Pear OS Linux

OK diatas tuh gambar Pear OS 3.0 Panther.. nampak seperti MAC OS X.. ya aku akui ramai suka dengan desktop environment seperti MAC. jadi aku nak cakap kat sini.. nak meluahkan perasaan aku selepas aku menggunakan nya.. dan menguji Operating System Pear nih..

Asal usul Bahasa Computer

yeahh.. bagi sapa2 yang nak wat esaimen tuk bahasa computer nih.. aku ada sedikit yang leh dikongsikan.....

feveret bahasa aku PHP dengan ruby jek..

Window 8 is osem rite?

Secure SSH - For beginners

salam sume! arinih aku nak cita sket tentang SSH.. ok ssh tuh Secure Shell dimana bahasa saintifik nya network protocol dimana korang leh menukar data dalam "secure Channel". Biasanya SSH nih biasa digunakan di Linux, dan Unix Based system.. ok nih sapa2 nak belajar...

1. Disable Root Login

yang nih bahaya jugak tapi korang leh wat disable.. sebab kalu Linux dia ada login Root.. Dalam Gentoo dia dalam /etc/ssh/sshd_config..

PermitRootLogin no

2. pastuh korang tukar port korang jugakk.. dari 22 mungkin ker 2837 ker apa ker.. ikut suka... dalam /etc/ssh/sshd_config

Port 2199
Protocol 2
#ListenAddress 0.0.0.0
#ListenAddress ::

3. Guner kan SSH Public/Private Key Authentication (agak complekss)

apa yang korang perlukan adalah Putty

dan jangan luper PuttyGen (Putty Key Generator Tool to save Private key)

3.1 korang edit pada /etc/ssh/sshd_config pastuh uncomment line tersebut
RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys

3.2 anggap nix adalah korangnya username. kite generate key public dan private

[nix@servnix ~]$ ssh-keygen -t dsa
Generating public/private dsa key pair.
Enter file in which to save the key (/home/nix/.ssh/id_dsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/nix/.ssh/id_dsa.
Your public key has been saved in /home/nix/.ssh/id_dsa.pub.
The key fingerprint is:
a9:22:30:c4:ed:df:1c:e5:7b:3c:53:b4:82:aa:33:18 nix@servnix.org

kalu korang pasan
id_dsa -> private key disimpan dalam /home//.ssh/
id_dsa.pub -> yang nih public key /home//.ssh/

3.3 Downloading Private Key to Putty (SSH client)

kite akan download key dari server dan jadikan dia dalam file .ppk (putty private key file)
Ingat korang kene tau public key akan disimpan dalam server jugak ok? (dalam home//.ssh/authorized_keys file)

3.4 buka file id_dsa dan simpan dalam pvtkey.txt.
pastuh Start puttygen.exe > Load Existing Private Key > privkey.txt > Save Private Key

Save private key as privkey.ppk

last step yek... korang copy private key tadi ke server

cd /home//.ssh
mv ida_dsa.pub authorized_keys

pastuh korang leh delete id_dsa and id_dsa.pub...

siap!

Ubuntu For Human Being!!

SalamX haa.. aritu daku berjaya mengompizkan desktop daku...... tapi yang best nye ada screenlets mmg layan la... cume kite leh cuztomize lagi.. nanti aku update.. bz sgt nih.. chow~

Nvidia Problem dengan Geforce go 6150

SalamX!!

aku ada jgk guner ubuntu baru2 nih.. tapi aku nye jenis amd64 dan ada nvidia graphic GeForce go 6150... alkisah nye bermula, apabila daku nak mengompiz aku nye desktop... mula2 tuh dia kata desktop effects not enabled... haaa.. tuh daku xsuka.. jadi aku guner pelbagai cara.. ok cara2 dia sebenarnya camnih.. sapa yang guner graphic card cam aku.. leh la guner contoh aku kasi nih...

1. download ftp://download.nvidia.com/XFree86/Linux-x86_64/190.25/ <----
2. pegi ke terminal
3. kill xorg.conf korang
4. sudo SH NVIDIA-Linux-x86-_64-190.25-pkg.run

lepas tuh dah setel... kite sambung lagi..

5. sudo pico /etc/modprobe.d/blacklist.conf
6. korang edit file tuh pastuh korang letak nih: blacklist nouveau
7. reboot korang nye ubuntu
8. korang leh install macam biasa...

* pastikan korang tidak install compiz dan sebagainya.. yang penting ada Nvidia-xconfig.. daku test pada UBUNTU 10.04 LTS

Installing Snort

haaa... salam.. korang tau snort tuh apa?? tak tau ehh.. aku pon.. tapi aku tau la cara install dia... korang leh kaji apa itu snort dan BASE... ok dibawah ada cara2 aku tunjuk... mudah... dan best...

1. # portinstall snort
-- OR --
# make -C /usr/ports/security/snort install all

2.# portinstall oinkmaster
-- OR --
# make -C /usr/ports/security/oinkmaster install all

3. # cp /usr/local/etc/oinkmaster.conf.sample /usr/local/etc/oinkmaster.conf

4. # Example for Snort-current ("current" means cvs snapshots).
url = http://www.snort.org/pub-bin/oinkmaster.cgi//snortrules-snapshot-CURRENT.tar.gz

5. # oinkmaster -o /usr/local/etc/snort/rules/
Loading /usr/local/etc/oinkmaster.conf
Downloading file from http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-snapshot-CURRENT.tar.gz... done.
Archive successfully downloaded, unpacking... done.
Setting up rules structures... done.
Processing downloaded rules... disabled 0, enabled 0, modified 0, total=9942
Setting up rules structures... done.
Comparing new files to the old ones... done.
Updating local rules files... done.

korang create la mysql passwd and user:
# mysql -u root -ppassword
mysql> CREATE DATABASE `snort`;
mysql> GRANT ALL PRIVILEGES ON snort.* TO 'snort'@'localhost' IDENTIFIED BY 'snortpassword';

6. # mysql -u snort -psnortpassword snort < /usr/local/share/examples/snort/create_mysql

7. pastuh korang config snort.conf
# pico -w /usr/local/etc/snort/snort.conf

8. uncomment dan config line ini:
# config detection: search-method lowmem
# output alert_syslog: LOG_AUTH LOG_ALERT
# output database: log, mysql, user=root password=test dbname=db host=localhost

9. uncomment kesemua include $RULE_PATH/*.rules kecuali line ini:
# include $RULE_PATH/local.rules <--- komen line nih

10. pastuh aktifkan snort dalam /etc/rc.conf.. dan start skali...
# echo "snort_enable=\"YES\"" >> /etc/rc.conf
# /usr/local/etc/rc.d/snort start
Starting snort.

11. kalu korang run tail /var/log/messages dia akan kuar camnih:

snort[12558]: Initializing daemon mode
kernel: fxp0: promiscuous mode enabled
snort[12559]: PID path stat checked out ok, PID path set to /var/run/
snort[12559]: Writing PID "12559" to file "/var/run//snort_fxp0.pid"
snort[12559]: Daemon initialized, signaled parent pid: 12558
snort[12558]: Daemon parent exiting
snort[12559]: Snort initialization completed successfully (pid=12559)

12. kalu xkuar error tuh berehhh selalu...

13.untuk test snort ke server len:

snort[12559]: [1:368:6] ICMP PING BSDtype [Classification: Misc activity] [Priority: 3]: {ICMP} xxx.xxx.xxx.xxx -> xxx.xxx.xxx.xxx
snort[12559]: [1:366:7] ICMP PING *NIX [Classification: Misc activity] [Priority: 3]: {ICMP} xxx.xxx.xxx.xxx -> xxx.xxx.xxx.xxx
snort[12559]: [1:384:5] ICMP PING [Classification: Misc activity] [Priority: 3]: {ICMP} xxx.xxx.xxx.xxx -> xxx.xxx.xxx.xxx

14. pastuh korang install la BASE yang mudah sgt...

# portinstall adodb
-- OR --
# make -C /usr/ports/databases/adodb install clean

Selepas anda memperluaskan tarball, pergi ke BASE anda memasang URL dalam browser.. siap!~

broadband MAXIS kat FREEBSD 8

setakat nih... freebsd 8 pada aku mmg best.. sama cam 6.4 dan 7.3 tapi xde bezanya... ok la... nih ada contoh2nya...

1. mula plug dulu broadband korang...
2. pergi ke terminal

taip nih: devinfo -rv | grep u3g

dalam tuh ada vendor ada product.. korang sumbat la sume detail dia dalam nih:

pico /etc/devd.conf

pastuh masukkan sume detail yang korang detail broadband tadi

attach 100 {
match "device-name" "umass[0-9]+";
match "vendor" "0x12d1"; <--- sumbat sume pasal vendor, product, etc
match "product" "0x140c";
match "devclass" "0x00";
match "devsubclass" "0x00";
match "intclass" "0xff";
action "/usr/sbin/ppp -ddial 3gaku"; <--- ini untuk autostartup
};

ctrl+x save...

pastuh config la ppp.conf

kpn:
set device /dev/cuaU0.0
set speed 384000
set timeout 0
set authname KPN
set authkey gprs

set dial "ABORT BUSY TIMEOUT 2 \
\"\" \
AT OK-AT-OK \
AT+CFUN=1 OK-AT-OK \
AT+CMEE=2 OK-AT-OK \
AT+CSQ OK \
AT+CGDCONT=1,\\\"IP\\\",\\\"internet\\\" OK \
AT+CGACT? OK-AT-OK \
AT+CGATT? OK \
AT+CGCLASS? OK \
AT+COPS? OK \
ATD*99***1# CONNECT"

## Lower the MTU as this seems to make the link more stable for GPRS connections.
#set mtu maximum 296
#set mru maximum 296
set crtscts on
disable vjcomp
disable acfcomp
disable deflate
disable deflate24
disable pred1
disable protocomp
disable mppe
disable ipv6cp
disable lqr
disable echo
nat enable yes
enable dns
resolv writable
set dns 208.67.220.220 208.67.222.222 # openDNS
set ifaddr 10.1.0.2/0 10.1.0.1/0 255.255.255.255 0.0.0.0
#add default HISADDR # See ppp.link*

pastuh ppp.linkup:

kpn:
shell route delete default
shell route add default -interface INTERFACE

pastuh edit lagi ppp.linkdown:

default:
shell logger "LABEL down (up UPTIME): OCTETSIN received, OCTETSOUT sent"

kpn:
shell route delete default

psatuh siapp...