tnt.aufbix.org

3ware

anonymous@undisclosed.example.com (Anonymous) — Wed, 30 Apr 2014 11:30:25 +0000

3ware / LSI RAID controllers LSI Megaraid controllers Useful links * * * Linux section (old) Debian apt repository: CLI Scripts Auto remove b0rken drive from RAID

about

anonymous@undisclosed.example.com (Anonymous) — Tue, 22 Dec 2009 01:47:39 +0000

About T'n'T Disclaimer “It wasn't me!” Authors * j * a * ... in other words: * People with RHCE, CCNA, CCIE, ... FruFunBSD certification * People in ISP and large network business * People with a lot of experience with systems in production ..

aerohive

anonymous@undisclosed.example.com (Anonymous) — Sat, 10 Nov 2012 18:21:14 +0000

Aerohive / HiveOS tips

alfresco

anonymous@undisclosed.example.com (Anonymous) — Sat, 01 Dec 2012 18:27:30 +0000

Alfresco hacks Security best practices and tips * configure all ports beyond 1024 * avoid default password (admin, db, jmx) * change default certificates and keys in SOLR * use keytool or you own certificates * installRoot/alf_data/solr/

amavis

anonymous@undisclosed.example.com (Anonymous) — Thu, 04 Jun 2009 19:40:20 +0000

Amavisd-new Do not pass spam from kill_level on What I've done is set : $sa_tag_level_deflt = -999.0 $sa_tag2_level_deflt = 4.9 $sa_kill_level_deflt = 20.0 $final_spam_destiny = D_DISCARD * So all messages get the spam headers * All mail scoring >4.9 is flagged as spam but passed on to intended recipient

amavisd-new

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

see: amavis

android

anonymous@undisclosed.example.com (Anonymous) — Tue, 13 Mar 2012 08:20:19 +0000

* LauncherPro * watchdog * GreenPower * SilentBoot * 3G watchdog * easy filter * Cisco VPN * Secret codes Tricks * [Menu]-> Settings> Wireless & networks>Wifi Settings> [Menu]>Advanced>Wifi sleep policy. * Disable CompCache in Cyanogen

apache

anonymous@undisclosed.example.com (Anonymous) — Tue, 31 Jul 2012 12:45:34 +0000

Apache utils * vlogger: * webalizer: optimization * disable DNS Look Up * MaxClients ( 512 ) * KeepAlive * Disable KeepAlive connections (by setting KeepAlive to Off) * Shorten the KeepAliveTimeout value to something like 3 seconds for instances), reducing the maximum simultaneous opened connections to 768

asus-wl500gp

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Open System Command: http://192.168.1.1/Main_AdmStatus_Content.asp Enter: /usr/sbin/utelnetd -d and click Refresh button. You should now be able to Telnet to the router without any user/password so PLEASE check firewall rules and make sure Telnet access is blocked from WAN. Anybody in LAN will be able to Telnet as root so beware. To stop telnet daemon type ps to check PID ID and then kill it with kill -9 xxxx where xxxx is PID of utelnetd as seen with ps command

aws

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Amazon Web Services S3 * FuseFS and S3 * Incremental backups to Amazon S3 * How To Backup MySQL to Amazon S3 EC2

bacula

anonymous@undisclosed.example.com (Anonymous) — Sun, 22 Apr 2012 20:10:45 +0000

Bla

bash

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

.barshrc alias system="os && hw" Colored prompt Adds date/time to history #vi $HOME/.bashrc export HISTTIMEFORMAT=”%h/%d - %H:%M:%S “ If you just want to find out what's new in a directory lsnew() { ls -lt ${1+"$@"} | head -20; } Scripts

bgp

anonymous@undisclosed.example.com (Anonymous) — Mon, 12 Jul 2010 18:39:26 +0000

BGP on need to know bases BGP tools * BGPlay * De-Bogonising New Address Blocks * telnet route-views.routeviews.org * * BGP Simple - simple BGP peering and route injection script BGP policies / ISP filtering To provide the NANOG community with information about routes being filtered in the Internet, this page presents the filter policies of various Internet Service Providers. Contr…

bsd

anonymous@undisclosed.example.com (Anonymous) — Tue, 08 Jun 2010 13:50:35 +0000

BSD BSD related links * BSD Dual Wan Router (pfsense) * Building and Installing a Custom Kernel * OSSEC and Pf on FreeBSD to Limit SSH Brute Forcing * FreeWDE - FreeBSD with Whole Disk Encryption FreeBSD Network stuff Forcing link speed ifconfig em0 media 100BaseFX mediaopt full-duplexparameterdescriptionautoselectEnables auto-negotiation for speed and duplex.10baseT/UTPSets 10Mbps operation. Use the mediaopt option to select full-duplex mode.

cacti

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Cacti Templates *

cgiirc

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

/usr/lib/cgi-bin/cgiirc/nph-irc.cgi line 1022

chrome

anonymous@undisclosed.example.com (Anonymous) — Mon, 01 Oct 2012 11:58:36 +0000

How to force Chrome disk cache size and directory chrome.exe “--disk-cache-dir=“R:\chrome” --disk-cache-size=1073741824

chroot_ircd

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

device files cd /chroot/dev mknod -m 444 urandom c 1 9 libraries naredi direktorije ldd ircd | awk '{print $3}' | sed '/^$/d' | xargs -I % dirname % | xargs -I % mkdir -p % skopiraj knjiznice ldd ircd | awk '{print $3}' | sed '/^$/d' | xargs -I % cp % /chroot%

cisco

anonymous@undisclosed.example.com (Anonymous) — Thu, 21 May 2015 15:01:11 +0000

Cisco stuff on need to know bases see also: Cisco BGP stuff, networking, Secure IOS Template Related documents Cisco pppoe Password recovery Phoen…

cobaltqube

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Cobalt Qube2 (Linux) Linux 2.4.x Linux 2.6.x Cross-compiling kernel stuff links: * (cross-compiling tools / debian) * Cross Compiling notes on TNT * make ARCH= config, then make ARCH= CROSS_COMPILE= all you can put the CROSS_COMPILE variable on the config command, too. Doesn't hurt and is probably

cyrus

anonymous@undisclosed.example.com (Anonymous) — Mon, 15 Oct 2012 11:58:38 +0000

Cyrus Configuration * * Performance note LMTP over quota-reject without taking mail and chacking over LMTP see: * /etc/imapd.conf # If enabled, lmtpd returns a permanent failure code when a user's # mailbox is over quota. By default, the failure is temporary, # causing the MTA to queue the message and retry later. lmtp_over_quota_perm_failure: 1

denialofservice

anonymous@undisclosed.example.com (Anonymous) — Thu, 01 Dec 2011 02:39:59 +0000

in order to figure out wether the source addresses are spoofed, just look at the ttl of the incoming packets, -even if they are different- trigger the box at the other end to send you a packet (icmp echo-reply, tcp reject, something like that), and then ofcourse the ttl on the packet you made it send by your self, should be more or less the same as the ttl on the incoming packets from that host.

desktop

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

FIXME *

dia

anonymous@undisclosed.example.com (Anonymous) — Mon, 01 Dec 2014 11:50:52 +0000

dns

anonymous@undisclosed.example.com (Anonymous) — Mon, 07 Mar 2016 12:12:30 +0000

DNS is the "." of all evil! DNS Terminology * Zone - The domain namespace is divided into regions called zones. For instance, if you have example.com, you have the example section, or zone, of the com domain. * DNS server - The DNS server is a server that maintains the name and IP information for a domain. You can have a primary

domino

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

IBM Lotus Domino (instalation under linux) Domino R5.011 IBM Lotus Domino R5.011 (Linux); system: Debian (woody/stable) GNU/linux, kernel 2.4.x * see this document * Lotus R5 mini-howto * Domino and Notes under Linux Domino 6.x IBM Lotus Domino (r) Server, Release 6.5.3, September 14, 2004; system: Debian (sarge/stable) GNU/linux, kernel 2.4.x

dovecot

anonymous@undisclosed.example.com (Anonymous) — Mon, 15 Oct 2012 11:58:01 +0000

Devocot hacks Devocot + MySQL Creating user table CREATE TABLE users ( userid VARCHAR(128) NOT NULL, password VARCHAR(64) NOT NULL, home VARCHAR(255) NOT NULL, uid INTEGER NOT NULL, gid INTEGER NOT NULL, active CHAR(1) DEFAULT 'Y' NOT NULL, PRIMARY KEY(userid) );

dspam

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

DSPAM Lies, damned lies and statistics. DSPAM je eno tako statistično čudo, ki rado prežvekuje in statistično (ne)natančo ocenjuje vaše maile. Vendar več ko ma izkušenj, bolje mu gre. Pred inštalacijo Download. Unpack. Read README. All of it. Read README again. Next, day, read README again.

etc_host.conf

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

order hosts,bind multi on nospoof on spoofalert on spoof warn reorder on

extreme

anonymous@undisclosed.example.com (Anonymous) — Sun, 30 Jan 2011 16:34:33 +0000

Extreme Networks Hardware * BlackDiamond: Chassis-based high-port density switches for Carrier-Ethernet service providers and enterprise core * Summit: Standalone switches from L2 100Mbps to L3 10Gig top-of-rack datacenter switches. * ReachNXT: Port Extender - Manageable by an access switch via XOS

firefox

anonymous@undisclosed.example.com (Anonymous) — Thu, 30 Jan 2014 10:27:36 +0000

Firefox addons greasemonkey about_url Firefox CPU optimized builds Optimized Firefox user configuration file FIX Crashing X-window with ATI drivers while moving toolbar icons nglayout.enable_drag_images false Move disk cache onto RAMdisk use tmpfs in linux add to /etc/fstab: tmpfs /mnt/ramdisk tmpfs size=520M,noatime,mode=0777 0 0

foobar

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Foobar Fun word to play with!

freeradius

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Freeradius FIXME Build debian package $ tar zxf freeradius-1.1.3.tar.gz $ cd freeradius-1.1.3 $ fakeroot dpkg-buildpackage -b -uc $ sudo dpkg -i ../freeradius_1.1.3-0_i386.deb more on this topic

gcc

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

git

anonymous@undisclosed.example.com (Anonymous) — Sat, 19 Feb 2011 22:52:11 +0000

GIT on need to know bases

greasemonkey

anonymous@undisclosed.example.com (Anonymous) — Thu, 24 Jun 2010 19:55:16 +0000

* Scripts updater * - Facebook purifier * - odstrani reklame na 24ur.com/poptv.si * slo-tech.com - killfile.js by jure@hehe.si * ~~- forces sites like gmail/facebook/wikipedia to use secure https connections * - forces secure facebook - https~~

hardware

anonymous@undisclosed.example.com (Anonymous) — Mon, 26 May 2014 09:42:16 +0000

*nix * HP SmartArray RAID controller under Debian linux * Dell PERC RAID controller under Debian linux * Debian on Cobalt Qube * ITE IT8212 in linux * globettroter / Hyundai-MB-810 * HPDL145 * HPDL385 bnx2 NIC * ASUS WL500gP * iPod / iPhone stuff * Linux on IBM Z60t * Linksys WRT54GS * IPMI - Supermicro IPMI on Linux * Thecus NAS 5500 series * 3ware controller * MicroTik (Router Boards and RouterOS) * Aerohive networks * Raspberry Pi TnT

hpdl145

anonymous@undisclosed.example.com (Anonymous) — Wed, 10 Apr 2013 14:41:03 +0000

HP ProLiant DL145 G2 Advisory: CLUSTER FIRMWARE UPGRADE RECOMMENDED: ProLiant DL145 G2 Server May Intermittently Shut Down see: * Advisory (HP support) * Firmware Upgrade Diskette for HP ProLiant DL145 Regarding to HP support page! Bootable custom image * Bootable cdrom IMAGE available [here] * file: [compaq_update.iso] - includes SP35997.exe HP patch

hpdl385-bnx2-nic

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

I recently found out that drbd link between two HP DL385 machines tends to stall under high io load. Investigations turned out that tcp segmentation performed by the nic is faulty. Problem is easy to reproduce. You need some traffic generator (I used xinetd chargen), some traffic sink (I used nc > /dev/null) and iptraf or tcpdump. Set up traffic generator on the machine you want to test and connect to it from outside. You can observe with

http

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

hydra

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

hydra.aufbix.org (administration) People with root access username ime + priimek email j Jernej Horvat j@aufbix.org jure Jure Koren jure@aufbix.org a Andraz Sraka a@aufbix.org b Borut Mrak b@aufbix.org c Stojan Rancic c@aufbix.org Changelog

hyperterminal

anonymous@undisclosed.example.com (Anonymous) — Mon, 23 Jan 2012 15:02:35 +0000

[HyperTerminal WinXP version]

ids

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Intrusion detection systems AIDE FIXME Tripwire links: * Tripwire (debian) Basic configuration (debian way) Install tripwire with apt-get (apt-get install tripwire) cd /etc/tripwire /usr/sbin/twadmin --create-polfile twpol.txt /usr/sbin/tripwire --init # Have patience, this will take a minute or so and # you'll get loads of "No such file" warnings...

imp

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

V novem IMPu se vam po defaultu zdaj odpre Horde, imate meni na levi strani, dodajanje v addressbook ne deluje itd.. Kaj naredimo, da nam zadeva cimprej zgleda, tako kot je v stari verziji? Gremo v Options, in pri dolocenih aplikacijah naredimo sledece:

internet-services

anonymous@undisclosed.example.com (Anonymous) — Mon, 15 Oct 2012 11:53:17 +0000

ipod-iphone-itouch

anonymous@undisclosed.example.com (Anonymous) — Tue, 31 Jul 2012 12:44:24 +0000

Hacking i{phone|pod|touch} ipod classic hard reset 1. Toggle the Hold switch on and off. (Slide it to Hold, then turn it off again.) 2. Press and hold the Menu and Center (Select) buttons simultaneously until the Apple logo appears, about 6 to 8 seconds. \\ You may need to repeat this step.

ipsec

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

IPSec see also: IPSec in Linux, Openswan (ex-freeswan), klips26, 26sec * This describes a configuration that extrudes a single public IP from a gateway to a laptop. On the laptop (named marajade -- Hand of the Emperor). Note, in this diagram the gateway is “left” and the laptop is “right

irc

anonymous@undisclosed.example.com (Anonymous) — Fri, 06 Jan 2017 09:42:31 +0000

irc.sioff.net irc odjemalci X-Chat for Windows Pidgin - irc, MSN, ICQ, Google talk Chatzilla ---------- irc by telnet telnet irc.sioff.net 6667 PASS * NICK tester USER tester 8 * :testtester JOIN #slo-tech PRIVMSG #slo-tech Pozdravljeni. QUIT chatzilla connect via bouncer/proxy to multiple irc networks networks.txt from firefox\profiles\chatzila:

java

anonymous@undisclosed.example.com (Anonymous) — Fri, 07 Dec 2012 12:29:13 +0000

Java (jvm) tips and tricks Enviroment settings Linux (with multiple java enviroments) .bashrc / bash.profile export JAVA_HOME="/usr/local/java/" export PATH=/usr/local/java/bin:$PATH Tuning switch description -Xmx Maximum Java heap size - defines the maximum memory size that the heap can reach in the JVM. You must know your program well and see how it performs under load and set this parameter accordingly. A low value will probably cause

juniper

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Juniper Networks stuff

kvm

anonymous@undisclosed.example.com (Anonymous) — Sat, 14 Apr 2012 14:25:13 +0000

KVM Creating VMs from Debian repositories How to create a new VM with 2GB of memory and 15GB disk image directly from Debian repo: use VNC to connect to the VM console after creating it. Some useful commands for handling VMs List existing VMs:

lightdm

anonymous@undisclosed.example.com (Anonymous) — Sat, 09 Feb 2013 18:36:52 +0000

vi ~/.Xresources xscreensaver.splash: false !font settings xscreensaver.Dialog.headingFont: -*-ubuntu-bold-r-*-*-12-*-*-*-*-*-*-* xscreensaver.Dialog.bodyFont: -*-ubuntu-medium-r-*-*-12-*-*-*-*-*-*-* xscreensaver.Dialog.labelFont: -*-ubuntu-medium-r-*-*-12-*-*-*-*-*-*-* xscreensaver.Dialog.unameFont: -*-ubuntu-medium-r-*-*-16-*-*-*-*-*-*-* xscreensaver.Dialog.buttonFont: -*-ubuntu-bold-r-*-*-12-*-*-*-*-*-*-* xscreensaver.Dialog.dateFont: -*…

linksys-wrt54gs

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

The VxWorks firmware defaults to a higher tx power than does DD-WRT. To adjust DD-WRT so that its tx power is equivelent to what it was when using the Linksys VxWorks based firmware set the tx power to 84mw.

linux

anonymous@undisclosed.example.com (Anonymous) — Tue, 31 Jul 2012 12:47:51 +0000

Linux what a fun OS to play with? ;-] Linux links else where * Debian & Ubuntu Tips and Tricks * Linux Box Admin Useful links * (R)ecovery (I)s (P)ossible Linux rescue system (ISO download) - Recovery Is Possible (RIP) is a Slackware-based CD boot/rescue/backup/maintenance system. It has support for a lot of filesystem types (Reiserfs, Reiser4, ext2/3, iso9660, UDF, XFS, JFS, UFS, HPFS, HFS, MINIX, MS DOS, NTFS, and VFAT) and contains a bunch of utilities for system recovery. It als…

mailman

anonymous@undisclosed.example.com (Anonymous) — Tue, 19 Aug 2014 12:53:20 +0000

Mailman tips & hacks Using UTF-8 if you changed apache to 'AddDefaultCharset UTF-8` then you need to fix this: * edit /var/lib/mailman/messages/sl/LC_MESSAGES/mailman.po and change Content-Type to read: “Content-Type: text/plain; charset=UTF-8\n” * run *

mediawiki

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Mediawiki Tips * using very short URLs a good page to start: ; configuration below tested with Apache 2.0.x on Debian Sarge and Mediwiki 1.6.x. /etc/apache/sites/site.conf ..... RewriteEngine On RewriteCond %{REQUEST_URI} !^/(stylesheets|images|skins|data)/ RewriteCond %{REQUEST_URI} !^/(redirect|texvc|index).php RewriteCond %{REQUEST_URI} !^/error/(40(1|3|…

mikrotik

anonymous@undisclosed.example.com (Anonymous) — Sun, 21 Oct 2012 19:26:04 +0000

MicroTik TnT stuff

misc

anonymous@undisclosed.example.com (Anonymous) — Wed, 30 Jul 2014 16:33:34 +0000

Unsorted stuff goes here I guess * MogileFS distributed filesystem * tmpfs * password * PostgreSQL * Xen * threelinestip * Forcing linux to panic * iscsi * bash * DenialOfService Some simple usage: all packets arriving at or departing from 192.168.0.2 # tcpdump -n host 192.168.0.2 To print traffic between 192.168.0.2 and either 10.0.0.4 or 10.0.0.5: # tcpdump -n host 192.168.0.2 and $ 10.0.0.4 or 10.0.0.5 $

mono

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Some simple infomation about using Mono project.

mplayer

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

mplayer -dumpfile stream.[wmv|rm] -dumpstream [rtsp|mms]://url/file.[asx|rm|wmv] Play .mkv smoothly mplayer -vfm ffmpeg -lavdopts lowres=0:fast:skiploopfilter=all video.mkv

mpls

anonymous@undisclosed.example.com (Anonymous) — Thu, 17 May 2012 08:37:50 +0000

MPLS Quick Reference guide -

mysql-circular-replication-automated-handling

anonymous@undisclosed.example.com (Anonymous) — Tue, 31 Jul 2012 12:46:38 +0000

Circular multimaster replication is poorly documented in the mysql circles. So putting together a script like this requires a lot of info hunting and testing. Right now it survives sql-bench with random node shutdowns, but I can't guarantee it won't eat your data ;) Feel free to improve with logging etc.

mysql

anonymous@undisclosed.example.com (Anonymous) — Mon, 15 Oct 2012 11:58:28 +0000

MySQL (*nix setup) * problems? TODO * shutdown MySQL * start MySQL with `mysqld_safe --skip-grant-tables &` * set password either with : `mysqladmin -u root flush-privileges password “newpwd”` or `mysql -u root mysql` Issue the following commands in the mysql client: mysql> UPDATE mysql.user SET Password=PASSWORD('newpwd') WHERE User='root'; mysql> FLUSH PRIVILEGES;

nagios

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Nagios links * * * * * * * Nagios Portal

netcat

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Using netcat and tar to quickly transfer files between machines, aka tar pipe So you have gigs of data to transfer between two machines over ethernet. A nice quick and dirty method is to use netcat and tar. This is by no means secure, but if you haven't got the time or desire to setup NFS, FTPd, Samba. Or wait hours for scp to do it's job then this can save you a lot of time.

networking

anonymous@undisclosed.example.com (Anonymous) — Tue, 17 Jan 2012 21:51:40 +0000

Networking stuff Networking links else where * Debug your Internet - The ICSI Netalyzr Beta * TCP Tuning guide * Speed guides and tools * Beginner's Guide to Wireless Auditing * Clownix - Clownix: GNU/Linux Real Time Graphical Monitoring Tool, Uml_clownix: GNU/Linux Virtual Network ---------- * Public IPv6 2 IPv4 relay routers * Non-BGP Multihoming for Web Hosts RFC and other stuff on need to know basis * IPv6 Unicast Address Assignment Considerations * Guidelines for crea…

nexenta-gnusolaris

anonymous@undisclosed.example.com (Anonymous) — Sun, 21 Oct 2012 19:40:31 +0000

Nexenta Nexentaopensolaris with a few debian tools Other changes, that requires some adjusting to - SMF. Yes, init.d and inittab are history. See this chapter of documentation. The main reason we're wasting our time with all this is ZFS. In my case, I'm building a nice 16x1T backup machine and want to utilize the disk space as efficiently as possible. This is a bit of a challenge, since installer is just a braindead shell script and offers you only two options: install on zfs root mirror with …

nginx

anonymous@undisclosed.example.com (Anonymous) — Sun, 20 Jun 2010 21:39:31 +0000

NGINX Restricted access with password + exclude IP list fastcgi_pass unix:/tmp/fastcgi.socket; debian nginx logrotate /var/log/nginx/*.log { daily missingok rotate 52 compress delaycompress notifempty create 640 root adm sharedscripts postrotate [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid` endscript }

nids

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

NIDS * Bro IDS (opensource) * BASE * Prelude IDS (Hybrid) * EasyIDS

nodejs

anonymous@undisclosed.example.com (Anonymous) — Fri, 25 Jan 2013 18:25:46 +0000

Node.js Install Node.js on Debian Squeeze (via ) Install dependency packages sudo apt-get update && apt-get install git-core curl build-essential openssl libssl-dev Install Node.js & NPM

notebook

anonymous@undisclosed.example.com (Anonymous) — Thu, 11 Dec 2014 10:08:25 +0000

[19:55] lowkey: sysctl vm.laptop_mode=1 ... mount z -o commit=600 or more ... hdparm za spindown after 1min of inactivity ... [19:55] pa cpu downclockas kokr se ga pac da ... [20:02] pa syslog ubij. disable touchpad

ntp

anonymous@undisclosed.example.com (Anonymous) — Fri, 27 Jun 2014 10:33:33 +0000

OpenNTP ipv6 ntp pool - eu.ntp.sixxs.net ubuntu/debian: ln -s /etc/openntpd/ntpd.conf /etc/ntpd.conf NTP Setup Restrict values in ''ntp.conf'' see: http://www.thegeekstuff.com/2014/06/linux-ntp-server-client/ Modify the /etc/ntp.conf file to make sure it has the following two restrict lines. The first restrict line allows other clients to query your time server. This restrict line has the following parameters

openldap

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

OpenLDAP

openoffice.org

anonymous@undisclosed.example.com (Anonymous) — Mon, 15 Oct 2012 11:56:02 +0000

Speed up OoO startup time tools-> Java- uncheck use Java runtime environment Go to any Open Office application (Writer, Calc, Impress, Math, Draw, Base) and then proceed to the Tools Menu. At the bottom of that menu select Optoins. Under the OpenOffice.org heading, select Memory Now change these settings: Undo: Number of steps = 25

openssl

anonymous@undisclosed.example.com (Anonymous) — Fri, 04 Jan 2013 12:49:31 +0000

Usefull commands # How to tell if a SSL cert is 'trusted' or not from the CLI. # This example uses openssl unsuccessfully on OS X. # shop.snootlab.com:443 should be 'untrusted', view in browser. echo "GET /" | openssl s_client -connect shop.snootlab.com:443 | openssl x509 -text | openssl verify

openswan

anonymous@undisclosed.example.com (Anonymous) — Fri, 18 May 2012 13:17:55 +0000

Openswan ex FreeSWAN - IPSec kernel stack and userspace ipsec tools for linux see: Openswan main page, Openswan's Wiki ipsec.secrets OpenSWAN + Cisco PIX version 2.0 config setup interfaces=%defaultroute klipsdebug=all #enable debugging plutodebug=all conn tunnelipsec type=tunnel #tunnel mode ipsec left=x.x.x.x #the IP address of your OpenSWAN endpoint leftnexthop=y.y.y.y #default gateway leftsubnet=10.0.0.0/8 # network…

openvpn

anonymous@undisclosed.example.com (Anonymous) — Tue, 23 Jun 2009 09:35:39 +0000

Simple configuration Server side port 1011 proto udp dev tun1 daemon writepid /var/run/openvpn.pid ca /etc/openvpn/certs/ca.pem cert /etc/openvpn/certs/cert.pem key /etc/openvpn/certs/.key dh /etc/openvpn/certs/dh1024.pem server 192.168.240.8 255.255.255.248 client-config-dir /etc/openvpn/ccd ccd-exclusive push "route 10.10.50.32 255.255.255.224" client-to-client keepalive 10 120 comp-lzo tls-auth /etc/openvpn/certs/ta.key 0 # This file is secret cipher AES-256-CBC ma…

openvz

anonymous@undisclosed.example.com (Anonymous) — Fri, 29 Jan 2010 12:48:52 +0000

oracle

anonymous@undisclosed.example.com (Anonymous) — Fri, 01 Nov 2013 18:56:54 +0000

Oracle Oracle Install Tips - 10g on RHEL5 Install requisite packages yum -y install setarch-2* yum -y install make-3* yum -y install glibc-2* yum -y install libaio-0* yum -y install compat-libstdc++-33-3* yum -y install compat-gcc-34-3* yum -y install compat-gcc-34-c++-3* yum -y install gcc-4* yum -y install libXp-1* yum -y install openmotif-2* yum -y install compat-db-4*

os

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Learn *nix * Unix Toolbox * UNIX Tutorial for Beginners * Learning the shell * Learn UNIX in 10 minutes * How To Look Like A UNIX Guru * linux command line reference * Linux-Unix cheat sheets - The ultimate collection * Alphabetical Directory of Linux Commands

ossec

anonymous@undisclosed.example.com (Anonymous) — Thu, 24 Jul 2014 20:55:31 +0000

OSSEC Tips & Tricks OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. Installation Database support Enable database support:

osx

anonymous@undisclosed.example.com (Anonymous) — Mon, 28 Dec 2009 10:00:33 +0000

p2p

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Jan 2016 15:34:05 +0000

utorrent Options | Preferences (CTRL+p) * General disable “send anonymous information when checking for updates” disable “Check for updates automatically” disable “start utorrent on startup” * Bittorent (you MUST disable all trackerless functions for private trackers where you need upload bonus)

password

anonymous@undisclosed.example.com (Anonymous) — Mon, 01 Jun 2009 18:45:19 +0000

perl

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

An interactive perl shell usage: Optimizing Perl First run the script with profiling enabled: perl -d:DProf myscript.pl then run the profile-dumper: dprofpp tmon.out Copy (duplicate) a two-dimensional array in Perl @target = map [map $_ = $_, @{$_}], @source;

php

anonymous@undisclosed.example.com (Anonymous) — Sat, 20 Feb 2010 14:43:16 +0000

PHP tips Instalation tips FIXME Securing PHP code For a start, put disable_functions = “system, exec” in php.ini. PHP to secure a setup, a good start is a secure php.ini, for example: * disable the Fopen Wrapper, allow_url_fopen = Off *

pidgin

anonymous@undisclosed.example.com (Anonymous) — Fri, 19 Nov 2010 08:20:40 +0000

- Off-the-Record (OTR) Messaging allows you to have private conversations over instant messaging

postfix

anonymous@undisclosed.example.com (Anonymous) — Tue, 31 Jul 2012 12:45:15 +0000

Postfix Useful links * * OpenRBL check * * * Some useful postfix rules * Spam Ninjas - Dinko Korunic’s blog TODO * berljivost clanka * RAZLICNI SCENARIJI * vrstni red * razlicni scenariji * cyrus * sender_mx_access * rshbl check * sender/recipient verification * multiple <> bounces *

postgresql

anonymous@undisclosed.example.com (Anonymous) — Fri, 12 Jun 2009 01:27:15 +0000

Postgresql General Add pgplsql support % createlang plpgsql template1 Adding a column to a table alter table pfo_survey_response_2006 add column section text Backing up a database % pg_dump databasename > db.out Connecting to a user / database

pureftpd

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

/etc/ * AllowAnonymousFXP * AllowDotFiles * AllowUserFXP * AltLog * AnonymousBandwidth * AnonymousCanCreateDirs * AnonymousCantUpload * AnonymousOnly * AnonymousRatio * AntiWarez * AutoRename * Bind * BrokenClientsCompatibility * CallUploadScript * ChrootEveryone * ClientCharset * CreateHomeDir * CustomerProof * Daemonize * DisplayDotFiles * DontResolve * ForcePassiveIP * FortunesFile * FsCharset * IPV4Only * IPV6Only * KeepAllFiles * Limi…

python

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Python see: Good article about learning python, python interpreter (history + autocomplete) .pyrc # startup script for python to enable saving of interpreter history and # enabling name completion # import needed modules import atexit import os import readline import rlcompleter # where is history saved historyPath = os.path.expanduser("~/.pyhistory") # handler for saving history def save_history(historyPath=historyPath): import readline read…

raid1_on_windows_xp

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

make temporary folder expand dmadmin.ex_ expand dmconfig.dl_ expand dmboot.sy_ or copy from C:\windows\system32 to temporary folder use hex editor dmboot.sys: before: 0000f1f0h: 74 00 54 00 79 00 70 00 65 00 00 00 57 49 4E 4E ; t.T.y.p.e…WINN 0000f200h: 54 00 00 00 53 45 52 56 45 52 4E 54 00 00 00 00 ; T…SERVERNT…. after: 0000f1f0h: …

ripe

anonymous@undisclosed.example.com (Anonymous) — Thu, 10 Dec 2020 23:36:15 +0000

How to create your own RIPE objects @ * person (XXX-RIPE) * role * mnt MD5 (MNT-) * org (ORG-XXX-RIPE) * set MNT-BY on all objects * create route object * create domain object Ticket query - RIPEGET-NG * * (local Mirror)

rpi

anonymous@undisclosed.example.com (Anonymous) — Mon, 26 May 2014 10:02:04 +0000

Raspberry Pi optimization and tuning Related docs: * RPi Defaults RaspberryPi running Raspbian username: pi password: raspberry Completed and optional server preparation Optional: Enable ZRAM ( RAM Compression ) Replacing OpenSSH with Dropbear | Save: +10MB RAM

rt

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Request Tracker Tips Scripts Optimization * Clear Sessions #!/usr/bin/perl use lib qw(/usr/share/request-tracker3.6/lib); use RT; …

sa

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

see spamassassin

security

anonymous@undisclosed.example.com (Anonymous) — Fri, 10 Jan 2014 12:13:59 +0000

Security How to Suck at Information Security Original document at . The following list presents common information security mistakes and misconceptions, so you can avoid making them. Security Policy and Compliance * Ignore regulatory compliance requirements.

selinux

anonymous@undisclosed.example.com (Anonymous) — Mon, 15 Oct 2012 11:58:13 +0000

SELinux more @ History When SELinux was first developed, the goal was to confine as many system processes as possible to the least amount of privilege required. Fedora 2 was released with SELinux policy that confined users as well as system processes. We quickly realized that SELinux policy was not mature enough to handle a modern mainstream desktop operating system. After a quick redesign of the policy, we created “targeted” pol…

serveraid

anonymous@undisclosed.example.com (Anonymous) — Mon, 27 Jul 2009 16:54:27 +0000

IBM Serveraid tips Monitoring HW raid device (debian way) # lspci 04:01.0 SCSI storage controller: LSI Logic / Symbios Logic 53c1030 PCI-X Fusion-MPT Dual Ultra320 SCSI (rev 08) install 'mpt-status' apt-get install mpt-status get load modules/use mpt-status

sidebar

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Sitemap * home * operation systems * internet services * security * networking * software * hardware * misc

skype

anonymous@undisclosed.example.com (Anonymous) — Tue, 30 Dec 2014 13:34:12 +0000

Run Skype from command line You can run Skype for Windows or Linux from the command line. For example, if you have installed Skype in the default location, type the following command (including quotes): “C:\Program Files\Skype\Phone\Skype.exe”

software

anonymous@undisclosed.example.com (Anonymous) — Mon, 01 Dec 2014 11:49:54 +0000

* PHP * Mediawiki Tips * backup * Setting MySQL server * MySQL circular replication automated handling * python * Lotus Domino (linux) * Lotus Domino r5 (linux) * Xchat irc odjemalec * VNC * dovecot * mplayer * firefox * wget * nginx * vsftp * Hosting ControlPanels (linux) * Mono on linux(.net) * Nexenta GnuSolaris * dos utils * OpenOffice.Org * vim * thunderbird * utorrent * pidgin * sqlite * svn * gcc * squirrelmail * mailman * cgi…

solaris

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

1. Configure for more random TCP sequence number generation. Check that in(/etc/default/inetinit), the TCP_STRONG_ISS is set to 2. For instance, TCP_STRONG_ISS=2 2. IP forwarding is to be turned off to prevent the machine acting as a router. To disable IP forwarding, a file

sony-vaio-z

anonymous@undisclosed.example.com (Anonymous) — Mon, 04 Mar 2013 22:08:21 +0000

" Here is what I did to install the Qualcomm 3 G modem on my Z31 (Ubuntu 9.04 Jaunty). From several sources, thanks to all. 1. install qcserial module (maybe not necessary anymore in 9.10) copy qserial.c et Makefile from make sudo make install

spam

anonymous@undisclosed.example.com (Anonymous) — Fri, 05 Aug 2016 09:00:12 +0000

HOSTS adblocker original (with bugs) @ how to use this in Ubuntu >>> Fighting SPAM DNS "greylisting" IN MX 10 spamtrap-tryothermx IN MX 20 your.real.mx.server IN MX 25 your-ipv4only.real.mx.server IN MX 30 spamtrap-tryothermx Most spam/virus…

spamassassin

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

$enable_global_cache = 0; #$spam_check_negative_ttl = 30*60; # time to remember that mail was not spam #$spam_check_positive_ttl = 30*60; # time to remember that mail was spam $spam_check_negative_ttl = 0; $spam_check_positive_ttl = 0; skip_rbl_checks 0

sql

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

SQL start here * * see also: backup

sqlite

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

squirrelmail

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

class/deliver/Deliver.class.php: $message_id .= md5($seed_data) . '.squirrel@' . $SERVER_NAME .'>';

ssh

anonymous@undisclosed.example.com (Anonymous) — Thu, 04 Aug 2016 09:37:11 +0000

SSH Links: * Chrooted SSH/SFTP Tutorial (Debian Lenny) * Securing SSH (CentOS wiki) banner in ssh /etc/ssh/sshd_config Banner /etc/issue.net /etc/issue.net ********************************************* * This is a private system. * * Use by unauthorized persons is prohibited.* * All accesses to this service are logged. * *********************************************

start

anonymous@undisclosed.example.com (Anonymous) — Mon, 22 Oct 2012 14:37:14 +0000

Tips'n'Tricks You need a hint? Need to know about small details that make difference? You're on the right page .. also you're welcome to submit your own tip'n'tricks/hints or make a better changes to things that are already published here. Disclaimer

svn

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Subversion Tips & Tricks Ignore .pyc files in Subversion Create a file (.svnignore) with the regular expressions Run svn propset on the project svn -R propset svn:ignore -F .svnignore . * -R indicates that you are doing this recursively so all the directories ignore these.

tar

anonymous@undisclosed.example.com (Anonymous) — Sat, 01 Dec 2012 17:59:39 +0000

Encrypted archive with openssl and tar encrypt tar --create --file - --posix --gzip -- | openssl enc -e -aes256 -out decrypt openssl enc -d -aes256 -in | tar --extract --file - --gzip

thunderbird

anonymous@undisclosed.example.com (Anonymous) — Wed, 04 Feb 2015 14:47:45 +0000

Tools | Options | Advanced | Config editor user.js: To apply sorting order to all folders you must delete index files in Thunderbird profile folder: find . -iname *.msf -exec rm -v '{}' \; Usefull plugins: * ConfigDate * Duplicate Contact Manager * Enigmail - PGP/GPG plugin * PGP/GPG package * Lightning - calendar * Mail redirect * Quote colors *Remove duplicate messages * Remove duplicate messages *

tmpfs

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

# Speed Up /tmp Directory mount --bind -ttmpfs /tmp /tmp# Accelerate Scripts Directory mount --bind -ttmpfs /home/webroot /home/webroot

tnt

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

T N T TODO * dspam - pegasus * Playing with netfiltering-l7 and ipp2p under Debian (Sarge) - a * migracija starega TNTja na wiki - niet * ...

utorrent

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Jan 2016 15:34:39 +0000

utorrent

videolan

anonymous@undisclosed.example.com (Anonymous) — Tue, 15 Jun 2010 19:41:21 +0000

VideoLan player VLC Vuvuzela stop filter start VLC with:

vim

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Vim listchars VIM

virtix

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

Virtual Internet Exchange (Setting up the BGP) Links: Linux source routing zebra.conf hostname LinuxRouter password mysecretpassword enable password mysecretpassword log file /var/log/zebra.log FIXME Template taken from WIki bgpd.conf router bgp YOURAS bgp router-id 194.126.235.XX no bgp default ipv4-unicast network 195.16.84.XXX/25 neighbor virtix peer-group neighbor virtix activate neighbor virtix next-hop-self neighbor virtix soft-reconfiguration inbound neighbor virtix maxim…

vmware

anonymous@undisclosed.example.com (Anonymous) — Mon, 14 Dec 2009 23:39:09 +0000

VMware tips Fixing time-management in vm-instances on VMware Install the VMware tools in the guest os, then in the .vmx-file set the following parameters to TRUE: * tools.syncTime - sync periodically * time.synchronize.continue - sync after snapshot

vnc

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

[HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3] "AuthHosts"="-:+192.168:+193.77.104.3:" Type SZ This would deny all and allow everything from 192.168/16 and from 193.77.104.3/32

vsftp

anonymous@undisclosed.example.com (Anonymous) — Mon, 11 Feb 2013 22:34:14 +0000

vsftpd: version 2.3.5 /etc/vsftpd.conf chroot_local_user=YES userlist_enable=YES userlist_deny=NO userlist_file=/etc/vsftpd.chroot_list passwd_chroot_enable=YES /etc/vsftpd.chroot_list username_allowed_to_ftp_in /etc/adduser.conf DIR_MODE=0750 DHOME=/home/.

wget

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

WGET Mirroring a web site on Linux You almost certainly have wget already. Try wget --help at the command line. If you get an error message, install wget with your Linux distribution's package manager. Or fetch it from the official wget page and compile your own copy from source.

whyisspambad

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

wiki

anonymous@undisclosed.example.com (Anonymous) — Mon, 25 May 2009 00:35:02 +0000

* Test

windows

anonymous@undisclosed.example.com (Anonymous) — Thu, 20 Dec 2018 11:56:10 +0000

Windows * Windows 7 TCP/IP tweaks - Enable icmp echo-request in Windows IPv4 and IPv6 netsh advfirewall firewall add rule name="icmpv6 echo-request" dir=in action=allow protocol=icmpv6:128,any netsh advfirewall firewall add rule name="icmpv4 echo-request" dir=in action=allow protocol=icmpv4:8,any

xen

anonymous@undisclosed.example.com (Anonymous) — Tue, 25 Aug 2009 10:11:25 +0000

sej je pretty much vse ocitno easiest practice je, da vzames debianov xen kernel, k dela tko v dom0 kot domU pa da LVM uporabis za image-e pa xen-tools za buildat gueste ostalo je pa vse vec al manj v navodilih ze kje

zend

anonymous@undisclosed.example.com (Anonymous) — Mon, 15 Oct 2012 11:57:25 +0000

Zend Download optimizer Filename Description Zend Optimizer 2.6.2 glibc21 Zend Optimizer 3.0.0 glibc21 Zend Optimizer 3.3.3 i386 Zend Optimizer 3.3.3 x86_64 php.ini [Zend] zend_optimizer.enable_loader=0 zend_optimizer.disable_licensing=0 zend_optimizer.licence_path=0

zfs

anonymous@undisclosed.example.com (Anonymous) — Tue, 27 Nov 2012 01:06:14 +0000

ZFS Filesystem General tips Creating new zpool (zpools ~ LVM) zpool create datastore raidz2 sde sdg sdc sdf sdd sdh sdi zpool set autoreplace=on datastore zfs set compression=gzip datastore zfs set dedup=on datastore Redundancy with support for