aa GINK ::: Tukang Ngoprex :::

Forgot root password

2010-05-01T21:38:00.002+07:00

Forgot root password OpenBSD
----------------------------

Dari pada ga pernah update blog mendingan apa aza dimasukin...

Forgot root password
--------------------

1. Boot ke single user more

boot> boot -s

2. Mount partisi / dan /usr

# fsck -p / && mount -uw /
# fsck -p /usr && mount /usr

3. Mainkan passwd untuk memasukkan password root

# passwd

4. Restart router

# reboot

File System Full

2009-11-22T10:26:00.002+07:00

File System Full

Pada suatu pagi di hari minggu, lagi enak-enaknya minum kopi ada telp
disuruh cek partisi pada salah satu router yang menurut informasi
terjadi kejanggalan dikatakan bahwa partisi /var full.

Tanpa basa-basi langsung cek n ricek ke router tujuan

Cek n Ricek

$ sudo tail -f /var/log/messages
Nov 22 08:56:58 GreenRouter-JKT01 /bsd: uid 1000 on /var: file system full
Nov 22 08:57:04 GreenRouter-JKT01 /bsd: uid 0 on /var: file system full
Nov 22 08:57:04 GreenRouter-JKT01 pflogd[11142]: Logging suspended: fwrite: No space left on device
Nov 22 08:58:05 GreenRouter-JKT01 /bsd: uid 0 on /var: file system full
Nov 22 08:58:05 GreenRouter-JKT01 pflogd[11142]: Logging suspended: fwrite: No space left on device
Nov 22 08:59:05 GreenRouter-JKT01 /bsd: uid 0 on /var: file system full
Nov 22 08:59:05 GreenRouter-JKT01 pflogd[11142]: Logging suspended: fwrite: No space left on device

$ df -h
Filesystem Size Used Avail Capacity Mounted on
/dev/wd0a 4.9G 117M 4.6G 2% /
/dev/wd0g 15.3G 74.0M 14.4G 0% /data
/dev/wd0e 9.8G 2.0K 9.4G 0% /tmp
/dev/wd0d 19.7G 2.3G 16.4G 12% /usr
/dev/wd0f 19.7G 19.7G -1007M 105% /var

$ sudo du -h -s /var/
109M /var/

Wah ini aneh hasil yang diberikan df -h dan du -h -s berbeda...

Cek lebih jauh lagi

$ fstat -f /var
USER CMD PID FD MOUNT INUM MODE R/W SZ|DV
root ksh 20619 wd /var 2 drwxr-xr-x r 512
asoel ksh 17578 wd /var 2 drwxr-xr-x r 512
asoel ksh 18941 wd /var 2 drwxr-xr-x r 512
root systat 27253 3 /var 675585 -rw-rw-r-- r 8100
root systat 27253 6 /var 1273220 -rw-r--r-- r 1294336
root sendmail 21369 wd /var 2494471 drwx------ r 512
root sendmail 21369 8 /var 675595 -rw------- w 70
root cron 6171 wd /var 1714944 dr-xr-xr-x r 512
root cron 6171 3 /var 675594 -rw-r--r-- rw 5
_bgpd bgpd 18359 wd /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 18359 root /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 21279 wd /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 21279 root /var 1818880 drwxr-xr-x r 512
_snmpd snmpd 2308 wd /var 1818880 drwxr-xr-x r 512
_snmpd snmpd 2308 root /var 1818880 drwxr-xr-x r 512
_ntp ntpd 24212 wd /var 1818880 drwxr-xr-x r 512
_ntp ntpd 24212 root /var 1818880 drwxr-xr-x r 512
_pflogd pflogd 11142 wd /var 1818880 drwxr-xr-x r 512
_pflogd pflogd 11142 root /var 1818880 drwxr-xr-x r 512
_pflogd pflogd 11142 4 /var 2442524 -rw------- rw 21050293545
_syslogd syslogd 498 wd /var 1818880 drwxr-xr-x r 512
_syslogd syslogd 498 root /var 1818880 drwxr-xr-x r 512
_syslogd syslogd 498 9 /var 2442508 -rw-r----- w 9019
_syslogd syslogd 498 11 /var 2442530 -rw------- w 11154
_syslogd syslogd 498 12 /var 1714950 -rw------- w 5679
_syslogd syslogd 498 14 /var 2442509 -rw-r----- w 0
_syslogd syslogd 498 15 /var 2442503 -rw-r----- w 0
_syslogd syslogd 498 16 /var 2442552 -rw------- w 9518

Ternyata ada sesuatu yang aneh pada pflogd
_pflogd pflogd 11142 4 /var 2442524 -rw------- rw 21050293545

Dilakukan P3K takutnya keburu tewas routernya maklum itu router berada di Jakarta...

$ sudo pkill pflogd && sudo pflogd

Cek n Ricek lagi....

$ fstat -f /var
USER CMD PID FD MOUNT INUM MODE R/W SZ|DV
_pflogd pflogd 6702 wd /var 1818880 drwxr-xr-x r 512
_pflogd pflogd 6702 root /var 1818880 drwxr-xr-x r 512
_pflogd pflogd 6702 4 /var 2442512 -rw------- rw 10274624
asoel ksh 21256 wd /var 2 drwxr-xr-x r 512
asoel ksh 17578 wd /var 2 drwxr-xr-x r 512
asoel ksh 18941 wd /var 2 drwxr-xr-x r 512
root systat 27253 3 /var 675585 -rw-rw-r-- r 8100
root systat 27253 6 /var 1273220 -rw-r--r-- r 1294336
root sendmail 21369 wd /var 2494471 drwx------ r 512
root sendmail 21369 8 /var 675595 -rw------- w 70
root cron 6171 wd /var 1714944 dr-xr-xr-x r 512
root cron 6171 3 /var 675594 -rw-r--r-- rw 5
_bgpd bgpd 18359 wd /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 18359 root /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 21279 wd /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 21279 root /var 1818880 drwxr-xr-x r 512
_snmpd snmpd 2308 wd /var 1818880 drwxr-xr-x r 512
_snmpd snmpd 2308 root /var 1818880 drwxr-xr-x r 512
_ntp ntpd 24212 wd /var 1818880 drwxr-xr-x r 512
_ntp ntpd 24212 root /var 1818880 drwxr-xr-x r 512
_syslogd syslogd 498 wd /var 1818880 drwxr-xr-x r 512
_syslogd syslogd 498 root /var 1818880 drwxr-xr-x r 512
_syslogd syslogd 498 12 /var 1714950 -rw------- w 5970

$ df -h
Filesystem Size Used Avail Capacity Mounted on
/dev/wd0a 4.9G 117M 4.6G 2% /
/dev/wd0g 15.3G 78.1M 14.4G 1% /data
/dev/wd0e 9.8G 2.0K 9.4G 0% /tmp
/dev/wd0d 19.7G 2.3G 16.4G 12% /usr
/dev/wd0f 19.7G 86.8M 18.6G 0% /var

Akhirnya file system /var kembali ke semula....system masih berjalan normal.

Dilanjut lagi ah weekend nya....

Note :
Jika ada waktu luang fsck -f -y /var pada single user mode

Facebook Blank via proxy (Pertolongan pertama)

2009-10-10T12:05:00.003+07:00

Facebook Blank via proxy (Pertolongan pertama)
=============================================
NB : squid 2.7 stable xxx

$sudo vim /etc/squid/squid.conf

http_port 3128 tproxy transparent
http_port act-as-origin http11 # tambahkan ini
server_http11 on # tambahkan ini juga

$sudo squid -k parse
$sudo squid -k reconfigure

Good Luck

Install MRTG Debian

2009-09-27T21:24:00.002+07:00

8 Langkah Install MRTG Pada Debian-Linux

1. Install Paket

# apt-get install apache2 snmp snmpd mrtg

2. Edit /etc/snmp/smpd.conf

# vim /etc/snmp/smpd.conf

sysDescr Proxy Server
sysContact aagink@gmail.com
sysName aagink proxy
sysLocation Rack008

com2sec public default public
group public v1 public
group public v2c public
view all included .1
access public "" any noauth exact all none none

3. Restart service snmp

# /etc/init.d/snmpd restart

4. Buat config mrtg

# cfgmaker public@localhost > /etc/mrtg.cfg

5. Edit /etc/mrtg.cfg

# vim /etc/mrtg.cfg
hilangkan tanda # pada Options[_]: bits,growright

RunAsDaemon: yes
EnableIPv6: no
WorkDir: /var/www/mrtg
Options[_]: bits,growright
WriteExpires: Yes

Title[^]: Traffic Analysis for

6. Buat mrtg index.html

# indexmaker /etc/mrtg.cfg > /var/www/mrtg/index.html

7. Cek MRTG

buka browser http://10.10.10.1/mrtg/

8. Agar graph mrtg update per 5menit

# vim /etc/cron.d/mrtg
0/5 * * * * root if [ -x /usr/bin/mrtg ] && [ -r /etc/mrtg.cfg ]; then env LANG=C /usr/bin/mrtg /etc/mrtg.cfg >> /var/log/mrtg/mrtg.log 2>&1; fi

Memory Test OpenBSD

2009-08-18T17:57:00.001+07:00

Memory Test menggunakan OpenBSD

boot> boot /stand/memtest

Membuat OpenBSD 4.5 Stable

2009-08-14T18:25:00.001+07:00

Membuat OpenBSD 4.5 Stable

Persiapan :
1. Kopi + Cemilan
2. Koneksi internet yang cepat dan stabil
3. cd openbsd 4.5
4. komputer yang mau di install

$ sudo mkdir /usr/local/src
$ sudo mkdir /usr/src
$ cd /usr/local/src
$ export PKG_PATH=http://openbsd.biz.net.id/pub/4.5/packages/i386/
$ sudo wget http://openbsd.biz.net.id/pub/4.5/src.tar.gz
$ sudo tar -zxvf src.tar.gz -C /usr/src/
$ cd /usr/
$ sudo cvs -danoncvs@anoncvs.de.openbsd.org:/cvs checkout -rOPENBSD_4_5 -P src
$ cd /usr/src/
$ sudo cvs -danoncvs@anoncvs1.ca.openbsd.org:/cvs up -rOPENBSD_4_5 -Pd

------------------------------------------
Jika muncul permintaan seperti dibawah ketik "yes"
Are you sure you want to continue connecting (yes/no)? yes
------------------------------------------

$ cd /usr/src/sys/arch/i386/conf/
$ sudo config GENERIC
$ cd ../compile/GENERIC/

------------------------------------------
>>> Jika menggunakan multi processor
$ sudo config GENERIC.MP
$ cd ../compile/GENERIC.MP/
------------------------------------------

$ sudo make clean && sudo make depend && sudo make && sudo make install
$ sudo reboot
$ cd /usr/src
$ sudo rm -rf /usr/obj/*
$ sudo make obj
$ cd /usr/src/etc
$ sudo env DESTDIR=/ make distrib-dirs
$ cd /usr/src
$ sudo make build
$ sudo reboot

Hasilnya :
OpenBSD 4.5-stable (GENERIC) #1: Fri Aug 14 16:40:34 WIT 2009

Basic PF

2009-05-11T10:28:00.003+07:00

Perintah dasar PF

Perintah dasar pf.conf
# pfctl -d >>>> disable pf
# pfctl -e >>>> enable pf
# pfctl -f /etc/pf.conf >>>> Load the pf.conf file
# pfctl -nf /etc/pf.conf >>>> Mengecek parse, ada yang error atau tidaknya
# pfctl -Nf /etc/pf.conf >>>> Hanya meload NAT
# pfctl -Rf /etc/pf.conf >>>> Hanya meload filter

# pfctl -sn >>>> melihat hasil nat
# pfctl -sr >>>> melihat hasil filter
# pfctl -ss >>>> melihat status table
# pfctl -si >>>> melihat staut filter dan counters
# pfctl -sa >>>> melihat semuanya yg dapat di tampilkan
# pfctl -vvsq >>>> monitoring

Install Plugins Monitor Pada CACTI

2009-03-17T10:41:00.005+07:00

Plugins Monitor Pada CACTI

Prasyarat :
- Cacti sudah berjalan (kalo bisa cacti 0.8.7.d)
- Download plugin monitor
http://cactiusers.org/downloads/monitor.tar.gz
- Download Plugin Architecture
http://mirror.cactiusers.org/downloads/plugins/cacti-plugin-0.8.7d-PA-v2.4.zip

Install Plugin Architecture
---------------------------
agink$ sudo mkdir /var/www/cacti/plugins

cara 1:

agink$ cd /tmp/
agink$ wget http://mirror.cactiusers.org/downloads/plugins/cacti-plugin-0.8.7d-PA-v2.4.zip
agink$ sudo unzip cacti-plugin-0.8.7d-PA-v2.4.zip
agink$ cd cacti-plugin-0.8.7d-PA-v2.4
agink$ sudo cp cacti-plugin-0.8.7d-PA-v2.4.diff /var/www/cacti/
agink$ cd /var/www/cacti/
agink$ sudo patch -p1 -N < cacti-plugin-0.8.7d-PA-v2.4.diff

Cara 2:

agink$ cd /tmp/
agink$ wget http://mirror.cactiusers.org/downloads/plugins/cacti-plugin-0.8.7d-PA-v2.4.zip
agink$ sudo unzip cacti-plugin-0.8.7d-PA-v2.4.zip
agink$ cd cacti-plugin-0.8.7d-PA-v2.4
agink$ cd files-0.8.7d
agink$ sudo cp -R include/ /var/www/cacti/include
agink$ sudo cp -R lib/ /var/www/cacti/lib
agink$ sudo cp -R plugins/ /var/www/cacti/plugins
agink$ sudo cp *.php /var/www/cacti/

Install Plugin Monitor
----------------------

agink$ cd /tmp/
agink$ wget http://cactiusers.org/downloads/monitor.tar.gz
agink$ sudo tar -zvxf monitor.tar.gz
agink$ sudo mkdir /var/www/cacti/plugins
agink$ sudo mv monitor /var/www/cacti/plugins/
agink$ sudo vim /var/www/cacti/include/global.php

edit+tambahkan seperti dibawah, sesuaikan dengan cacti anda :

/* Default database settings*/
$database_type = "mysql";
$database_default = "cacti";
$database_hostname = "localhost";
$database_username = "cactiuser";
$database_password = "cactipassword";
$database_port = "3306";

$plugins = array();
$plugins[] = 'monitor';

$config['url_path'] = 'http://cacti.domain.com/';

Import database plugin monitor

agink$ mysql cacti -u cactiuser -p < /var/www/cacti/plugins/monitor/monitor.sql

Selesai deh...sekarang buka browser cacti anda...

Installasi Nagios Pada Debian

2009-02-04T16:08:00.001+07:00

Installasi Nagios Pada Debian

--------------------
aagink@gmail.com
--------------------

Install Paket
-------------
nagios:/# aptitude install gcc make apache2 php5 php5-gd php5-cgi
nagios:/usr/src# wget http://transact.dl.sourceforge.net/sourceforge/nagios/nagios-3.0.6.tar.gz
nagios:/usr/src# wget http://transact.dl.sourceforge.net/sourceforge/nagiosplug/nagios-plugins-1.4.13.tar.gz

Buat user & groups nagios
-------------------------

nagios:/# useradd nagios

nagios:/# groupadd nagcmd

nagios:/# usermod -G nagcmd nagios

nagios:/# usermod -G nagcmd www-data

nagios:/# mkdir /usr/local/nagios

nagios:/# chown nagios:nagios /usr/local/nagios

Install Nagios & Nagios-Plugin
-------------------------------

nagios:/usr/src# tar -xzvf nagios-3.0.6.tar.gz

nagios:/usr/src# cd nagios-3.0.6

nagios:/usr/src/nagios-3.0.6# ./configure -with-nagios-user=nagios -with-nagios-group=nagios -with-command-group=nagcmd

nagios:/usr/src/nagios-3.0.6# ./configure -prefix=/usr/local/nagios -with-cgiurl=/nagios/cgi-bin -with-htmurl=/nagios/ -with-nagios-user=nagios -with-nagios-group=nagios -with-command-group=nagios

nagios:/usr/src/nagios-3.0.6# make all

nagios:/usr/src/nagios-3.0.6# make install

nagios:/usr/src/nagios-3.0.6# make install-init

nagios:/usr/src/nagios-3.0.6# make install-commandmode

nagios:/usr/src/nagios-3.0.6# make install-config

nagios:/usr/src# tar -zxvf nagios-plugins-1.4.13.tar.gz

nagios:/usr/src# cd nagios-plugins-1.4.13

nagios:/usr/src/nagios-plugins-1.4.13# ./configure

nagios:/usr/src/nagios-plugins-1.4.13# make && make install

Configure nagios web
---------------------

nagios:/usr/src/nagios-plugins-1.4.13# touch /etc/apache2/sites-available/nagios

ScriptAlias /nagios/cgi-bin /usr/local/nagios/sbin
< Directory "/usr/local/nagios/sbin" >
Options ExecCGI
AllowOverride None
Order allow,deny
Allow from all
AuthName "Nagios Access"
AuthType Basic
AuthUserFile /usr/local/nagios/etc/htpasswd.users
Require valid-user
< / Directory >

Alias /nagios /usr/local/nagios/share
< Directory "/usr/local/nagios/share" >
Options None
AllowOverride None
Order allow,deny
Allow from all
AuthName "Nagios Access"
AuthType Basic
AuthUserFile /usr/local/nagios/etc/htpasswd.users
Require valid-user
< / Directory >

nagios:/usr/src/nagios-plugins-1.4.13# cd /etc/apache2/sites-available/

nagios:/etc/apache2/sites-available# a2ensite nagios

nagios:/etc/apache2/sites-available# /etc/init.d/apache2 reload

Setting Proteksi web nagios
---------------------------

nagios:/etc/apache2/sites-available# htpasswd -c /usr/local/nagios/etc/htpasswd.users nagiosadmin

nagios:/etc/apache2/sites-available# htpasswd /usr/local/nagios/etc/htpasswd.users nagios

nagios:/etc/apache2/sites-available# vim /usr/local/nagios/etc/cgi.cfg

use_authentication=1

------------------------------------------------------------------------------
Test Nagios

buka browser anda ketik http://ipaddressanda/nagios

Generic Host Process for Win32 Services

2009-01-26T04:32:00.001+07:00

Generic Host Process for Win32 Services

Sungguh meropotkan dan menjengkelkan jika masalah seperti gambar di bawah muncul...

Masalah ini ditimbul karena adanya bugs security pada Windows SP2 bahkan SP3 pun tidak luput dari penyakit ini....
Sungguh aneh Service Pack yang seharusnya membereskan masalah malah memberikan masalah...

Efek dari penyakit ini koneksi internet akan terputus bilapun jalan koneksinya kecepatannya kalah dari jalannya seekor keong.

P3K untuk penyakit ini...

1. download patch di http://gnupg.cdpa.nsysu.edu.tw/Patch/WinXP/en/WindowsXP-KB894391-x86-ENU.exe

2. Blok Port 135 dan 445 (Mainkan registernya)

a.Blok Port 445
- Buka Registry Editor. Lalu ke posisi
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\NetBT\Parameters
cari TransportBindName , semula berisi \Device\ . lalu edit dan kosongkan saja.

b. Blok Port 135
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE

cari EnableDCOM edit value "Y" menjadi "N"

3. Reboot PC anda....

Good luck....kalo ngga berhasil marahin aza Bill Gate

jebol password bios

2009-01-18T21:46:00.001+07:00

Biar tidak lupa...

C:\>debug

-A

0B05:0100 MOV CX,0

0B05:0103 MOV AX,CX

0B05:0105 OUT 70,AL

0B05:0107 MOV AX,0

0B05:010A OUT 71,AL

0B05:010C INC CX

0B05:010D CMP CX,256

0B05:0111 JB 103

0B05:0113

-G

Simple Bridge (Latihan RSTP)

2009-01-07T12:52:00.002+07:00

Suatu ketika ada panggilan test disuatu ISP di bandung salah satunya test adalah membuat simple bridge seperti gambar di bawah.

Waktu test aku menggunakan linux dan terus terang ada sedikit kendala karena yang dinilai kecepatan dan ketepatan saat mensetting router2.

di linux kendalanya harus install paket seperti ebstables, bridge-utils, vlan, dll walaupun tinggal
apt-get install lom lagi konfigurasinya yang rada panjang dan modul yang harus diload.

untuk itu aku disuruh nyoba sama sys admin ISP untuk mencoba OpenBSD dan ternyata hasilnya keren banget cepat dan mudah g perlu install apapun karena semua paket telah include ke dalam kernel.

jika ada yang mau nambahin pake linux boleh2 aza di tunggu yaa...

========================== KONFIGURASI =========================

==============================
CORE
==============================

# touch /root/core
# chmod 755 /root/core
# vi /root/core

isikan :

#==========================
# CORE
# aagink@gmail.com
#==========================

echo 'Aktifkan Simple Bridge CORE...'

sysctl net.inet.ip.forwarding=1

lan_if="em0"
vlan_if="vlan10"
vlan_id="10"

vlan_ip="10.10.10.254/24"

ifconfig $lan_if up

ifconfig $vlan_if create vlan $vlan_id vlandev $lan_if
ifconfig $vlan_if up
ifconfig $vlan_if $vlan_ip

# vi /etc/rc.local

tambahkan :

# Add your local startup actions here.

/root/core

echo '.'

# reboot

==============================
CISCO SWITCH
==============================
!
hostname Switch
!
!
!
interface FastEthernet0/1
switchport trunk allowed vlan 10-30
switchport mode trunk
!
interface FastEthernet0/2
switchport access vlan 10
!
interface FastEthernet0/3
switchport access vlan 20
!
interface FastEthernet0/4
switchport access vlan 30
!

==============================
PC-BRIDGE
==============================

# touch /root/pc-bridge
# chmod 755 /root/pc-bridge
# vi /root/pc-bridge

isikan :

#==========================
# PC-BRIDGE
# aagink@gmail.com
#==========================

echo 'Aktifkan Simple Bridge PC-BRIDGE...'

sysctl net.inet.ip.forwarding=1

if_2_core="em0"
if_2_A="em1"
if_2_B="em2"

if_bridge_2_core="bridge0"
if_bridge_2_router="bridge1"

if_vlan_2_CORE="vlan110"
if_vlan_2_A="vlan210"
if_vlan_2_B="vlan310"

vlan_id="10"

ip_bridge="1.1.1.1/24"

ifconfig $if_2_core up
ifconfig $if_2_A up
ifconfig $if_2_B up

ifconfig $if_bridge_2_core create
ifconfig $if_bridge_2_core up
ifconfig $if_vlan_2_CORE create vlan $vlan_id vlandev $if_2_core
ifconfig $if_vlan_2_A create vlan $vlan_id vlandev $if_2_A
ifconfig $if_vlan_2_B create vlan $vlan_id vlandev $if_2_B
ifconfig $if_vlan_2_CORE up
ifconfig $if_vlan_2_A up
ifconfig $if_vlan_2_B up
brconfig $if_bridge_2_core add $if_vlan_2_CORE
brconfig $if_bridge_2_core add $if_vlan_2_A
brconfig $if_bridge_2_core add $if_vlan_2_B

ifconfig $if_bridge_2_router create
ifconfig $if_bridge_2_router up
brconfig $if_bridge_2_router add $if_2_A add $if_2_B up
ifconfig $if_2_A $ip_bridge

# vi /etc/rc.local

tambahkan :

# Add your local startup actions here.

/root/pc-bridge

echo '.'

# reboot

==============================
ROUTER-A
==============================

# touch /root/router-a
# chmod 755 /root/router-a
# vi /root/router-a

isikan :

#==========================
# ROUTER-A
# aagink@gmail.com
#==========================

echo 'Aktifkan Simple Bridge ROUTER-A...'

sysctl net.inet.ip.forwarding=1

wan_if="em0"
lan_if="em1"

vlan_if="vlan210"
vlan_id="10"

vlan_ip="10.10.10.1/24"
bridge_ip="1.1.1.2/24"
lan_ip="192.168.0.254/24"

ifconfig $wan_if up
ifconfig $lan_if up
ifconfig $wan_if $bridge_ip
ifconfig $lan_if $lan_ip
ifconfig $vlan_if create vlan $vlan_id vlandev $wan_if
ifconfig $vlan_if up
ifconfig $vlan_if $vlan_ip

echo 'Aktifkan PACKET FILLTERING'
pfctl -e
echo
echo 'Aktifkan NAT'
pfctl -Nf /etc/pf.conf

# vi /etc/rc.local

tambahkan :

# Add your local startup actions here.

/root/router-a

echo '.'

membuat NAT

# vi /etc/pf.conf

isikan :

wan_if="vlan210"
lan_if="em1"

nat on $wan_if from $lan_if:network to any -> $wan_if

# reboot

==============================
ROUTER-B
==============================

# touch /root/router-b
# chmod 755 /root/router-b
# vi /root/router-b

isikan :

#==========================
# ROUTER-B
# aagink@gmail.com
#==========================

echo 'Aktifkan Simple Bridge ROUTER-B...'

sysctl net.inet.ip.forwarding=1

wan_if="em0"
lan_if="em1"

vlan_if="vlan310"
vlan_id="10"

vlan_ip="10.10.10.2/24"
bridge_ip="1.1.1.3/24"
lan_ip="192.168.1.254/24"

ifconfig $wan_if up
ifconfig $lan_if up
ifconfig $wan_if $bridge_ip
ifconfig $lan_if $lan_ip
ifconfig $vlan_if create vlan $vlan_id vlandev $wan_if
ifconfig $vlan_if up
ifconfig $vlan_if $vlan_ip

echo 'Aktifkan PACKET FILLTERING'
pfctl -e
echo
echo 'Aktifkan NAT'
pfctl -Nf /etc/pf.conf

# vi /etc/rc.local

tambahkan :

# Add your local startup actions here.

/root/router-b

echo '.'

membuat NAT

# vi /etc/pf.conf

isikan :

wan_if="vlan310"
lan_if="em1"

nat on $wan_if from $lan_if:network to any -> $wan_if

# reboot

Install HTB-Tools

2009-01-05T10:02:00.001+07:00

Install HTB-Tools
=================

bwm:/# aptitude install shaper
bwm:/tmp# tar zxvf HTB-tools-0.3.0a-i486-1.tgz
bwm:/# mv /tmp/etc/* /etc/
bwm:/# mv /tmp/sbin/* /sbin/
bwm:/# mv /tmp/usr/* /usr/
bwm:/# cp /etc/rc.d/rc.htb.new /etc/init.d/rc.htb
bwm:/# chmod 755 /etc/init.d/rc.htb

Konfigurasi HTB-Tools
=====================

Asumsi :
Bandwidth Total = 2048 kbps
Jumlah Klient = 4 klient
eth0 = upstream
eth1 = downstream

bwm:/# cp /etc/htb/eth0-qos.cfg.new /etc/htb/eth0-qos.cfg
bwm:/# cp /etc/htb/eth1-qos.cfg.new /etc/htb/eth1-qos.cfg

bwm:/# vim /etc/htb/eth0-qos.cfg

isikan dari eth0-qos.cfg

#####################
# eth0-qos.cfg #
#-------------------#
# aagink@gmail.com #
#####################

class class_1 {
bandwidth 2048;
limit 2048;
burst 2;
priority 1;

client PC_1 {
bandwidth 512;
limit 512;
burst 2;
priority 1;
src {
192.168.0.10/32;
};
};

client PC_2 {
bandwidth 512;
limit 512;
burst 2;
priority 1;
src {
192.168.0.20/32;
};
};

client PC_3 {
bandwidth 512;
limit 512;
burst 2;
priority 1;
src {
192.168.0.30/32;
};
};

client PC_4 {
bandwidth 512;
limit 512;
burst 2;
priority 1;
src {
192.168.0.40/32;
};
};
};

class default { bandwidth 8; };

bwm:/# vim /etc/htb/eth1-qos.cfg

isikan dari eth1-qos.cfg

#######################
# eth1-qos.cfg #
#---------------------#
# aagink@gmail.com #
#######################

class class_1 {
bandwidth 2048;
limit 2048;
burst 2;
priority 1;

client PC_1 {
bandwidth 512;
limit 512;
burst 2;
priority 1;
dst {
192.168.0.10/32;
};
};

client PC_2 {
bandwidth 512;
limit 512;
burst 2;
priority 1;
dst {
192.168.0.20/32;
};
};

client PC_3 {
bandwidth 512;
limit 512;
burst 2;
priority 1;
dst {
192.168.0.30/32;
};
};

client PC_4 {
bandwidth 512;
limit 512;
burst 2;
priority 1;
dst {
192.168.0.40/32;
};
};
};

class default { bandwidth 8; };

Cek Konfigurasi
===============

bwm:/# q_checkcfg /etc/htb/eth0-qos.cfg
Default bandwidth: 8

Class class_1, CIR: 2048, MIR: 2048
** 4 clients, CIR2: 2048, MIR2: 2048

1 classes; CIR / MIR = 2048 / 2048; CIR2 / MIR2 = 2048 / 2048

bwm:/# q_checkcfg /etc/htb/eth1-qos.cfg
Default bandwidth: 8

Class class_1, CIR: 2048, MIR: 2048
** 4 clients, CIR2: 2048, MIR2: 2048

1 classes; CIR / MIR = 2048 / 2048; CIR2 / MIR2 = 2048 / 2048

Aktifkan Shaper
===============

bwm:/# /etc/init.d/rc.htb start

Starting HTB-tools on eth0 ...
Checking the config file ...OK
Checking kernel support for HTB: present.
HTB-tools was successfuly started on eth0.

Starting HTB-tools on eth1 ...
Checking the config file ...OK
Checking kernel support for HTB: present.
HTB-tools was successfuly started on eth1.

Liat Trafik
===========

bwm:/# /etc/init.d/rc.htb show_eth0
bwm:/# /etc/init.d/rc.htb show_eth1

Singkronisasi Waktu

2009-01-05T10:00:00.001+07:00

Untuk mencocokan jam sistem dengan jam hardware
===============================================

Cara 1
------

Jam sistem sebelum di rubah
vpn:/# date
Sat Jan 3 03:54:26 WIT 2009

untuk mencocokan jam sistem dengan jam hardware
vpn:/# hwclock --hctosys --localtime

Jam sistem setelah di rubah
vpn:/# date
Fri Jan 2 20:57:59 WIT 2009

untuk membuat permanen silahkan masukin ke dalam scripts command "hwclock --hctosys --localtime"

Cara 2
------

vpn:/# vim /etc/default/rcS

Isinya harus seperti dibawah ini :

TMPTIME=0
SULOGIN=no
DELAYLOGIN=no
UTC=no
VERBOSE=no
FSCKFIX=no
RAMRUN=no
RAMLOCK=no

vpn:/# reboot

Silahkan cek jam di bios komputer dan di sistem hasilnya pasti sama...

Lumayan menghemat BW karena tidak membutuhkan koneksi ke NTP Server

Recovery Password root

2008-12-22T13:56:00.001+07:00

Jika lupa password root pada linux server jangan panik.

Ikuti tahapan untuk membuat password root yang baru.

1. reboot linux server anda, lalu akan muncul menu GRUB

2. tekan pada keyboard huruf "e" untuk masuk ke mode edit

3. pada mode edit pilih "kernel /boot/vmlinuz-bla-bla-bla root=/dev/hda1 ro" lalu tekan "e"
pada keyboard

4. akan muncul prompt
grub edit> kernel /boot/vmlinuz-bla-bla-bla root=/dev/hda1 ro

lalu ketik "init=/bin/sh" (tanpa tanda kutip) setelah root=/dev/hda1 ro

setelah itu tekan ENTER pada keyboard

kemudian tekan pada keyboard "b" untuk booting

5. setelah muncul prompt "#" ketikkan "mount -o remount rw /"

6. ketikkan "passwd" lalu masukkan password root anda yang baru,
setelah itu tekan Ctrl+Alt+Del untuk reboot linux server anda

7. Login secara normal dan anda bisa login sebagai root dengan memasukkan password
root yang baru dibuat tadi.

Install DHCP Server pada Debian

2008-12-22T13:54:00.000+07:00

Install DHCP Server pada Debian

Install paket dhcp server
dhcp:/# aptitude install dhcp3-server

konfigurasi dhcp server
dhcp:/# vim /etc/dhcp3/dhcpd.conf

isi dari dhcpd.conf

# Jadikan komentar
# option domain-name "example.org";
# option domain-name-servers ns1.example.org, ns2.example.org;

# default-lease-time 600;
# max-lease-time 7200;

# buat ip dhcp-client
subnet 10.10.10.0 netmask 255.255.255.0 {
range 10.10.10.10 10.10.10.20;
option domain-name "biner.net";
option domain-name-servers 10.10.10.254;
option routers 10.10.10.254;
option broadcast-address 10.10.10.255;
default-lease-time 3600;
max-lease-time 7200;
}

konfigurasi interface yang mengarah ke dhcp-client
dhcp:/# vim /etc/default/dhcp3-server

isikan
# Interface yang mengarah ke dhcp-client
INTERFACES="eth1"

Restart service dhcp-server
dhcp:/# /etc/init.d/dhcp3-server restart

Sekarang tinggal test aza di klient...Insya Allah berhasil

Ringtone Mikrotik

2008-12-20T14:25:00.000+07:00

:beep length=400ms frequency=1046.5022612024
:delay 400ms
:beep length=200ms frequency=880
:delay 200ms
:beep length=200ms frequency=783.9908719635
:delay 200ms
:beep length=200ms frequency=659.2551138257
:delay 200ms
:beep length=200ms frequency=783.9908719635
:delay 200ms
:beep length=200ms frequency=880
:delay 200ms
:beep length=600ms frequency=1046.5022612024
:delay 600ms
:beep length=200ms frequency=880
:delay 200ms
:beep length=200ms frequency=783.9908719635
:delay 200ms
:beep length=200ms frequency=659.2551138257
:delay 200ms
:beep length=200ms frequency=783.9908719635
:delay 200ms
:beep length=400ms frequency=880
:delay 400ms
:beep length=400ms frequency=1046.5022612024
:delay 400ms
:beep length=200ms frequency=880
:delay 200ms
:beep length=200ms frequency=783.9908719635
:delay 200ms
:beep length=200ms frequency=659.2551138257
:delay 200ms
:beep length=200ms frequency=783.9908719635
:delay 200ms
:beep length=200ms frequency=880
:delay 200ms
:beep length=600ms frequency=1046.5022612024
:delay 600ms
:beep length=200ms frequency=880
:delay 200ms
:beep length=200ms frequency=783.9908719635
:delay 200ms
:beep length=200ms frequency=659.2551138257
:delay 200ms
:beep length=200ms frequency=246.9416506281
:delay 400ms
:beep length=200ms frequency=261.6255653006
:delay 400ms

=============== Jablay ==============

:beep length=300ms frequency=1046.5022612024
:delay 350ms
:beep length=300ms frequency=1318.5102276515
:delay 350ms
:beep length=300ms frequency=1318.5102276515
:delay 350ms
:beep length=300ms frequency=1174.6590716696
:delay 350ms
:beep length=300ms frequency=1046.5022612024
:delay 350ms
:beep length=650ms frequency=987.7666025122
:delay 700ms
:beep length=300ms frequency=987.7666025122
:delay 350ms
:beep length=300ms frequency=1046.5022612024
:delay 350ms
:beep length=300ms frequency=1174.6590716696
:delay 350ms
:beep length=300ms frequency=1318.5102276515
:delay 350ms
:beep length=175ms frequency=1046.5022612024
:delay 175ms
:beep length=175ms frequency=1174.6590716696
:delay 175ms
:beep length=175ms frequency=987.7666025122
:delay 175ms
:beep length=175ms frequency=1046.5022612024
:delay 175ms
:beep length=650ms frequency=880
:delay 1050ms
:beep length=300ms frequency=1046.5022612024
:delay 350ms
:beep length=300ms frequency=1318.5102276515
:delay 350ms
:beep length=300ms frequency=1318.5102276515
:delay 350ms
:beep length=300ms frequency=1174.6590716696
:delay 350ms
:beep length=300ms frequency=1046.5022612024
:delay 350ms
:beep length=650ms frequency=987.7666025122
:delay 700ms
:beep length=300ms frequency=987.7666025122
:delay 350ms
:beep length=300ms frequency=1046.5022612024
:delay 350ms
:beep length=300ms frequency=1174.6590716696
:delay 350ms
:beep length=300ms frequency=1318.5102276515
:delay 350ms
:beep length=175ms frequency=1046.5022612024
:delay 175ms
:beep length=175ms frequency=1174.6590716696
:delay 175ms
:beep length=175ms frequency=987.7666025122
:delay 175ms
:beep length=175ms frequency=1046.5022612024
:delay 175ms
:beep length=650ms frequency=880
=============== sirene ==============

:for t from=1000 to=2000 step=20 do={:beep frequency=$t length=10ms; :delay 10ms}
:for t from=2000 to=1000 step=-20 do={:beep frequency=$t length=10ms; :delay 10ms}
:for t from=1000 to=2000 step=20 do={:beep frequency=$t length=10ms; :delay 10ms}
:for t from=2000 to=1000 step=-20 do={:beep frequency=$t length=10ms; :delay 10ms}
:for t from=1000 to=2000 step=20 do={:beep frequency=$t length=10ms; :delay 10ms}
:for t from=2000 to=1000 step=-20 do={:beep frequency=$t length=10ms; :delay 10ms}

============ balonku ada lima =================

:beep length=200ms frequency=1318.5102276515
:delay 200ms
:beep length=200ms frequency=1396.9129257320
:delay 200ms
:beep length=400ms frequency=1567.9817439270
:delay 400ms
:beep length=400ms frequency=2093.0045224048
:delay 400ms
:beep length=400ms frequency=1567.9817439270
:delay 400ms
:beep length=400ms frequency=1318.5102276515
:delay 400ms
:beep length=800ms frequency=1567.9817439270
:delay 1200ms
:beep length=200ms frequency=1174.6590716696
:delay 200ms
:beep length=200ms frequency=1318.5102276515
:delay 200ms
:beep length=400ms frequency=1396.9129257320
:delay 400ms
:beep length=400ms frequency=1174.6590716696
:delay 400ms
:beep length=400ms frequency=1567.9817439270
:delay 400ms
:beep length=400ms frequency=1396.9129257320
:delay 400ms
:beep length=800ms frequency=1318.5102276515
:delay 1200ms
:beep length=190ms frequency=1046.5022612024
:delay 200ms
:beep length=200ms frequency=1046.5022612024
:delay 200ms
:beep length=390ms frequency=1760
:delay 400ms
:beep length=400ms frequency=1760
:delay 400ms
:beep length=400ms frequency=1975.5332050245
:delay 400ms
:beep length=400ms frequency=2093.0045224048
:delay 400ms
:beep length=800ms frequency=1567.9817439270
:delay 1200ms
:beep length=200ms frequency=1318.5102276515
:delay 200ms
:beep length=200ms frequency=1396.9129257320
:delay 200ms
:beep length=400ms frequency=1567.9817439270
:delay 400ms
:beep length=400ms frequency=1396.9129257320
:delay 400ms
:beep length=400ms frequency=1318.5102276515
:delay 400ms
:beep length=400ms frequency=1174.6590716696
:delay 400ms
:beep length=800ms frequency=1046.5022612024

============ satu-satu aku sayang ibu====================

:local T 784,200ms,1047,400ms,1319,400ms,1568,600ms,\
1319,200ms,1760,200ms,1568,200ms,1397,200ms,\
1319,200ms,1175,600ms,784,200ms,988,400ms,\
1175,400ms,1397,600ms,1760,200ms,1568,200ms,\
1760,200ms,1568,200ms,1397,200ms,1319,600ms,\
784,200ms,1047,400ms,1319,400ms,1568,600ms,\
1319,200ms,1397,200ms,1319,200ms,1397,200ms,\
1568,200ms,1760,600ms,1760,600ms,1976,200ms,\
2093,200ms,1568,400ms,1318,400ms,1568,200ms,\
1397,200ms,1319,200ms,1175,200ms,1046,600ms
:for C from=0 to=(([:len $T]/2)-1) \
do={:beep frequency=[:pick $T ($C*2)] \
length=[:pick $T (($C*2)+1)]; :delay [:pick $T (($C*2)+1)]}

============= naik naik ke puncak gunung ==================

:local T 784,350ms,1047,700ms,1047,350ms,1047,700ms,\
1175,350ms,1319,350ms,1319,350ms,1319,350ms,1047,700ms,\
1397,350ms,1319,700ms,1175,350ms,988,350ms,1047,350ms,\
1175,350ms,1047,1050ms,20000,700ms,\
784,350ms,1047,700ms,1047,350ms,1047,700ms,\
1175,350ms,1319,350ms,1319,350ms,1319,350ms,1047,700ms,\
1397,350ms,1319,700ms,1175,350ms,988,350ms,1047,350ms,\
1175,350ms,1047,1050ms
:for C from=0 to=(([:len $T]/2)-1) \
do={:beep frequency=[:pick $T ($C*2)] \
length=[:pick $T (($C*2)+1)]; :delay [:pick $T (($C*2)+1)]}

mirror Repository Debian

2008-12-20T13:00:00.000+07:00

>>> INTERNASIONAL <<<
Repository Sumber Debian
------------------------
deb http://ftp.us.debian.org/debian/ etch main
deb-src http://ftp.us.debian.org/debian/ etch main

deb http://security.debian.org/ etch/updates main contrib
deb-src http://security.debian.org/ etch/updates main contrib

>>> LOKAL <<<
Repository Kambing.ui.edu
-------------------------
deb http://kambing.ui.edu/debian etch main contrib non-free
deb http://kambing.ui.edu/debian etch/volatile main contrib non-free
deb http://kambing.ui.edu/debian-security etch/updates main contrib non-free

deb http://kambing.ui.edu/debian/ stable main non-free contrib
deb-src http://kambing.ui.edu/debian/ stable main non-free contrib
deb http://kambing.ui.edu/debian-security/ stable/updates main contrib non-free
deb-src http://kambing.ui.edu/debian-security/ stable/updates main contrib non-free

Repository Repo.ugm.ac.id
-------------------------
deb http://repo.ugm.ac.id/debian/ stable main contrib non-free

Repository mirror.its.ac.id
---------------------------
deb http://mirror.its.ac.id/debian etch main non-free contrib
deb http://mirror.its.ac.id/debian stable-proposed-updates main non-free contrib
deb http://mirror.its.ac.id/debian-security etch/updates main non-free contrib

Repository komo.vlsm.org
------------------------
deb http://komo.vlsm.org/debian etch main non-free contrib
deb http://komo.vlsm.org/debian etch-proposed-updates main non-free contrib

Repository debian.indika.net.id
-------------------------------
deb http://debian.indika.net.id/debian etch main non-free contrib
deb http://debian.indika.net.id/debian etch-proposed-updates main non-free contrib

Repository ftp://ftp.itb.ac.id
------------------------------
deb ftp://ftp.itb.ac.id/pub/debian etch main non-free contrib
deb ftp://ftp.itb.ac.id/pub/debian etch-proposed-updates main non-free contrib

Internet Sharing

2008-12-20T12:55:00.000+07:00

#!/bin/bash

#============================================================================================
# Internet Sharing
# Name : Aditya Maulana
# e-mail : aagink@gmail.com
# Contoh : ./internetsharing (start|stop|restart|status)
#============================================================================================

NIC_Publik=eth0
NIC_Lokal=eth1
Lokal_IP=192.168.0.0/24
PROXY_PORT=8080
IP_Lokal=`ifconfig $NIC_Lokal | grep inet | cut -d : -f 2 | cut -d \ -f 1`
IP_Publik=`ifconfig $NIC_Publik | grep inet | cut -d : -f 2 | cut -d \ -f 1`

case "$1" in
start)
iptables -F
echo "Internet Sharing Aktif...!!!"
echo 1 > /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/tcp_syncookies
echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
echo 2 > /proc/sys/net/ipv4/conf/all/rp_filter
echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route
echo 0 > /proc/sys/net/ipv4/tcp_timestamps
# echo 0 > /proc/sys/net/ipv4/conf/all/accept_redirects
echo 1 > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses
echo 1 > /proc/sys/net/ipv4/conf/all/log_martians
echo "32768 61000" > /proc/sys/net/ipv4/ip_local_port_range
# echo 30 > /proc/sys/net/ipv4/tcp_fin_timeouts
echo 2400 > /proc/sys/net/ipv4/tcp_keepalive_time
# echo 0 > /proc/sys/net/ipv4/tcp_window/scaling
echo 0 > /proc/sys/net/ipv4/tcp_sack

# NAT
iptables -t nat -A POSTROUTING -s $Lokal_IP -d 0/0 -j SNAT --to $IP_Publik

# Transparan Proxy
iptables -t nat -I PREROUTING -s $Lokal_IP -d 0/0 -p tcp --dport 80 -j DNAT --to $IP_Lokal:$PROXY_PORT

# Transparan TProxy
# iptables -t tproxy -A PREROUTING -i $NIC_Lokal -p tcp --dport 80 -j TPROXY --on-port $PROXY_PORT

# Drop NetBIOS
# Tujuan Port
iptables -A FORWARD -p tcp --dport 135:139 -j DROP
iptables -A FORWARD -p tcp --dport 445 -j DROP
iptables -A FORWARD -p udp --dport 135:139 -j DROP
iptables -A FORWARD -p udp --dport 445 -j DROP
# Sumber Port
iptables -A FORWARD -p tcp --sport 135:139 -j DROP
iptables -A FORWARD -p tcp --sport 445 -j DROP
iptables -A FORWARD -p udp --sport 135:139 -j DROP
iptables -A FORWARD -p udp --sport 445 -j DROP

stop)
echo "Internet Sharing Non Aktif...!!!"
echo 0 > /proc/sys/net/ipv4/ip_forward

# Hapus Semua Aturan Yang Ada Pada IPTABLES
iptables -F
iptables -F -t nat
iptables -X
iptables -X -t nat

echo
;;
restart)

echo "Internet Sharing Restart...!!!"
$0 stop
$0 start

echo
;;
status)
iptables -L -n | more
iptables -L -n -t nat | more
;;

esac

Installasi webmail menggunakan TELAEN

2008-12-15T12:06:00.000+07:00

Installasi webmail menggunakan TELAEN

Sebelumnya edit dulu :

mail:/# vim /etc/php5/apache2/php.ini

Rubah :
memory_limit = 16M

menjadi :
memory_limit = 64M

edit script seperti dibawah /etc/apache2/sites-available/default :

Options Indexes FollowSymLinks MultiViews

AllowOverride None

Order allow,deny

allow from all

RedirectMatch ^/$ /wmail/

mail:/# /etc/init.d/apache2 restart

mail:/# mkdir DataMail
mail:/# chown www-data:www-data /DataMail/
mail:/# chown -R www-data:www-data /DataMail/
mail:/# chmod 777 /DataMail/

sedot dulu telaen-1.1.3-rc2.tar.gz tanya sama mbah google

mail:/downloads# tar zxvf telaen-1.1.3-rc2.tar.gz
mail:/downloads# mv telaen-1.1.3-rc2/telaen/ /telaen
mail:/downloads# mv telaen-1.1.3-rc2/smarty_move_me/ /smarty
mail:/downloads# rm -r telaen-1.1.3-rc2
mail:/# ln -s /telaen/ /var/www/wmail
mail:/# cd /telaen/inc/
mail:/telaen/inc# cp config.php.default config.php
mail:/telaen/inc# cp config.security.php.default config.security.php
mail:/telaen/inc# cp config.languages.php.default config.languages.php
mail:/telaen/inc# vim config.php

edit seperti dibawah :

define("SMARTY_DIR","/some/place/safe/smarty/");

menjadi

define("SMARTY_DIR","/smarty/");

$temporary_directory = "./database/";

menjadi

$temporary_directory = "/DataMail/";

$mail_server_type = "ONE-FOR-ALL";

menjadi

$mail_server_type = "ONE-FOR-EACH";

$mail_servers[] = Array(

"domain" => "domain.com",

"server" => "pop3.domain.com",

"login_type" => "%user%",

"protocol" => "pop3",

"port" => "110",

"folder_prefix" => ""

);

edit menjadi :

$mail_servers[] = Array(

"domain" => "biner.net",

"server" => "localhost",

"login_type" => "%user%@%domain%",

"protocol" => "imap",

"port" => "143",

"folder_prefix" => ""

);

cek config telaen

mail:/telaen/inc# cd ..
mail:/telaen# cd extra/
mail:/telaen/extra# cp check_install.php.txt check_install.php

Buka browser masukkan alamat : http://mail.biner.net/wmail/extra/check_install.php

hapus check_install.php

mail:/# rm /telaen/extra/check_install.php

Buka browser masukkan alamat : http://mail.biner.net

Membuat Proteksi Web

2008-12-15T11:42:00.000+07:00

Membuat Proteksi Web

Buat direktori web yang mau dibuat
cacti:/# mkdir /var/www/gink

contoh isi dari web index.php
cacti:/# vim /var/www/gink/index.php

isikan :

< ? phpinfo() ?>

Buat dan isi file .htaccess & gink.kunci
cacti:/# touch /var/www/gink/.htaccess
cacti:/# touch /var/www/gink/gink.kunci
cacti:/# vim /var/www/gink/.htaccess

isikan :

AuthType Basic

AuthGroupFile /dev/null

AuthUserFile /var/www/gink/gink.kunci

AuthName "Web Protek Test Aa Gink..."

AuthType Basic

cacti:/# htpasswd -bc /var/www/gink/gink.kunci aagink passwordanda

Keterangan :

User : aagink
password : passwordanda

tambahkan setting pada webserver
cacti:/# vim /etc/apache2/sites-available/default

tambahkan :

Directory /var/www/gink
Options None
AllowOverride All
Order allow,deny
Allow from all
/Directory

Restart web server
cacti:/# /etc/init.d/apache2 restart

cek hasil
Buka browser dan masukkan alamat : http://cacti.biner.net/gink/

masukkan user & password yang dibuat tadi…

jika muncul seperti gambar dibawah berarti sukses...

IPIP TUNNEL - LINUX DEBIAN

2008-12-07T21:05:00.000+07:00

IPIP TUNNEL - LINUX DEBIAN
Install Paket : # apt-get install –y iproute openssh-server sudo

Asumsi :
IP Gateway eth0 = 10.10.10.10 ( Sesuaikan Dengan IP Gateway yang diberikan ISP )
IP eth0 = 10.10.10.11/29 ( Sesuaikan Dengan IP yang diberikan ISP )
IP eth1 = 15.15.15.1/24 ( Sesuaikan Dengan IP LAN )
IP TUNNELLING = 7.7.7.1/24 ( IP Terserah )

Setting PC-Router KANTOR KEPARAT BANDUNG

bdg:/# ifconfig eth0 10.10.10.11 netmask 255.255.255.248 broadcast 10.10.10.15
bdg:/# ifconfig eth1 15.15.15.1 netmask 255.255.255.0 broadcast 15.15.15.255
bdg:/# route add default gw 10.10.10.10
bdg:/# touch /root/tunnel.sh
bdg:/# vim /root/tunnel.sh

#!/bin/sh
#=======================
# Tunnelling KANTOR KEPARAT BANDUNG
#=======================
# ip tun del ifTUN
ip tun add ifTUN mode ipip remote 20.20.20.11 local 10.10.10.11
ip addr add 7.7.7.1/24 dev ifTUN
ip link set ifTUN up
route add -net 35.35.35.0/24 gw 7.7.7.4 dev ifTUN

bdg:/# chmod 755 /root/tunnel.sh
bdg:/# ./root/tunnel.sh

Asumsi :
IP Gateway eth0 = 20.20.20.10 ( Sesuaikan Dengan IP Gateway yang diberikan ISP )
IP eth0 = 20.20.20.11/29 ( Sesuaikan Dengan IP yang diberikan ISP )
IP eth1 = 35.35.35.1/24 ( Sesuaikan Dengan IP LAN )
IP TUNNELLING = 7.7.7.4/24 ( IP Terserah )

Setting PC-Router KANTOR KEPARAT JAKARTA

jkt:/# ifconfig eth0 20.20.20.11 netmask 255.255.255.248 broadcast 20.20.20.15
jkt:/# ifconfig eth1 35.35.35.1 netmask 255.255.255.0 broadcast 35.35.35.255
jkt:/# route add default gw 20.20.20.10
jkt:/# touch /root/tunnel.sh
jkt:/# vim /root/tunnel.sh

#!/bin/sh
#=======================
# Tunnelling KANTOR KEPARAT JAKARTA
#=======================
# ip tun del ifTUN
ip tun add ifTUN mode ipip remote 10.10.10.11 local 20.20.20.11
ip addr add 7.7.7.4/24 dev ifTUN
ip link set ifTUN up
route add -net 15.15.15.0/24 gw 7.7.7.1 dev ifTUN

jkt:/# chmod 755 /root/tunnel.sh
jkt:/# ./root/tunnel.sh

EoIP TUNNEL - MIKROTIK

2008-12-07T20:58:00.000+07:00

EoIP TUNNEL - MIKROTIK

KANTOR KEPARAT BANDUNG

Asumsi :
IP Gateway WAN = 10.10.10.10 ( Sesuaikan Dengan IP Gateway yang diberikan ISP )
IP WAN = 10.10.10.11/29 ( Sesuaikan Dengan IP yang diberikan ISP )
IP DNS1 = 10.10.10.25 ( Sesuaikan Dengan Primary DNS ISP )
IP DNS2 = 10.10.10.35 ( Sesuaikan Dengan Secondary DNS ISP )
IP LAN = 15.15.15.1/24 ( Sesuaikan Dengan IP LAN )
IP TUNNELLING = 7.7.7.1/24 ( IP Terserah )
ID TUNNEL = 1 ( ID Tunnel Bersifat Unix )

Setting PC-Router KANTOR KEPARAT BANDUNG

[bego@KEPARAT-BDG] > /interface set ether1 name=WAN
[bego@KEPARAT-BDG] > /interface set ether2 name=LAN
[bego@KEPARAT-BDG] > /interface eoip add name=EoIP-TUN remote-address=20.20.20.11 tunnel-id=1
[bego@KEPARAT-BDG] > /ip address add address=7.7.7.1/24 interface=EoIP-TUN
[bego@KEPARAT-BDG] > /ip address add address=10.10.10.11/29 interface=WAN
[bego@KEPARAT-BDG] > /ip address add address=15.15.15.1/24 interface=LAN
[bego@KEPARAT-BDG] > /ip route add gateway=10.10.10.10
[bego@KEPARAT-BDG] > /ip route add dst-address=25.25.25.0/24 gateway=7.7.7.2
[bego@KEPARAT-BDG] > /ip dns set primary-dns=10.10.10.25 secondary-dns=10.10.10.35
[bego@KEPARAT-BDG] > /ip dns set allow-remote-requests=yes

KANTOR KEPARAT JAKARTA

Asumsi :
IP Gateway WAN = 20.20.20.10 ( Sesuaikan Dengan IP Gateway yang diberikan ISP )
IP WAN = 20.20.20.11/29 ( Sesuaikan Dengan IP yang diberikan ISP )
IP DNS1 = 20.20.20.25 ( Sesuaikan Dengan Primary DNS ISP )
IP DNS2 = 20.20.20.35 ( Sesuaikan Dengan Secondary DNS ISP )
IP LAN = 25.25.25.1/24 ( Sesuaikan Dengan IP LAN )
IP TUNNELLING = 7.7.7.2/24 ( IP Terserah )
ID TUNNEL = 1 ( ID Tunnel Bersifat Unix )

Setting PC-Router KANTOR KEPARAT JAKARTA

[bego@KEPARAT-JKT] > /interface set ether1 name=WAN
[bego@KEPARAT-JKT] > /interface set ether2 name=LAN
[bego@KEPARAT-JKT] > /interface eoip add name=EoIP-TUN remote-address=10.10.10.11 tunnel-id=1
[bego@KEPARAT-JKT] > /ip address add address=7.7.7.2/24 interface=EoIP-TUN
[bego@KEPARAT-JKT] > /ip address add address=20.20.20.11/29 interface=WAN
[bego@KEPARAT-JKT] > /ip address add address=25.25.25.1/24 interface=LAN
[bego@KEPARAT-JKT] > /ip route add gateway=20.20.20.10
[bego@KEPARAT-JKT] > /ip route add dst-address=15.15.15.0/24 gateway=7.7.7.1
[bego@KEPARAT-JKT] > /ip dns set primary-dns=20.20.20.25 secondary-dns=20.20.20.35
[bego@KEPARAT-JKT] > /ip dns set allow-remote-requests=yes

IPIP TUNNEL - MIKROTIK

2008-12-07T20:54:00.000+07:00

IPIP TUNNEL - MIKROTIK

KANTOR KEPARAT BANDUNG

Asumsi :
IP Gateway WAN = 10.10.10.10 ( Sesuaikan Dengan IP Gateway yang diberikan ISP )
IP WAN = 10.10.10.11/29 ( Sesuaikan Dengan IP yang diberikan ISP )
IP DNS1 = 10.10.10.25 ( Sesuaikan Dengan Primary DNS ISP )
IP DNS2 = 10.10.10.35 ( Sesuaikan Dengan Secondary DNS ISP )
IP LAN = 15.15.15.1/24 ( Sesuaikan Dengan IP LAN )
IP TUNNELLING = 7.7.7.1/24 ( IP Terserah )

Setting PC-Router KANTOR KEPARAT BANDUNG

[bego@KEPARAT-BDG] > /interface set ether1 name=WAN
[bego@KEPARAT-BDG] > /interface set ether2 name=LAN
[bego@KEPARAT-BDG] > /interface ipip add name=TUN local-address=10.10.10.11 remote-address=20.20.20.11
[bego@KEPARAT-BDG] > /interface ipip enable TUN
[bego@KEPARAT-BDG] > /ip address add address=7.7.7.1/24 interface=TUN
[bego@KEPARAT-BDG] > /ip address add address=10.10.10.11/29 interface=WAN
[bego@KEPARAT-BDG] > /ip address add address=15.15.15.1/24 interface=LAN
[bego@KEPARAT-BDG] > /ip route add gateway=10.10.10.10
[bego@KEPARAT-BDG] > /ip route add dst-address=25.25.25.0/24 gateway=7.7.7.2
[bego@KEPARAT-BDG] > /ip dns set primary-dns=10.10.10.25 secondary-dns=10.10.10.35
[bego@KEPARAT-BDG] > /ip dns set allow-remote-requests=yes

KANTOR KEPARAT JAKARTA

Asumsi :
IP Gateway WAN = 20.20.20.10 ( Sesuaikan Dengan IP Gateway yang diberikan ISP )
IP WAN = 20.20.20.11/29 ( Sesuaikan Dengan IP yang diberikan ISP )
IP DNS1 = 20.20.20.25 ( Sesuaikan Dengan Primary DNS ISP )
IP DNS2 = 20.20.20.35 ( Sesuaikan Dengan Secondary DNS ISP )
IP LAN = 25.25.25.1/24 ( Sesuaikan Dengan IP LAN )
IP TUNNELLING = 7.7.7.2/24 ( IP Terserah )

Setting PC-Router KANTOR KEPARAT JAKARTA

[bego@KEPARAT-JKT] > /interface set ether1 name=WAN
[bego@KEPARAT-JKT] > /interface set ether2 name=LAN
[bego@KEPARAT-JKT] > /interface ipip add name=TUN local-address=20.20.20.11 remote-address=10.10.10.11
[bego@KEPARAT-JKT] > /interface ipip enable TUN
[bego@KEPARAT-JKT] > /ip address add address=7.7.7.2/24 interface=TUN
[bego@KEPARAT-JKT] > /ip address add address=20.20.20.11/29 interface=WAN
[bego@KEPARAT-JKT] > /ip address add address=25.25.25.1/24 interface=LAN
[bego@KEPARAT-JKT] > /ip route add gateway=20.20.20.10
[bego@KEPARAT-JKT] > /ip route add dst-address=15.15.15.0/24 gateway=7.7.7.1
[bego@KEPARAT-JKT] > /ip dns set primary-dns=20.20.20.25 secondary-dns=20.20.20.35
[bego@KEPARAT-JKT] > /ip dns set allow-remote-requests=yes

Panduan Membuat Bridge – Linux Debian

2008-12-07T20:41:00.000+07:00

Panduan Membuat Bridge – Linux Debian

Install paket
bjs:/# apt-get install –y ebtables bridge-utils openssh-server sudo

bjs:/# ebtables
bjs:/# touch /root/bridge.sh
bjs:/# vim /root/bridge.sh

#!/bin/sh
#=============================================================
# Membuat bridge pada linux
# install paket # apt-get install –y ebtables bridge-utils
# by (c)2008 Aditya Maulana
#=============================================================
brctl addbr br0 # buat interface bridge dimulai dari br0
# Menerima & mendengarkan semua jenis frame pada interface eth0 & eth1
ifconfig eth0 0.0.0.0 promisc up
ifconfig eth1 0.0.0.0 promisc up
brctl addif br0 eth0 # include eth0 ke interface br0
brctl addif br0 eth1 # include eth1 ke interface br0
ip link set br0 up # aktifkan interface bridge br0
/etc/init.d/networking restart # restart network

bjs:/# chmod 755 /root/bridge.sh
bjs:/# ./root/bridge.sh
bjs:/# ifconfig br0 192.168.0.254 netmask 255.255.255.0
bjs:/# route add default gw 192.168.0.1