HOWTO

linux server hardening chapter two

2011-08-14T22:05:00.000-07:00

this is a general hardening that i used to apply on my server 1. securing /tmp partition dd if=/dev/zero of=/opt/tmpMnt bs=1024 count=512000 mke2fs /opt/tmpMnt mkdir /tmp.bak mv /tmp/* /tmp.bak/ (verify that dot-files are also moved) mount -o loop,noexec,nosuid,rw /opt/tmpMnt /tmp mv /tmp.bak/* /tmp/ (again, very that dot-files are also moved) rm -rf /tmp.bak chmod 1777 /tmp vi /etc/fstab (add:

my fav doctor - Dr Thirteen

2011-08-14T21:42:00.000-07:00

Olivia Wilde is an American actress and fashion model. She began acting in the early 2000s, and has since appeared in a number of film and television parts, including roles in the serial-drama The O.C. and The Black Donnellys. She portrays Dr. Remy "Thirteen" Hadley in the TV drama House, and in 2010 starred as Quorra in Tron: Legacy.

How do you expect kids to listen

2011-08-14T21:38:00.000-07:00

How do you expect kids to listen to their parents when Tarzan lives half naked, Cinderella comes home at midnight, Pinocchio lies all the time, Aladdin is the king of thieves, Batman drives at 200 mph, Sleeping Beauty is lazy & Snow White lives with 7 guys. We shouldn't be surprised when kids misbehave, they get it from their story books.

hardening howto chapter one

2011-05-02T21:09:00.000-07:00

In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability. A system has a larger vulnerability surface the more that it does; in principle a single-function system is more secure than a multipurpose one. Reducing available vectors of attack typically includes the removal of unnecessary software, unnecessary usernames or logins and the

goodbye mac hello lenovo

2011-04-23T17:17:00.000-07:00

anna torv late night show

2011-04-21T08:56:00.001-07:00

now i'm gonna write a bit about my favorite actress on fringe anna torv. here's a bit about her ----- Anna Torv (born June, 1979 in Melbourne, Victoria) is an Australian actress best known for her role as FBI agent Olivia Dunham on the Fox television series Fringe. i also like the interview that she did in the late night talk show hosted by craig ferguson here's the video

vanilla kernel on debian

2011-04-21T06:18:00.001-07:00

first do the usual thing on the kernel, such as :- download the kernel- extract- make the link- make clean && make distclean && make mrproper- make menuconfig- choose the kernel based on the HW on your debian box- save the configuration filethis is the part on debian things :make-kpkg --revision=net0.5 --initrd --bzImage linux_imagenote:--revision is when you want to mark your own kernel...

customize your openbsd

2011-04-21T06:02:00.001-07:00

lets begingo to ftp://www.openbsd.or.id/pub/OpenBSD/4.0/packages/i386/ indonesia mirror for openbsdget this stuff firstbash-3.1.17.tgzexpat-2.0.0.tgzgettext-0.14.5p1.tgzlibiconv-1.9.2p3.tgznano-1.2.5.tgzwget-1.10.2p0.tgzbecause the default instalation of openbsd didn't have this stuffif u are interested u can also do the "ports"well even though i didn't recomended it.lets cuztomize.. :put this on

mplayer error

2011-04-21T06:00:00.001-07:00

mplayer error cannot find codec for audio format 0x6b6f6f63if u get this error even though u already install the w32codecs do this apt-get install libstdc++5 libstdc++5, it's required by the cook.so codec. I should have been looking further up in the output. I found that the _REAL_ docs are in the DOCS/tech directory. Reading codecs.conf.txt helped me understand what was happening in that

ubuntu repository script

2011-04-21T05:56:00.001-07:00

a while back, i used to make my own local repository for my ubuntu community in my old campus [ stt telkom ]. usually i'm using the apt-mirror for this mirroring job. the problem is my campus is having this annoying proxy so that i can't download any packet bigger than several MB. so i have to download the other packet though an illegal proxy server i made for myself :p.this bash script will

gentoo installation how-to

2011-04-21T05:55:00.001-07:00

1. prepare the partition2. mount the partition3. go to the partition and make sure you are in the partition (pwd)4. download the stage, i'm using stage3 (komo.vlsm.org/gentoo)5. download the portage (komo.vlsm.org/gentoo)6. download the new kernel (kernel.org)7. get the readme on gentoo.org (quickinstall.xml)begin the instalation :1. chroot the mounted partitioncd /mount -t proc proc /mnt/gentoo/

Gunung atau laut

2011-04-20T01:25:00.000-07:00

Akhirnya nulis blog lagitapi sayang nya yg ini cuma kopi paste ajatapi menarik untuk dibaca, tentang gunung dan lautdan gw milih laut.. dan emang bener desc nya :p----Manusia bermacam-macam, ada yang lebih menyukai gunung dari pada laut atau sebaliknya. Nah.... ada sedikit analisa kecil-kecilan mengenai sifat orang yang menyukai gunung atau laut, sesuai dengan yang disukai.Orang yang suka gunung

traylor howard

2009-02-02T04:25:00.001-08:00

Little bit about my fav tv series actress.Traylor Elizabeth Howard (born June 14, 1966) is an American actress. She is best known for her roles as Sharon Carter on the television series Two Guys and a Girl, and Natalie Teeger on the USA Network series Monk.

IBM Lenovo Thinkpad T60

2009-01-11T06:36:00.001-08:00

this is one of my gadget that i have from my vendor at danamon. quite nice and fast. but too much heavy for my shoulder. well.. this is the spesification of it :IBM Lenovo Thinkpad T60Intel Core Duo T2300 - 1667Mhz ( 2MB L2 Cache , FSB 667 MHz , Core Duo Processor ) , 512MB DDR2 , HDD 40GB SATA , 14,1" tft XGA 1024x768 , Graphics ATI RADEON 7500 with 32 MB Dedicated Memory , DVD-ROM Drive

Dharma & Greg

2009-01-10T06:41:00.001-08:00

this is an old tv series, but i just bought one from kaskus FJB, and u know what .. i think Jenna Elfman rocks.Dharma and Greg story is about when Greg, a young attorney from a wealthy family, meets Dharma, a free-spirited young woman, they get married in Reno on their first date. Their love is growing everyday as they get to know each other but their families, hers is a bunch of hippies and his

students ittelkom

2009-01-04T16:34:00.001-08:00

its been a while since i left my beloved students forum in ittelkom. it's about exactlyFrom and including: Sunday, July 29, 2007To and including: Monday, January 5, 2009It is 527 days from the start date to the end date, end date includedOr 1 year, 5 months, 8 days including the end daterank | username | join date | last visitso much memory in that forum. and yeaaaaaaaah it's

religion and faith

2009-01-03T22:05:00.001-08:00

after being banned from indonesian internet the faithfreedom is back again. according to the post date they have been come back in 31 of december. for several people faithfreedom is nothing but some egoistic post of articel or forum that try to discredit islam and the prophet.but for me faithfreedom is another way to learn islam. actually we can learn more from what they know.. and what we know..

Who is Your Twilight Guy?

2009-01-03T07:33:00.001-08:00

Again, i took a quiz on my facebook [ page ].This quiz is about Who is Your Twilight Guy? yeaaaaah ... i like to do some movie trivia sort of quiz. aaaaand this is my result "Jacob Black"Jacob Black is a fictional character in the books Twilight, New Moon, Eclipse and Breaking Dawn by Stephenie Meyer. He is described as a Native American of the Quileute (pronounced Quil-yoot) tribe in La Push,

it all started with a big bang

2009-01-03T03:17:00.001-08:00

this is one of my fav tv series ever, The big bang theoryu can see the detail about this tv series [ here ]. Surprisingly they also made a [ wiki ] out of it. my fav character on this tv series is definitely sheldon.if u want to download this tv series for free u can do some google over it.

FreeBSD command line

2008-05-06T20:04:00.001-07:00

this is some of the command i find very useful while operating the FreeBSD operating system# pkg_info | more# cd /usr/ports# make fetchindex# setenv http_proxy 10.14.202.222:6767# make search name=nagios# cd /usr/ports/net-mgmt/nagios# make search name=nagios# make search name=cvsup# cd /usr/ports/net/cvsup-without-gui/# time make install clean

UNIX and Linux

2008-05-06T19:52:00.000-07:00

there are some difference when u do scripting on unix and on linuxthe difference is cause by the software, cause most of software in GNU/Linux is a re-write from unix binariesusually the GNU/Linux binary is more flexible than unixhere are the difference i foundthe red one is on FreeBSD (UNIX) and the blue one is on Linux (GNU/Linux#!/usr/local/bin/bash TODAY=`date "+%d/%m/%Y"` YESTERDAY=`TZ

freebsd vs linux

2008-05-06T19:48:00.000-07:00

aaaaaaaaagh freebsd really anoying isn't itthis is what i do when i get to this shiiiit :pits been a while since i post something here :pjust move out to free bsd to try something called pf and zfs... but.... get pending again :(this is what i do with my new freebsd- replace ee with pico- replace ksh with bash- replace fecth with wget- edit the /etc/make.conf ... so i will finally get the source

squid

2007-12-22T12:03:00.000-08:00

i haven't post about squid did iwell squid is easy to understand actually :pfirst run squid with -k parameter it will tell u the detailread the squid.conf (the commented one) to understand the conf filesquid is about acl use the acl correctlyallow some and in the end of acl block them all (default)or u can allow them all its up to u

svn + apache on centos 5

2007-12-22T06:42:00.001-08:00

quite eazy on this one...- just installed from the Centos DVD everthing u need...- just follow everything on the conf (the commented one)that's it for now if u want to be more advanced with it try to google it

about sources.list.d

2007-08-25T18:50:00.000-07:00

The /etc/apt/sources.list.d directory provides a way to add sources.list entries in separated files that end with sources.list file.--taken from : man sources.list--just want to scream... AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdamn.. where have u been .. :(got another linteresting link todayhttp://ubuntu-tutorials.com/http://wiki.linux.or.id/http://planet.ubuntu-id.org/http://

ubuntu minimalist

2007-08-23T02:25:00.000-07:00

just install the command line stuff on u'r ubuntu...it helps.. i'm using 7.04 installer for thisand after u reboot do thisapt-get install xfce4 xserver-xorg xfonts-base gdm xmms mplayer xchat mousepad openoffice.org gimpi do the swiftfox and w32codecs manuallyi even do the xserver-xorg with xserver-xorg-video-vesaif u got an error do the apt-get with aptitudeif u still got an error do it

kde on openbsd 4.0

2007-06-19T11:48:00.000-07:00

this is how to install kde 3.5.4 on openbsd4.0 boxexport PKG_PATH=http://10.14.3.5/mirror/openbsd/4.0/packages/i386/pkg_add kdebase-3.5.4.tgzedit some few more on/etc/sysctl.conf and changemachdep.allowaperture=1 <-- un comment the line and add 1 as a value...reboot the boxuse startkdeand there u have it .. a nice little sweet openbsd devilI try to install amarok 2 ... to bad i can't test the

firefox hack

2007-06-17T17:54:00.001-07:00

i got this stuff, when u can have gmailtalk on your sidebarbookmark this link on u'r firefoxhttp://talkgadget.google.com/talkgadget/clientright click on in and choose propertiescheck load this bookmark on sidebargo to the sidebar and click the bookmarkand wala... u got sidebar gmail.. :p---PS : i got a terible headache and flu...i miss herand my PA is on deadline..sh*t

mysql error and how-to backup

2007-04-26T13:01:00.001-07:00

- mysql error log -070323 17:27:15 mysqld started070323 17:27:15 InnoDB: Started; log sequence number 0 837727070323 17:27:15 [Warning] mysql.user table is not updated to new password format; Disabling new password usage until mysql_fix_privilege_tables is run070323 17:27:15 [Warning] Can't open and lock time zone table: Table 'mysql.time_zone_leap_second' doesn't exist trying to live without

how-to make htaccess on windows platform

2007-04-24T20:50:00.001-07:00

http://sniptools.com/tutorials/windows-apache-and-htaccess-authentication

wget options

2007-04-21T22:19:00.001-07:00

wget -r -np -nd -l1 http://www.luv.asn.au/overheads/linux_sound/index.html

patch your kernel

2007-04-01T03:55:00.001-07:00

bzip2 -dc /usr/src/patch-2.6.20.4.bz2 | patch -p1 --dry-runbzip2 -dc /usr/src/patch-2.6.20.4.bz2 | patch -p1

install everything on static stuff

2007-03-20T20:47:00.001-07:00

how to do it is to downlod it on "binary"...i do it on AMPinstall the apache : httpd.exe -k installinstall the mysql : mysql-max-nt.exe --installand do the php in the usuall wayand your instalation is complete.. :p

how to install fonts on openoffice

2007-03-20T20:44:00.001-07:00

to installed it its quite simple.. than i thought it is..just copy the *.ttf file to...[openoffice directory]/share/fonts/truetype[on my windows.. :p]C:\Program Files\OpenOffice.org 2.1\share\fonts\truetypeyou can find some in fonts in http://www.myfont.de/en/

awsome links

2007-03-11T16:05:00.001-07:00

http://www.virtualblueness.net/

how to install mplayer on FreeBSD box

2007-03-02T20:00:00.001-08:00

---] lets get startedcd /usr/ports/multimedia/mplayermake WITHOUT_RUNTIME_CPUDETECTION=yes WITH_GUI=yes WITH_FREETYPE=yes WITH_XVID=yes WITH_DVD=yes WITH_SVGALIB=yes WITH_MAD=yes WITH_AALIB=yes WITH_SDL=yes WITH_VORBIS=yes WITH_REALPLAYER=yes WITH_LIVEMEDIA=yes WITH_FAAD=yes WITH_XMMS=yes install cleanthere would be error in "win32 codec..." stuffadd an option "WITHOUT_WIN32=yes" to "make"..

coloring your bash konsole

2007-02-28T19:10:00.000-08:00

i just copy it from gentoo linux and add it on my /etc/profileif it works then good...if it not..then dont ask me why...cause i don't know the meaning of it.. ;p===============cut hereif [ `/usr/bin/whoami` = 'root' ]then # Do not set PS1 for dumb terminals if [ "$TERM" != 'dumb' ] && [ -n "$BASH" ] then export PS1='\[\033[01;31m\]\h \[\033[01;34m\]\W \$ `date` \[\033

how to install oracle XE on DEBIAN box

2007-02-28T19:04:00.000-08:00

first extend your swap : dd if=/dev/zero of=/home/net/tmpswp bs=1k count=500000 chmod 600 tmpswp mkswap tmpswp swapon tmpswpcheck your swap : grep SwapTotal /proc/meminfoAdd this to your sources.list and update: deb http://oss.oracle.com/debian/ unstable main non-free apt-get updateinstall the oracle and the library needed :apt-get install libaioapt-get install oracle-xefinish...

how to install kde on DEBIAN box

2007-02-28T18:59:00.000-08:00

do this with apt-get :- install xorg-server- install xfont / xfs- install kde- install kdm- configure xorg.conf manually- make some customize on your kdedebian is quite different with ubuntu on the installation ...on ubuntu you just have to type : apt-get install kubuntu-desktop or ubuntu-desktop... :p==== happy new kde on DEBIAN box

correct your linux time

2007-02-27T22:07:00.000-08:00

If your timezone is correct but the date and/or time needs updating, the following commands will update the date and time. The second command is needed in order to push the date and time into the PC clock.[root@server /root]# date 022813222007Wed Feb 28 13:22:00 WIT 2007[root@server /root]# hwclock --utc --systohc[root@server /root]#

how-to install apache with ssl on windows platform

2007-01-20T16:08:00.000-08:00

you have 2 way to install apche with mod_ssl on your windows box1. to install it by source download the source mod_ssl for apache first on http://www.modssl.org/contrib/ftp/source/?M=A but the mod_ssl it self is not enough because you also needs----- To use mod_ssl you need at least the following two packages: o Package: Apache Version: 1.3.x Description: Apache

bootsplash

2007-01-13T20:14:00.001-08:00

bootsplash on slackware linux with kernel 2.6.xx.xx by netzerospace (edited from kichung)Preparing your system for bootsplash...- Patch your kernel first to support bootsplash # patch -p1 <>[*] Prompt for development and/or incomplete code/drivers Processor type and features --->[*] MTRR (Memory Type Range Register) support Device Drivers ---> Block

apache-php install [dev]

2007-01-13T20:14:00.000-08:00

tar zxvf gd-2.0.33.tar.gzcd gd-2.0.33./configuremakemake installcd ..tar zxvf zlib-1.2.3.tar.gzcd zlib-1.2.3./configuremakemake installcd ..tar zxvf apache_1.3.37.tar.gztar zxvf modsecurity-apache_1.9.4.tar.gztar zxvf mod_evasive_1.10.1.tar.gztar jxvf php-5.0.4.tar.bz2cp -v modsecurity-apache_1.9.4/apache1/mod_security.c apache_1.3.37/src/modules/extra/mv mod_evasive apache_1.3.37/src/modules/

how to used tcpdump

2007-01-13T19:58:00.000-08:00

#/usr/sbin/tcpdump -pln -i eth1 | grep 192.168.2.12meaning:-n don't resolve the name of the host (ip address only)-l don't do buffer .. print to the screen directly-i card interface which you monitor the traficthis command is to see the trafic on client ip 192.168.2.12, but only tcp packet and dont show time, don't resolve hostname.#/usr/sbin/tcpdump -pltq -i eth1 tcp | grep 192.168.2.12result:

how to install mysql...

2007-01-13T19:33:00.000-08:00

first extract the source of mysql ....second create the mysql user and groups first to execute the mysql server# groupadd mysql# useradd mysql -c "mysql-login" -d /dev/null -s /bin/false -g mysqland then do the "configure" command...this is my configure options ... :# ./configure --prefix=/usr/local/mysql --with-mysqld-user=mysql --with-unix-socket-path=/tmp/mysql.sock --with-mysqld-flags=-

bsd booting with windows boot manager

2007-01-13T07:49:00.001-08:00

get the CD Instalation of FreeBSD...and copythe "/boot/boot1" file to C:\BOOT1.BSDsearch the file "boot.ini" on your windows box and add this lineC:\BOOT1.BSD="FreeBSD 6"when you restart the comp...the option "FreeBSD 6" will appear on first boot...enjoy yhe new windows boot manager...:p

fitur on samba...

2007-01-13T07:37:00.001-08:00

# ./configure --helpKita akan diberi informasi mengenai opsi tersebut, setiap opsi mengatur feature-feature samba.Kita dapat menspesifikasi feature tersebut dengan opsi --with-feature, sebaliknya untuk mendisable feature digunakan opsi --without- featureSetelah samba 2.0.5, opsi berikut ini didisable secara default :--with-smbwrapperMendukung SMB wrapper, yang membuat unix mengakses filesistem

about /etc/passwd

2007-01-13T07:35:00.001-08:00

/etc/passwd file has the following format:username:passwd:UID:GID:full_name:directory:shellnon-shadowedusername:Npje044eh3mx8e:507:200:Full Name:/home/username:/bin/cshshadowed /etc/passwdusername:x:507:100:Full Name:/home/username:/bin/csh

bypass no exec option on mount

2007-01-13T07:16:00.001-08:00

a good admin usualy mount "/tmp" directory or partition on "noexec" optionbut you can bypass it with "ld-linux.so2" stufffor example... you have a "date" script on "/tmp" directory or partition with "noexec" optionaccualy you can still execute the file with command like this/lib/ld-linux.so.2 ./date-- happy hacking --netzerospacesource : google (forgot where i get it :p)

linux booting with windows boot manager

2007-01-13T07:12:00.001-08:00

type this on your linux consoledd if=/dev/hda2 of=/ boot.lnx bs=512 count=1it will make a file named "boot.lnx"you have to copy the file to your windows system...you can copy the file to flashdisk, network (samba) or to the FAT file system...for an example i copy it to my c: partition on windows systemc:\boot.lnxsearch the file "boot.ini" on your windows box and add this line thisc:\boot.lnx="