tnt.aufbix.org

about

1243204502		current
Line 10:		Line 10:
	src="http://www.wordle.net/thumb/wrdl/687631/Untitled"		src="http://www.wordle.net/thumb/wrdl/687631/Untitled"
	alt="Wordle: Untitled"		alt="Wordle: Untitled"
		+	style="padding:4px;border:1px solid #ddd"></a>
		+	<a href="http://www.wordle.net/show/wrdl/1477027/tnt.aufbix.org_-_new"
		+	title="Wordle: tnt.aufbix.org - new"><img
		+	src="http://www.wordle.net/thumb/wrdl/1477027/tnt.aufbix.org_-_new"
		+	alt="Wordle: tnt.aufbix.org - new"
	style="padding:4px;border:1px solid #ddd"></a>		style="padding:4px;border:1px solid #ddd"></a>
	</html>		</html>

amavis

1244112226		current
Line 16:		Line 16:
	/etc/amavis/conf.d/15-content_filter_mode\\		/etc/amavis/conf.d/15-content_filter_mode\\
	@bypass_spam_checks_maps = ( [".$mydomain", 'myhostname.$mydomain' '.somedomaion.org' ] );		@bypass_spam_checks_maps = ( [".$mydomain", 'myhostname.$mydomain' '.somedomaion.org' ] );
		+

		+	\\
		+	$insert_received_line = 0;
	\\		\\
	modules that amavisd-new uses:		modules that amavisd-new uses:
	ripole\\		ripole\\
	p0f		p0f

amavisd-new

		current
Line 1:		Line 1:
		+	see: [[amavis]]

apache

1243204502		current
Line 31:		Line 31:
	ServerSignature Off		ServerSignature Off
	ServerTokens Prod		ServerTokens Prod
		+	TraceEnable Off
	</code>		</code>
		+
		+	in ssl.conf
		+
		+	SSLProtocol -ALL +SSLv3 +TLSv1
		+	SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
		+
		+	in vhost
		+
		+	Include conf/ssl.conf
		+	RewriteEngine on
		+	RewriteCond %{REQUEST_METHOD} ^(TRACE\|TRACK)
		+	RewriteRule .* - [F]
		+
	* Disable unnecessary PHP variable		* Disable unnecessary PHP variable
	<code>		<code>

asus-wl500gp

	current
Line 1:	Line 1:
	+	%%
	+	Open System Command:
	+	http://192.168.1.1/Main_AdmStatus_Content.asp

	+	Enter:
	+	/usr/sbin/utelnetd -d
	+	and click Refresh button.
	+	You should now be able to Telnet to the router without any user/password so PLEASE check firewall rules and make sure Telnet access is blocked from WAN.
	+	Anybody in LAN will be able to Telnet as root so beware.
	+
	+	To stop telnet daemon type ps to check PID ID and then kill it with
	+	kill -9 xxxx
	+	where xxxx is PID of utelnetd as seen with ps command
	+	%%

aws

1212514368		current
Line 1:		Line 1:
	====== Amazon Web Services ======		====== Amazon Web Services ======
		+


Line 5:		Line 6:
	* [[http://code.google.com/p/s3fs/wiki/FuseOverAmazon\|FuseFS and S3]]		* [[http://code.google.com/p/s3fs/wiki/FuseOverAmazon\|FuseFS and S3]]
	* [[http://agiletesting.blogspot.com/2008/05/incremental-backups-to-amazon-s3.html\| Incremental backups to Amazon S3]]		* [[http://agiletesting.blogspot.com/2008/05/incremental-backups-to-amazon-s3.html\| Incremental backups to Amazon S3]]
		+	* [[http://www.timlinden.com/blog/server/backup-mysql-amazon-s3/\|How To Backup MySQL to Amazon S3]]

	===== EC2 =====		===== EC2 =====

bash

1238882779		current
Line 35:		Line 35:
	PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '		PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
	</code>		</code>
		+
		+	==== Adds date/time to history ====
		+	#vi $HOME/.bashrc
		+	export HISTTIMEFORMAT=”%h/%d - %H:%M:%S “

	==== If you just want to find out what's new in a directory ====		==== If you just want to find out what's new in a directory ====

bgp

1278952711		current
Line 7:		Line 7:
	''telnet route-views.routeviews.org''		''telnet route-views.routeviews.org''
	* [[http://www.bgpexpert.com/]]		* [[http://www.bgpexpert.com/]]
-	* [[http://code.google.com/p/bgpsimple/wiki/README BGP Simple]] - simple BGP peering and route injection script	+	* [[http://code.google.com/p/bgpsimple/wiki/README\|BGP Simple]] - simple BGP peering and route injection script
	</box>		</box>
	<html></div></html>		<html></div></html>

bsd

1243204502		current
Line 5:		Line 5:
	* [[http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-building.html\|Building and Installing a Custom Kernel]]		* [[http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-building.html\|Building and Installing a Custom Kernel]]
	* [[http://taosecurity.blogspot.com/2008/12/ossec-and-pf-on-freebsd-to-limit-ssh.html\|OSSEC and Pf on FreeBSD to Limit SSH Brute Forcing]]		* [[http://taosecurity.blogspot.com/2008/12/ossec-and-pf-on-freebsd-to-limit-ssh.html\|OSSEC and Pf on FreeBSD to Limit SSH Brute Forcing]]
		+	* [[http://rop.gonggri.jp/?p=269\|FreeWDE - FreeBSD with Whole Disk Encryption]]
	</box>		</box>
	<html></div></html>		<html></div></html>

cacti

1170582559		current
Line 1:		Line 1:
	====== Cacti ======		====== Cacti ======
		+
		+	===== Templates =====
		+	* [[http://code.google.com/p/mysql-cacti-templates/]]
		+

cgiirc

	current
Line 1:	Line 1:
	+	/usr/lib/cgi-bin/cgiirc/nph-irc.cgi\\
	+	\\
	+	line 1022\\
	+	<code perl>

	+	if(uc($command) eq 'VERSION') {
	+	$irc->ctcpreply($nick, $command,
	+	"IRC");
	+
	+	</code>

chroot_ircd

1141072758		current
Line 1:		Line 1:
-	mknod -m 444 urandom c 1 9	+	==== device files ====
		+	cd /chroot/dev
		+	mknod -m 444 urandom c 1 9
		+
		+	==== libraries ====
		+	naredi direktorije
		+	ldd ircd \| awk '{print $3}' \| sed '/^$/d' \| xargs -I % dirname % \| xargs -I % mkdir -p %
		+	skopiraj knjiznice
		+	ldd ircd \| awk '{print $3}' \| sed '/^$/d' \| xargs -I % cp % /chroot%
		+
		+	nagradno vprasanje: zakaj tole ne dela?
		+	ldd ircd \| awk '{print $3}' \| sed '/^$/d' \| xargs -I % mkdir -p `dirname %`

cisco

1269986894		current
Line 235:		Line 235:

	==DHCP==		==DHCP==
		+	ip dhcp excluded-address 192.168.10.1
	ip dhcp pool my.lan		ip dhcp pool my.lan
	network 192.168.10.0 255.255.255.0		network 192.168.10.0 255.255.255.0

cobaltqube

1241134560		current
Line 4:		Line 4:

	===== Linux 2.6.x =====		===== Linux 2.6.x =====
		+

	===== Cross-compiling kernel stuff =====		===== Cross-compiling kernel stuff =====
	links:		links:
-	* http://debian.speedblue.org/	+	* http://debian.speedblue.org/ (cross-compiling tools / debian)
		+	* [[:linux:kernel#cross-compiling\|Cross Compiling notes on TNT]]
	* http://www.kegel.com/crosstool/current/doc/crosstool-howto.html		* http://www.kegel.com/crosstool/current/doc/crosstool-howto.html

Line 13:		Line 15:

	you can put the CROSS_COMPILE variable on the config command, too. Doesn't hurt and is probably "proper"		you can put the CROSS_COMPILE variable on the config command, too. Doesn't hurt and is probably "proper"
		+
		+	Example
		+	<code makefile\|f /usr/src/linux-2.6.28.4/Makefile>
		+	...
		+	ARCH = mips
		+	CROSS_COMPILE = /usr/mipsel/bin/mipsel-linux-
		+	..
		+	</code>
		+
		+	export ARCH=mips
		+	make-kpkg --initrd --rootcmd=fakeroot --arch mips --append-to-version=xxx kernel_image
		+
		+	FIXME - Debian package is created for arch=mips (Mipsel Debian on CobaltQube expect arch=mipsel) - you might have some problem installing the package;

cyrus

1148581277		current
Line 102:		Line 102:
	Stop cyrus server, run ''db_recover -h /var/lib/imap/db'' and start cyrus		Stop cyrus server, run ''db_recover -h /var/lib/imap/db'' and start cyrus

-	===== Sieve filtering ======	+	===== Troubleshooting =====
		+	==== DBERROR db4: 21 lockers ====
		+	Getting something like this
		+	Sep 25 16:39:34 localhost cyrus/lmtp[1544]: DBERROR db4: 558 lockers
		+	see this: http://www.web-cyradm.org/pipermail/web-cyradm/2003-November/016829.html
		+
		+
		+
		+
		+	===== Sieve filtering =====

	==== Filtering Mailing Lists ====		==== Filtering Mailing Lists ====

desktop

	current
Line 1:	Line 1:
	+	FIXME

	+	* http://quicksynergy.sourceforge.net

dns

1243204502		current
Line 76:		Line 76:
	[[spam\|DNS greylisting]]		[[spam\|DNS greylisting]]

		+	[http://pgl.yoyo.org/adservers/]

domino

1153956720		current
Line 21:		Line 21:

	Also see [[http://desktux.xs4all.nl/tips/domino.php#domino6\|here]]		Also see [[http://desktux.xs4all.nl/tips/domino.php#domino6\|here]]
		+

	==== init.d script ====		==== init.d script ====
		+	<code bash>
	#!/bin/sh		#!/bin/sh
	#		#
Line 108:		Line 110:
	exit 0		exit 0
	# End of the domino script		# End of the domino script
		+	</code>

	===== Troubleshooting =====		===== Troubleshooting =====

dovecot

1237475397		current
Line 24:		Line 24:

	login_greeting_capability=yes		login_greeting_capability=yes
		+
		+
		+	protocol imap {
		+	mail_plugins = expire
		+	}
		+	protocol pop3 {
		+	mail_plugins = expire
		+	}
		+
		+	plugin {
		+	# Trash 7d, Spam 30d
		+	expire = Trash 7 Spam 30
		+	}
		+

dspam

1150578037		current
Line 158:		Line 158:

	Mogoče še beseda o začetnem učenju ... če imaš pri roki lep arhiv spama, ga vsekakor uporabi. Pozor le na to, da moraš imeti pri roki tudi arhiv vsaj enake, še bolje večje količine hama. Ko imaš zadevo naučeno, lahko preklopiš na toe training in ga futraš samo še z napakami.		Mogoče še beseda o začetnem učenju ... če imaš pri roki lep arhiv spama, ga vsekakor uporabi. Pozor le na to, da moraš imeti pri roki tudi arhiv vsaj enake, še bolje večje količine hama. Ko imaš zadevo naučeno, lahko preklopiš na toe training in ga futraš samo še z napakami.
		+


Line 164:		Line 165:
	Zadeva "deluje". Daje vtis čudovite akademske igrače, ki se spogleduje z realnim svetom. Zato ima ogromen potencial, vendar je zanjo potrebno preliti še nekaj švica, da bo domača tudi v realnem svetu. Konkreten primer: če vklopiš ShowFactors in pošiljaš okrog unicode maile, ostane unicode tak kot je v teh faktorjih, ki grejo v headerje ... čemur se potem upre vsak pošten MTA. Logging je tudi nonexistant, more or less ... Tako da zveš kaj se dogaja samo s strace in gdb, ker pač ne moreš ves čas laufati zadeve v debuggingu in spremljati nekaj sto vrstic outputa per filtered mail ... \\		Zadeva "deluje". Daje vtis čudovite akademske igrače, ki se spogleduje z realnim svetom. Zato ima ogromen potencial, vendar je zanjo potrebno preliti še nekaj švica, da bo domača tudi v realnem svetu. Konkreten primer: če vklopiš ShowFactors in pošiljaš okrog unicode maile, ostane unicode tak kot je v teh faktorjih, ki grejo v headerje ... čemur se potem upre vsak pošten MTA. Logging je tudi nonexistant, more or less ... Tako da zveš kaj se dogaja samo s strace in gdb, ker pač ne moreš ves čas laufati zadeve v debuggingu in spremljati nekaj sto vrstic outputa per filtered mail ... \\
	Po drugi strani pa zadeva na 1.2ghz p3 ne porabi za mail več kot 0.02s, kar je številka iz drugega vesolja napram amavisd/spamassassin opciji in je v določenih okoljih vredna dodatnega truda. Pač za tiste, ki vejo, zakaj jo rabijo.		Po drugi strani pa zadeva na 1.2ghz p3 ne porabi za mail več kot 0.02s, kar je številka iz drugega vesolja napram amavisd/spamassassin opciji in je v določenih okoljih vredna dodatnega truda. Pač za tiste, ki vejo, zakaj jo rabijo.
		+
		+	===== DSPAM WebUI with Virtual Users =====
		+	apt-get install dspam-webfrontend
		+	apt-get install mod_auth_mysql
		+
		+	Then create a .htaccess file in the DSPAM WebUI folder (/var/www/dspam), containing this configuration:
		+
		+	AuthName "DSPAM Authentication"
		+	AuthType Basic
		+	AuthBasicAuthoritative Off
		+	Auth_MySQL_Host localhost
		+	AuthMySQL_User <your mysql user name here>
		+	AuthMySQL_Password <your mysql password here>
		+	AuthMySQL_DB mail
		+	AuthMySQL_Password_Table users
		+	AuthMySQL_Username_Field email
		+	AuthMySQL_Password_Field password
		+	AuthMySQL_Encrypted_Passwords on
		+	AuthMySQL on
		+	AuthMySQL_Authoritative On
		+	require valid-user
		+
		+	After that, create a new virtualhost (or use an existing) with the following settings:
		+
		+	<VirtualHost>
		+	DocumentRoot "/var/www/dspam"
		+	ServerName dspam.yourdomain.tld
		+	SuexecUserGroup dspam dspam
		+	<Directory /var/www/dspam>
		+	Options ExecCGI
		+	Options -Indexes
		+	Addhandler cgi-script .cgi
		+	DirectoryIndex dspam.cgi
		+	</Directory>
		+	</VirtualHost>

etc_host.conf

1150962587		current
Line 1:		Line 1:
		+	{{page>wiki:delete}}
		+
	order hosts,bind		order hosts,bind
	multi on		multi on

extreme

1177513834		current
Line 21:		Line 21:
	..............................		..............................

		+	===== TODO=====

		+	fixme
		+
		+	<code>
		+	configure sys-health-check alarm-level Log
		+	configure fdb-scan period 60
		+	configure fdb-scan failure-action sys-health-check
		+	enable fdb-scan slot 1
		+	enable fdb-scan slot 2
		+	enable fdb-scan slot 3
		+	enable fdb-scan slot 4
		+	enable fdb-scan slot 5
		+	enable fdb-scan slot 6
		+	enable fdb-scan slot 7
		+	enable fdb-scan slot 8
		+	enable fdb-scan slot MSM-A
		+	enable fdb-scan slot MSM-B
		+	</code>

firefox-addons

1276075310		current
Line 14:		Line 14:
	* http://securelogin.mozdev.org/ - secure login		* http://securelogin.mozdev.org/ - secure login

		+	* https://addons.mozilla.org/en-US/firefox/addon/1672/ - selective loading of images/pictures in Firefox
	* http://www.thestasis.com/?page_id=6 - colourfull tabs		* http://www.thestasis.com/?page_id=6 - colourfull tabs
	* https://addons.mozilla.org/en-US/firefox/addon/4550 - compact menu		* https://addons.mozilla.org/en-US/firefox/addon/4550 - compact menu

firefox

1279268413		current
Line 57:		Line 57:
	// Enable prefetching		// Enable prefetching
	user_pref("network.prefetch-next", true);		user_pref("network.prefetch-next", true);
		+	// Disable offline mode
		+	user_pref("browser.offline-apps.notify", false);
	#		#
	user_pref("network.ftp.idleConnectionTimeout", 60);		user_pref("network.ftp.idleConnectionTimeout", 60);

foobar

	current
Line 1:	Line 1:
	+	====== Foobar ======

	+
	+	Fun word to play with!

freeradius

1160954514		current
Line 2:		Line 2:

	FIXME		FIXME
		+
		+	===== Build debian package =====
		+	$ tar zxf freeradius-1.1.3.tar.gz
		+	$ cd freeradius-1.1.3
		+	$ fakeroot dpkg-buildpackage -b -uc
		+	$ sudo dpkg -i ../freeradius_1.1.3-0_i386.deb
		+
		+	[[http://wiki.freeradius.org/Build#Building_Debian_packages\|more on this topic]]
		+

gcc

		current
Line 1:		Line 1:
		+	http://en.gentoo-wiki.com/wiki/Safe_Cflags/Intel

greasemonkey

1277401118		current
Line 3:		Line 3:
	* http://userscripts.org/scripts/show/57025 - odstrani reklame na 24ur.com/poptv.si		* http://userscripts.org/scripts/show/57025 - odstrani reklame na 24ur.com/poptv.si
	* http://bou.si/rest/killfile.user.js slo-tech.com - killfile.js by jure@hehe.si		* http://bou.si/rest/killfile.user.js slo-tech.com - killfile.js by jure@hehe.si
-	* http://userscripts.org/scripts/show/72944 - forces sites like gmail/facebook/wikipedia to use secure https connections	+	* <del>http://userscripts.org/scripts/show/72944 - forces sites like gmail/facebook/wikipedia to use secure https connections
		+	* http://userscripts.org/scripts/show/49079 - forces secure facebook - https

hardware

1280585042		current
Line 11:		Line 11:
	* [[linux:ibm-Z60t\|Linux on IBM Z60t]]		* [[linux:ibm-Z60t\|Linux on IBM Z60t]]
	* [[Linksys WRT54GS]]		* [[Linksys WRT54GS]]
-	* [[thecus5500:Thecus NAS 5500 series]]	+	* [[thecus5500\|Thecus NAS 5500 series]]

hpdl145

1185441633		current
Line 1:		Line 1:
		+	====== HP ProLiant DL145 G2 ======
		+
		+	Advisory: CLUSTER FIRMWARE UPGRADE RECOMMENDED: ProLiant DL145 G2 Server May Intermittently Shut Down
		+
		+	see:
		+	* [[http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&taskId=110&prodSeriesId=446006&prodTypeId=15351&prodSeriesId=446006&objectID=c01074362\|Advisory (HP support)]]
		+	* [[http://h18023.www1.hp.com/support/files/server/us/download/27262.html\|Firmware Upgrade Diskette for HP ProLiant DL145]]
		+
		+	Regarding to HP support page!
	<html>		<html>
	<pre>		<pre>
Line 5:		Line 14:
	Even the CDRom drive is optional.		Even the CDRom drive is optional.

-	Guess what their updates run on? The fscking SP31039 bios update for the	+	Guess what their updates run on? The fscking XXXX bios update for the
	DL145-G2 extracts to a physical floppy disk. GAH!!!! Morons at work.		DL145-G2 extracts to a physical floppy disk. GAH!!!! Morons at work.
	</pre>		</pre>
	</html>		</html>

-	Bootable IMAGE available {{compaq_update.iso\|here}}	+	===== Bootable custom image =====
		+
		+
		+	* Bootable cdrom IMAGE available {{compaq_update.iso\|here}}
		+	* file: {{compaq_update.iso\|compaq_update.iso}} - includes SP35997.exe HP patch
		+	* md5sum: db0c9b43a4d1cbc4d4360467d115cb6f

hpdl385-bnx2-nic

1200389949		current

http

		current
Line 1:		Line 1:
		+	http://www.robotstxt.org/

ids

1153130339		current
Line 91:		Line 91:

	That would run chkrootkit every night a 3.00h.		That would run chkrootkit every night a 3.00h.
		+

	==== rkhunter ====		==== rkhunter ====
Line 108:		Line 109:

	rkhunter -c		rkhunter -c
		+
		+	==== Lynis ====
		+	download from [[http://www.rootkit.nl/projects/lynis.html\|here]]
		+
		+	# wget http://www.rootkit.nl/files/lynis-1.1.8.tar.gz
		+	# tar xvfz lynis-1.1.8.tar.gz
		+	# ./lynis --check-update
		+	# ./lynis -c
		+

	==== MD5 sum checks ====		==== MD5 sum checks ====

imp

	current
Line 1:	Line 1:
	+	V novem IMPu se vam po defaultu zdaj odpre Horde, imate meni na levi
	+	strani, dodajanje v addressbook ne deluje itd.. Kaj naredimo, da nam
	+	zadeva cimprej zgleda, tako kot je v stari verziji? Gremo v Options,
	+	in pri dolocenih aplikacijah naredimo sledece:

	+	Horde:
	+	- Display options:
	+	- What application should Horde display after login? -> Mail
	+	- Show the Horde Menu on the left? -> Off
	+	Mail:
	+	- Address books:
	+	- Save recipients automatically to the default address book? -> On
	+	- Choose the address book to use when adding addresses. -> My Addressbook
	+
	+	Address book:
	+	- Default Display:
	+	- Addresbook listing -> Display

internet-services

1243204502		current
Line 1:		Line 1:
	http://en.wikipedia.org/wiki/URI_scheme		http://en.wikipedia.org/wiki/URI_scheme
		+
		+	http://lifehacker.com/5330642/massacre-gmail-ads-with-these-two-sentences-and-some-tragic-words

ipod-iphone-itouch

1260227878		current
Line 1:		Line 1:
		+	====== Hacking i{phone\|pod\|touch} ======
		+
		+	===== ipod classic hard reset =====
		+
	1. Toggle the Hold switch on and off. (Slide it to Hold, then turn it off again.)		1. Toggle the Hold switch on and off. (Slide it to Hold, then turn it off again.)
	2. Press and hold the Menu and Center (Select) buttons simultaneously until the Apple logo appears, about 6 to 8 seconds. \\ You may need to repeat this step.		2. Press and hold the Menu and Center (Select) buttons simultaneously until the Apple logo appears, about 6 to 8 seconds. \\ You may need to repeat this step.
-


Line 8:		Line 11:
	* [[http://lifehacker.com/388785/sync-your-iphone-wirelessly-in-linux\|wireless sync]]		* [[http://lifehacker.com/388785/sync-your-iphone-wirelessly-in-linux\|wireless sync]]
	* [[https://help.ubuntu.com/community/PortableDevices/iPhone#Syncing iPhones and iPods Touch w/ Firmware 2.x\|Syncing iPhones with Firmware 2.x]]		* [[https://help.ubuntu.com/community/PortableDevices/iPhone#Syncing iPhones and iPods Touch w/ Firmware 2.x\|Syncing iPhones with Firmware 2.x]]
		+
		+	===== iPhone backup alternative =====
		+
		+	2) If you don’t trust iTunes backup, you should use SCP or iPhoneBrowser and copy /var/mobile/Library/AddressBook to your computer. This contains your contacts. While you’re at it you may want to copy all these:
		+
		+	/var/mobile/Library/AddressBook - Contacts
		+	/var/mobile/Library/Calendar - Your calendar
		+	/var/mobile/Library/Notes - your notes database
		+	/var/mobile/Library/Safari - your bookmarks and cookies
		+	/var/mobile/Library/SMS - your text messages.

ipsec

1151400644		current
Line 1:		Line 1:
		+	====== IPSec ======
		+
		+	see also: [[:linux:ipsec\|IPSec in Linux]], [[:openswan\|Openswan (ex-freeswan)]], [[:openswan:klips26]], [[:openswan:26sec]]
		+
		+
	* http://megaz.arbuz.com/2005/01/28/linux-vpn-guide/		* http://megaz.arbuz.com/2005/01/28/linux-vpn-guide/

irc

1202124890		current
Line 1:		Line 1:
-	[[irc::irc.sioff.net]]	+	[[irc::irc.sioff.net]]\\
-	=== irc odjemalci ===	+	== irc odjemalci ==
	[[http://www.silverex.org/download/\|X-Chat for Windows]]\\		[[http://www.silverex.org/download/\|X-Chat for Windows]]\\
-	[[http://pidgin.im/\| Pidgin - irc, MSN, ICQ, Google talk]]	+	[[http://pidgin.im/\| Pidgin - irc, MSN, ICQ, Google talk]]\\
		+	----
		+	== irc by telnet ==
		+
		+
		+	telnet irc.sioff.net 6667
		+	PASS *
		+	NICK tester
		+	*USER tester 8 :testtester**
		+	JOIN #slo-tech
		+	PRIVMSG #slo-tech Pozdravljeni.
		+	QUIT

juniper

1144088025		current
Line 1:		Line 1:
	====== Juniper Networks stuff ======		====== Juniper Networks stuff ======

-	=== links ===	+
-	* [[http://juniper.cluepon.net/index.php/Main_Page\|Juniper Clue]]	+

kvm

1269899834		current
Line 15:		Line 15:

	hugetlbfs /hugepages hugetlbfs defaults 0 0		hugetlbfs /hugepages hugetlbfs defaults 0 0
		+
		+	<note tip>Calculate the number of huge pages you require
		+
		+	On x86, large pages are 2MB in size so you need to find out how many 2MB pages you need to back your kvm guest. Let’s say you want to use 512 MB for your guest machine then divide 512 by 2 to get 256 pages. Add a few extra pages for additional memory requirements, lets say 40 pages to give a total of 296 pages. Record this value as you’ll need it later on.</note>

	echo 296 > /proc/sys/vm/nr_hugepages		echo 296 > /proc/sys/vm/nr_hugepages

linksys-wrt54gs

	current
Line 1:	Line 1:
	+	The VxWorks firmware defaults to a higher tx power than does DD-WRT.\\
	+	To adjust DD-WRT so that its tx power is equivelent to what it was when using the Linksys VxWorks based firmware set the tx power to 84mw.\\

linux

1202946785		current
Line 10:		Line 10:
	<html></div></html>		<html></div></html>

-	===== Useful programs =====	+	===== Useful links =====
-	^ Program name ^ Description ^	+	* [[http://www.tux.org/pub/people/kent-robotti/looplinux/rip/RIPLinuX-8.6.iso\|(R)ecovery (I)s (P)ossible Linux rescue system (ISO download)]] - Recovery Is Possible (RIP) is a Slackware-based CD boot/rescue/backup/maintenance system. It has support for a lot of filesystem types (Reiserfs, Reiser4, ext2/3, iso9660, UDF, XFS, JFS, UFS, HPFS, HFS, MINIX, MS DOS, NTFS, and VFAT) and contains a bunch of utilities for system recovery. It also has IDE/SCSI/SATA, PCMCIA, RAID, LVM2, and Ethernet/DSL/cable/PPP/PPPOE network support.
-	\| foo \| bar \|	+

mailman

	current
Line 1:	Line 1:
	+	====== Mailman tips & hacks ======
	+
	+	===== Massive mailing (spamming) =====
	+
	+
	+	master.cf
	+	<code>
	+	127.0.0.1:10025 inet n - y - - smtpd
	+	-o local_recipient_maps=
	+	-o relay_recipient_maps=
	+	-o content_filter=
	+	-o smtpd_delay_reject=no
	+	-o smtpd_client_restrictions=permit_mynetworks,reject
	+	-o smtpd_helo_restrictions=
	+	-o smtpd_sender_restrictions=
	+	-o smtpd_recipient_restrictions=permit_mynetworks,reject
	+	-o smtpd_data_restrictions=reject_unauth_pipelining
	+	-o smtpd_end_of_data_restrictions=
	+	-o smtpd_restriction_classes=
	+	-o mynetworks=127.0.0.0/8
	+	-o smtpd_error_sleep_time=0
	+	-o smtpd_soft_error_limit=1001
	+	-o smtpd_hard_error_limit=1000
	+	-o smtpd_client_connection_count_limit=0
	+	-o smtpd_client_connection_rate_limit=0
	+	-o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
	+	-o local_header_rewrite_clients=
	+	</code>
	+
	+
	+	main.cf
	+	<code>
	+	# Mailman / Postfix tunnnig
	+	qmgr_message_active_limit = 40000
	+	qmgr_message_recipient_limit = 40000
	+	default_destination_concurrency_limit=50
	+	default_destination_recipient_limit=50
	+	default_process_limit=150
	+	smtp_mx_session_limit=100
	+	smtpd_client_connection_count_limit=100
	+	smtp_destination_concurrency_limit=100
	+	maximal_backoff_time = 1000s
	+	minimal_backoff_time = 300s
	+	</code>
	+
	+	mailman (mm_cfg.py)
	+	<code>
	+	MTA = "None"
	+	QRUNNER_LOCK_LIFETIME = hours(10)
	+	QRUNNER_PROCESS_LIFETIME = minutes(15)
	+	QRUNNER_MAX_MESSAGES = 500
	+
	+	SMTP_MAX_RCPTS = 10
	+	SMTP_MAX_SESSIONS_PER_CONNECTION = 0
	+
	+	SMTPHOST = 'localhost'
	+	SMTPPORT = 10025
	+	</code>
	+
	+	Mailman settings
	+	if you're having problems with memory .. turn off bounces / redirect bounce aliase to /dev/null.
	+

mediawiki

	current
Line 1:	Line 1:
	+	====== Mediawiki Tips ======
	+
	+	* [[http://www.mediawiki.org/wiki/MediaWiki]]
	+
	+	===== using very short URLs =====
	+
	+	a good page to start: [[http://meta.wikimedia.org/wiki/Using_a_very_short_URL]]; configuration below tested with Apache 2.0.x on Debian Sarge and Mediwiki 1.6.x.
	+
	+	''/etc/apache/sites/site.conf''
	+	<Virtualhost IP>
	+	.....
	+	RewriteEngine On
	+	RewriteCond %{REQUEST_URI} !^/(stylesheets\|images\|skins\|data)/
	+	RewriteCond %{REQUEST_URI} !^/(redirect\|texvc\|index).php
	+	RewriteCond %{REQUEST_URI} !^/error/(40(1\|3\|4)\|500).html
	+	RewriteCond %{REQUEST_URI} !^/favicon.ico
	+	RewriteCond %{REQUEST_URI} !^/robots.txt
	+	RewriteRule ^/(.*)$ /index.php/$1 [L,QSA]
	+
	+	</Virtualhost IP>
	+
	+
	+	''LocalSettings.php''
	+	$wgScriptPath = "";
	+	$wgScript = "$wgScriptPath/index.php";
	+	$wgRedirectScript = "$wgScriptPath/redirect.php";
	+	$wgArticlePath = "/$1";

misc

1282563383		current
Line 96:		Line 96:
	* [[http://www.thegeekstuff.com/2010/03/debug-c-program-using-gdb/\|How to Debug C Program using gdb in 5 Simple Steps]]		* [[http://www.thegeekstuff.com/2010/03/debug-c-program-using-gdb/\|How to Debug C Program using gdb in 5 Simple Steps]]
	* [[http://www.rinkworks.com/namegen/\|Fantasy name generator]]		* [[http://www.rinkworks.com/namegen/\|Fantasy name generator]]
		+
		+	=== Free Stock Photos ===
		+
		+	* [[http://sxc.hu/\|Stock Xchng]] – You will have to register, but it’s well worth it. You can definitely find some top quality images that can easily be used in presentations. Some of my favorites are the images with a white background, like this one.
		+	* [[http://www.everystockphoto.com/\|everystockphoto]] – This service scrapes a number of free stock photo websites and pulls them all together. Think of it as a stock image aggregator.
		+	* [[http://www.stockvault.net/\|StockVault]] – Similar service to Stock Xchng. You can find really great images that are of professional quality and would look great projected on a screen.
		+	* [[http://www.freephotosbank.com/\|FreePhotosBank]] – Free Stock Photos, just like the title says. Great thing about this service is that you don’t need to create an account. You can just log onto the website and search for images related to your presentation and download them freely.
		+	* [[http://www.flickr.com/\|Flickr]] – Probably one of the best services ever invented. Anyone can upload photos and there are literally thousands of photos uploaded every day. Some of them have been rights-reserved, so best way to approach Flickr is to use the [[http://www.flickr.com/search/advanced/\|Advanced Search]] option and scroll to the bottom. Check the “Only search within Creative Commons-licensed content” box and be on your merry way.
		+

mono

		current
Line 1:		Line 1:
		+	Some simple infomation about using Mono project.

mplayer

1157346163		current
Line 1:		Line 1:
-	mplayer -dumpfile stream.[wmv\|rm] -dumpstream [rtsp\|mms]://url/file.[asx\|rm\|wmv]	+	mplayer -dumpfile stream.[wmv\|rm] -dumpstream [rtsp\|mms]://url/file.[asx\|rm\|wmv]
		+
		+	===== Play .mkv smoothly =====
		+
		+	mplayer -vfm ffmpeg -lavdopts lowres=0:fast:skiploopfilter=all video.mkv

mpls

		current
Line 1:		Line 1:
		+	MPLS Quick Reference guide - http://ruhann.files.wordpress.com/2010/02/mpls-quick-reference.pdf

mysql-circular-replication-automated-handling

1224876178		current
Line 1:		Line 1:
-	Circular multimaster replication is poorly documented in the mysql circles. So putting together a script like this requires a lot of info hunting and testing. Still, I can't guarantee it won't eat your data ;)	+	Circular multimaster replication is poorly documented in the mysql circles. So putting together a script like this requires a lot of info hunting and testing. Right now it survives sql-bench with random node shutdowns, but I can't guarantee it won't eat your data ;)
	Feel free to improve with logging etc.		Feel free to improve with logging etc.

Line 19:		Line 19:
	MYSQLPARAMS=""		MYSQLPARAMS=""

-	#who should my master by	+	#who should my master be

	case "`hostname`" in		case "`hostname`" in
Line 148:		Line 148:
	then		then
	echo but $MYMASTER is not yet back		echo but $MYMASTER is not yet back
		+	#also check the current master
		+	check_current_master
		+	if [ $? -ne 0 ]
		+	then
		+	#uhh now what
		+	[ "`echo $MASTERLIST \| cut -f1 -d:`" = "`get_master_host`" ] && REMAINING="`echo $MASTERLIST \| cut -f2 -d:`" \|\| REMAINING="`echo $MASTERLIST \| cut -f1 -d:`"
		+	echo $REMAINING is still there
		+	change_master_to $REMAINING
		+	fi
	else		else
	change_master_to $MYMASTER		change_master_to $MYMASTER

mysql

1238354839		current
Line 101:		Line 101:
	\\		\\
	</code>		</code>
		+
		+	=== Reducing ibdata mysql file ===
		+	http://vdachev.net/blog/2007/02/22/mysql-reducing-ibdata1/
		+

nagios

1172589766		current
Line 1:		Line 1:
	====== Nagios ======		====== Nagios ======
		+


Line 9:		Line 10:
	* [[http://fruity.sourceforge.net/]]		* [[http://fruity.sourceforge.net/]]
	* [[http://www.openfusion.com.au/labs/nagios/]]		* [[http://www.openfusion.com.au/labs/nagios/]]
		+	* [[http://www.nagios-portal.org/wbb/index.php?page=Portal&l=2\|Nagios Portal]]

netcat

1155034240		current
Line 1:		Line 1:
-	Using netcat and tar to quickly transfer files between machines, aka tar pipe	+	====== Using netcat and tar to quickly transfer files between machines, aka tar pipe ======

	So you have gigs of data to transfer between two machines over ethernet. A nice quick and dirty method is to use netcat and tar. This is by no means secure, but if you haven't got the time or desire to setup NFS, FTPd, Samba. Or wait hours for scp to do it's job then this can save you a lot of time.		So you have gigs of data to transfer between two machines over ethernet. A nice quick and dirty method is to use netcat and tar. This is by no means secure, but if you haven't got the time or desire to setup NFS, FTPd, Samba. Or wait hours for scp to do it's job then this can save you a lot of time.
-	Linux System using tar and netcat	+
		+	===== Linux System using tar and netcat =====

	On the receiving end do:		On the receiving end do:
-	# netcat -l -p 7000 \| tar x	+	# netcat -l -p 7000 \| tar x

	And on the sending end do:		And on the sending end do:
-	# tar cf - * \| netcat otherhost 7000	+	# tar cf - * \| netcat otherhost 7000
	Notes		Notes

	Depending on your hardware you might want to use compression with tar. You'll probably find your hard disk drive is a bottleneck on a fast network. Compression is useless if you can't saturate your network and will probably just slow things down. tar cf - * is copy everything in the current working directory. And your files will be untared at the other end from where you started the listening netcat. It won't be obivous that the operation is finished so you'll need to check network activity or top. This is indeed quick and dirty.		Depending on your hardware you might want to use compression with tar. You'll probably find your hard disk drive is a bottleneck on a fast network. Compression is useless if you can't saturate your network and will probably just slow things down. tar cf - * is copy everything in the current working directory. And your files will be untared at the other end from where you started the listening netcat. It won't be obivous that the operation is finished so you'll need to check network activity or top. This is indeed quick and dirty.
-	OpenBSD using tar and nc	+
		+	===== OpenBSD using tar and nc =====

	OpenBSD usually offers a much tighter system rather than the mess you have with Linux. OpenBSD has it's own verison of netcat just refered as nc. The tar command is less sloppy than what you find in Linux. So if you're using two OpenBSD machines then one would do the following.		OpenBSD usually offers a much tighter system rather than the mess you have with Linux. OpenBSD has it's own verison of netcat just refered as nc. The tar command is less sloppy than what you find in Linux. So if you're using two OpenBSD machines then one would do the following.

	On the receiving end do:		On the receiving end do:
-	# nc -l 7000 \| tar -xpf -	+	# nc -l 7000 \| tar -xpf -

	And on the sending end do:		And on the sending end do:
-	# tar -cf - * \| nc otherhost 7000	+	# tar -cf - * \| nc otherhost 7000

networking

1282029994		current
Line 57:		Line 57:
	\| [[http://www.nta-monitor.com/tools/ike-scan/\|ike-scan]] \| ike-scan is a command-line tool that uses the IKE protocol to discover, fingerprint and test IPsec VPN servers. It is available for Linux, Unix, MacOS and Windows under the GPL license. \|		\| [[http://www.nta-monitor.com/tools/ike-scan/\|ike-scan]] \| ike-scan is a command-line tool that uses the IKE protocol to discover, fingerprint and test IPsec VPN servers. It is available for Linux, Unix, MacOS and Windows under the GPL license. \|
	\| [[http://tcpick.sourceforge.net/index.php\|Tcpick Tcp Stream Sniffer and Connection Tracker]] \| tcpick is a textmode sniffer libpcap-based that can track, reassemble and reorder tcp streams. Tcpick is able to save the captured flows in different files or displays them in the terminal, and so it is useful to sniff files that are transmitted via ftp or http. It can display all the stream on the terminal, when the connection is closed in different display modes like hexdump, hexdump + ascii, only printable charachters, raw mode and so on. Available a color mode too, helpful to read and understand better the output of the program. Actually it can handle several interfaces, including ethernet cards and ppp. It is useful to keep track of what users of a network are doing, and is usable with textmode tools like grep, sed, awk. \|		\| [[http://tcpick.sourceforge.net/index.php\|Tcpick Tcp Stream Sniffer and Connection Tracker]] \| tcpick is a textmode sniffer libpcap-based that can track, reassemble and reorder tcp streams. Tcpick is able to save the captured flows in different files or displays them in the terminal, and so it is useful to sniff files that are transmitted via ftp or http. It can display all the stream on the terminal, when the connection is closed in different display modes like hexdump, hexdump + ascii, only printable charachters, raw mode and so on. Available a color mode too, helpful to read and understand better the output of the program. Actually it can handle several interfaces, including ethernet cards and ppp. It is useful to keep track of what users of a network are doing, and is usable with textmode tools like grep, sed, awk. \|
		+	\| [[http://www.brendangregg.com/chaosreader.html\|Chaosreader]] \| A open source tool to trace TCP/UDP/... sessions and fetch application data from snoop or tcpdump logs. This is a type of "any-snarf" program, as it will fetch telnet sessions, FTP files, HTTP transfers (HTML, GIF, JPEG, ...), SMTP emails, ... from the captured data inside network traffic logs. A html index file is created that links to all the session details, including realtime replay programs for telnet, rlogin, IRC, X11 or VNC sessions; and reports such as image reports and HTTP GET/POST content reports. Chaosreader can also run in standalone mode - where it invokes tcpdump or snoop (if they are available) to create the log files and then processes them. \|

nexenta-gnusolaris

1202135866		current
Line 10:		Line 10:
	So the answer is to install manually on one disk, where you create a small (eg 20gb) root slice, 1gb swap slice and the rest for /export/home or whatever. Let the install finish, reboot, format the other drive that will become a mirror to the one you installed on (warning, solaris slices! :) and then use zpool attach <poolname> <existing device> <new device> to create a mirror. What remains is just installgrub on the new device and voila, you have a mirrored bootable zfs root gnu/opensolaris system.		So the answer is to install manually on one disk, where you create a small (eg 20gb) root slice, 1gb swap slice and the rest for /export/home or whatever. Let the install finish, reboot, format the other drive that will become a mirror to the one you installed on (warning, solaris slices! :) and then use zpool attach <poolname> <existing device> <new device> to create a mirror. What remains is just installgrub on the new device and voila, you have a mirrored bootable zfs root gnu/opensolaris system.

-	Few tricks: if format complains about not being able to relabel a disk that is in use, simply export NOINUSE_CHECK=1. Also when creating a zpool from slices, it complains that s0 overlaps with s2 (which should be that way, if I understand slices corectly), but we can simply use zpool create -f. After you created your zpool and zfs volumes to your desire, be sure to check zfs get all <name> and check what all can you set on them. I found compression=on and atime=off very userful :)	+	Few tricks: if format complains about not being able to relabel a disk that is in use, simply export NOINUSE_CHECK=1. Also when creating a zpool from slices, it complains that s0 overlaps with s2 (which should be that way, if I understand slices corectly), but we can simply use zpool create -f. After you created your zpool and zfs volumes to your desire, be sure to check zfs get all <name> and check what all can you set on them. I found compression=on and atime=off very userful. Also set snapdir=visible if you plan to offer backup history via shapshots. It's amazingly simple :)

nginx

1243204502		current
Line 1:		Line 1:
		+	====== NGINX ======
		+
		+	===== Restricted access with password + exclude IP list =====
		+
		+	<code>
		+	location /
		+	{ satisfy any;
		+	allow 192.1.1.1;
		+	auth_basic "Restricted";
		+	auth_basic_user_file /usr/local/nginx/conf/htpasswd;
		+	deny all;
		+	}
		+	</code>
		+
		+
		+
	fastcgi_pass unix:/tmp/fastcgi.socket;		fastcgi_pass unix:/tmp/fastcgi.socket;

nids

1151340205		current
Line 4:		Line 4:
	* [[http://secureideas.sourceforge.net/index.php\|BASE]]		* [[http://secureideas.sourceforge.net/index.php\|BASE]]
	* [[http://www.prelude-ids.com/\|Prelude IDS (Hybrid)]]		* [[http://www.prelude-ids.com/\|Prelude IDS (Hybrid)]]
		+	* [[http://www.skynet-solutions.net/easyids/default.asp\| EasyIDS]]

notebook

	current
Line 1:	Line 1:
	+	<pegasus_> [19:55] lowkey: sysctl vm.laptop_mode=1 ... mount z -o commit=600 or more ... hdparm za spindown after 1min of inactivity ...
	+	<pegasus_> [19:55] pa cpu downclockas kokr se ga pac da ...
	+	<idioterna> [20:02] pa syslog ubij.

ntp

1243204502		current
Line 1:		Line 1:
-	ipv6 ntp pool - eu.ntp.sixxs.net	+	ipv6 ntp pool - eu.ntp.sixxs.net\\
		+	\\
		+
		+	ubuntu/debian:\\
		+	ln -s /etc/openntpd/ntp.conf /etc/ntp.conf

openldap

	current
Line 1:	Line 1:
	+	====== OpenLDAP ======

openoffice.org

1205938022		current
Line 1:		Line 1:
-	[[http://tuxtraining.com/2008/03/04/speed-up-start-time-for-openofficeorg/\|Speed up OoO starup time]]	+	[[http://tuxtraining.com/2008/03/04/speed-up-start-time-for-openofficeorg/\|Speed up OoO startup time]]
		+
		+	tools-> Java- uncheck use Java runtime environment

openswan

1168000776		current
Line 5:		Line 5:
	see: [[http://www.openswan.org\|Openswan main page]], [[http://wiki.openswan.org\|Openswan's Wiki]]		see: [[http://www.openswan.org\|Openswan main page]], [[http://wiki.openswan.org\|Openswan's Wiki]]

		+	===== ipsec.secrets =====
		+	<code \|f ipsec.secrets>
		+	x.x.x.x
		+	x.x.x.x %any: PSK "<secretkeygoeshere>"
		+	: RSA {
		+	# RSA 2048 bits erwin Tue Apr 1 19:54:25 2008
		+	# for signatures only, UNSAFE FOR ENCRYPTION
		+	#pubkey=0sAQOLURatBjxUM9StRL7M0++UoZTAsbmMa5ucAb.....
		+	</code>

	===== OpenSWAN + Cisco PIX =====		===== OpenSWAN + Cisco PIX =====

openvpn

1243204502		current
Line 100:		Line 100:
	FIXME - alternative way		FIXME - alternative way

-	<code bash\| >	+	<code>
	#!/bin/bash		#!/bin/bash
	echo Exporting private KEY		echo Exporting private KEY

openvz

1264765703		current

os

	current
Line 1:	Line 1:
	+	<box 70% round green left\|Learn nix>*
	+	* [[http://cb.vu/unixtoolbox.xhtml\|Unix Toolbox]]
	+	* [[http://www.ee.surrey.ac.uk/Teaching/Unix/\|UNIX Tutorial for Beginners]]
	+	* [[http://linuxcommand.org/learning_the_shell.php\|Learning the shell]]
	+	* [[http://freeengineer.org/learnUNIXin10minutes.html\|Learn UNIX in 10 minutes]]
	+	* [[http://www.cs.usfca.edu/~parrt/course/601/lectures/unix.util.html\|How To Look Like A UNIX Guru]]
	+	* [[http://www.pixelbeat.org/cmdline.html\|linux command line reference]]
	+	* [[http://www.scottklarr.com/topic/115/linux-unix-cheat-sheets---the-ultimate-collection/\|Linux-Unix cheat sheets - The ultimate collection]]
	+	* [[http://www.oreillynet.com/linux/cmd/\|Alphabetical Directory of Linux Commands]]
	+	</box>

osx

		current
Line 1:		Line 1:
		+	http://www.cyberciti.biz/faq/disabling-unnecessary-mac-osx-services/

password

1243874705		current
Line 44:		Line 44:
	}		}
	}		}
-	</perl>	+	</code>

perl

1222454054		current
Line 1:		Line 1:
		+	===== An interactive perl shell =====
		+	<code perl\|f perlsh.pl>
		+	#!perl
		+
		+	use strict;
		+	no strict 'vars';
		+	no strict 'refs';
		+	use warnings;
		+
		+	use Data::Dumper;
		+	$Data::Dumper::Indent--;
		+
		+	$\| = 1;
		+
		+	# an alias for exit()
		+	sub quit { exit; }
		+
		+	my ($ver,$maj,$min) = ($] =~ /(\d+)\.(\d{3})(\d{3})/);
		+	$maj += 0;
		+	$min += 0;
		+	print +(split '/', $^X)[-1], " $ver.$maj.$min\n";
		+
		+	$, = ',';
		+	$THE_PROMPT = '% ';
		+	print $THE_PROMPT;
		+	while (<>) { print eval; print +($@ \|\| "\n") . $THE_PROMPT };
		+	</code>
		+
		+	usage:
		+	<code>
		+	$ alias perlsh='perl ~/bin/perlsh.pl'
		+	$ perlsh
		+	perl.exe 5.10.0
		+	% @l=qw(the quick brown fox jumps over the lazy dog)
		+	the,quick,brown,fox,jumps,over,the,lazy,dog
		+	% @sorted_by_length = map {$_->[0]} sort {$a->[1] <=> $b->[1]} map {[$_, length]} @l
		+	the,fox,the,dog,over,lazy,quick,brown,jumps
		+	</code>
		+
		+
	===== Optimizing Perl =====		===== Optimizing Perl =====

php

1243204502		current
Line 104:		Line 104:
	make		make
	make install		make install
		+
		+	--without-eaccelerator-use-inode [bug with open_basedir - safe mode]

	* See [[http://eaccelerator.net/SourceInstallationUk\|Instalation from source]]		* See [[http://eaccelerator.net/SourceInstallationUk\|Instalation from source]]

pidgin

1243204502		current
Line 1:		Line 1:
	http://code.google.com/p/msn-pecan/		http://code.google.com/p/msn-pecan/
		+
		+	http://www.cypherpunks.ca/otr/ - Off-the-Record (OTR) Messaging allows you to have private conversations over instant messaging

postfix

1243204502		current
Line 177:		Line 177:
	240.0.0.0/5 REJECT Domain MX in class E reserved network		240.0.0.0/5 REJECT Domain MX in class E reserved network
	248.0.0.0/5 REJECT Domain MX in reserved network		248.0.0.0/5 REJECT Domain MX in reserved network
		+
		+	source - IPv4 bogon list - http://www.cymru.com/Documents/bogon-bn-agg.txt

	==========		==========

postgresql

1243204502		current
Line 117:		Line 117:
	order by whenx desc		order by whenx desc

		+	terminate a query which is taking a long time to run
		+	SELECT procpid, current_query, query_start
		+	FROM pg_stat_activity;
		+	kill -INT procpid

pureftpd

	current
Line 1:	Line 1:
	+	/etc/
	+
	+	* AllowAnonymousFXP
	+	* AllowDotFiles
	+	* AllowUserFXP
	+	* AltLog
	+	* AnonymousBandwidth
	+	* AnonymousCanCreateDirs
	+	* AnonymousCantUpload
	+	* AnonymousOnly
	+	* AnonymousRatio
	+	* AntiWarez
	+	* AutoRename
	+	* Bind
	+	* BrokenClientsCompatibility
	+	* CallUploadScript
	+	* ChrootEveryone
	+	* ClientCharset
	+	* CreateHomeDir
	+	* CustomerProof
	+	* Daemonize
	+	* DisplayDotFiles
	+	* DontResolve
	+	* ForcePassiveIP
	+	* FortunesFile
	+	* FsCharset
	+	* IPV4Only
	+	* IPV6Only
	+	* KeepAllFiles
	+	* LimitRecursion
	+	* LogPID
	+	* MaxClientsNumber
	+	* MaxClientsPerIP
	+	* MaxDiskUsage
	+	* MaxIdleTime
	+	* MaxLoad
	+	* MinUID
	+	* NATmode
	+	* NoAnonymous
	+	* NoChmod
	+	* NoRename
	+	* NoTruncate
	+	* PassivePortRange
	+	* PerUserLimits
	+	* ProhibitDotFilesRead
	+	* ProhibitDotFilesWrite
	+	* Quota
	+	* SyslogFacility
	+	* TLS
	+	* TrustedGID
	+	* TrustedIP
	+	* Umask
	+	* UserBandwidth
	+	* UserRatio
	+	* VerboseLog

python

1149804020		current
Line 2:		Line 2:

	see: [[http://www.red-sweater.com/blog/140/learn-python\|Good article about learning python]], [[http://nodebox.net/]]		see: [[http://www.red-sweater.com/blog/140/learn-python\|Good article about learning python]], [[http://nodebox.net/]]
		+

	==== python interpreter (history + autocomplete) ====		==== python interpreter (history + autocomplete) ====

	''.pyrc''		''.pyrc''
-	try:	+	# startup script for python to enable saving of interpreter history and
-	import readline	+	# enabling name completion
-	except ImportError:	+
-	print "Module readline not available."	+	# import needed modules
-	else:	+	import atexit
-	import rlcompleter	+	import os
-	readline.parse_and_bind("tab: complete")	+	import readline
-	import os	+	import rlcompleter
-	histfile = os.path.join(os.environ["HOME"], ".pyhist")	+
-	try:	+	# where is history saved
-	readline.read_history_file(histfile)	+	historyPath = os.path.expanduser("~/.pyhistory")
-	except IOError:	+
-	pass	+	# handler for saving history
-	import atexit	+	def save_history(historyPath=historyPath):
-	atexit.register(readline.write_history_file, histfile)	+	import readline
-		+	readline.write_history_file(historyPath)
		+
		+	# read history, if it exists
		+	if os.path.exists(historyPath):
		+	readline.read_history_file(historyPath)
		+
		+	# register saving handler
		+	atexit.register(save_history)
		+
		+	# enable completion
		+	readline.parse_and_bind('tab: complete')
		+
		+	# cleanup
		+	del os, atexit, readline, rlcompleter, save_history, historyPath
		+
	''.bashrc''		''.bashrc''
	export PYTHONSTARTUP=~/.pyrc		export PYTHONSTARTUP=~/.pyrc

raid1_on_windows_xp

1203078401		current
Line 46:		Line 46:

	yes...do that atleast 3 times.		yes...do that atleast 3 times.
		+
		+
		+	<note tip>
		+	Windows XP SP3 breaks this "raid1 hack" and files had to be replaced or edited again via recovery console".
		+	</note>

ripe

1257425058		current
Line 42:		Line 42:
	=== .SI prefix ACL ===		=== .SI prefix ACL ===

		+	TO-Slovenia:\\
	http://ip.ludost.net/cgi/process?country=1&country_list=si&format_template=cisco-ext-modular-dst&format_name=to-slovenija&format_target=permit&format_default=deny\\		http://ip.ludost.net/cgi/process?country=1&country_list=si&format_template=cisco-ext-modular-dst&format_name=to-slovenija&format_target=permit&format_default=deny\\
		+
		+	FROM-Slovenia:\\
		+	http://ip.ludost.net/cgi/process?country=1&country_list=si&format_template=cisco-ext-modular-src&format_name=from-slovenija&format_target=permit&format_default=deny

rt

1223574899		current
Line 2:		Line 2:

	===== Scripts =====		===== Scripts =====
		+
		+
		+
		+
		+
		+
		+

	===== Optimization =====		===== Optimization =====
Line 13:		Line 20:

	===== Howto =====		===== Howto =====
		+
		+	==== Request tracker 3.8.2 (Ubuntu-LTS) + NGINX + PostgreSQL ====
		+
		+	<code>
		+	wget http://download.bestpractical.com/pub/rt/release/rt-3.8.2.tar.gz
		+	tar -xvzf rt-3.8.2.tar.gz
		+	make testdeps
		+	make fixdeps
		+	apt-get install mysql-client
		+	apt-get install libdbd-pg-perl libclass-dbi-pg-perl
		+	make testdeps
		+	make install
		+	</code>
		+
		+	Upgrading PostgreSQL database
		+	## make upgrade
		+	/opt/rt3/sbin/rt-setup-database --dba rtuser --prompt-for-dba-password --action upgrade
		+
		+	=== NGINX setup ===
		+
		+	Useful links:
		+	* http://wiki.bestpractical.com/view/FastCGIConfiguration
		+	* http://www.nginx.eu/nginx-fcgi/nginx-fcgi.txt
		+	* http://www.nginx.eu/nginx-fcgi.html
		+
		+	FCGI/init script
		+	<code bash\|f /etc/init.d/rt.fcgi>
		+	#!/bin/sh
		+
		+	RTPATH=/opt/rt3
		+	RTUSER=www-data
		+	#FCGI_SOCKET_PATH=$RTPATH/var/fastcgi
		+	FCGI_SOCKET_PATH=/tmp/rt.fcgi
		+
		+	case $1 in
		+	start)
		+	echo -n "Starting RT: mason_handler.fcgi"
		+	cd $RTPATH
		+	export FCGI_SOCKET_PATH
		+	su $RTUSER -c "$RTPATH/bin/mason_handler.fcgi" &
		+	echo
		+	;;
		+
		+	stop)
		+	echo -n "Stopping RT: "
		+	PIDS=`ps axww \| awk '/[m]ason_handler.fcgi/ { print $1}'`
		+	if [ -n "$PIDS" ]
		+	then
		+	echo -n kill -TERM $PIDS
		+	kill $PIDS
		+	echo
		+	else
		+	echo RT not running
		+	fi
		+	;;
		+
		+	restart\|force-reload)
		+	$0 stop
		+	$0 start
		+	;;
		+
		+	*)
		+	echo "Usage: /etc/init.d/rt { stop \| start \| restart }"
		+	exit 1
		+	;;
		+	esac
		+	</code>
		+
		+	nginx request-tracker vhost config
		+	<code \|f /etc/nginx/sites-enable/rt>
		+	server {
		+	listen 80;
		+	server_name rt.xxxx.si;
		+	access_log /var/log/nginx/rt.xxxx.si-access.log;
		+
		+	location / {
		+	fastcgi_pass unix:/tmp/rt.fcgi;
		+	#fastcgi_x_powered_by off; # default on
		+	fastcgi_param DOCUMENT_ROOT /opt/rt3/share/html;
		+	fastcgi_param SCRIPT_FILENAME /opt/rt3/share/html$fastcgi_script_name;
		+	fastcgi_param PATH_TRANSLATED /opt/rt3/share/html$fastcgi_script_name;
		+	fastcgi_param SCRIPT_NAME $fastcgi_script_name;
		+	fastcgi_param QUERY_STRING $query_string;
		+	fastcgi_param CONTENT_TYPE $content_type;
		+	fastcgi_param CONTENT_LENGTH $content_length;
		+	fastcgi_param REDIRECT_STATUS 200;
		+	fastcgi_param SERVER_ADDR $server_addr;
		+	fastcgi_param SERVER_PORT $server_port;
		+	fastcgi_param SERVER_PROTOCOL $server_protocol;
		+	fastcgi_param SERVER_SOFTWARE "nginx/0.3.15";
		+	fastcgi_param GATEWAY_INTERFACE "CGI/1.1";
		+	fastcgi_param SERVER_NAME $server_name;
		+	fastcgi_param SERVER_NAME $server_name;
		+	fastcgi_param REQUEST_URI $request_uri;
		+	fastcgi_param REQUEST_METHOD $request_method;
		+	fastcgi_param REMOTE_USER $remote_user;
		+	fastcgi_param REMOTE_ADDR $remote_addr;
		+	fastcgi_param REMOTE_PORT $remote_port;
		+	}
		+	location ~* .+\.(html\|js\|css)$ {
		+	fastcgi_pass unix:/tmp/rt.fcgi;
		+	#fastcgi_x_powered_by off; # default on
		+	fastcgi_param DOCUMENT_ROOT /opt/rt3/share/html;
		+	fastcgi_param SCRIPT_FILENAME /opt/rt3/share/html$fastcgi_script_name;
		+	fastcgi_param PATH_TRANSLATED /opt/rt3/share/html$fastcgi_script_name;
		+	fastcgi_param SCRIPT_NAME $fastcgi_script_name;
		+	fastcgi_param QUERY_STRING $query_string;
		+	fastcgi_param CONTENT_TYPE $content_type;
		+	fastcgi_param CONTENT_LENGTH $content_length;
		+	fastcgi_param REDIRECT_STATUS 200;
		+	fastcgi_param SERVER_ADDR $server_addr;
		+	fastcgi_param SERVER_PORT $server_port;
		+	fastcgi_param SERVER_PROTOCOL $server_protocol;
		+	fastcgi_param SERVER_SOFTWARE "nginx/0.3.15";
		+	fastcgi_param GATEWAY_INTERFACE "CGI/1.1";
		+	fastcgi_param SERVER_NAME $server_name;
		+	fastcgi_param SERVER_NAME $server_name;
		+	fastcgi_param REQUEST_URI $request_uri;
		+	fastcgi_param REQUEST_METHOD $request_method;
		+	fastcgi_param REMOTE_USER $remote_user;
		+	fastcgi_param REMOTE_ADDR $remote_addr;
		+	fastcgi_param REMOTE_PORT $remote_port;
		+	}
		+
		+	location /NoAuth/images/ {
		+	alias /opt/rt3/share/html/NoAuth/images/;
		+	}
		+	}
		+	</code>
		+
		+	=== adding RTFM ===
		+
		+	Download RTFM
		+
		+	tar -xzvf rtfm.tar.gz
		+
		+	Install and patch the database
		+
		+	cd RTFM-2.4.0
		+	perl Makefile.PL
		+	make install
		+	make initdb
		+
		+	add follwing line to /opt/rt3/etc/RT_SiteConfig.pm
		+	Set(@Plugins,qw(RT::FM));
		+
	==== Changing user pref "Illegal value for EmailAddress"====		==== Changing user pref "Illegal value for EmailAddress"====
	If you try to change your email and RT returns you an error "''Illegal value for EmailAddress''" means that this email address is already in the database. Workaround:		If you try to change your email and RT returns you an error "''Illegal value for EmailAddress''" means that this email address is already in the database. Workaround:

sa

		current
Line 1:		Line 1:
		+	see [[:spamassassin]]

security

1243204502		current
Line 87:		Line 87:
	* [[http://www.bastille-unix.org/\|Bastille linux]]		* [[http://www.bastille-unix.org/\|Bastille linux]]
	* {{facebook_privacy_and_security_guide.pdf\|Facebook Privacy & Security Guide}}		* {{facebook_privacy_and_security_guide.pdf\|Facebook Privacy & Security Guide}}
		+	* [[http://www.fbpurity.com/ Facebook Purity - greasemonkey script]]

	----		----

selinux

1243204502		current
Line 127:		Line 127:

	# semanage user -m -R"unconfined_r webadm_r staff_r" staff_u		# semanage user -m -R"unconfined_r webadm_r staff_r" staff_u
		+
		+	===== 4 Effective Methods to Disable SELinux Temporarily or Permanently =====
		+
		+	==== Method 1: Disable SELinux Temporarily ====
		+
		+	To disable SELinux temporarily you have to modify the /selinux/enforce file as shown below. Please note that this setting will be gone after the reboot of the system.
		+
		+	# cat /selinux/enforce
		+	1
		+	# echo 0 > /selinux/enforce
		+	# cat /selinux/enforce
		+	0
		+
		+
		+	You can also use setenforce command as shown below to disable SELinux. Possible parameters to setenforce commands are: Enforcing , Permissive, 1 (enable) or 0 (disable).
		+
		+	# setenforce 0
		+
		+	==== Method 2: Disable SELinux Permanently ====
		+
		+
		+	To disable the SELinux permanently, modify the /etc/selinux/config and set the SELINUX=disabled as shown below. One you make any changes to the /etc/selinux/config, reboot the server for the changes to be considered.
		+
		+	# cat /etc/selinux/config
		+	SELINUX=disabled
		+	SELINUXTYPE=targeted
		+	SETLOCALDEFS=0
		+
		+
		+	Following are the possible values for the SELINUX variable in the /etc/selinux/config file
		+
		+	* enforcing - The Security Policy is always Encoforced
		+	* permissive - This just simulates the enforcing policy by only printing warning messages and not really enforcing the SELinux. This is good to first see how SELinux works and later figure out what policies should be enforced.
		+	* disabled - Completely disable SELinux
		+
		+
		+	Following are the possible values for SELINUXTYPE variable in the /etc/selinux/config file. This indicates the type of policies that can be used for the SELinux.
		+
		+	* targeted - This policy will protected only specific targeted network daemons.
		+	* strict - This is for maximum SELinux protection.
		+
		+	==== Method 3: Disable SELinux from the Grub Boot Loader ====
		+
		+	If you can’t locate /etc/selinux/config file on your system, you can pass disable SELinux by passing it as parameter to the Grub Boot Loader as shown below.
		+
		+	<code>
		+	# cat /boot/grub/grub.conf
		+	default=0
		+	timeout=5
		+	splashimage=(hd0,0)/boot/grub/splash.xpm.gz
		+	hiddenmenu
		+	title Enterprise Linux Enterprise Linux Server (2.6.18-92.el5PAE)
		+	root (hd0,0)
		+	kernel /boot/vmlinuz-2.6.18-92.el5PAE ro root=LABEL=/ rhgb quiet selinux=0
		+	initrd /boot/initrd-2.6.18-92.el5PAE.img
		+	title Enterprise Linux Enterprise Linux Server (2.6.18-92.el5)
		+	root (hd0,0)
		+	kernel /boot/vmlinuz-2.6.18-92.el5 ro root=LABEL=/ rhgb quiet selinux=0
		+	initrd /boot/initrd-2.6.18-92.el5.img
		+	</code>
		+
		+	==== Method 4: Disable Only a Specific Service in SELinux - HTTP/Apache ====
		+
		+
		+	If you are not interested in disability the whole SELinux, you can also disable SELinux only for a specific service. For example, do disable SELinux for HTTP/Apache service, modify the httpd_disable_trans variable in the /etc/selinux/targeted/booleans file.
		+
		+	Set the httpd_disable_trans variable to 1 as shown below.
		+
		+	<code>
		+	# grep httpd /etc/selinux/targeted/booleans
		+	httpd_builtin_scripting=1
		+	httpd_disable_trans=1
		+	httpd_enable_cgi=1
		+	httpd_enable_homedirs=1
		+	httpd_ssi_exec=1
		+	httpd_tty_comm=0
		+	httpd_unified=1
		+	</code>
		+
		+	Set SELinux boolean value using setsebool command as shown below. Make sure to restart the HTTP service after this change.
		+
		+	# setsebool httpd_disable_trans 1
		+	# service httpd restart
		+

serveraid

1243204502		current
Line 1:		Line 1:
	====== IBM Serveraid tips ======		====== IBM Serveraid tips ======
		+
		+	===== Monitoring HW raid device (debian way) =====
		+
		+	# lspci
		+	04:01.0 SCSI storage controller: LSI Logic / Symbios Logic 53c1030 PCI-X Fusion-MPT Dual Ultra320 SCSI (rev 08)
		+
		+	install 'mpt-status'
		+
		+	apt-get install mpt-status
		+
		+	get load modules/use mpt-status
		+	mknod /dev/mptctl c 10 220
		+	modprobe mptctl
		+	mpt-status

	===== Monitoring state of IBM Serveraid raid-set using NAGIOS =====		===== Monitoring state of IBM Serveraid raid-set using NAGIOS =====

sidebar

1138661175		current
Line 1:		Line 1:
	====== Sitemap ======		====== Sitemap ======
-
	* [[:start\|home]]		* [[:start\|home]]
		+	* [[:os\|operation systems]]
		+	* [[:internet services]]
		+	* [[:security]]
		+	* [[:networking]]
	* [[:software]]		* [[:software]]
	* [[:hardware]]		* [[:hardware]]
	* [[:misc]]		* [[:misc]]

software

1260228222		current
Line 33:		Line 33:
	* [[pureftpd]]		* [[pureftpd]]
	* [[ntp]]		* [[ntp]]
		+	* [[videolan\|VLC]]

solaris

	current
Line 1:	Line 1:
	+	1. Configure for more random TCP sequence number generation. Check that in(/etc/default/inetinit), the TCP_STRONG_ISS is set to 2. For instance, TCP_STRONG_ISS=2

	+	2. IP forwarding is to be turned off to prevent the machine acting as a router. To disable IP forwarding, a file "/etc/notrouter" need to be present. If the file is missing, issue the following command to create one : touch /etc/notrouter
	+
	+	To prevent dynamic routes updates via the network, move "in.routed" and "in.rdisc" away from "/usr/sbin" directory by perform the following commands :
	+	mv /usr/sbin/in.routed /export/home/cfgh/base
	+	mv /usr/sbin/in.rdisc /export/home/cfgh/base
	+
	+	3. Change default kernel IP settings for better security. Following the following steps to change the kernel IP defaults values :
	+
	+	Setup files and environment:
	+	touch /etc/init.d/exconfig
	+	ln -s /etc/init.d/exconfig /etc/rc2.d/S70exconfig
	+	chmod 744 /etc/init.d/exconfig /etc/rc2.d/S70exconfig
	+
	+	Edit file "/etc/init.d/exconfig" and add the following lines:
	+	#!/bin/sh
	+	# /etc/init.d/exconfig
	+	RELEASE=`/usr/bin/uname -r`
	+	release7 ()
	+	{
	+	/usr/sbin/ex -set /dev/ip ip_forwarding 0
	+	/usr/sbin/ex -set /dev/ip ip_strict_dst_multihoming 1
	+	/usr/sbin/ex -set /dev/ip ip_send_redirects 0
	+	/usr/sbin/ex -set /dev/ip ip_ignore_redirect 1
	+	/usr/sbin/ex -set /dev/ip ip_forward_src_routed 0
	+	/usr/sbin/ex -set /dev/ip ip_forward_directed_broadcasts 0
	+	/usr/sbin/ex -set /dev/ip ip_respond_to_echo_broadcast 0
	+	/usr/sbin/ex -set /dev/tcp tcp_conn_req_max_q0 4096
	+	/usr/sbin/ex -set /dev/tcp tcp_ip_abort_cinterval 60000
	+	/usr/sbin/ex -set /dev/ip ip_respond_to_timestamp 0
	+	/usr/sbin/ex -set /dev/ip ip_respond_to_timestamp_broadcast 0
	+	/usr/sbin/ex -set /dev/ip ip_respond_to_address_mask_broadcast 0
	+	/usr/sbin/ex -set /dev/arp arp_cleanup_interval 60000
	+	id -a mqm > /dev/null 2>&1
	+	if [ \$? -eq 0 ]
	+	then
	+	/usr/sbin/ex -set /dev/tcp tcp_keepalive_interval 600000
	+	fi
	+	}
	+	release8 ()
	+	{
	+	/usr/sbin/ex -set /dev/ip ip6_forwarding 0
	+	/usr/sbin/ex -set /dev/ip ip6_strict_dst_multihoming 1
	+	/usr/sbin/ex -set /dev/ip ip6_send_redirects 0
	+	/usr/sbin/ex -set /dev/ip ip6_ignore_redirect 1
	+	/usr/sbin/ex -set /dev/ip ip6_forward_src_routed 0
	+	/usr/sbin/ex -set /dev/ip ip_ire_arp_interval 60000
	+	}
	+	release6 ()
	+	{
	+	/usr/sbin/ex -set /dev/ip ip_respond_to_echo_broadcast 0
	+	/usr/sbin/ex -set /dev/ip ip_forward_directed_broadcasts 0
	+	/usr/sbin/ex -set /dev/ip ip_strict_dst_multihoming 1
	+	/usr/sbin/ex -set /dev/ip ip_ignore_redirect 1
	+	/usr/sbin/ex -set /dev/ip ip_forward_src_routed 0
	+	}
	+
	+	if [ \$RELEASE = "5.7" ]
	+	then
	+	release7
	+	elif [ \$RELEASE = "5.8" ] \|\| [ \$RELEASE = "5.10" ] \|\| [ \$RELEASE = "5.9" ]
	+	then
	+	release7
	+	release8
	+	elif [ \$RELEASE = "5.6" ]
	+	then
	+	release6
	+	fi
	+
	+	4. Disable multicast from the server, edit the file "/etc/rc2.d/S72inetsvc" and comment out/remove the following lines :
	+	#(
	+	#if [ "$_INIT_NET_STRATEGY" = "dhcp" ]; then
	+	# mcastif=`/sbin/dhcpinfo Yiaddr` \|\| mcastif=$_INIT_UTS_NODENAME
	+	#else
	+	# mcastif=$_INIT_UTS_NODENAME
	+	#fi
	+	#
	+	#echo "Setting default Ipv4 interface for multicase:" \
	+	# "add net 224.0/4: gateway $mcastif
	+	#
	+	#/usr/sbin/route -n add -interface "224.0/4" "$mcastif" >/dev/null
	+	#)&
	+
	+	For Solaris 10
	+	Multicast would be disabled using /etc/rc2.d/S72inetsvc-os10
	+
	+	5. Denial of Service Prevention System Settings.
	+	Services that must be disabled on all servers, unless required by business function from /etc/services. Services include: ftp-data ftp tftp pop2 pop3 pop-2 nntp chargen daytime discard echo finger talk who whois new-rwho klogin eklogin telnet systat netstat time
	+
	+	6. Prevent "core dump" generated by inetd as it may contain login information. This could be achieved by editing the file "/etc/rc2.d/S72inetsvc". Change the line :
	+	/usr/sbin/inetd -s &
	+	to /usr/bin/ulimit -c 0; /usr/sbin/inetd -s -t &
	+	Note :
	+	ulimit -c 0 : set the core file size to 0 byte
	+	inetd -s -t : stand-alone server with tracing of all tcp connections
	+
	+	For Solaris 10
	+	Create the script /etc/rc2.d/S72inetsvc-os10 as per below.
	+	#cat /etc/rc2.d/S72inetsvc-os10
	+	IPADDR=`netstat -nr \| grep -w 224.0.0.0 \| awk '{print $2}'`
	+	/usr/sbin/route -n delete -interface "224.0/4" $IPADDR
	+	/usr/sbin/svcadm enable inetd
	+	/usr/sbin/inetadm -M tcp_trace=TRUE
	+	#chmod 555 /etc/rc2.d/S72inetsvc-os10
	+
	+	7. .netrc files System Settings (.netrc files, .netrc files in root’s home directory). Files are not permitted, remove the files if any, issue command find / -name .netrc -print

spam

1260720872		current
Line 1:		Line 1:
	====== Fighting SPAM ======		====== Fighting SPAM ======
		+
		+	http://pgl.yoyo.org/as/index.php
		+

	===== DNS "greylisting" =====		===== DNS "greylisting" =====

spamassassin

1151515566		current
Line 4:		Line 4:
	$spam_check_negative_ttl = 0;		$spam_check_negative_ttl = 0;
	$spam_check_positive_ttl = 0;		$spam_check_positive_ttl = 0;
		+
		+
		+	skip_rbl_checks 0

sql

1145784002		current
Line 5:		Line 5:
	* http://www.sql-server-performance.com/		* http://www.sql-server-performance.com/

-	see also: [[sql:postgresql]]	+	see also: [[sql::postgresql:backup]]

sqlite

		current
Line 1:		Line 1:
		+	http://www.sqlite.org/download.html

squirrelmail

1238399033		current
Line 1:		Line 1:
-	class/deliver/Deliver.class.php: $message_id .= md5($seed_data) . '.squirrel@' . $SERVER_NAME .'>';	+	class/deliver/Deliver.class.php: $message_id .= md5($seed_data) . '.squirrel@' . $SERVER_NAME .'>';

ssh

1248937535		current
Line 38:		Line 38:
	done		done
	</code>		</code>
		+
		+	===== How to Fix Offering key in ~/.ssh/known_hosts =====
		+	# ssh -o 'StrictHostKeyChecking no' user@host
		+
		+	==== Remove the offending ssh key ====
		+	<code>
		+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
		+	@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
		+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
		+	IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
		+	Someone could be eavesdropping on you right now (man-in-the-middle attack)!
		+	It is also possible that the RSA host key has just been changed.
		+	The fingerprint for the RSA key sent by the remote host is
		+	a7:a8:f2:97:94:33:58:b7:9d:bc:e0:a6:6b:f7:0a:29.
		+	Please contact your system administrator.
		+	Add correct host key in /home/ramesh/.ssh/known_hosts to get rid of this message.
		+	Offending key in /home/ramesh/.ssh/known_hosts: 6
		+	Permission denied (publickey,password).
		+	</code>
		+
		+	# sed -i '6d' ~/.ssh/known_hosts
		+
		+	<note important>Note: Change the 6d according to the line number shown.</note>
		+
		+	Perl solution:
		+	# perl -pi -e 's/\Q$_// if ($. == 6);' ~/.ssh/known_hosts
		+

	====== How to harden your sshd ======		====== How to harden your sshd ======

start

1228496366		current
Line 4:		Line 4:
	<div align="right">		<div align="right">
	<b>Your BOFH for today</b></div>		<b>Your BOFH for today</b></div>
-	<img border="1" src="http://hwpr0n.ipax.at/real/bdp.jpg" width="200" height="300" border="2" alt="(new)"></img>	+	<img src="http://hwpr0n.ipax.at/real/img_3321.jpg" width="200" height="300" border="1" alt="(new)"></img>
		+	<br><br>
		+	<a href="http://www.wordle.net/gallery/wrdl/687631/Untitled"
		+	title="Wordle: Untitled"><img
		+	src="http://www.wordle.net/thumb/wrdl/687631/Untitled"
		+	alt="Wordle: Untitled"
		+	style="padding:4px;border:1px solid #ddd"></a>
	</div>		</div>
	</html>		</html>
		+

svn

1232554087		current
Line 27:		Line 27:

	* Finally recompile and re-run the svn ignore code above		* Finally recompile and re-run the svn ignore code above
		+
		+	===== Adding external SVN repo into yours =====
		+
		+	<code>
		+	mkdir external
		+	svn pe svn:externals external
		+	</code>
		+
		+	add local and remote dir (as for example)
		+	django http://code.djangoproject.com/svn/django/trunk/django
		+
		+

thunderbird

1262609434		current
Line 6:		Line 6:
	alerts.totalOpenTime 4000\\		alerts.totalOpenTime 4000\\
	\\		\\
		+
		+	Enter “general.useragent.override”, and leave the string blank.\\
		+	extensions.enigmail.addHeaders” , false\\
		+
		+
	Usefull plugins:\\		Usefull plugins:\\

tmpfs

	current
Line 1:	Line 1:
	+	# Speed Up /tmp Directory
	+	mount --bind -ttmpfs /tmp /tmp

	+	# Accelerate Scripts Directory
	+	mount --bind -ttmpfs /home/webroot /home/webroot

utorrent

1248384109		current
Line 36:		Line 36:
	\\		\\
	\\		\\
-	and use [[http://phoenixlabs.org/pg2/\|PeerGuardian]]	+	and use <del>[[http://phoenixlabs.org/pg2/\|PeerGuardian]]</del> [[http://www.peerblock.com/\|PeerBlock]] !

videolan

	current
Line 1:	Line 1:
	+	=== VideoLan player VLC ===

	+	==== Vuvuzela stop filter ====
	+
	+	start VLC with:\\
	+
	+	<code>
	+	vlc --audio-filter=param_eq --param-eq-f1=233 --param-eq-f2=466 --param-eq-f3=932 --param-eq-gain1=-20 --param-eq-gain2=-20 --param-eq-gain3=-20 --param-eq-lowf=100 --param-eq-lowgain=15 --param-eq-q1=10 --param-eq-q2=10 --param-eq-q3=10</code>

vim

	current
Line 1:	Line 1:
	+	[[http://vimdoc.sourceforge.net/htmldoc/options.html#%27listchars%27\|Vim listchars]]\\
	+	[[http://www.vmunix.com/vim/\| VIM ]]

virtix

1158502216		current
Line 1:		Line 1:
	====== Virtual Internet Exchange (Setting up the BGP) ======		====== Virtual Internet Exchange (Setting up the BGP) ======

		+	Links: [[http://www.virt-ix.net/wiki/index.php?title=Linux_Source_Routing\|Linux source routing]]

		+	zebra.conf
		+	hostname LinuxRouter
		+	password mysecretpassword
		+	enable password mysecretpassword
		+	log file /var/log/zebra.log

		+	FIXME
		+
		+	Template taken from WIki
		+
		+	bgpd.conf
		+	router bgp YOURAS
		+	bgp router-id 194.126.235.XX
		+	no bgp default ipv4-unicast
		+	network 195.16.84.XXX/25
		+	neighbor virtix peer-group
		+	neighbor virtix activate
		+	neighbor virtix next-hop-self
		+	neighbor virtix soft-reconfiguration inbound
		+	neighbor virtix maximum-prefix 200
		+	neighbor virtix prefix-list virtix-in in
		+	neighbor virtix prefix-list virtix-out out
		+	!
		+	! IPv6
		+	! neighbor virtix6 peer-group
		+	! neighbor virtix6 activate
		+	!
		+	! Default VirtIX GW
		+	neighbor 194.126.235.1 remote-as 31064
		+	neighbor 194.126.235.1 peer-group virtix
		+	neighbor 194.126.235.1 description Virt-IX Gateway
		+
		+	FIXME FIXME

vmware

1260830332		current
Line 44:		Line 44:
	$ vmware-vdiskmanager -r opt-zimbra.vmdk -t 2 haha/Zimbra-opt.vmdk		$ vmware-vdiskmanager -r opt-zimbra.vmdk -t 2 haha/Zimbra-opt.vmdk

-	in get	+	and get

	$ ls haha/		$ ls haha/

vnc

1149972584		current
Line 1:		Line 1:
	http://www.realvnc.com/products/free/3.3.7/winvnc.html#11		http://www.realvnc.com/products/free/3.3.7/winvnc.html#11
		+
		+	[HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3]
		+	"AuthHosts"="-:+192.168:+193.77.104.3:"
		+	Type SZ
		+
		+	This would deny all and allow everything from 192.168/16 and from 193.77.104.3/32

wget

	current
Line 1:	Line 1:
	+	====== WGET ======
	+
	+	===== Mirroring a web site on Linux =====
	+
	+	You almost certainly have wget already. Try wget --help at the command line. If you get an error message, install wget with your Linux distribution's package manager. Or fetch it from the official wget page and compile your own copy from source.
	+
	+	Once you have wget installed correctly, the command line to mirror a web site is:
	+
	+	wget -m -k -K -E http://url/of/web/site
	+
	+	See man ''wget'' or ''wget --help \| more'' for a detailed explanation of each option.
	+
	+	If this command seems to run forever, there may be parts of the site that generate an infinite series of different URLs. You can combat this in many ways, the simplest being to use the -l option to specify how many links "away" from the home page wget should travel. For instance, ''-l 3'' will refuse to download pages more than three clicks away from the home page. You'll have to experiment with different values for -l. Consult man wget for additional workarounds.
	+
	+	Note: some web servers may be set up to "punish" users who download too much, too fast. If you're not careful, using tools like wget could get your IP address banned from the site. You can avoid this problem by using the ''-w'' option to specify a delay, in seconds, between page downloads. Usually, this will prevent the web server from viewing your behavior as unacceptable. But your mileage may vary!
	+
	+	===== Advance options =====
	+
	+	# Collect only the specific links listed line by line in
	+	# the local file "my_movies.txt"
	+	# Use a random wait of 0 to 33 seconds between files.
	+	# When there is a failure, retry for up to 22 times with 48 seconds
	+	# between each retry. Send no user-agent at all. Ignore robot exclusions.
	+	# Place all the captured files in the "/movies" directory
	+	# and collect the access results to the local file "my_movies.log"
	+	# Good for just downloading specific known images or other files.
	+	wget -t 22 --waitretry=48 --wait=33 --random-wait --user-agent=""
	+	-e robots=off -o ./my_movies.log -P/movies -i ./my_movies.txt

whyisspambad

	current
Line 1:	Line 1:
	+	<code html>
	+	<TITLE>Why is spam bad?</TITLE>

	+	Q. Why do we get soooo upset when we receive E-mail which was not requested?
	+	There are several reasons:
	+
	+
	+	<P>1.. <B>The free ride.</B><BR>
	+	E-mail spam is unique in that the receiver pays so much more
	+	for it than the sender does. For example, AOL has said that they were receiving
	+	1.8 million spams from Cyber Promotions per day until they got a court injunction
	+	to stop it. Assuming that it takes the typical AOL user only 10 seconds to identify
	+	and discard a message, that's still 5,000 hours per day of connect time per day spent discarding their spam, just on AOL. By contrast, the spammer probably has a T1 line that costs him about $100/day. No other kind of advertising costs the advertiser so little, and the recipient so much. The closest analogy I can think of would be auto-dialing junk phone calls to cellular users; you can imagine how favorably that might be received.
	+	</P>
	+
	+	<P>2.. <B>The ``oceans of spam'' problem.</B><BR>
	+	Many spam messages say ``please send a REMOVE message to get off our list.'' Even disregarding the question of why you should have to do anything to get off a list you never asked to join, this becomes completely impossible if the volume grows. At the moment, most of us only get a few spams per day. But imagine if only 1/10 of 1 % of the users on the Internet decided to send out spam at a moderate rate of 100,000 per day, a rate easily achievable with a dial-up account and a PC. Then everyone would be receiving 100 spams every day. If 1% of users were spamming at that rate, we'd all be getting 1,000 spams per day. Is it reasonable to ask people to send out 100 ``remove'' messages per day? Hardly. If spam grows, it will crowd our mailboxes to the point that they're not useful for real mail. Users on AOL, which has a lot of trouble with internal spammers, report that they're already nearing this point.</P>
	+
	+	<P>3.. <B>The theft of resources.</B><BR>
	+	An increasing number of spammers, such as Quantum Communications, send most or all of their mail via innocent intermediate systems, to avoid blocks that many systems have placed against mail coming directly from the spammers' systems. (Due to a historical quirk, most mail systems on the Internet will deliver mail to anyone, not just their own users.) This fills the intermediate systems' networks and disks with unwanted spam messages, takes up their managers' time dealing with all the undeliverable spam messages, and subjects them to complaints from recipients who conclude that since the intermediate system delivered the mail, they must be in league with the spammers.
	+	Many other spammers use ``hit and run'' spamming in which they get a trial dial-up account at an Internet provider for a few days, send tens of thousands of messages, then abandon the account (unless the provider notices what they're doing and cancels it first), leaving the unsuspecting provider to clean up the mess. Many spammers have done this tens or dozens of times, forcing the providers to waste staff time both on the cleanup and on monitoring their trial accounts for abuse.</P>
	+
	+	<P>4.. <B>It's all garbage.</B><BR>
	+	The spam messages I've seen have almost without exception advertised stuff that's worthless, deceptive, and partly or entirely fraudulent. (I include the many MLMs in here, even though the MLM-ers rarely understand why there's no such thing as a good MLM.) It's spam software, funky miracle cures, off-brand computer parts, vaguely described get rich quick schemes, dial-a-porn, and so on downhill from there. It's all stuff that's too cruddy to be worth advertising in any medium where they'd actually have to pay the cost of the ads. Also, since the cost of spamming is so low, there's no point in targeting your ads, when for the same low price you can send the ads to everyone, increasing the noise level the rest of us have to deal with.</P>
	+
	+	<P>5.. <B>They're crooks.</B><PR>
	+	Spam software invariably comes with a list of names falsely claimed to be of people who've said they want to receive ads, but actually consisting of unwilling victims culled at random from usenet or mailing lists. Spam software often promises to run on a provider's system in a way designed to be hard for the provider to detect so they can't tell what the spammer is doing. Spams invariably say they'll remove names on request, but they almost never do. Indeed, people report that when they send a test ``remove'' request from a newly created account,, the usually start to receive spam at that address.
	+	Spammers know that people don't want to hear from them, and generally put fake return addresses on their messages so that they don't have to bear the cost of receiving responses from people to whom they've send messages. Whenever possible, they use the ``disposable'' trial ISP accounts mentioned above so the ISP bears the cost of cleaning up after them. I could go on, but you get the idea. It's hard to think of another line of business where the general ethical level is so low.</P>
	+
	+	<P>6.. <B>It might be illegal.</B><BR>
	+	Some kinds of spam are illegal in some countries on the Internet. Especially with pornography, mere possession of such material can be enough to put the recipient in jail. In the United States, child pornography is highly illegal and we've already seen spammed child porn offers.
	+	Any one of these six would be enough to make me pretty unhappy about getting junk e-mail. Put them together and it's intolerable.</P>
	+
	+	Spammers do more than spam
	+
	+	</code>

wiki

1138660086		current
Line 1:		Line 1:
-	Test	+	*[[Test]]

windows

1257754127		current
Line 1:		Line 1:
	=== Windows ===		=== Windows ===
		+
		+	http://www.blackviper.com/Windows_7/servicecfg.htm

	== Windows XP Professional (Slovenia Keyboard Layout) ==		== Windows XP Professional (Slovenia Keyboard Layout) ==

xen

1243204502		current
Line 4:		Line 4:
	<xenGuru> pa xen-tools za buildat gueste		<xenGuru> pa xen-tools za buildat gueste
	<xenGuru> ostalo je pa vse vec al manj v navodilih ze kje		<xenGuru> ostalo je pa vse vec al manj v navodilih ze kje
		+
		+	---
		+
		+	<xenNovice> ZAKON!!!!

zend

1243204502		current
Line 6:		Line 6:
	\| {{zendoptimizer-2.6.2-linux-glibc21-i386.tar.gz}}\| Zend Optimizer 2.6.2 glibc21 \|		\| {{zendoptimizer-2.6.2-linux-glibc21-i386.tar.gz}}\| Zend Optimizer 2.6.2 glibc21 \|
	\| {{zendoptimizer-3.0.0-linux-glibc21-i386.tar.gz}}\| Zend Optimizer 3.0.0 glibc21 \|		\| {{zendoptimizer-3.0.0-linux-glibc21-i386.tar.gz}}\| Zend Optimizer 3.0.0 glibc21 \|
		+	\| {{zendoptimizer-3.3.3-linux-glibc23-i386.tar.gz}}\| Zend Optimizer 3.3.3 i386 \|
		+	\| {{zendoptimizer-3.3.3-linux-glibc23-x86_64.tar.gz}} \| Zend Optimizer 3.3.3 x86_64 \|

1282563383		current
Line 96:		Line 96:
	* [[http://www.thegeekstuff.com/2010/03/debug-c-program-using-gdb/\|How to Debug C Program using gdb in 5 Simple Steps]]		* [[http://www.thegeekstuff.com/2010/03/debug-c-program-using-gdb/\|How to Debug C Program using gdb in 5 Simple Steps]]
	* [[http://www.rinkworks.com/namegen/\|Fantasy name generator]]		* [[http://www.rinkworks.com/namegen/\|Fantasy name generator]]
		+
		+	=== Free Stock Photos ===
		+
		+	* [[http://sxc.hu/\|Stock Xchng]] – You will have to register, but it’s well worth it. You can definitely find some top quality images that can easily be used in presentations. Some of my favorites are the images with a white background, like this one.
		+	* [[http://www.everystockphoto.com/\|everystockphoto]] – This service scrapes a number of free stock photo websites and pulls them all together. Think of it as a stock image aggregator.
		+	* [[http://www.stockvault.net/\|StockVault]] – Similar service to Stock Xchng. You can find really great images that are of professional quality and would look great projected on a screen.
		+	* [[http://www.freephotosbank.com/\|FreePhotosBank]] – Free Stock Photos, just like the title says. Great thing about this service is that you don’t need to create an account. You can just log onto the website and search for images related to your presentation and download them freely.
		+	* [[http://www.flickr.com/\|Flickr]] – Probably one of the best services ever invented. Anyone can upload photos and there are literally thousands of photos uploaded every day. Some of them have been rights-reserved, so best way to approach Flickr is to use the [[http://www.flickr.com/search/advanced/\|Advanced Search]] option and scroll to the bottom. Check the “Only search within Creative Commons-licensed content” box and be on your merry way.
		+