Free Linux Tutorials » Tutorials

Create and Extend Logical Volume on HP-UX

admin — Sat, 01 Oct 2011 07:23:04 +0000

HP-UX tutorial on a Linux website? why not…

To take a break, I decided to post a tutorial here on Creating and Extending LV on HP-UX. It’s better for me to post it here so it will serve my guide once I get my hands again on HP-UX servers. This is the one I used when my colleague asked me to check if I can find a way to increase the Filesystem of these servers. Here it is:

To create the LV on HP-UX server

1.verify first if JFS is online (if online, no need to mount/unmount so no downtime)
# swlist -l product | grep -i online
OnlineJFS01 4.1.008 Online features of the VxFS File System

2. verify if there’s avail space
#bdf
#vgdisplay
e.g.
PE Size (Mbytes)            32
Total PE                    8692
Alloc PE                    4618
Free PE                     4074

FreePE X PE Size = 4074 X 32 = 130GB

3. To create let say a 2GB
#lvcreate -L 2048 -n lv_back /dev/vg00
Logical volume “/dev/vg00/lv_back” has been successfully created with
character device “/dev/vg00/rlv_back”.
Logical volume “/dev/vg00/lv_back” has been successfully extended.
Volume Group configuration for /dev/vg00 has been saved in /etc/lvmconf/vg00.conf

4. create filesystem,
# newfs -F vxfs /dev/vg00/rlv_back
version 6 layout
2097152 sectors, 2097152 blocks of size 1024, log size 16384 blocks
largefiles supported

5.create dir and mountpoint
#mkdir /backup
#mount /dev/vg00/lv_back /backup

6.check the new LV
#bdf

To enable mirroring

1. verify status
# vgdisplay -v | grep PV

2. check LV
#lvdisplay -v /dev/vg00/lv_back

00125 /dev/dsk/c2t1d0s2 02242 current
00126 /dev/dsk/c2t1d0s2 02243 current

only writing to c2t1d0s2

compare to others,

2. check LV
#lvdisplay -v /dev/vg00/lv_vol03
LE PV1 PE1 Status 1 PV2 PE2 Status 2
00000 /dev/dsk/c2t1d0s2 00312 current /dev/dsk/c2t0d0s2 00312 current

writing on both c2t1d0s2 and c2t0d0s2

3. to mirror

# lvextend -m 1 /dev/vg00/lv_back /dev/dsk/c2t0d0s2
The newly allocated mirrors are now being synchronized. This operation will
take some time. Please wait ….

Extend LV on HP-UX server
Since HP-UX server JFS is online, then we use this procedure

1. example, to extend 2G to 20GB
#lvextend -L 20480 /dev/vg00/lv_back
# fsadm -F vxfs -b 20480M /backup

2.verify
#bdf

If server has no online JFS, procedure as follows:
root@darwin-ux [/]
# umount /backup
root@darwin-ux [/]
# lvextend -L 20480 /dev/vg00/lv_back
Logical volume “/dev/vg00/lv_back” has been successfully extended.
Volume Group configuration for /dev/vg00 has been saved in /etc/lvmconf/vg00.conf
root@darwin-ux [/]
# extendfs -F vxfs /dev/vg00/rlv_back
root@darwin-ux [/]
# mount /dev/vg00/lv_back /backup
root@darwin-ux [/]
# bdf /backup
Filesystem kbytes used avail %used Mounted on
/dev/vg00/lv_back 4194304 18118 3915182 0% /backup
root@darwin-ux [/]

Finally, put on /etc/fstab , so it will auto mount even after reboot

add:
/dev/vg00/lv_back /backup vxfs delaylog 0 2

Enjoy

Installing IDS using Snort with OinkMaster, Barnyard and BASE on RHEL/CentOS 64-bit

tux — Thu, 20 May 2010 08:08:37 +0000

Snort® is an open source network intrusion prevention and detection system (IDS/IPS) developed by Sourcefire.

Other definitions:
- Barnyard is an output system for Snort. Snort creates a special binary output format called unified. Barnyard reads this file, and then resends the data to a database backend. Unlike the database output plug-in, Barnyard manages the sending of events to the database and stores them when the database temporarily cannot accept connections.

-BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a web front-end to query and analyze the alerts coming from a SNORT IDS system.

-Oinkmaster is a script that will help you update and manage your Snort rules.

Pre-requisites Softwares:

Mysql
mysql-bench
mysql-server
mysql-devel
mysqlclient10
php-mysql
httpd
gcc
pcre-devel
php-gd
gd
mod_ssl
glib2-devel
gcc-c++
libpcap-devel
php
php-pear
yum-utils

Assuming you already installed your latest 64-bit CentOS, configured important services like Apache,PHP and your mysql server, make sure your server packages are updated as well by issuing
#yum update

I. Installation of Snort

Download the lateset Snort source file on Snort’s official Site @ snort.org. As of this moment, the latest version is 2.8.6. You can find it at http://www.snort.org/downloads
#wget http://dl.snort.org/snort-current/snort-2.8.6.tar.gz
Go to your favorite root install directory (mine is /usr/local/src) and extract the file
#tar zxvf snort-2.8.6.tar.gz
Compile. If you are using the 32-bit OS, it’s very rare that you encounter errors. For 64-bit, it’s quite pain In the ass, errors like libmysqlclient cannot be found since it will look for /lib/mysql instead of lib64/mysql. In order to solve that issue, you need to add extra parameters to your configure .

#cd snort-2.8.6
#./configure –with-mysql –enable-dynamicplugin –with-mysql-libraries=/usr/lib64/mysql
#make
#make install

Create snort user and group
#groupadd snort
#useradd –g snort snort –s /sbin/nologin
Create snort directory files
#mkdir –p /etc/snort
#mkdir –p /etc/snort/rules
#mkdir /var/log/snort
Copy files on the root installation folder of snort to /etc/snort
#cd etc/
#cp * /etc/snort
Modify your snort.conf and make these changes, assuming your network is 192.168.1.0/24

var RULE_PATH /etc/snort/rules
var HOME_NET 192.168.1.0/24
var EXTERNAL_NET !$HOME_NET

Uncomment the lines (create if none):

output alert_unified: filename snort.alert, limit 128
output log_unified: filename snort.log, limit 128

Download the snort init file for easy management of snort service
#cd /etc/init.d
#wget http://www.freelinuxtutorials.com/freefiles/snort
#chmod 755 snort
#chkconfig snort on

II. Installation and Configuration of OinkMaster

Downloading the snort rules on the snort.org website is a little bit tricky. Even if you can sign up an account, you cannot directly download those rules and you’ll receive a 403 Forbidden error. There are ways to get it, you either get it by paying a subscription or get the registered user release.

Download the OinkMaster source file in SourceForge @ oinkmaster.sourceforge.net
#cd /usr/local/src
# wget http://nchc.dl.sourceforge.net/project/oinkmaster/oinkmaster/2.0/oinkmaster-2.0.tar.gz
Extract the file and read the INSTALL file for details
# tar zxvf oinkmaster-2.0.tar.gz
#cd oinkmaster-2.0
#less INSTALL
Copy oinkmaster.pl,oinkmaster.conf and oinkmaster.1 on your suitable directory
#cp oinkmaster.pl /usr/local/bin
#cp oinkmaster.conf /etc
#cp oinkmaster.1 /usr/local/man/man1
Edit oinkmaster configuration, change the settings on the line “ url = “. Download the snort rule same with your snort version. Use snort –V to check.[root@FLT oinkmaster-2.0]# snort -V

,,_     -*> Snort! <*-
o” )~   Version 2.8.6 (Build 38)
””    By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team           Copyright (C) 1998-2010 Sourcefire, Inc., et al.
Using PCRE version: 6.6 06-Feb-2006

You will see line similar to:

url = http://www.snort.org/pub-bin/oinkmaster.cgi//filename

e.g.

url = http://www.snort.org/pub-bin/oinkmaster.cgi/f8ff7c46785aac436c9f596059863b145d285abc/snortrules-snapshot-CURRENT.tar.gz

Save and exit

Assuming your rules directory is /etc/snort/rules. Update the rules by executing:
# oinkmaster.pl –o /etc/snort/rules
Create a non-root user for schedule run of oinkmaster daily
#group add oink
#useradd –g oink oink –s /sbin/nologin
Create the crontab
#su – oink
$crontab –e

01 4 * * * /usr/local/bin/oinkmaster.pl -C /etc/oinkmaster.conf -C /etc/autodisable.conf -o /etc/snort/rules 2>&1 | mail -s “oinkmaster” darwin@freelinuxtutorials.com

This will run the oinkmaster daily @ 4:01AM and send email

You will see an email like this:

Loading /etc/oinkmaster.conf

Loading /etc/autodisable.conf

Downloading file from http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-snapshot-CURRENT.tar.gz… done.

Archive successfully downloaded, unpacking… done.

Setting up rules structures… done.

Processing downloaded rules… disabled 0, enabled 0, modified 0, total=8464

Setting up rules structures… done.

Comparing new files to the old ones… done.

[***] Results from Oinkmaster started 20100518 05:33:38 [***]

[*] Rules modifications: [*]

None.

[*] Non-rule line modifications: [*]

None.

[*] Added files: [*]

None.

III. Set-up database in MySQL

This will serve as database for snort to make it easy to look up on events and it is a requirement of the BASE monitoring tool

#mysql –u root –p

Mysql> create database snort;
mysql> GRANT CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to snort@localhost IDENTIFIED by ‘snortpass’;
mysql>exit

Execute the command below to create tables
#mysql –u root –p snort < /usr/local/src/snort-2.8.6/schemas/create_mysql

IV. Install Barnyard

Download and extract barnyard#cd /usr/local/src
# wget http://snort.org/dl/barnyard/barnyard-0.2.0.tar.gz
#tar zxvf barnyard-0.2.0
Patch and configure for 64-bit. This is another pain in the ass, coz if you don’t patch the barnyard, you will get an error something like “ERROR: Invalid packet length:”#cd barnyard-0.2.0
#wget http://www.snort.org/users/jbrvenik/Site/Code_files/barnyard.64bit.diff
#patch –p1 < barnyard.64bit.diff
You will something like this:

[root@FLT barnyard-0.2.0]# patch -p1 < barnyard.64bit.diff

patching file src/barnyard.h
patching file src/event.h

patching file src/input-plugins/dp_alert.h
patching file src/util.c
patching file src/util.h

Edit op_acid_db.c and the line “mysql->reconnect = 1; “ below
#cd /usr/local/src/barnyard-0.2.0/src/output-plugins
#vi op_acid_db.c
From:
LogMessage(“Lost connection to MySQL server. Reconnecting\n”);
while(mysql_ping(mysql) != 0)

To:
LogMessage(“Lost connection to MySQL server. Reconnecting\n”);
mysql->reconnect = 1;
while(mysql_ping(mysql) != 0)

Compile# ./configure –enable-mysql –with-mysql-libraries=/usr/lib64/mysql
#make
#make install
Copy barnyard.conf on /etc/snort
#cp etc/barnyard.conf /etc/snort
Configure barnyard.conf. Change the ffg:
from:
config interface: fxp0
to:
config interface: eth0

Add these lines if not existing, the database details should be same on the one you configure on your database.

output alert_acid_db: mysql, sensor_id 1, database snort, server localhost, user snort, password snortpass
output log_acid_db: mysql, database snort, server localhost, user snort, password snortpass, detail full

Create a waldo file for barnyard.a. Execute on the CLI and let it go until on the message “Not Using PCAP_FRAMES”, run it for few seconds and stop it by pressing Ctrl-c
#snort –c /etc/snort/snort.conf

b. Open another CLI and check your /var/log/snort, you will see files like :

-rw-r–r– 1 root root 400 May 20 15:04 snort.alert.1274330319
-rw-r–r– 1 root root 7484 May 20 15:04 snort.log.1274330319

c. Create a file barnyard.waldo and put this line
/var/log/snort snort.log 1274330319 0
Save and exit
We used 1274330319 as the 10 digit suffix on snort.log

8. Copy the barnyard init file same as we did on snort.
#wget http://www.freelinuxtutorials.com/freefiles/barnyard
#chmod 755 barnyard
#chkconfig barnyard on

9. Start barnyard service
[root@FLT snort]# service barnyard startStarting Barnyard: Barnyard Version 0.2.0 (Build 32)
31165
[ OK ]

V. Install BASE

Install first the following packages used for graphing of BASE
#pear install Image_Graph-alpha Image_Canvas-alpha Image_Color Numbers_Roman
Download and install ADODB
#wget http://easynews.dl.sourceforge.net/sourceforge/adodb/adodb480.tgz
#cd /var/www/
# tar zxvf /usr/local/src/adodb480.tgz
Download and configure BASE
#wget http://easynews.dl.sourceforge.net/sourceforge/secureideas/base-1.3.5.tar.gz
#cd /var/www/html
#tar –zxvf /usr/local/src/base-1.3.5.tar.gz
# mv base-1.3.5/ base/
Copy base_conf.php.dist to base_conf.php
#cp base_conf.php.dist base_conf.php
Edit base_conf.php and insert/edit the parameters below:
$BASE_urlpath = “/base”;
$DBlib_path = “/var/www/adodb/ “;
$DBtype = “mysql”;
$alert_dbname = “snort”;
$alert_host = “localhost”;
$alert_port = “”;
$alert_user = “snort”;
$alert_password = “password on your snort DB”;
Access the sensor on your browser
http://192.168.1.x/base
You should now see the BASE startup banner, click the “setup page” link and follow the instructions.
You can create an htaccess to secure the base directory if you want

V1. Testing Snort

Create a simple rule under the /etc/snort/rules and named it as local.rules. Make sure the line below is uncommented on snort.conf to make it work
include $RULE_PATH/local.rules
Create local.rules and insert this line:
alert tcp any any <> any 80 (msg: “Test web activity”;sid:1000001;)
Save and exit. Now restart your Snort and open a web browser,and go to any websites
You should see number of events with SID 1000001 indicating the your snort is working. Just check the alert links and categories to verify your testing. You will see something like this: http://www.freelinuxtutorials.com/freefiles/base1.PNG
http://www.freelinuxtutorials.com/freefiles/base2.PNG

Setting up MySQL Database Replication

tux — Thu, 22 Apr 2010 03:06:02 +0000

I.Configure Master

1. edit /etc/mysql/my.cnf. We have to enable networking for MySQL,

I.Configure Master

1. edit /etc/mysql/my.cnf. We have to enable networking for MySQL,

#skip-networking

2. Add the following line to the my.cnf

server-id = 1
log-bin=/storage/lun0/db/mysql/FLTVM01-bin

3. restart mysql
#service mysqld restart

4. log into the MySQL database as root and create a user with replication privileges:

#mysql -u root -p
mysql> GRANT REPLICATION SLAVE ON *.* TO ‘slaveuser’@'%’ IDENTIFIED BY ‘’; (Replace with a real password!)
mysql>FLUSH PRIVILEGES;

5. To accomplish identical data on both master and slave server, prevent all writes on the master via Lock Tables & Show Log Position
mysql> FLUSH TABLES WITH READ LOCK;
mysql> SHOW MASTER STATUS;

NOTE: Keep this prompt running in order for lock to be ACTIVE

e.g.

mysql> exit

6. Dump Database

#mysqldump -u root -p –lock-all-tables –all-databases > alldb.sql

7. Unlock Tables on the master after dumping

mysql> UNLOCK TABLES;

II. Configure Slave

1.Create Database

mysql -u root -p
Enter password:
CREATE DATABASE exampledb;
quit;

2. Restore Database

mysql -u root -p exampledb < /path/to/alldb.sql

3. Configure Slave configuration, assuming master is 192.168.1.2,

server-id=2
master-host=192.168.1.2
master-user=slave_user
master-password=secret
master-connect-retry=60

4. Restart MySQL service
#service mysql restart

5. Issue command Slave Stop and Change master

#mysql -u root -p
Enter password:
mysql> SLAVE STOP;
mysql> CHANGE MASTER TO MASTER_HOST=’192.168.1.2′, MASTER_USER=’slaveuser’, MASTER_PASSWORD=’slavepass!’, MASTER_LOG_FILE=’FLTVM01-bin.000051′, MASTER_LOG_POS=444132144;

6. Start Slave

mysql> START SLAVE;
mysql>quit

7. Check for errors
#tail -f /var/log/mysqld.log

III. CHECKING & TESTING

status of the master can be known from mysql prompt:

mysql> SHOW MASTER STATUS;

and slave can be known by:

mysql> SHOW SLAVE STATUS;

To test:

1. On sample database on master, create table

Example:

mysql>use testdb;
mysql>CREATE TABLE example (
id INT NOT NULL AUTO_INCREMENT PRIMARY KEY,
data VARCHAR(100) );

–> insert data on table

mysql> INSERT INTO example (data) VALUES (‘Hello world’);

2. Check the Slave database and see if the following changes are replicated.
mysql>use testdb;
mysql> select * from example;

How to Backup Data on RHEL/CentOS via DVD

admin — Tue, 20 Apr 2010 08:25:21 +0000

INTRODUCTION

Data backup is the process of making copies of data in order to protect and restore original files whenever data loss happens. Aside from automated routine data backup, this method does not protect against failure and natural disasters. This is where off-site data backup comes in.

OBJECTIVE

To establish an off-site backup of important data such as website and configuration files, and database, by copying and burning it to a removable media via DVD.

Sample Scenario:

We need to backup the webserver files and database, and burn it on DVD disc.

PRE-BACKUP PROCEDURES:

1. Website Files
important directories:
/var/www
/etc/httpd

Assuming you have weekly backup @ FLTWWW01, we can just copy that file in format:
FLTWWW01.freelinuxtutorials.com-var-www-html.yyyymmdd.tar.gz
FLTWWW01.freelinuxtutorials.com-etc-httpd.yyyymmdd.tar.gz

2. Database

For a consistent copy of database backup, read lock should be implemented on the database. Fortunately, we can do it on the slave database server without interrupting the MySQL service.

Write a script sqlbackup.sh that will be run on FLTVMM1-DBSERVER to stop the slave,read lock and dump the database to a certain location.
—————————————————-
#!/bin/sh
date=`/bin/date +%Y%m%d-%H`

/usr/bin/mysqladmin –user=root –password=password stop-slave
/usr/bin/mysqldump –user=root –password=password –lock-all-tables –all-databases > /storage/temp/backup-${date}.sql
/usr/bin/mysqladmin –user=root –password=password start-slave
/bin/tar zcvf backup-${date}.sql.tar.gz backup-${date}.sql

—————————————————–

BACKUP PROCESS:

Backup Data on DVD

1. First install the package dvd+rw-tools
#yum install dvd+rw-tools

2. check if dvd drive is present by displaying the information about disk drive
dvd+rw-mediainfo /dev/dvd

3. Create the ISO image
e.g.
# mkisofs -r -o /tmp/var-www-disk1.iso /var/www

Website Files: (1st DVD)
@FLTVMM1 → /storage/lun1/BACKUP/www/application

#cd /storage/lun1/BACKUP/www/temp
#mkisofs -r -o wwwprod.iso /storage/lun1/BACKUP/www/application/FLTWWW01.freelinuxtutorials.com-var-www-html.yyyymmdd.tar.gz
/storage/lun1/BACKUP/www/applicaiton/FLTWWW01.freelinuxtutorials.com-etc-httpd.yyyymmdd.tar.gz

Database: (2nd DVD)
@FLTVMM1-DBSERVER

#cd /storage/temp
#./sqlbackup.sh (can be scheduled automatically, hours before offsite backup)
#mkisofs -r -o database.iso /storage/temp/backup-yyyymmdd-hh.tar.gz

4. Write the ISO onto the DVD
Website Files:
# growisofs -Z /dev/dvd=/storage/lun1/BACKUP/www/temp/wwwprod.iso

Database:
# growisofs -Z /dev/dvd=/storage/temp/database.iso

5. To append more data for same DVD [Optional]
# growisofs -M /dev/dvd /tmp/file1

VERIFICATION:

1. To verify if data was burned successfully, insert the DVD on the drive and mount it

#mkdir /mnt/dvd
#mount -t iso9660 -o ro /dev/dvd /mnt/dvd

2. List the files and archive
#ls -lah /mnt/dvd
#tar -tf file.tar.gz

RESTORATION PROCEDURE:

Website Files:
1.    Create the mount directory if not exists
#mkdir /mnt/dvd
2.    Mount the DVD
#mount -t auto /dev/dvd /mnt/dvd
3.    Decompress the files in a particular directory
#cd /tmp
#tar zxvf FLTWWW01.freelinuxtutorials.com-var-www-html.yyyymmdd.tar.gz
#tar zxvf FLTWWW01.freelinuxtutorials.com-etc-httpd.yyyymmdd.tar.gz
4. Select the files/folder that you need and copy to a specific directory

Database:
1. Create the mount directory if not exists
#mkdir /mnt/dvd
2. Mount the DVD
#mount -t auto /dev/dvd /mnt/dvd
3.    Decompress the sql file in a particular directory
#cd /tmp
#tar zxvf backup-yyyymmdd-hh.tar.gz
4.    A .sql file will be decompress
5.    Restore a specific database using the mysql command
#mysql -u root -p databasename < backup-yyyymmdd-hh.sql

Full & Incremental MySQL Backup via Mysql-ZRM

admin — Fri, 19 Mar 2010 03:06:58 +0000

mysql-zrm is short for Zmanda Recovery Manager for MySQL. It lets you create full logical or raw backups of your databases , generate reports about the backups, verify the integrity of the backups, and recover your databases. It can also send email notifcations about the backup status, and you can implement multiple backup policies.

This procedure was successfully tested and implemented on CentOS 5.X and RHEL 5.X servers.
Pre-requisites:
1.mysql client, MySQL server 4.1 and above
2.perl-DBI and perl-XML-Parser
yum install perl-DBI perl-XML-Parser

Installation:

1.Download mysql-zrm on http://www.zmanda.com/download-zrm.php
2.Get the RPM
wget http://www.zmanda.com/downloads/community/ZRM-MySQL/2.1.1/RPM/MySQL-zrm-2.1.1-1.noarch.rpm
3.Install
rpm -ivh MySQL-zrm-2.1.1-1.noarch.rpm

-The executable files have been moved to /usr/bin, the configuration files are in /etc/mysql-zrm
Important executable files are:

mysql-zrm
mysql-zrm-reporter
mysql-zrm-scheduler

4.Create a backup user in MySQL
mysql>GRANT ALL ON *.* TO ‘backup_user’@localhost IDENTIFIED BY ‘backup_pass’;
mysql> flush privileges;

Configuration:

Main configuration file is /etc/mysql-zrm/mysql-zrm.conf.

Fill important configuration:
vi /etc/mysql-zrm/mysql-zrm.conf

1.Backup level, use 0 for full, 1 is incremental,default is full backup
backup-level=0
2.Backup method,either “raw” or “logical”.use logical
backup-mode=logical

3.Backup type,use regular
backup-type=regular
4.Destination, directory where backups will be stored, default is /var/lib/mysql-zrm. You can specify the location here
destination=/mysql-backup
5.Retention policy, specify in days (D), week(W),months (M) or years(Y)
retention-policy=6M
6.If mysql zrm is done on replication slave, set replication to 1
replication=1
7.Set compression using gzip
compress=1
8.Set all databases of backup set
all-databases=1
9.Specify list of databases ,multiple database separated by space.
databases=database1 database2 database3
10.Set MySQL user parameter
user=backup_user
11.Set MySQL pass
password=backup_pass
12.Host of MySQL server
host=localhost
13.Set mailto adddress
mailto=email@freelinuxtutorials.com
14.Set backup reports
html-reports=backup-status-info
15.Directory where the reports will be created
html-report-directory=/var/www/html/mysql-zrm/reports/

Here’s what it looks like: (mysql-zrm.conf)

backup-level=0
backup-mode=logical
backup-type=regular
destination=/mysql-backup
retention-policy=6M
compress=1
all-databases=1
user=backup_user
password=backup_pass
host=localhost
mailto=email@freelinuxtutorials.com
html-reports=backup-status-info
html-report-directory=/var/www/html/mysql-zrm/reports/

Testing:

Create first backup in backup set dailyrun. This will immediatley back up all databases to the specified directory and will also create directory $backupdir/dailyrun.

#mysql-zrm-scheduler –now –backup-set dailyrun –backup-level 0

Email notification will be sent out as well with the status of backup.

Reporting:

To generate a report about the backup status on the command line , execute:

#mysql-zrm-reporter –where backup-set=dailyrun –show backup-status-info

You can also generate few other reports with the following commands:

mysql-zrm-reporter –where backup-set=dailyrun –show backup-method-info
mysql-zrm-reporter –where backup-set=dailyrun –show backup-retention-info
mysql-zrm-reporter –where backup-set=dailyrun –show backup-performance-info
mysql-zrm-reporter –where backup-set=dailyrun –show restore-full-info
mysql-zrm-reporter –where backup-set=dailyrun –show restore-incr-info
mysql-zrm-reporter –where backup-set=dailyrun –show replication-info

Scheduling:

To schedule daily incremental and weekly full backups, set this:

#mysql-zrm-scheduler –add –interval weekly –backup-set weeklyrun –backup-level 0
#mysql-zrm-scheduler –add –interval daily –backup-set dailyrun –backup-level 1

Check:

# mysql-zrm-scheduler –query
schedule:INFO: ZRM for MySQL Community Edition – version 2.1.1
Logging to /var/log/mysql-zrm/mysql-zrm-scheduler.log
0 2 * * 0 /usr/bin/zrm-pre-scheduler –action backup –backup-set weeklyrun –backup-level 0 –interval weekly
0 3 * * * /usr/bin/zrm-pre-scheduler –action backup –backup-set dailyrun –backup-level 1 –interval daily

Or use “crontab -l” to get same information

If you want to start your daily backup at different time, let say at 1:30AM

mysql-zrm-scheduler –add –interval daily –backup-set dailyrun –start 1:30 –backup-level 1

Customized HTML Reports

To create HTML file backup-status-dailyrun.html in /var/www/html/mysql-zrm,execute this:

#mysql-zrm-reporter –show backup-status-info –where backup-set=dailyrun –type html –output /var/www/html/mysql-zrm/backup-status-dailyrun.html

Verifying Backups:

To check integrity of backup set in dailyrun, use:

#mysql-zrm –action verify-backup –backup-set dailyrun

Output something like this:

Use of uninitialized value in concatenation (.) or string at /usr/bin/mysql-zrm line 1305.
INFO: mysql-zrm-version
INFO: Verification successful

Data Recovery

1.To restore data from our MySQL backups, run this command first to find which backups are available.

2. If incremental in daily,

#mysql-zrm-reporter -show restore-info –where backup-set=dailyrun

Sample:

# mysql-zrm-reporter -show restore-info –where backup-set=dailyrun

REPORT TYPE : restore-info

backup_set backup_date                  backup_level backup_directory                          backup_status         comment
—————————————————————————————————————————————————–
dailyrun Thu 14 Jan 2010 03:00:02                1 /mysql-backup/dailyrun/20100114030002     Backup succeeded      —-
AM SGT
dailyrun Wed 13 Jan 2010 05:35:53                1 /mysql-backup/dailyrun/20100113173553     Backup succeeded      —-
PM SGT
dailyrun Wed 13 Jan 2010 05:35:24                1 /mysql-backup/dailyrun/20100113173524     Backup succeeded      —-
PM SGT
dailyrun Wed 13 Jan 2010 05:34:48                0 /mysql-backup/dailyrun/20100113173448     Backup succeeded      —-
PM SGT

Restore:
If we want to restore the incremental backup 20100113173553, then issue the command.

#mysql-zrm –action restore –source-directory /mysql-backup/dailyrun/20100113173553 –backup-set dailyrun

3.If full backup need to restore, first verify the full backup
#mysql-zrm-reporter -show restore-info –where backup-set=weeklyrun

Sample Output:
# mysql-zrm-reporter -show restore-info –where backup-set=weeklyrun

REPORT TYPE : restore-info

backup_set backup_date backup_level backup_directory backup_status comment
—————————————————————————————————————————————————–
weeklyrun Wed 13 Jan 2010 05:56:51 0 /mysql-backup/weeklyrun/20100113175651 Backup succeeded —- PM SGT

Restore:

#mysql-zrm –action restore –source-directory /mysql-backup/weeklyrun/20100113175651 –backup-set weeklyrun

Installing Tomcat

tux — Wed, 09 Dec 2009 17:02:01 +0000

Tomcat,known as Apache Tomcat or Jakarta Tomcat is a servlet container developed by ASF or Apache Software Foundation. It implements the JavaServer Pages (JSP) and Java Servlet specifications from Sun Microsystems. To make it simple, it is use as a java http web server environment where you can run your Java code.

This is a brief tutorial on installing and running tomcat in Linux.

Prerequisites:
Java SDK should be installed.

Tested in CentOS 5.X

1. Download Java SDK from sun.com website

http://java.sun.com/javaee/downloads/index.jsp

In this tutorial, we will be using Java EE 5 SDK

2. Install Java SDK, any location is ok.

[root@flt ~]# cd /home/darwin
[root@flt darwin]# chmod +x java_ee_sdk-5_01-linux.bin
[root@flt darwin]# ./java_ee_sdk-5_01-linux.bin

You will see something like this

[root@flt darwin]# ./java_ee_sdk-5_01-linux.bin
Checking available disk space…
Checking Java(TM) 2 Runtime Environment…
Extracting Java(TM) 2 Runtime Environment files…
Extracting installation files…
Launching Java(TM) 2 Runtime Environment…

You are running the installation program for Java Platform, Enterprise Edition
5 SDK. This program asks you to supply configuration preference settings that
it uses to install the server.

Just follow the steps, type yes to agree, “<” to go back, “!” to exits
* set Java Environment Variables

Installation Directory [/opt/SDK] {“<” goes back, “!” exits}: /home/darwin
Supply the admin user’s password and override any of the other initial
configuration settings as necessary.
Admin User [admin] {“<” goes back, “!” exits}:
Admin User’s Password (8 chars minimum):
Re-enter Password:
Do you want to store admin user name and password in .asadminpass file in
user’s home directory [yes] {“<” goes back, “!” exits}?
Admin Port [4848] {“<” goes back, “!” exits}:
HTTP Port [8080] {“<” goes back, “!” exits}:
HTTPS Port [8181] {“<” goes back, “!” exits}:

The following items for the product Java Platform, Enterprise Edition 5 SDK
will be installed:

Product: Java Platform, Enterprise Edition 5 SDK
Location: /home/darwin
Space Required: 215.65 MB
————————————————
Java 2 SDK, Standard Edition 5.0
Sun Java System Message Queue 4.0
Sun Java System Application Server Platform Edition 9 Update 1
Sample Applications
Java BluePrints
First Cup of Java Tutorial
Open ESB Starter Kit with JBI and BPEL

Ready to Install

1. Install Now
2. Start Over
3. Exit Installation

What would you like to do [1] {“<” goes back, “!” exits}? 1

Installing Java Platform, Enterprise Edition 5 SDK
|-1%————–25%—————–50%–Dec 9, 2009 6:52:55 AM com.sun.jbi.installer.OpenEsbInstaller main
INFO: OpenESB Starter Kit successfully installed in /home/darwin/addons/jbi
—————75%————–100%|

Installation Successful.

3.Set the Java Environment variables

[root@flt ~]# export JAVA_HOME=/home/darwin/jdk
[root@flt ~]# echo $PATH
/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
[root@flt ~]# export PATH=$PATH:${JAVA_HOME}/bin
[root@flt ~]# echo $PATH
/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin:/home/darwin/jdk/bin

4. Test Java by displaying the version

[root@flt ~]# java -version

java version “1.5.0_09″
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_09-b03)
Java HotSpot(TM) Client VM (build 1.5.0_09-b03, mixed mode)

5. Download Tomcat from tomcat.apache.org website

if you want to download apache tomcat ver.5.5.x, get it from http://tomcat.apache.org/download-55.cgi

For this tutorial, we will be downloading and installing version 6.0, get it from http://tomcat.apache.org/download-60.cgi

#cd /usr/local/src
# wget http://www.ip97.com/apache.org/tomcat/tomcat-6/v6.0.20/bin/apache-tomcat-6.0.20.tar.gz

6.Extract the binary tarball file

[root@flt src]# tar zxvf apache-tomcat-6.0.20.tar.gz

7. Install Tomcat

[root@flt src]# cd apache-tomcat-6.0.20
[root@flt apache-tomcat-6.0.20]# cd bin
[root@flt bin]# tar zxvf jsvc.tar.gz
[root@flt bin]# cd jsvc-src/
[root@flt jsvc-src]# chmod +x configure
[root@flt jsvc-src]# ./configure
[root@flt jsvc-src]#make
[root@flt jsvc-src]#cp jsvc ..
[root@flt jsvc-src]#cd ..

8. Run tomcat

[root@flt bin]# ./startup.sh

It will show something like:
Using CATALINA_BASE: /usr/local/src/apache-tomcat-6.0.20
Using CATALINA_HOME: /usr/local/src/apache-tomcat-6.0.20
Using CATALINA_TMPDIR: /usr/local/src/apache-tomcat-6.0.20/temp
Using JRE_HOME: /home/darwin/jdk

9. Using your favorite browser, type http://serverip:8080

You should see the Apache tomcat default homepage, meaning tomcat was successfully installed

Notes: If you did not see the default tomcat page, you can try this following troubleshooting steps
a. Check if tomcat is running using ps
e.g.

[root@flt bin]# ps -ef |grep tomcat

It will show something like:
root 5872 1 1 07:24 pts/2 00:00:03 /home/darwin/jdk/bin/java
-Djava.util.logging.config.file=/usr/local/src/apache-tomcat-6.0.20/conf/logging.properties
-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
-Djava.endorsed.dirs=/usr/local/src/apache-tomcat-6.0.20/endorsed -classpath
:/usr/local/src/apache-tomcat-6.0.20/bin/bootstrap.jar -Dcatalina.base=/usr/local/src/apache-tomcat-6.0.20
-Dcatalina.home=/usr/local/src/apache-tomcat-6.0.20 -Djava.io.tmpdir=/usr/local/src/apache-tomcat-6.0.20/temp org.apache.catalina.startup.Bootstrap start

b.check if tcp port 8080 is open or on “LISTEN” status
e.g.

[root@flt bin]# netstat -an |grep 8080

It will show something like:
tcp 0 0 :::8080 :::* LISTEN

* you can also use nmap port scanner to verify

[root@flt bin]# nmap localhost

If port is open, you can see something like:
8080/tcp open http-proxy

c. check if the tcp port 8080 is allowed in your iptables, if you don’t have a customized script, you can add it on your “setup” firewall configuration or in your /etc/sysconfig iptables, add this

-A RH-Firewall-1-INPUT -p tcp -m state –state NEW -m tcp –dport 8080 -j ACCEPT

10. Test tomcat if it can display html

a. Go to webapps/ROOT in the tomcat directory and create a test page titled test.html and write in it

This is a tomcat test html page!

b. Open the URL http://serverip:8080/test.html you should see your page

11. Test tomcat if it can display java server pages (jsp)

a. Go to webapps/ROOT in the tomcat directory and create page test.jsp and write in it:

Hello World
<%!
String message = “Hello World!Tomcat is running.”;
%>

<%= message%>

<%= new java.util.Date() %>

b.save and open in your browser, http://serveriplocalhost:8080/test.jsp

you should see the “Hello World!Tomcat is running” and below that is the current date

11. Shutting down tomcat process
a. Go to tomcat bin directory

[root@flt bin]# ./shutdown.sh

It will display something like:
Using CATALINA_BASE: /usr/local/src/apache-tomcat-6.0.20
Using CATALINA_HOME: /usr/local/src/apache-tomcat-6.0.20
Using CATALINA_TMPDIR: /usr/local/src/apache-tomcat-6.0.20/temp
Using JRE_HOME: /home/darwin/jdk

Quick Tip: Installing as a service and auto-boot in start up

A. Create tomcat file under /etc/init.d directory and put the script below

[root@flt bin]# cd /etc/init.d/
[root@flt init.d]# vi tomcat

here’s the script:

—————————————————————————————————————————————-

# This is the init script for starting up the
# Jakarta Tomcat server
#
# chkconfig: 345 91 10
# description: Starts and stops the Tomcat daemon.
#

# Source function library.
. /etc/rc.d/init.d/functions

# Get config.
. /etc/sysconfig/network

# Check that networking is up.
[ "${NETWORKING}" = "no" ] && exit 0

tomcat=/usr/local/src/apache-tomcat-6.0.20
startup=$tomcat/bin/startup.sh
shutdown=$tomcat/bin/shutdown.sh
export JAVA_HOME=/home/dar/jdk

start(){

echo -n $”Starting Tomcat service: ”
#daemon -c
$startup
RETVAL=$?
echo
}

stop(){
action $”Stopping Tomcat service: ” $shutdown
RETVAL=$?
echo
}

restart(){
stop
start
}

# See how we were called.
case “$1″ in
start)
start
;;
stop)
stop
;;
status)
# This doesn’t work
status tomcat
;;
restart)
restart
;;
*)
echo $”Usage: $0 {start|stop|status|restart}”
exit 1
esac

exit 0

———————————————————————————————————————————–

B. Replace the variables based on your setup:

tomcat=/usr/local/src/apache-tomcat-6.0.20
startup=$tomcat/bin/startup.sh
shutdown=$tomcat/bin/shutdown.sh
export JAVA_HOME=/home/dar/jdk

C. Make tomcat file executable

[root@flt init.d]# chmod 755 tomcat

D. Try to start and stop tomcat by issuing the command

[root@flt init.d]# service tomcat start
[root@flt init.d]# service tomcat stop

E. Type “setup” to check under System services if “tomcat” already selected to boot during start-up,if not you can issue this command

[root@flt init.d]# chkconfig –add tomcat

Installing Asterisk 1.2 and Asterisk Management Portal

admin — Thu, 15 Oct 2009 07:51:30 +0000

Obviously, this is really an old procedure, actually this is my documentation way back early 2006 when it’s my first time to work with asterisk. This procedure was implemented before in about 30-50 call center agents using softphones and it quite worked well.

So many things have changed, as we all know, from asterisk 1.2 to asterisk 1.6 , and Asterisk Management Portal is popularly known now as FreePBX. Other packages were also updated now, many changes but still asterisk is standing there as the best open source telephony system. We had many community and commercial PBX softwares today that are asterisk-based, that’s how big asterisk right now comparing back 2006

The convenience of installing asterisk is easier as well today, just burn the ISO and you are good to go,mostly managed thru web interface. You can even install asterisk in just one line command once you put asterisk repository in your config.

As easy as ” yum install asterisk16″

Here are my step-by-step procedure (old documentation). AMP was used not only to ease us from asterisk administration but to educate us as well on how things will change or how the dial plan will work. Of course, still the geeky way is to write your own dial-plan, but it will soon cover on this tutorial, as well as updated asterisk installation.

———————————————————————————

This configuration was created and tested on:

Fedora Core 4 (run yum –y update for updated kernel and packages)

Intel Xeon 3.2 GHz/Intel Celeron 2.4 GHz

2 GB RAM/256 MB RAM

10/100 Mbps LAN card
Standard configuration, no extra hardware

Asterisk

1. Login to your server as root

#cd /usr/src

2. Download Asterisk stable distribution tarball from www.asterisk.org or ftp.digium.com ,including all needed addons and packages of Asterisk Management Portal (AMP) as follow: (you can get them using wget command or obtain source code from CVS)

asterisk-1.2.x.tar.gz

zaptel-1.2.x.tar.gz

libpri-1.2.x.tar.gz

asterisk-addons-1.2.x.tar.gz

asterisk-sounds-1.2.x.tar.gz

AMP:

mime-construct-1.x.tar.gz

asterisk-perl-0.0x.tar.gz

mpg123-0.xxr.tar.gz (optional for musiconhold)

AMP-1.10.x.tar.gz

spandsp-0.0.x.tar.gz

lame-3.96.1-2.x.el4.rf.i386.rpm

3. Uncompress all tarball file

#tar zxvf asterisk-1.2.x.tar.gz
#tar zxvf  zaptel-1.2.x.tar.gz
#tar zxvf libpri-1.2.x.tar.gz
#tar zxvf asterisk-addons-1.2.x.tar.gz
#tar zxvf asterisk-sounds-1.2.x.tar.gz
#tar zxvf mime-construct-1.x.tar.gz
#tar zxvf  asterisk-perl-0.08.tar.gz
#tar zxvf mpg123-0.59r.tar.gz
#tar zxvf AMP-1.10.010.tar.gz
#tar zxvf spandsp-0.0.2.tar.gz

3.1 Install lame rpm

#rpm –ivh lame-3.96.1-2.2.el4.rf.i386.rpm

4. Compiling Zaptel

#cd /usr/src/ zaptel-version
#make clean
#make
#make install

5. Compiling libpri

#cd /usr/src/libpri-version
#make clean
#make
#make install

6. Compiling Asterisk

#cd /usr/src/asterisk-version
#make clean
#make
#make install
#make samples
#make progdocs (optional)

7. Compiling Asterisk-sounds

#cd /usr/src/asterisk-sounds-version
#make install

8. Compiling Asterisk-addons

#cd /usr/src/asterisk-addons-version
#make
#make install

Asterisk Management Portal

1. The following packages need to be installed with yum:

● libxml2

● libtiff

● libtiff-devel

● httpd

● mysql

● mysql-devel

● mysql-server

● php

● php-gd

● php-mysql

● php-pear

● openssl

● openssl-devel

● kernel-devel

● perl

● perl-CPAN

● cvs

● bison

● ncurses-devel

● audiofile-devel

e.g. #yum install libtiff-devel

2. Installed needed perl module dependencies:

#perl -MCPAN -e "install Net::Telnet"
#perl -MCPAN -e "install IPC::Signal"
#perl -MCPAN -e "install Proc::WaitStat"
#perl -MCPAN -e "install MIME::Types"

3. Compiling mime-construct

#cd /usr/src/mime-construct-version
#perl Makefile.PL
#make install

4. Compiling asterisk-perl

#cd /usr/src/asterisk-perl-version
#perl Makefile.PL
#make install

5. Compiling mpg123

#cd /usr/src/mpg123-version
#make linux
#make install

6. Compiling spandsp

#cd /usr/src/spandsp-version
#./configure
#make
#make install

7.Create a group and non-root user

# groupadd asterisk
# useradd -c "asterisk PBX" -d /var/lib/asterisk -u 5060 -g  asterisk asterisk

XXXX 8. Building/Compiling Asterisk to run as our non-root user

#mkdir /var/run/asterisk
#cd /usr/src/asterisk-version
#make &&  make install

9. Install Asterisk sound

#cd /usr/src/asterisk-sounds-version
#make install

10. Setting up MySQL for CDR (Call Detail Reports)

#/usr/bin/mysql_install_db
#service mysqld start
# mysqladmin -u root password 'blackxxxxxx'
# mysqladmin create asteriskcdrdb -p
Enter password:
# mysql -u root -p asteriskcdrdb < /
usr/src/AMP/SQL/cdr_mysql_table.sql
#mysql -u root -p
mysql> GRANT ALL PRIVILEGES ON asteriskcdrdb.* TO asteriskuser@localhost IDENTIFIED BY 'amp109';
Query OK, 0 rows affected (0.00 sec)
mysql> exit

11. Build/Compile cdr_mysql module for Asterisk

#cd /usr/src/asterisk-addons-version
# perl -p -i.bak -e \
> 's/CFLAGS.*D_GNU_SOURCE/CFLAGS+=-D_GNU_SOURCE\nCFLAGS+=-
DMYSQL_LOGUNIQUEID/' \
> Makefile
# make && make install

12. Setup MySQL for AMP web interface

# mysqladmin create asterisk -p
# mysql -u root -p asterisk < /
usr/src/AMP/SQL/newinstall.sql
# mysql -u root -p
mysql> GRANT ALL PRIVILEGES
-> ON asterisk.*
-> TO asteriskuser@localhost
-> IDENTIFIED BY 'amp109';
Query OK, 0 rows affected (0.00 sec)
mysql> \q

13. Apply the AMP/Asterisk configuration files

#cd /usr/src/AMP
# ./install_amp

14. Edit Apache/PHP environment

#vi /etc/php.ini

Edit such that the line looks like this:

upload_max_filesize = 20M

Chown the PHP session.save_path directory:

#chown asterisk /var/lib/php/session/

Edit /etc/httpd/conf.d/php.conf such that it lincludes:

SetOutputFilter PHP

SetInputFilter PHP

LimitRequestBody 20000000

15. Edit web server configuration file

Edit /etc/httpd/conf/httpd.conf such that:

User asterisk

Group asterisk

and:

#Password protect /var/www/html/admin

AuthType Basic

AuthName “Restricted Area”

AuthUserFile /usr/local/apache/passwd/wwwpasswd

Require user wwwadmin

To create the wwwpasswd file:

# vi /etc/httpd/conf.d/php.conf
# vi /etc/httpd/conf/httpd.conf
# mkdir /usr/local/apache
# mkdir /usr/local/apache/passwd
# htpasswd -c /usr/local/apache/passwd/wwwpasswd wwwadmin
New password:
Re-type new password:

Adding password for user wwwadmin
16. amportal control script

The amportal script is the recommended way to stop and start asterisk:

# /usr/sbin/amportal stop
# /usr/sbin/amportal start

17. Automatic startup

Add the following line on /etc/rc.local

/usr/sbin/amportal start

Make sure also httpd and mysqld services ( type setup on console, then go to System Services, and select httpd and mysqld, or you can use chkconfig –add command)

17. Reboot and access the AMP administration interface

#shutdown -r now

CentOS LAMP Installation

admin — Wed, 14 Oct 2009 14:01:05 +0000

There’s an easy way of installing Apache, Mysql and PHP and it’s via yum. You can install or update httpd,mysql-server and php, php-mysql and some minor changes on your configuration files and you’re good to go. Well, the procedure below is one way to install also, if you’re quite bored and want to develop your sysadmin skills.

I. Operating System Installation

1. The typical type of installation is thru CD-ROM or DVD. If you want network install, you should have a CentOS boot disk to boot the server

How to create boot disk?
A. how to create boot disk in linux
a. insert CD then copy boot.iso to a folder

#cp boot.iso /home/test/

b.unmount the cd-rom

#cd; eject

c. Insert the blank cdr and find the dev name

cdrecord -scanbus

d. Write the .iso to that blank cd

#cdrecord -v -dao dev=1,2,3 /home/test/boot.iso

the 1,2,3 value is just a sample. Just replace it with the actual device name that you get upon running
the cdrecord -scanbus.

B. how to create boot disk in windows
a. copy boot.iso in any folder
b. run your favorite cd burning program and open boot.iso
c. start the cd writing process

2. Assign a static IP address & the hostname for the server.

3. Select network install from FTP or NFS depends on your setup
ex:
ftp: 192.168.17.100
path: /pub/centos5

Setting up NFS or FTP is discussed on the other tutorial

4. When finish, do the update. The -y parameter denotes automatic update and install of the package, no more prompt.

#yum –y update

5. Configure the file “network” at /etc/sysconfig/network with the following lines.

NETWORKING=yes
NETWORKING_IPV6=yes
HOSTNAME=localhost.localdomain

6. Configure the file “ifcfg-eth0” at /etc/sysconfig/network-scripts/ifcfg-eth0 with the following lines.

# Broadcom Gigabit Ethernet
DEVICE=eth0
ONBOOT=yes
BOOTPROTO=static
HWADDR=00:29:EE:F2:45:4L
IPADDR=Static IP Address (Example: 192.168.17.5)
NETMASK=Subnet Mask (Example: 255.255.255.0)
GATEWAY=Gateway IP address (Example: 192.168.17.1)

7. Configure the file “hosts” at /etc/hosts with the following lines. (optional)

# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1               localhost.localdomain localhost
10.0.0.174              c5.freelinuxtutorials.com c5 (Add the server hostname here)
::1             localhost6.localdomain6 localhost6

8. Configure your DNS at /etc/resolv.conf with the following lines.

nameserver Primary DNS (Example: 192.168.17.228)
search freelinuxtutorials.com

9. Restart the network interface by the following commands.

#service network restart

10. Close unnecessary services via the “setup” menu tool or use chkconfig to turn off auto start of certain services
e.g.

#chkconfig cups off
#chkconfig nfslock off

11. After first restart, check your logs to see some errors

cat /var/log/messages |grep error
cat /var/log/messages |grep warning

II. Apache Installation

1. Apache can be installed as package during custom selection of packages on the installation process, labeled as “Web Server”

2. Make Apache service start on boot-up via:

# chkconfig httpd on

Let say the default version of your apache is 2.2.3 and you want to upgrade it to the latest version

UPGRADING OF APACHE 2.2.3 TO APACHE 2.2.4

1.    # yum remove httpd

Removing:
httpd                   x86_64        2.2.3-7.el5.centos installed         2.9 M
Removing for dependencies:
httpd-devel             x86_64     2.2.3-7.el5.centos   installed         512 k
httpd-devel             i386         2.2.3-7.el5.centos   installed         512 k

shell#  rm –rf  php-5.2.3

3.   Download httpd-2.2.4-4.x86_64.rpm from http://rpmfind.net/
4.   Download httpd-devel-2.2.4-4.x86_64.rpm from http://rpmfind.net/
5.   Download lib64db4.5-4.5.20-1mdv2007.1.x86_64.rpm http://rpmfind.net/
6.   Install lib64db4.5-4.5.20-1mdv2007.1.x86_64.rpm

Shell# rpm –Uvih lib64db4.5-4.5.20-1mdv2007.1.x86_64.rpm

7. Install httpd-2.2.4-4.x86_64.rpm

Shell# rpm –Uvih httpd-2.2.4-4.x86_64.rpm

8. Install httpd-devel-2.2.4-4.x86_64.rpm

Shell# rpm –Uvih httpd-devel-2.2.4-4.x86_64.rpm

G. MySQL Installation

1. Download the MySQL software at http://www.mysql.org.

2. Select Linux Source to download. File name should be “mysql-5.0.41.tar.gz”

3. Before installation, ensure that gcc compiler has installed. Please verify by

gcc –v

If gcc does not install, please install it by

yum install gcc

4. Install gcc-c++ compiler by

yum install gcc-c++

5. Install the ncurses-devel library by

yum install ncurses-devel

It is require by the MySQL during compile process.

6. Run the following commands.

shell> groupadd mysql
shell> useradd -g mysql mysql
shell> gunzip < mysql-VERSION.tar.gz | tar -xvf -
shell> cd mysql-VERSION
shell> ./configure --prefix=/usr/local/mysql
shell> make
shell> make install
shell> cp support-files/my-medium.cnf /etc/my.cnf
shell> cd /usr/local/mysql
shell> chown -R mysql .
shell> chgrp -R mysql .
shell> bin/mysql_install_db --user=mysql
shell> chown -R root .
shell> chown -R mysql var
shell> bin/mysqld_safe --user=mysql &

7. To make MySQL start automatically after reboot, do the following.

shell> cp /mysql-VERSION/support-files/mysql.server /etc/init.d/mysql
shell> chmod +x /etc/init.d/mysql
shell> chkconfig --add mysql

8. To test the MySQL, type the following command.

shell>/usr/local/mysql/bin/mysqladmin version

If it can display the version, installation is preliminary success.

9. Do the following simple testing.

shell>mysql

mysql> use mysql;

Database changed

mysql> show tables;

mysql> select * from db;

+——+———+——+————-+————-+————-+————-+————-+———–+————+—————–+————+————+———————–+——————+——————+—————-+———————+——————–+————–+
| Host | Db      | User | Select_priv | Insert_priv | Update_priv | Delete_priv | Create_priv | Drop_priv | Grant_priv | References_priv | Index_priv | Alter_priv | Create_tmp_table_priv | Lock_tables_priv | Create_view_priv | Show_view_priv | Create_routine_priv | Alter_routine_priv | Execute_priv |
+——+———+——+————-+————-+————-+————-+————-+———–+————+—————–+————+————+———————–+——————+——————+—————-+———————+——————–+————–+
| %    | test    |      | Y           | Y           | Y           | Y           | Y           | Y         | N          | Y               | Y          | Y          | Y                     | Y                | Y                | Y              | Y                   | N                  | N            |
| %    | test\_% |      | Y           | Y           | Y           | Y           | Y           | Y         | N          | Y               | Y          | Y          | Y                     | Y                | Y                | Y              | Y                   | N                  | N            |
+——+———+——+————-+————-+————-+————-+————-+———–+————+—————–+————+————+———————–+——————+——————+—————-+———————+——————–+————–+
2 rows in set (0.00 sec)

10. Add password for “root” in MySQL Database by typing the following commands. The default password is same as Linux root password.

shell> mysql -u root mysql

mysql> UPDATE user SET Password=PASSWORD(‘default password’) WHERE user=’root’;

mysql> FLUSH PRIVILEGES;

11. Test it by the following commands.

shell>mysql - u  root - p
Enter password: ********

H. PHP Installation

1. Download the tar.gz file with filename “php-5.2.3.tar.gz” at http://www.php.net

2. Install Flex by,

yum  install flex

3. Install libxml2 by

yum install libxml2-devel.x86_64

4. Install httpd-devel by

yum install httpd-devel

5. Uninstall the installed php by

yum remove php

6. Type the following commands.

shell> gunzip < php-VERSION.tar.gz | tar -xvf –

shell> tar zcvf php-VERSION.tar.gz
shell> cd php-VERSION
shell> ./configure --with-apxs2 --with-mysql=/usr/local/mysql/ --prefix=/usr/local/php
shell> make
shell>make install
shell> cp php.ini-recommended /usr/local/php/php.ini

7. Modify httpd.conf by

vi /etc/httpd/conf/httpd.conf

Add the following two lines after all “AddType” or after “AddType application/x-gzip .gz .tgz”.

AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps

Add the following line after all “LoadModule”.

LoadModule php5_module modules/libphp5.so

8. To test, prepare a file with filename “index.php” with the following contents.

phpinfo();
?>

Store it in /var/www/html/

9. Remarks all line in the file /etc/httpd/conf.d/welcome.conf

10. Restart the Apache server by

/etc/init.d/httpd restart

11. Use IE to access the server by

http://hostname/index.php

Installing Dimdim on CentOS

tux — Thu, 08 Oct 2009 17:55:33 +0000

Do you want a free Web Conferencing? Then you can try DIMDIM.
Dimdim lets anyone deliver synchronized live presentations, whiteboards and web pages and share their voice and video over the Internet – with no download required

Official Dimdim Website: www.dimdim.com

You can try the Open source Community Edition.

This is based on Dimdim Installation Procedure for CentOS

This step-by-step procedure was tested and implemented successfully on CentOS 5.2 32 bit (64 bit won’t work since the dimdim installation pack is for 32-bit only)

Requirements

1. Libc – ver. required is 2.5
2. OpenOffice – ver. required is 3.0
3. Java Runtime Environment(JRE) – ver. required is 1.6
4. CherryPy – ver. required is 3.1
5. Flup – ver. required is 1.0
6. Pycurl – ver. required is 7.19
7. demjson – ver. required is 1.3
8. Python – ver. required is 2.5

DimDim is very easy to install since it’s available in RPM package. The pre-requisites will take some of your time installing.

Here are the steps:

1. Chceck if you have libc v2.5 installed by using this command below:

[root@freelinuxtutorials]#ldconfig -v |grep libc

You should get similar output

libcidn.so.1 -> libcidn-2.5.so
libcrypt.so.1 -> libcrypt-2.5.so
libc.so.6 -> libc-2.5.so
libcap.so.1 -> libcap.so.1.10
libcom_err.so.2 -> libcom_err.so.2.1
libcrypto.so.6 -> libcrypto.so.0.9.8b
libcapi20.so.3 -> libcapi20.so.3.0.4
libcairo.so.2 -> libcairo.so.2.9.2
libckyapplet.so.1 -> libckyapplet.so.1.0.0
libcddb-slave2.so.0 -> libcddb-slave2.so.0.0.0
libcspi.so.0 -> libcspi.so.0.10.11
libcdda_interface.so.0 -> libcdda_interface.so.0.9.8
libcupsimage.so.2 -> libcupsimage.so.2
libcrack.so.2 -> libcrack.so.2.8.0
libcryptsetup.so.0 -> libcryptsetup.so.0.0.0
libcdda_paranoia.so.0 -> libcdda_paranoia.so.0.9.8
libcurl.so.3 -> libcurl.so.3.0.0
libcamel-provider-1.2.so.8 -> libcamel-provider-1.2.so.8.1.0
libcamel-1.2.so.0 -> libcamel-1.2.so.0.0.0
libcups.so.2 -> libcups.so.2
libcroco-0.6.so.3 -> libcroco-0.6.so.3.0.1

2. Check if you have OpenOffice installed by following this step:

[root@freelinuxtutorials]# find / -name soffice.bin | grep openoffice | grep program | grep org3″

Or query it via rpm

[root@freelinuxtutorials]#rpm -qa |grep openoffice

* If openoffice 3.0 not yet installed, install it by following this step

a. Get the installater from

URLs: http://mirrors.isc.org/pub/openoffice/stable

http://download.openoffice.org/other.html#en-US

HOW TO INSTALL:
a. Download the tarball file, choose the JRE version
[root@freelinuxtutorials]#wget http://mirrors.isc.org/pub/openoffice/stable/3.1.1/OOo_3.1.1_LinuxIntel_install_wJRE_en-US.tar.gz

b.To install open office v-3.0.0.0 please follow below steps:
b.1. Uncompress the open office pack you have downloaded.
[root@freelinuxtutorials]# tar zxvf OOo_3.1.1_LinuxIntel_install_wJRE_en-US.tar.gz
b.2. Go to open office directory
[root@freelinuxtutorials]#cd OOo_3.1.1_LinuxIntel_install_wJRE_en-US
b.3. go to RPMS directory
[root@freelinuxtutorials]#cd RPMS
b.4. You will find many rpm files ,install these rpm files by running the command
[root@freelinuxtutorials]#rpm -ivh *.rpm

3. Install Java Runtime Environment ( JRE )

Check if you have JRE Installed,issue the below command:

[root@freelinuxtutorials]#java -version

You should get similar output

java version “1.6.0?
Java(TM) SE Runtime Environment (build 1.6.0-b105)
Java HotSpot(TM) Client VM (build 1.6.0-b105, mixed mode, sharing)

Type echo $JAVA_HOME
You should get
/usr/bin/java

Some time java -version shows lower version even after installing newer version. This is because newer java is not in the system path.
you can locate jre1.6 by the following command

[root@freelinuxtutorials]#find / -name java | grep /bin/java | grep jre | grep 1.6

It will show similar output:

[root@freelinuxtutorials]# /usr/java/jre1.6.0_05/bin/java

then type:

[root@freelinuxtutorials]# /usr/java/jre1.6.0_05/bin/java -version
java version “1.6.0?
Java(TM) SE Runtime Environment (build 1.6.0-b105)
Java HotSpot(TM) Client VM (build 1.6.0-b105, mixed mode, sharing)

Note: If you have version lower that 1.6 then you need to install v1.6

Go to URL below to download and install JRE v1.6

http://java.com/en/download/manual.jsp

4. Install CherryPy

Check if you have CherryPy Installed,issue the below command:

*CHECK:
Type python2.4
Type import cherrypy

You should get similar output
[root@freelinuxtutorials]# python2.4
Python 2.4.3 (r252:60911, Oct 9 2008, 08:13:08)
[GCC 4.1.2 20071124 (Red Hat 4.1.2-42)] on linux2
Type “help”, “copyright”, “credits” or “license” for more information.
>>>import cherrypy
>>>
Above output indicates that cherrypy is installed.If it gives an output
saying “NO SUCH MODULE” then please follow below steps.

If you encounter such message above then you need to install CherryPy

Go to below URL to download and install CherryPy v3.1

http://www.cherrypy.org/wiki/CherryPyDownload

CherryPy Installation:

a) Download
[root@freelinuxtutorials]# wget http://download.cherrypy.org/cherrypy/3.1.0/CherryPy-3.1.0.zip
b) UnZip
[root@freelinuxtutorials]#unzip CherryPy-3.1.0.zip
c) Go to the directory and change permission to executable
[root@freelinuxtutorials]#cd CherryPy-3.1.0
[root@freelinuxtutorials]#chmod +x *
d) Run the following command to install
[root@freelinuxtutorials]#python2.4 setup.py install
e) Check if Cherrypy is already imported in python2.4
[root@freelinuxtutorials]#python2.4
[root@freelinuxtutorials]#import cherrypy

5. Flup

a) See if you have Flup Installed:

Type python2.4
Type import flup

You should get similar output

[root@freelinuxtutorials]# python2.4
Python 2.4.3 (r252:60911, Oct 9 2008, 08:13:08)
[GCC 4.1.2 20071124 (Red Hat 4.1.2-42)] on linux2
Type “help”, “copyright”, “credits” or “license” for more information.
>>>import flup
>>>

Above output indicates that flup is installed.If it gives an output
saying “NO SUCH MODULE” then please follow below steps.

If you encounter such message above then you need to install Flup

b. Installing Flup

Go to below URL to download and install Flup v1.0

http://www.saddi.com/software/flup/dist/flup-1.0.tar.gz

Flup installation:
Follow these steps:
a) Download Flup
[root@freelinuxtutorials]#wget http://www.saddi.com/software/flup/dist/flup-1.0.tar.gz
b) Uncompress the tarball file
[root@freelinuxtutorials]#tar xvzf flup-1.0.tar.gz
c) Go to the directory and change permission to executable
[root@freelinuxtutorials]#cd flup-1.0 and chmod +x *
d)Setup
[root@freelinuxtutorials]#python2.4 ez_setup.py -U setuptools
e) Install
[root@freelinuxtutorials]#python2.4 setup.py install
f)Check if Flup is already imported in python2.4
[root@freelinuxtutorials]#python2.4
[root@freelinuxtutorials]#import flup

6. pycurl
Upgrade your curl 7.15 to 7.19.
a)Download curl 7.19
[root@freelinuxtutorials]#wget http://curl.haxx.se/download/curl-7.19.0.tar.gz
b)Uncompress
[root@freelinuxtutorials]#tar xzf curl-7.19.0.tar.gz
c) Go to the curl directory and compile it
[root@freelinuxtutorials]#cd curl-7.19.0
[root@freelinuxtutorials]# ./configure
[root@freelinuxtutorials]# make
[root@freelinuxtutorials]# make install
d) Soft link the curl
[root@freelinuxtutorials]#ln -s /usr/local/lib/libcurl.so.4 /usr/lib/libcurl.so.4
e) Install pycurl, make sure you have python-devel package installed
[root@freelinuxtutorials]# yum install python-devel
f)Install pycurl
[root@freelinuxtutorials]#easy_install-2.4 pycurl
[root@freelinuxtutorials]#cd ..
[root@freelinuxtutorials]#python2.4
[root@freelinuxtutorials]#import pycurl

7. demjson
a) Check if demjson Installed:
[root@freelinuxtutorials]#python2.4
[root@freelinuxtutorials]#import demjson

b) Install demjson
[root@freelinuxtutorials]#wget http://deron.meranda.us/python/demjson/dist/demjson-1.3.tar.gz
c) Uncompress tar
[root@freelinuxtutorials]#tar xzf demjson-1.3.tar.gz
d) Go to demjson directory and change permission to executable
[root@freelinuxtutorials]#cd demjson-1.3
[root@freelinuxtutorials]#chmod +x *
e)Install
[root@freelinuxtutorials]#python2.4 setup.py install
f)Check if demjson is already imported in python2.4
[root@freelinuxtutorials]#python2.4
[root@freelinuxtutorials]#import demjson

8. Python2.5
a)Before installation of python2.5, you need to check and install zlib
[root@freelinuxtutorials]# yum install zlib*
b) Download demjson
[root@freelinuxtutorials]#wget http://www.python.org/ftp/python/2.5.2/Python-2.5.2.tgz
c) Uncompress
[root@freelinuxtutorials]# tar xvzf Python-2.5.2.tgz
d) Go to that directory and compile
[root@freelinuxtutorials]#cd Python-2.5.2
[root@freelinuxtutorials]# ./configure
[root@freelinuxtutorials]# make && make install

NOTE: BEFORE PROCEEDING FURTHER PLEASE NOTE THAT we need pycurl,demjson,flup,cherrypy modules in python 2.5 also.To
do this follow below steps.It will be using the same cherrypy,flup,demjson,pycurl which you have already downloaded

9. Configure those with python2.5 as follows

9-a) CherryPy for python2.5

Version Required: v3.1

a. Go to the directory where you downloaded the cherrypy package.
b. cd CherryPy-3.1.0
c. python2.5 setup.py install
d. rm -rf CherryPy-3.1.0
e. rm -rf CherryPy-3.1.0.zip

You should be out of Cherrypy-3.1.0 directory and then
Type python2.5
Type import cherrypy

You should get similar output which indicates that cherrypy is successfully installed with python2.5
[root@freelinuxtutorials]#python2.5
Python 2.5.X (r252:60911, Oct 9 2008, 08:13:08)
[GCC 4.1.2 20071124 (Red Hat 4.1.2-42)] on linux2
Type “help”, “copyright”, “credits” or “license” for more information.
>>>import cherrypy
>>>

Above output indicates that cherrypy is installed and imported in Python2.5 correctly.

9-b) Flup for python2.5

a. Version Required: v1.0

b. Go to the directory where you downloaded flup

c. cd flup-1.0 and chmod +x *

d. python2.5 ez_setup.py -U setuptools

e. python2.5 setup.py install

f. rm -rf flup-1.0

g. rm -rf flup-1.0.tar.gz

Open a terminal or move out from flup-1.0 directory and follow the below steps:

Type python2.5
Type import flup

You should get similar output
[root@freelinuxtutorials]#python2.5
Python 2.5.X (r252:60911, Oct 9 2008, 08:13:08)
[GCC 4.1.2 20071124 (Red Hat 4.1.2-42)] on linux2
Type “help”, “copyright”, “credits” or “license” for more information.
>>>import flup
>>>

Above output indicates that flup is installed and imported in Python2.5 correctly.

9-c) demjson for python2.5
a. Version Required: v1.3

b. Go to the directory where you downloaded demjson i.e. cd demjson-1.3

c. cd demjson-1.3 and chmod +x *

d. python2.5 setup.py install

e. rm -rf demjson-1.3

f. rm -rf demjson-1.3.tar.gz

Now to check you must change your directory cd .. and then
Type python2.5
Type import demjson

Above output indicates that demjson is installed and imported in Python2.5 correctly.

9-e) pycurl for python2.5
a) Version Required: v7.19

b) Now we can proceed on pycurl installion for python2.5 .

c)for python2.5 pycurl installation do as follows:

Type
easy_install-2.5 pycurl

Type python2.5
Type import pycurl

You should get similar output
[root@freelinuxtutorials]#python2.5
Python 2.5.2 (r252:60911, Oct 9 2008, 08:13:08)
[GCC 4.1.2 20071124 (Red Hat 4.1.2-42)] on linux2
Type “help”, “copyright”, “credits” or “license” for more information.
>>>import pycurl
>>>

Note: Opening ports in the Firewall

Port 80, 1935, 40000, 40001, 40002 , 40005 must be free in the machine.
The Dimdim Servers use ports 80 &1935 for external communication. But port 80 alone is enough to be opened for external communication.

BELOW is the Dimdim Installation based on the README

—————————————————————————-

DIMDIM INSTALLATION:
====================

Installation Steps:

Step 1: Download dimdim rpm package

Step 2: Install rpm package by typing the command rpm -ivh Dimdim-4.5_SF_i386.rpm in a terminal

Dimdim-4.5 will be installed under location /usr/local and a soft link for dimdim will be created under /usr/local.

Step 3: By default, ip address of ethernet 0 interface of the box is configured for Dimdim Server.

i) To stop Dimdim, open a terminal and enter stopDimdim
ii) To start Dimdim, open a terminal and enter startDimdim.

To start the meeting do

http:///dimdim/

Note: If the ip address is not the same or if you need to configure with different IP address, follow the below steps:

Step A: Get the IP Address of the machine

Example:
[root@localhost]# ifconfig eth0

The output will look like:
eth0 Link encap:Ethernet HWaddr 00:0C:29:CA:FA:7C
inet addr:192.168.1.10 Bcast:125.255.255.255 Mask:255.0.0.0

The IP Address for the above example is 192.168.1.10

Step b: Configure all the Dimdim components

There may be two cases:
1. Network has public and private IP mapping,

ExternalIP:port –> Internal:port

Please note that port should be same, Port 80 is recommended.
For example: 123.X.X.X:80 —> 192.168.X.X:80
publicIP is mapped to privateIP

Use Config-ipaddress.pl like below
cd /usr/local/dimdim
./Config-ipaddress.pl 123.X.X.X 80 192.168.X.X

2. VM has a singleIP, There is no network mapping(no Network Address Translation):

Use Config-ipaddress.pl like below
cd /usr/local/dimdim
./Config-ipaddress.pl 123.X.X.X 80

Step c: On completion of configuration, open a terminal and enter the command “startDimdim”. This will start all the Dimdim components.
To ensure all Dimdim Components are started, check the status of the Dimdim Components.

You are now ready to start meeting. Start the meeting by providing the URL http:///dimdim/.
Please note the trailing slash is required in the URL after dimdim.Example http://192.168.1.10/dimdim/

Dimdim Sever Machine Restart:
=============================

When the machine where Dimdim Server installed is restarted,
open a terminal and type startDimdim – This will start Dimdim Server

Dimdim SMTP Server Configuration :
==================================

Please note that the current smtp settings are just sample setting. It is adviced that you change these settings to your own smtp configuration.

Below is suggested way to modify the smtp configuration

1) Open dimdim.properties configuration file

Go to folder cd //ConferenceServer/apache-tomcat-5.5.17/webapps/dimdim/WEB-INF/classes/resources/

i.e. cd /usr/local/dimdim/ConferenceServer/apache-tomcat-5.5.17/webapps/dimdim/WEB-INF/classes/resources/

2) Modify the below settings as suggested. Please note that setting “dimdim.smtptype” needs to be configured depending on the type of smtp server.

## Email Parameters that can be configured by the user.
##
email.server=
email.user=
email.password=
email.sender=
email.PORT=465
email.EMAIL_CC=
email.EMAIL_BCC=
##
##
email.PROTOCOL=smtp
email.DEBUG_MAIL_SESSION=false
email.BUFFER_SIZE=2048
email.EMAIL_SUBJECT = has invited you to a Dimdim web meeting.
email.EMAIL_FROM_PERSON=DimDim Invitations
email.EMAIL_FROM=
email.EMAIL_REPLY_TO=
email.EMAIL_TO=
email.EMAIL_CHARSET=utf-8
##
##
## This property refers to type of the SMTP Server
## 1 : Non SSL SMTP Server i.e. Dimdim SMTP Server
## 2 : SSL SMTP Server i.e. gmail SMTP Server
dimdim.smtptype=2
##
##

DIMDIM UNINSTALLATION:
======================

Step 1: rpm -e dimdim

All the Dimdim Components installed by rpm package will be removed.

Linux as a Router and Firewall

tux — Fri, 18 Sep 2009 11:46:08 +0000

Step by Step Procedure

Step 1. Add 2 LAN cards to the Linux box. You need to have two(2) NICs, one for your private network and one for the public IP address

Step 2. Check if your networks cards are properly detected and installed. You can use the command “dmesg” to verify if it was recognized during the boot-up process

Sample output:
#dmesg |grep eth

e100: eth0: e100_probe: addr 0xfa061000, irq 177, MAC addr 00:10:DC:5E:A8:BF
e100: eth1: e100_probe: addr 0xfa060000, irq 185, MAC addr 00:10:DC:5E:A8:C0
e100: eth0: e100_watchdog: link up, 100Mbps, half-duplex
e100: eth1: e100_watchdog: link up, 100Mbps, full-duplex

Step 3. Configure eth0 for Internet with a Public IP address

For RPM-based distro, a menu-based tool called “setup” can be used to easy configuration setup such as Network
Sample Output 1: (RPM-based like RHEL,CentOS)

# cat /etc/sysconfig/network-scripts/ifcfg-eth0
# Intel Corporation 82557/8/9/0/1 Ethernet Pro 100
DEVICE=eth0
BOOTPROTO=none
HWADDR=00:10:dc:5e:a8:bx
ONBOOT=yes
DHCP_HOSTNAME=freelinuxtutorials
IPADDR=116.x.x.x
NETMASK=255.255.255.240
GATEWAY=116.x.x.x
TYPE=Ethernet

Sample Output 2: (Debian-based)
# cat /etc/network/interfaces
auto eth0
iface eth0 inet static
address 116.x.x.x
netmask 255.255.255.240
mtu 1500
gateway 116.x.x.x

Step 4. Configure eth1 for LAN with a Private IP (Internal private network)
# cat ifcfg-eth1

BOOTPROTO=none
PEERDNS=yes
HWADDR=00:50:8B:CF:9C:05    # Optional
TYPE=Ethernet
IPV6INIT=no
DEVICE=eth1
NETMASK=255.255.0.0        # Specify based on your requirement
BROADCAST=”"
IPADDR=192.168.1.1        # Gateway of the LAN
NETWORK=192.168.0.0        # Optional
USERCTL=no
ONBOOT=yes

Sample Output 1: (RPM-based like RHEL,CentOS)

# cat /etc/sysconfig/network-scripts/ifcfg-eth1

DEVICE=eth1
BOOTPROTO=none
HWADDR=00:10:dc:5e:a8:cx
ONBOOT=yes
DHCP_HOSTNAME=freelinuxtutorials
TYPE=Ethernet
IPADDR=192.168.17.1
NETMASK=255.255.255.0

Sample Output 2: (Debian-based)
# cat /etc/network/interfaces
auto eth1
iface eth1 inet static
address 192.168.17.1
netmask 255.255.255.0
mtu 1500

Step 5. Host Configuration (Optional)
# cat /etc/hosts
127.0.0.1 freelinuxtutorials localhost.localdomain localhost

Step 6. Gateway Configuration (can be no gateway set)
# cat /etc/sysconfig/network

NETWORKING=yes
HOSTNAME=freelinuxtutorials

Step 7. DNS Configuration
# cat /etc/resolv.conf

nameserver 203.x.x.x # ISP Primary DNS Server
nameserver 203.x.x.x # ISP Secondary DNS Server
Step 8. NAT configuration with IP Tables
First of all you have to flush and delete existing firewall rules. So flush rules by typing in terminal:

iptables -F
iptables -t nat -F
iptables -t mangle -F
Now delete these chains:

iptables -X
iptables -t nat -X
iptables -t mangle -X
# Set up IP FORWARDing and Masquerading

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -A FORWARD -i eth1 -j ACCEPT
# Enables packet forwarding by kernel (save this setting in /etc/sysctl.conf file)

echo 1 > /proc/sys/net/ipv4/ip_forward
#Apply the configuration

service iptables save
service iptables restart
# Check if iptables is set to start during boot up

chkconfig –list iptables

Step 9. Testing
Ping the Gateway of the network from client system: ping 192.168.17.1
Try it on your client systems: ping www.yahoo.com

Configure PC on the network
PC Clients should set their gateway of the private IP of the Linux machine.
- DNS can be set using the ISP DNS, or if you have internal DNS with your customized zones is recommended esp. when you have Active Directory in place on your network

——————————————————————————————————————————————-

This is my sample NAT/firewall script:

#!/bin/sh
#
#

# set a few variables
echo “”
echo “ setting global variables”
echo “”
export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin
iptables=”/sbin/iptables”

# adjust my /proc
echo “ applying general security settings to /proc filesystem”
echo “”
if [ -e /proc/sys/net/ipv4/tcp_syncookies ]; then echo 1 > /proc/sys/net/ipv4/tcp_syncookies; fi
if [ -e /proc/sys/net/ipv4/conf/all/rp_filter ]; then echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter; fi
if [ -e /proc/sys/net/ipv4/ip_forward ]; then echo 1 > /proc/sys/net/ipv4/ip_forward; fi

# load some modules
if [ -e /lib/modules/`uname -r`/kernel/net/ipv4/netfilter/ip_conntrack_ftp.o ]; then modprobe ip_conntrack_ftp; fi
if [ -e /lib/modules/`uname -r`/kernel/net/ipv4/netfilter/ip_nat_ftp.o ]; then modprobe ip_nat_ftp; fi

# flush any existing chains and set default policies
$iptables -F INPUT
$iptables -F OUTPUT
$iptables -P INPUT DROP
$iptables -P OUTPUT ACCEPT

# setup nat
echo “ applying nat rules”
echo “”
$iptables -F FORWARD
$iptables -F -t nat
$iptables -P FORWARD DROP
$iptables -A FORWARD -i eth1 -j ACCEPT
$iptables -A INPUT -i eth1 -j ACCEPT
$iptables -A OUTPUT -o eth1 -j ACCEPT
$iptables -A FORWARD -m state –state ESTABLISHED,RELATED -j ACCEPT
$iptables -t nat -A POSTROUTING -s 192.168.17.0/24 -o eth0 -j SNAT –to-source 116.x.x.x <—- Public IP (could be one of the IP address available given by your ISP)

# allow all packets on the loopback interface
$iptables -A INPUT -i lo -j ACCEPT
$iptables -A OUTPUT -o lo -j ACCEPT

# allow established and related packets back in
$iptables -A INPUT -i eth0 -m state –state ESTABLISHED,RELATED -j ACCEPT

# icmp
echo “ applying icmp rules”
echo “”
$iptables -A OUTPUT -p icmp -m state –state NEW -j ACCEPT
$iptables -A INPUT -p icmp -m state –state ESTABLISHED,RELATED -j ACCEPT
$iptables -A INPUT -p icmp –icmp-type echo-request -m limit –limit 1/s -i eth0 -j ACCEPT

# apply icmp type match blocking
echo “ applying icmp type match blocking”
echo “”
$iptables -I INPUT -p icmp –icmp-type redirect -j DROP
$iptables -I INPUT -p icmp –icmp-type router-advertisement -j DROP
$iptables -I INPUT -p icmp –icmp-type router-solicitation -j DROP
$iptables -I INPUT -p icmp –icmp-type address-mask-request -j DROP
$iptables -I INPUT -p icmp –icmp-type address-mask-reply -j DROP

# open ports to the firewall
echo “ applying the open port(s) to the firewall rules”
echo “”
$iptables -A INPUT -p tcp –dport 22 -j ACCEPT
#$iptables -A INPUT -p tcp –dport 3128 -j ACCEPT
# open and forward ports to the internal machine(s)
#echo “ applying port forwarding rules”
#echo “”
#$iptables -A FORWARD -i eth0 -p tcp –dport 80 -j ACCEPT
#$iptables -t nat -A PREROUTING -i eth0 -p tcp -d 116.x.x.x –dport 80 -j DNAT –to-destination 192.168.17.200:80

# logging
#echo “ applying logging rules”
#echo “”
#$iptables -A INPUT -i eth0 -p tcp -m limit –limit 1/s –dport 0:65535 -j LOG –log-prefix “tcp connection: ”
#$iptables -A INPUT -i eth0 -p udp -m limit –limit 1/s –dport 0:65535 -j LOG –log-prefix “udp connection: ”

# drop all other packets
echo “ applying default drop policies”
echo “”
$iptables -A INPUT -i eth0 -p tcp –dport 0:65535 -j DROP
$iptables -A INPUT -i eth0 -p udp –dport 0:65535 -j DROP

echo “### dar firewall is loaded ###”
echo “”

—————————————————————————————————————————