db/pkgportupgrade -m ENABLE_SUIDPERL=yes -f perl-5.8.\*perl-after-upgrade perl-after-upgrade -fportupgrade -m "-DFORCE_PKG_REGISTER" -rf perl-5.8.\* -x perl-5.8.\*edit /usr/local/etc/pkgtools.confat MAKE_ARGS setcionMAKE_ARGS = {'lang/perl5.8' => 'ENABLE_SUIDPERL=yes', }呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-70780079754145106522009-02-03T17:23:00.000-08:002009-04-06T00:40:32.707-07:00bsd nginx php5 fastcgi安裝nginx by portphp5 by portmod_fastcgi by portrehash/usr/local/bin/php-cgi -h-b | Bind Path for external FASTCGI Server mode/usr/local/bin/php-cgi -b 127.0.0.1:9000 & 錯誤的做法 , 關聯性都搞錯了 090310應再安裝spawn-fcgi此套件包在lighttpd ,不過已經分割出來成為一個獨立的project了,相關的訊息在hereanyway 開始安裝 lightttpdpkg_add -r -v lighttpd (-r 處理相依性, -v 詳細模式)裝完了之後, 其實我們僅僅需要 spawn-fcgi 此執行檔先將spawn-fcgi 搬到家目錄下rehashwhereis 呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-50943695654139672672009-01-19T23:22:00.000-08:002009-01-19T23:23:23.530-08:00: undefined reference to `ieee80211_next_scan'今天在編bsd 6.2 kernel 出現這個錯誤結果仔細看了好一陣子.....機車的要命是device ural # Ralink Technology RT2500USB wireless NICs 沒有刪掉-____- gy呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0tag:blogger.com,1999:blog-8663757765612365794.post-50510348206369906052009-01-05T19:12:00.000-08:002009-01-05T19:13:52.096-08:00確定第一件事就是自己架 blog 還要備份資料庫等等的屁事以後還是交給google做好了我來了. 辜狗!呻吟的小黑豬http://www.blogger.com/profile/04115902044892171097noreply@blogger.com0