Forgot root password OpenBSD
----------------------------
Dari pada ga pernah update blog mendingan apa aza dimasukin...
Forgot root password
--------------------
1. Boot ke single user more
boot> boot -s
2. Mount partisi / dan /usr
# fsck -p / && mount -uw /
# fsck -p /usr && mount /usr
3. Mainkan passwd untuk memasukkan password root
# passwd
4. Restart router
# reboot
File System Full
Pada suatu pagi di hari minggu, lagi enak-enaknya minum kopi ada telp
disuruh cek partisi pada salah satu router yang menurut informasi
terjadi kejanggalan dikatakan bahwa partisi /var full.
Tanpa basa-basi langsung cek n ricek ke router tujuan
Cek n Ricek
$ sudo tail -f /var/log/messages
Nov 22 08:56:58 GreenRouter-JKT01 /bsd: uid 1000 on /var: file system full
Nov 22 08:57:04 GreenRouter-JKT01 /bsd: uid 0 on /var: file system full
Nov 22 08:57:04 GreenRouter-JKT01 pflogd[11142]: Logging suspended: fwrite: No space left on device
Nov 22 08:58:05 GreenRouter-JKT01 /bsd: uid 0 on /var: file system full
Nov 22 08:58:05 GreenRouter-JKT01 pflogd[11142]: Logging suspended: fwrite: No space left on device
Nov 22 08:59:05 GreenRouter-JKT01 /bsd: uid 0 on /var: file system full
Nov 22 08:59:05 GreenRouter-JKT01 pflogd[11142]: Logging suspended: fwrite: No space left on device
$ df -h
Filesystem Size Used Avail Capacity Mounted on
/dev/wd0a 4.9G 117M 4.6G 2% /
/dev/wd0g 15.3G 74.0M 14.4G 0% /data
/dev/wd0e 9.8G 2.0K 9.4G 0% /tmp
/dev/wd0d 19.7G 2.3G 16.4G 12% /usr
/dev/wd0f 19.7G 19.7G -1007M 105% /var
$ sudo du -h -s /var/
109M /var/
Wah ini aneh hasil yang diberikan df -h dan du -h -s berbeda...
Cek lebih jauh lagi
$ fstat -f /var
USER CMD PID FD MOUNT INUM MODE R/W SZ|DV
root ksh 20619 wd /var 2 drwxr-xr-x r 512
asoel ksh 17578 wd /var 2 drwxr-xr-x r 512
asoel ksh 18941 wd /var 2 drwxr-xr-x r 512
root systat 27253 3 /var 675585 -rw-rw-r-- r 8100
root systat 27253 6 /var 1273220 -rw-r--r-- r 1294336
root sendmail 21369 wd /var 2494471 drwx------ r 512
root sendmail 21369 8 /var 675595 -rw------- w 70
root cron 6171 wd /var 1714944 dr-xr-xr-x r 512
root cron 6171 3 /var 675594 -rw-r--r-- rw 5
_bgpd bgpd 18359 wd /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 18359 root /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 21279 wd /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 21279 root /var 1818880 drwxr-xr-x r 512
_snmpd snmpd 2308 wd /var 1818880 drwxr-xr-x r 512
_snmpd snmpd 2308 root /var 1818880 drwxr-xr-x r 512
_ntp ntpd 24212 wd /var 1818880 drwxr-xr-x r 512
_ntp ntpd 24212 root /var 1818880 drwxr-xr-x r 512
_pflogd pflogd 11142 wd /var 1818880 drwxr-xr-x r 512
_pflogd pflogd 11142 root /var 1818880 drwxr-xr-x r 512
_pflogd pflogd 11142 4 /var 2442524 -rw------- rw 21050293545
_syslogd syslogd 498 wd /var 1818880 drwxr-xr-x r 512
_syslogd syslogd 498 root /var 1818880 drwxr-xr-x r 512
_syslogd syslogd 498 9 /var 2442508 -rw-r----- w 9019
_syslogd syslogd 498 11 /var 2442530 -rw------- w 11154
_syslogd syslogd 498 12 /var 1714950 -rw------- w 5679
_syslogd syslogd 498 14 /var 2442509 -rw-r----- w 0
_syslogd syslogd 498 15 /var 2442503 -rw-r----- w 0
_syslogd syslogd 498 16 /var 2442552 -rw------- w 9518
Ternyata ada sesuatu yang aneh pada pflogd
_pflogd pflogd 11142 4 /var 2442524 -rw------- rw 21050293545
Dilakukan P3K takutnya keburu tewas routernya maklum itu router berada di Jakarta...
$ sudo pkill pflogd && sudo pflogd
Cek n Ricek lagi....
$ fstat -f /var
USER CMD PID FD MOUNT INUM MODE R/W SZ|DV
_pflogd pflogd 6702 wd /var 1818880 drwxr-xr-x r 512
_pflogd pflogd 6702 root /var 1818880 drwxr-xr-x r 512
_pflogd pflogd 6702 4 /var 2442512 -rw------- rw 10274624
asoel ksh 21256 wd /var 2 drwxr-xr-x r 512
asoel ksh 17578 wd /var 2 drwxr-xr-x r 512
asoel ksh 18941 wd /var 2 drwxr-xr-x r 512
root systat 27253 3 /var 675585 -rw-rw-r-- r 8100
root systat 27253 6 /var 1273220 -rw-r--r-- r 1294336
root sendmail 21369 wd /var 2494471 drwx------ r 512
root sendmail 21369 8 /var 675595 -rw------- w 70
root cron 6171 wd /var 1714944 dr-xr-xr-x r 512
root cron 6171 3 /var 675594 -rw-r--r-- rw 5
_bgpd bgpd 18359 wd /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 18359 root /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 21279 wd /var 1818880 drwxr-xr-x r 512
_bgpd bgpd 21279 root /var 1818880 drwxr-xr-x r 512
_snmpd snmpd 2308 wd /var 1818880 drwxr-xr-x r 512
_snmpd snmpd 2308 root /var 1818880 drwxr-xr-x r 512
_ntp ntpd 24212 wd /var 1818880 drwxr-xr-x r 512
_ntp ntpd 24212 root /var 1818880 drwxr-xr-x r 512
_syslogd syslogd 498 wd /var 1818880 drwxr-xr-x r 512
_syslogd syslogd 498 root /var 1818880 drwxr-xr-x r 512
_syslogd syslogd 498 12 /var 1714950 -rw------- w 5970
$ df -h
Filesystem Size Used Avail Capacity Mounted on
/dev/wd0a 4.9G 117M 4.6G 2% /
/dev/wd0g 15.3G 78.1M 14.4G 1% /data
/dev/wd0e 9.8G 2.0K 9.4G 0% /tmp
/dev/wd0d 19.7G 2.3G 16.4G 12% /usr
/dev/wd0f 19.7G 86.8M 18.6G 0% /var
Akhirnya file system /var kembali ke semula....system masih berjalan normal.
Dilanjut lagi ah weekend nya....
Note :
Jika ada waktu luang fsck -f -y /var pada single user mode
Membuat OpenBSD 4.5 Stable
Persiapan :
1. Kopi + Cemilan
2. Koneksi internet yang cepat dan stabil
3. cd openbsd 4.5
4. komputer yang mau di install
$ sudo mkdir /usr/local/src
$ sudo mkdir /usr/src
$ cd /usr/local/src
$ export PKG_PATH=http://openbsd.biz.net.id/pub/4.5/packages/i386/
$ sudo wget http://openbsd.biz.net.id/pub/4.5/src.tar.gz
$ sudo tar -zxvf src.tar.gz -C /usr/src/
$ cd /usr/
$ sudo cvs -danoncvs@anoncvs.de.openbsd.org:/cvs checkout -rOPENBSD_4_5 -P src
$ cd /usr/src/
$ sudo cvs -danoncvs@anoncvs1.ca.openbsd.org:/cvs up -rOPENBSD_4_5 -Pd
------------------------------------------
Jika muncul permintaan seperti dibawah ketik "yes"
Are you sure you want to continue connecting (yes/no)? yes
------------------------------------------
$ cd /usr/src/sys/arch/i386/conf/
$ sudo config GENERIC
$ cd ../compile/GENERIC/
------------------------------------------
>>> Jika menggunakan multi processor
$ sudo config GENERIC.MP
$ cd ../compile/GENERIC.MP/
------------------------------------------
$ sudo make clean && sudo make depend && sudo make && sudo make install
$ sudo reboot
$ cd /usr/src
$ sudo rm -rf /usr/obj/*
$ sudo make obj
$ cd /usr/src/etc
$ sudo env DESTDIR=/ make distrib-dirs
$ cd /usr/src
$ sudo make build
$ sudo reboot
Hasilnya :
OpenBSD 4.5-stable (GENERIC) #1: Fri Aug 14 16:40:34 WIT 2009
Perintah dasar PF
Perintah dasar pf.conf
# pfctl -d >>>> disable pf
# pfctl -e >>>> enable pf
# pfctl -f /etc/pf.conf >>>> Load the pf.conf file
# pfctl -nf /etc/pf.conf >>>> Mengecek parse, ada yang error atau tidaknya
# pfctl -Nf /etc/pf.conf >>>> Hanya meload NAT
# pfctl -Rf /etc/pf.conf >>>> Hanya meload filter
# pfctl -sn >>>> melihat hasil nat
# pfctl -sr >>>> melihat hasil filter
# pfctl -ss >>>> melihat status table
# pfctl -si >>>> melihat staut filter dan counters
# pfctl -sa >>>> melihat semuanya yg dapat di tampilkan
# pfctl -vvsq >>>> monitoring
Suatu ketika ada panggilan test disuatu ISP di bandung salah satunya test adalah membuat simple bridge seperti gambar di bawah.
Waktu test aku menggunakan linux dan terus terang ada sedikit kendala karena yang dinilai kecepatan dan ketepatan saat mensetting router2.
di linux kendalanya harus install paket seperti ebstables, bridge-utils, vlan, dll walaupun tinggal
apt-get install
untuk itu aku disuruh nyoba sama sys admin ISP untuk mencoba OpenBSD dan ternyata hasilnya keren banget cepat dan mudah g perlu install apapun karena semua paket telah include ke dalam kernel.
jika ada yang mau nambahin pake linux boleh2 aza di tunggu yaa...
========================== KONFIGURASI =========================
==============================
CORE
==============================
# touch /root/core
# chmod 755 /root/core
# vi /root/core
isikan :
#==========================
# CORE
# aagink@gmail.com
#==========================
echo 'Aktifkan Simple Bridge CORE...'
sysctl net.inet.ip.forwarding=1
lan_if="em0"
vlan_if="vlan10"
vlan_id="10"
vlan_ip="10.10.10.254/24"
ifconfig $lan_if up
ifconfig $vlan_if create vlan $vlan_id vlandev $lan_if
ifconfig $vlan_if up
ifconfig $vlan_if $vlan_ip
# vi /etc/rc.local
tambahkan :
# Add your local startup actions here.
/root/core
echo '.'
# reboot
==============================
CISCO SWITCH
==============================
!
hostname Switch
!
!
!
interface FastEthernet0/1
switchport trunk allowed vlan 10-30
switchport mode trunk
!
interface FastEthernet0/2
switchport access vlan 10
!
interface FastEthernet0/3
switchport access vlan 20
!
interface FastEthernet0/4
switchport access vlan 30
!
==============================
PC-BRIDGE
==============================
# touch /root/pc-bridge
# chmod 755 /root/pc-bridge
# vi /root/pc-bridge
isikan :
#==========================
# PC-BRIDGE
# aagink@gmail.com
#==========================
echo 'Aktifkan Simple Bridge PC-BRIDGE...'
sysctl net.inet.ip.forwarding=1
if_2_core="em0"
if_2_A="em1"
if_2_B="em2"
if_bridge_2_core="bridge0"
if_bridge_2_router="bridge1"
if_vlan_2_CORE="vlan110"
if_vlan_2_A="vlan210"
if_vlan_2_B="vlan310"
vlan_id="10"
ip_bridge="1.1.1.1/24"
ifconfig $if_2_core up
ifconfig $if_2_A up
ifconfig $if_2_B up
ifconfig $if_bridge_2_core create
ifconfig $if_bridge_2_core up
ifconfig $if_vlan_2_CORE create vlan $vlan_id vlandev $if_2_core
ifconfig $if_vlan_2_A create vlan $vlan_id vlandev $if_2_A
ifconfig $if_vlan_2_B create vlan $vlan_id vlandev $if_2_B
ifconfig $if_vlan_2_CORE up
ifconfig $if_vlan_2_A up
ifconfig $if_vlan_2_B up
brconfig $if_bridge_2_core add $if_vlan_2_CORE
brconfig $if_bridge_2_core add $if_vlan_2_A
brconfig $if_bridge_2_core add $if_vlan_2_B
ifconfig $if_bridge_2_router create
ifconfig $if_bridge_2_router up
brconfig $if_bridge_2_router add $if_2_A add $if_2_B up
ifconfig $if_2_A $ip_bridge
# vi /etc/rc.local
tambahkan :
# Add your local startup actions here.
/root/pc-bridge
echo '.'
# reboot
==============================
ROUTER-A
==============================
# touch /root/router-a
# chmod 755 /root/router-a
# vi /root/router-a
isikan :
#==========================
# ROUTER-A
# aagink@gmail.com
#==========================
echo 'Aktifkan Simple Bridge ROUTER-A...'
sysctl net.inet.ip.forwarding=1
wan_if="em0"
lan_if="em1"
vlan_if="vlan210"
vlan_id="10"
vlan_ip="10.10.10.1/24"
bridge_ip="1.1.1.2/24"
lan_ip="192.168.0.254/24"
ifconfig $wan_if up
ifconfig $lan_if up
ifconfig $wan_if $bridge_ip
ifconfig $lan_if $lan_ip
ifconfig $vlan_if create vlan $vlan_id vlandev $wan_if
ifconfig $vlan_if up
ifconfig $vlan_if $vlan_ip
echo 'Aktifkan PACKET FILLTERING'
pfctl -e
echo
echo 'Aktifkan NAT'
pfctl -Nf /etc/pf.conf
# vi /etc/rc.local
tambahkan :
# Add your local startup actions here.
/root/router-a
echo '.'
membuat NAT
# vi /etc/pf.conf
isikan :
wan_if="vlan210"
lan_if="em1"
nat on $wan_if from $lan_if:network to any -> $wan_if
# reboot
==============================
ROUTER-B
==============================
# touch /root/router-b
# chmod 755 /root/router-b
# vi /root/router-b
isikan :
#==========================
# ROUTER-B
# aagink@gmail.com
#==========================
echo 'Aktifkan Simple Bridge ROUTER-B...'
sysctl net.inet.ip.forwarding=1
wan_if="em0"
lan_if="em1"
vlan_if="vlan310"
vlan_id="10"
vlan_ip="10.10.10.2/24"
bridge_ip="1.1.1.3/24"
lan_ip="192.168.1.254/24"
ifconfig $wan_if up
ifconfig $lan_if up
ifconfig $wan_if $bridge_ip
ifconfig $lan_if $lan_ip
ifconfig $vlan_if create vlan $vlan_id vlandev $wan_if
ifconfig $vlan_if up
ifconfig $vlan_if $vlan_ip
echo 'Aktifkan PACKET FILLTERING'
pfctl -e
echo
echo 'Aktifkan NAT'
pfctl -Nf /etc/pf.conf
# vi /etc/rc.local
tambahkan :
# Add your local startup actions here.
/root/router-b
echo '.'
membuat NAT
# vi /etc/pf.conf
isikan :
wan_if="vlan310"
lan_if="em1"
nat on $wan_if from $lan_if:network to any -> $wan_if
# reboot
