HenryBLOGultom

Install DNS,DHCP,Webserver,Proxy,FTP,DDOS protection,IDS

gtoms — Fri, 27 Aug 2010 04:03:47 +0000

Kelebihan Linux adalah dapat menempatkan beberapa services runing bersamaan dalam satu server. Tujuan membuat satu server linux berisi DNS, DHCP, Webserver, Proxy, FTP, IDS, DDOS protection, MRTG, Webmin adalah :

- Centos 5.5 sebagai sistem operasi Linux yang free dan mudah diinstall.

- DNS menggunakan BIND ISC untuk nameserver(primary DNS) domain perusahaan ini. Primary DNS disini menghandle NS,MX,Web perusahaan. Untuk settingan MX di pointing ke server mail server perusahaan ini beda mesin menggunakan Zimbra.

- DHCP menggunakan DHCP dari ISC berfungsi untuk pemberian intenet address ototmatis ke seluruh komputer karyawan di perusahaan ini yang sudah tersambung dalam jaringan local area network(LAN)

- Webserver mengunakan Apache, berfungsi sebagai tempat file-file website domain perusahaan yang dapat diakses menggunakan www atau http, Apache juga dapat diset untuk meng host domain-domain lain yang dimiliki perusahaan ini.

- Proxy menggunakan SQUID sebagai cache proxy gateway akses browsing semua komputer karyawan. Untuk access filtering digunakan SQUIDGUARD dan Shalla’s Blacklists

- IDS sebagai security intrusion detection dalam hal ini menggunakan The Advanced Intrusion Detection Environment (AIDE)

- DDOS protection untuk menghadapin serangan baik dari incoming dan outgoing. Untuk ini digunakan APF, BFD, mod_dosevasive, dan mod_security.

- FTP menggunakan VSFTP yang berfungsi sebagai file transfer ke webserver prusahaan jika untuk mengupdate website perusahaan.

- MRTG menggunakan mrtg untuk visual monitoring bandiwdth management baik pada server ini, server lain,dan router. Data dari mrtg bisa di capture dan diberikan ke ISP jika didapat kapasitas Bandwidth yang disewa jauh dibawah rata-rata.

Cukup bicara teori, sekarang dilanjutkan ke instalasi dan konfigurasi, yang dalam artikel ini sistem operasi Linux Centos 5.5 sudah diinstall minimalis.

[root@ns1 gtoms]# uname -a
Linux ns1.xyz.co.id 2.6.18-194.11.1.el5 #1 SMP Tue Aug 10 19:09:06 EDT 2010 i686 i686 i386 GNU/Linux

[root@ns1 gtoms]# cat /etc/redhat-release
CentOS release 5.5 (Final)

[root@ns1 gtoms]# /sbin/ifconfig
eth0 Link encap:Ethernet HWaddr 00:50:BA:C3:71:D2
inet addr:202.137.2x.2xx Bcast:202.137.20.223 Mask:255.255.255.240
inet6 addr: fe80::250:baff:fec3:71d2/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1028 errors:0 dropped:0 overruns:0 frame:0
TX packets:757 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:93229 (91.0 KiB) TX bytes:143908 (140.5 KiB)
Interrupt:209 Base address:0×2000

eth1 Link encap:Ethernet HWaddr 00:13:D4:01:65:1F
inet addr:192.168.0.2 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:1124 errors:0 dropped:0 overruns:0 frame:0
TX packets:1124 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1981916 (1.8 MiB) TX bytes:1981916 (1.8 MiB)

Instalasi Domain Name Server sebagai Primary Nameserver

[root@ns1 selinux]# yum install bind-chroot
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
addons: centos.idrepo.or.id
base: centos.idrepo.or.id
extras: centos.idrepo.or.id
updates: centos.idrepo.or.id
Setting up Install Process
Package 30:bind-chroot-9.3.6-4.P1.el5_4.2.i386 already installed and latest version
Nothing to do
[root@ns1 gtoms]#

[root@ns1 gtoms]# chmod 755 /var/named/
[root@ns1 gtoms]# chmod 775 /var/named/chroot/
[root@ns1 gtoms]# chmod 775 /var/named/chroot/var/
[root@ns1 gtoms]# chmod 775 /var/named/chroot/var/named/
[root@ns1 gtoms]# chmod 775 /var/named/chroot/var/run/
[root@ns1 gtoms]# chmod 777 /var/named/chroot/var/run/named/
[root@ns1 gtoms]# cd /var/named/chroot/var/named/
[root@ns1 named]# ln -s ../../ chroot
[root@ns1 named] cp /usr/share/doc/bind-9.3.6/sample/var/named/named.local /var/named/chroot/var/named/named.local
[root@ns1 named] cp /usr/share/doc/bind-9.3.6/sample/var/named/named.root /var/named/chroot/var/named/named.root
[root@ns1 named] touch /var/named/chroot/etc/named.conf.local

[root@ns1 named]# nano /var/named/chroot/etc/named.conf
key “rndckey” {
algorithm hmac-md5;
secret “PatIBVa6D1zrSKnEOBsO4siZyJO0cytbujld1boBT7W8RrVee5dsCkGSID79”;
};

options {
listen-on port 53 { 127.0.0.1; 192.168.0.2; 202.137.2x.2xx; };
listen-on-v6 port 53 { ::1; };
directory “/var/named/chroot/var/named”;
dump-file “/var/named/chroot/var/named/data/cache_dump.db”;
statistics-file “/var/named/chroot/var/named/data/named_stats.txt”;
memstatistics-file “/var/named/chroot/var/named/data/named_mem_stats.txt”;
allow-query { localhost; };
recursion yes;
};
logging {
channel default_debug {
file “data/named.run”;
severity dynamic;
};
};

zone “.” IN {
type hint;
file “named.root”;
};

zone “xyz.co.id” IN {
type master;
file “data/xyz.co.id.zone”;
allow-update { none; };
};

[root@ns1 named]# nano /var/named/chroot/var/named/data/xyz.co.id

$ORIGIN .
$TTL 86400 ; 1 day

xyz.co.id IN SOA ns1.xyz.co.id. admin.xyz.co.id. (
2010082100
7200
7200
1209600
86400 )
NS ns1.xyz.co.id.
NS ns2.xyz.co.id.
A 202.137.2x.2xx
MX 10 mail.xyz.co.id.

$ORIGIN xyz.co.id.

webmail A 202.137.2x.2zz
ns1 A 202.137.2x.2xx
ns2 A 202.137.2x.2yy
mail A 202.137.2x.2zz
www A 202.137.2x.2xx
mail2 A 202.137.2x.2yy
xyz.co.id. IN TXT “PT. xyz”
IP 202.137.2x.2zz dengan mail.xyz.co.id merupakan server mailserver menggunakan Zimbra 6.0.6 berada beda mesin dengan server ini.

[root@ns1 named]# /etc/init.d/named start
Starting named: [ OK ]

[root@ns1 etc]# tail -f /var/log/messages
Aug 21 11:31:35 ns1 named[3766]: starting BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 -u named -t /var/named/chroot
Aug 21 11:31:35 ns1 named[3766]: adjusted limit on open files from 1024 to 1048576
Aug 21 11:31:35 ns1 named[3766]: found 2 CPUs, using 2 worker threads
Aug 21 11:31:35 ns1 named[3766]: using up to 4096 sockets
Aug 21 11:31:35 ns1 named[3766]: loading configuration from ‘/etc/named.conf’
Aug 21 11:31:35 ns1 named[3766]: using default UDP/IPv4 port range: [1024, 65535]
Aug 21 11:31:35 ns1 named[3766]: using default UDP/IPv6 port range: [1024, 65535]
Aug 21 11:31:35 ns1 named[3766]: listening on IPv6 interface lo, ::1#53
Aug 21 11:31:35 ns1 named[3766]: listening on IPv4 interface lo, 127.0.0.1#53
Aug 21 11:31:35 ns1 named[3766]: listening on IPv4 interface eth1, 192.168.0.2#53
Aug 21 11:31:35 ns1 named[3766]: listening on IPv4 interface eth0, 202.137.2x.2xx#53
Aug 21 11:31:35 ns1 named[3766]: command channel listening on 127.0.0.1#953
Aug 21 11:31:35 ns1 named[3766]: command channel listening on ::1#953
Aug 21 11:31:35 ns1 named[3766]: zone xyz.co.id/IN: loaded serial 2010082100
Aug 21 11:31:35 ns1 named[3766]: running
Aug 21 11:31:35 ns1 named[3766]: zone xyz.co.id/IN: sending notifies (serial 2010082100)

Instalasi DHCP Server

[root@ns1 data]# yum install dhcp
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
addons: centos.idrepo.or.id
base: centos.idrepo.or.id
extras: centos.idrepo.or.id
updates: centos.idrepo.or.id
Setting up Install Process
Resolving Dependencies—> Running transaction check—-> Package dhcp.i386 12:3.0.5-23.el5_5.1 set to be updated—> Finished Dependency Resolution
——————————————cut————————————————————-

Total download size: 867 k
Is this ok [y/N]: y
Downloading Packages:
dhcp-3.0.5-23.el5_5.1.i386.rpm | 867 kB 00:00
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : dhcp 1/1

Installed:
dhcp.i386 12:3.0.5-23.el5_5.1

Complete!
[root@ns1 data]#

[root@ns1 data]# nano /etc/dhcpd.conf

authoritative;
ddns-update-style interim;
ignore client-updates;

subnet 192.168.0.0 netmask 255.255.255.0 {
option routers 192.168.0.2;
option subnet-mask 255.255.255.0;
option domain-name “xyz.co.id”;
option domain-name-servers 192.168.0.2,202.137.2x.2xx;
range dynamic-bootp 192.168.0.9 192.168.0.254;
default-lease-time 43200;
max-lease-time 604800;

}

Range IP untuk seluruh komputer karyawan 192.168.0.9 192.168.0.254

[root@ns1 data]# /etc/init.d/dhcpd start
Starting dhcpd: [ OK ]

[root@ns1 data]# tail -f /var/log/messages
Aug 21 11:44:36 ns1 dhcpd: Internet Systems Consortium DHCP Server V3.0.5-RedHat
Aug 21 11:44:36 ns1 dhcpd: Copyright 2004-2006 Internet Systems Consortium.
Aug 21 11:44:36 ns1 dhcpd: All rights reserved.
Aug 21 11:44:36 ns1 dhcpd: For info, please visit http://www.isc.org/sw/dhcp/
Aug 21 11:44:36 ns1 dhcpd: Wrote 0 leases to leases file.
Aug 21 11:44:36 ns1 dhcpd:
Aug 21 11:44:36 ns1 dhcpd: No subnet declaration for eth0 (202.137.2x.2xx).
Aug 21 11:44:36 ns1 dhcpd: ** Ignoring requests on eth0. If this is not what
Aug 21 11:44:36 ns1 dhcpd: you want, please write a subnet declaration
Aug 21 11:44:36 ns1 dhcpd: in your dhcpd.conf file for the network segment
Aug 21 11:44:36 ns1 dhcpd: to which interface eth0 is attached. **
Aug 21 11:44:36 ns1 dhcpd:
Aug 21 11:44:36 ns1 dhcpd: Listening on LPF/eth1/00:13:d4:01:65:1f/192.168.0/24
Aug 21 11:44:36 ns1 dhcpd: Sending on LPF/eth1/00:13:d4:01:65:1f/192.168.0/24
Aug 21 11:44:36 ns1 dhcpd: Sending on Socket/fallback/fallback-net

3766 ? Ssl 0:00 /usr/sbin/named -u named -t /var/named/chroot
3928 ? Ss 0:00 /usr/sbin/dhcpd
[root@ns1 gtoms]#

Instalasi Webserver menggunakan Apache

[root@ns1 gtoms]# yum install httpd httpd-devel mysql-server php php-mysql php-mbstring php-mcrypt

[root@ns1 gtoms]# nano /etc/httpd/conf/httpd.conf

Listen 202.137.2x.2xx:80

NameVirtualHost *:80

ServerAdmin webmaster@xyz.co.id
DocumentRoot /home/webxyz
ServerName xyz.co.id
ServerAlias www.xyz.co.id

ServerAdmin webmaster@xyz.co.id
DocumentRoot /var/www/html/stat
ServerName xyz.co.id/stat
ServerAlias www.xyz.co.id/stat

Options Indexes FollowSymLinks MultiViews
AllowOverride All
Order allow,deny
Allow from all

Instalasi SQUID sebagai cache proxy server

[root@ns1 gtoms]# yum install squid
[root@ns1 gtoms]# cd /etc/squid

[root@ns1 squid] nano squid.conf

[root@ns1 squid]# /usr/sbin/squid -z

Banyak konfigurasi di file squid.conf tinggal disesuaikan sesuai kebutuhan salah satunya squid si setting transparant proxy, dan jika ingin menggunakan Squidguard jangan lupa menambahkan url_rewrite_program /usr/bin/squidguard -c /etc/squid/squidguard.conf jika sudah menginstall squidguard.

Instalasi SQUIDGUARD sebagai content filtering.

[root@ns1 gtoms]# wget http://www.excaliburtech.net/wp-content/uploads/2009/02/squidguard-1.4-3.i386.rpm—2010-08-21 18:49:02—http://www.excaliburtech.net/wp-content/uploads/2009/02/squidguard-1.4-3.i386.rpm
Resolving www.excaliburtech.net… 72.66.114.15
Connecting to www.excaliburtech.net|72.66.114.15|:80… connected.
HTTP request sent, awaiting response… 200 OK
Length: 119416 (117K) [application/x-rpm]
Saving to: `squidguard-1.4-3.i386.rpm’
2010-08-21 18:49:05 (54.0 KB/s) – `squidguard-1.4-3.i386.rpm’ saved [119416/119416]

[root@ns1 gtoms]# rpm ~~ivh squidguard~~1.4-3.i386.rpm
Preparing… ########################################### [100%]
1:squidguard ########################################### [100%]

[root@ns1 gtoms]# locate squidguard
/etc/logrotate.d/squidguard
/etc/squid/squidguard.conf
/home/gtoms/squidguard-1.4-3.i386.rpm
/usr/bin/squidguard
/usr/libexec/webmin/blue-theme/squidguard
/usr/libexec/webmin/blue-theme/squidguard/images
/usr/libexec/webmin/blue-theme/squidguard/images/icon.gif
/usr/share/doc/squidguard-1.4
/usr/share/doc/squidguard-1.4/LDAPFlow.txt
/usr/share/doc/squidguard-1.4/authentication.html
/usr/share/doc/squidguard-1.4/authentication.txt
/usr/share/doc/squidguard-1.4/configuration.html
/usr/share/doc/squidguard-1.4/configuration.txt
/usr/share/doc/squidguard-1.4/configure.html
/usr/share/doc/squidguard-1.4/configure.txt
/usr/share/doc/squidguard-1.4/expressionlist.html
/usr/share/doc/squidguard-1.4/expressionlist.txt
/usr/share/doc/squidguard-1.4/extended.html
/usr/share/doc/squidguard-1.4/extended.txt
/usr/share/doc/squidguard-1.4/faq.html
/usr/share/doc/squidguard-1.4/faq.txt
/usr/share/doc/squidguard-1.4/features.html
/usr/share/doc/squidguard-1.4/features.txt
/usr/share/doc/squidguard-1.4/index.html
/usr/share/doc/squidguard-1.4/install.html
/usr/share/doc/squidguard-1.4/install.txt
/usr/share/doc/squidguard-1.4/installation.html
/usr/share/doc/squidguard-1.4/installation.txt
/usr/share/doc/squidguard-1.4/ldap-ad-tips.html
/usr/share/doc/squidguard-1.4/ldap-ad-tips.txt
/usr/share/doc/squidguard-1.4/ldap.html
/usr/share/doc/squidguard-1.4/ldap.txt
/usr/share/doc/squidguard-1.4/runtimeops.html
/usr/share/doc/squidguard-1.4/runtimeops.txt
/usr/share/doc/squidguard-1.4/sample.conf
/usr/share/doc/squidguard-1.4/squidguard-simple.cgi
/usr/share/doc/squidguard-1.4/squidguard.cgi
/usr/share/doc/squidguard-1.4/squidguard.gif
/usr/share/doc/squidguard-1.4/troubleshoot.html
/usr/share/doc/squidguard-1.4/troubleshoot.txt

Sebelum mengkonfigurasi squidguard.conf install dahulu Shalla’s Blacklists

[root@ns1 gtoms]# wget http://www.shallalist.de/Downloads/shallalist.tar.gz—2010-08-21 19:02:00—http://www.shallalist.de/Downloads/shallalist.tar.gz
Resolving www.shallalist.de… 78.47.242.85
Connecting to www.shallalist.de|78.47.242.85|:80… connected.
HTTP request sent, awaiting response… 200 OK
Length: 9670277 (9.2M) [application/x-tar]
Saving to: `shallalist.tar.gz’

11% [============> ] 1,126,182 119K/s eta 80s

[root@ns1 gtoms]# mkdir /var/lib/squidguard/db

[root@ns1 gtoms]# mv shallalist.tar.gz /var/lib/squidguard/db

[root@ns1 gtoms]# cd /var/lib/squidguard/db

[root@ns1 db]# gzip -d shallalist.tar.gz

[root@ns1 db]# tar xfv shallalist.tar
BL/
BL/porn/
BL/porn/domains
BL/porn/urls
BL/gamble/
BL/gamble/domains
BL/gamble/urls
BL/chat/
BL/chat/domains
BL/chat/urls
BL/automobile/
BL/automobile/cars/
BL/automobile/cars/domains
BL/automobile/cars/urls
BL/automobile/bikes/
BL/automobile/bikes/domains
BL/automobile/bikes/urls
BL/automobile/boats/
BL/automobile/boats/domains
BL/automobile/boats/urls
BL/automobile/planes/
BL/automobile/planes/urls
BL/automobile/planes/domains
BL/recreation/
BL/recreation/humor/
BL/recreation/humor/domains
BL/recreation/humor/urls
BL/recreation/martialarts/
BL/recreation/martialarts/urls
BL/recreation/martialarts/domains
BL/recreation/sports/
BL/recreation/sports/domains
BL/recreation/sports/urls
BL/recreation/travel/
BL/recreation/travel/urls
BL/recreation/travel/domains
BL/recreation/wellness/
BL/recreation/wellness/domains
BL/recreation/wellness/urls
BL/recreation/restaurants/
BL/recreation/restaurants/urls
BL/recreation/restaurants/domains
BL/webradio/
BL/webradio/domains
BL/webradio/urls
BL/webmail/
BL/webmail/domains
BL/webmail/urls
BL/warez/
BL/warez/urls
BL/warez/domains
BL/shopping/
BL/shopping/domains
BL/shopping/urls
BL/adv/
BL/adv/domains
BL/adv/urls
BL/movies/
BL/movies/urls
BL/movies/domains
BL/science/
BL/science/chemistry/
BL/science/chemistry/urls
BL/science/chemistry/domains
BL/science/astronomy/
BL/science/astronomy/domains
BL/science/astronomy/urls
BL/hobby/
BL/hobby/pets/
BL/hobby/pets/domains
BL/hobby/pets/urls
BL/hobby/cooking/
BL/hobby/cooking/domains
BL/hobby/cooking/urls
BL/hobby/gardening/
BL/hobby/gardening/urls
BL/hobby/gardening/domains
BL/hobby/games-online/
BL/hobby/games-online/domains
BL/hobby/games-online/urls
BL/hobby/games-misc/
BL/hobby/games-misc/domains
BL/hobby/games-misc/urls
BL/violence/
BL/violence/domains
BL/violence/urls
BL/music/
BL/music/domains
BL/music/urls
BL/hacking/
BL/hacking/domains
BL/hacking/urls
BL/isp/
BL/isp/urls
BL/isp/domains
BL/drugs/
BL/drugs/domains
BL/drugs/urls
BL/aggressive/
BL/aggressive/domains
BL/aggressive/urls
BL/news/
BL/news/urls
BL/news/domains
BL/redirector/
BL/redirector/urls
BL/redirector/domains
BL/spyware/
BL/spyware/domains
BL/spyware/urls
BL/dating/
BL/dating/urls
BL/dating/domains
BL/finance/
BL/finance/banking/
BL/finance/banking/urls
BL/finance/banking/domains
BL/finance/other/
BL/finance/other/domains
BL/finance/other/urls
BL/finance/moneylending/
BL/finance/moneylending/domains
BL/finance/moneylending/urls
BL/finance/insurance/
BL/finance/insurance/urls
BL/finance/insurance/domains
BL/finance/realestate/
BL/finance/realestate/domains
BL/finance/realestate/urls
BL/finance/trading/
BL/finance/trading/domains
BL/finance/trading/urls
BL/dynamic/
BL/dynamic/urls
BL/dynamic/domains
BL/COPYRIGHT
BL/jobsearch/
BL/jobsearch/urls
BL/jobsearch/domains
BL/tracker/
BL/tracker/domains
BL/tracker/urls
BL/models/
BL/models/domains
BL/models/urls
BL/forum/
BL/forum/domains
BL/forum/urls
BL/webtv/
BL/webtv/urls
BL/webtv/domains
BL/downloads/
BL/downloads/urls
BL/downloads/domains
BL/ringtones/
BL/ringtones/domains
BL/ringtones/urls
BL/searchengines/
BL/searchengines/domains
BL/searchengines/urls
BL/socialnet/
BL/socialnet/urls
BL/socialnet/domains
BL/updatesites/
BL/updatesites/domains
BL/updatesites/urls
BL/weapons/
BL/weapons/domains
BL/weapons/urls
BL/webphone/
BL/webphone/domains
BL/webphone/urls
BL/global_usage
BL/religion/
BL/religion/domains
BL/religion/urls
BL/sex/
BL/sex/lingerie/
BL/sex/lingerie/urls
BL/sex/lingerie/domains
BL/sex/education/
BL/sex/education/urls
BL/sex/education/domains
BL/imagehosting/
BL/imagehosting/domains
BL/imagehosting/urls
BL/podcasts/
BL/podcasts/domains
BL/podcasts/urls
BL/hospitals/
BL/hospitals/domains
BL/hospitals/urls
BL/military/
BL/military/urls
BL/military/domains
BL/politics/
BL/politics/domains
BL/politics/urls
BL/remotecontrol/
BL/remotecontrol/urls
BL/remotecontrol/domains
BL/fortunetelling/
BL/fortunetelling/domains
BL/fortunetelling/urls
BL/library/
BL/library/domains
BL/library/urls
BL/costtraps/
BL/costtraps/urls
BL/costtraps/domains
BL/homestyle/
BL/homestyle/domains
BL/homestyle/urls
BL/education/
BL/education/schools/
BL/education/schools/domains
BL/education/schools/urls
BL/government/
BL/government/domains
BL/government/urls
BL/alcohol/
BL/alcohol/domains
BL/alcohol/urls
BL/radiotv/
BL/radiotv/domains
BL/radiotv/urls
[root@ns1 db]#

[root@ns1 db]# cd BL

[root@ns1 BL] cp -R * /var/lib/squidguard/db

[root@ns1 BL]# nano /etc/squid/squidguard.conf

dbhome /var/lib/squidguard/db
logdir /var/log/squid

dest whitelist {
domainlist whitelist/domains
urllist whitelist/urls
}

dest adv {
domainlist adv/domains
urllist adv/urls
}

acl {
default {

pass whitelist !adv

redirect http://www.xyz.co.id/redirect.html
}

}

[root@ns1 BL]# /usr/bin/squidguard -C all

[root@ns1 db]# chmod -R 777 *

[root@ns1 db]# chown -R squid:squid /var/lib/squidguard/db/*

[root@ns1 squid]# nano /etc/squid/squid.conf

url_rewrite_program /usr/bin/squidguard -c /etc/squid/squidguard.conf
url_rewrite_children 8

[root@ns1 squid]# /usr/sbin/squid -k reconfigure

[root@ns1 db]# tail -f /var/log/squid/cache.log

2010/08/22 08:52:43| Reconfiguring Squid Cache (version 2.6.STABLE21)...
2010/08/22 08:52:43| FD 10 Closing HTTP connection
2010/08/22 08:52:43| FD 12 Closing ICP connection
2010/08/22 08:52:43| Initialising SSL.
2010/08/22 08:52:43| User-Agent logging is disabled.
2010/08/22 08:52:43| Referer logging is disabled.
2010/08/22 08:52:43| DNS Socket created at 0.0.0.0, port 52827, FD 9
2010/08/22 08:52:43| Adding nameserver 202.137.2x.2xx from squid.conf
2010/08/22 08:52:43| helperOpenServers: Starting 8 ‘squidguard’ processes
2010/08/22 08:52:43| Accepting transparently proxied HTTP connections at 0.0.0.0, port 3128, FD 19.
2010/08/22 08:52:43| Accepting ICP messages at 0.0.0.0, port 3130, FD 20.
2010/08/22 08:52:43| WCCP Disabled.
2010/08/22 08:52:43| Loaded Icons.
2010/08/22 08:52:43| Ready to serve requests.

Instalasi FTP Server menggunakan VSFTP

[root@ns1 gtoms]# yum install vsftpd

Disini tinggal mengkonfigurasi user untuk akses ke webserver.

Instalasi MRTG

[root@ns1 gtoms]# yum install mrtg net-snmp net-snmp-utils
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
addons: centos.idrepo.or.id
base: centos.idrepo.or.id
epel: bali.idrepo.or.id
extras: centos.idrepo.or.id
updates: centos.idrepo.or.id
addons | 951 B 00:00
base | 2.1 kB 00:00
epel | 3.4 kB 00:00
extras | 2.1 kB 00:00
updates | 1.9 kB 00:00
Setting up Install Process
Package 1:net-snmp-5.3.2.2-9.el5_5.1.i386 already installed and latest version————————cut—————————————-

Installed:
mrtg.i386 0:2.14.5-2 net-snmp-utils.i386 1:5.3.2.2-9.el5_5.1

Complete!
[root@ns1 gtoms]#

[root@ns1 gtoms]# nano /etc/snmp/snmpd.conf

com2sec local localhost public
com2sec mynetwork 192.168.0.0/24 public
group MyRWGroup v1 local
group MyRWGroup v2c local
group MyRWGroup usm local
group MyROGroup v1 mynetwork
group MyROGroup v2c mynetwork
group MyROGroup usm mynetwork
view all included .1 80
access MyROGroup “” any noauth exact all none none
access MyRWGroup “” any noauth exact all all none
syslocation PT. xyz, Jakarta
syscontact Root

[root@ns1 gtoms]# /etc/init.d/snmpd start
Starting snmpd: [ OK ]
[root@ns1 gtoms]#

[root@ns1 gtoms]# tail -f /var/log/messages
Aug 21 21:13:50 ns1 yum: Installed: 1:net-snmp-utils-5.3.2.2-9.el5_5.1.i386
Aug 21 21:13:53 ns1 yum: Installed: mrtg-2.14.5-2.i386
Aug 21 21:22:54 ns1 snmpd[7612]: Creating directory: /var/net-snmp
Aug 21 21:22:54 ns1 snmpd[7612]: NET-SNMP version 5.3.2.2

[root@ns1 gtoms]# /usr/bin/snmpwalk ~~v 1 -c public localhost IP~~MIB::ipAdEntIfIndex
IP-MIB::ipAdEntIfIndex.127.0.0.1 = INTEGER: 1
IP-MIB::ipAdEntIfIndex.192.168.0.2 = INTEGER: 3
IP-MIB::ipAdEntIfIndex.202.137.2x.2xx = INTEGER: 2
[root@ns1 gtoms]#

[root@ns1 gtoms]# /usr/bin/cfgmaker—global ‘WorkDir: /var/www/mrtg’—output /etc/mrtg/mrtg.cfg public@localhost

[root@ns1 gtoms]# /usr/bin/indexmaker—output=/var/www/mrtg/index.html /etc/mrtg/mrtg.cfg

[root@ns1 mrtg]# nano /etc/cron.d/mrtg

*/5 * * * * root LANG=C LC_ALL=C /usr/bin/mrtg /etc/mrtg/mrtg.cfg—lock-file /var/lock/mrtg/mrtg_l—confcache-file /var/lib/mrtg/mrtg.ok

[root@ns1 mrtg]# nano /etc/httpd/conf.d/mrtg.conf
Alias /mrtg /var/www/mrtg

Order deny,allow
Deny from all
Allow from 127.0.0.1
Allow from ::1

[root@ns1 mrtg]# /etc/init.d/httpd restart
Stopping httpd: [ OK ]
Starting httpd: [ OK ]

Untuk mengkases melalui browser ke http://iphostname/mrtg/

Memonitor server/router lain kedalam MRTG

Jika menggunakan device router/modem tinggal mengaktifkan snmp, jika server lain linux ingin di monitor tinggal menginstall snmp, contoh disini pada server lain dengan IP 202.137.2x.2zz :

[root@mail gtoms]# yum install net-snmp net-snmp-utils
Setting up Install Process
Parsing package install arguments
Resolving Dependencies—> Running transaction check—-> Package net-snmp.i386 1:5.3.2.2-9.el5_5.1 set to be updated—> Processing Dependency: libsensors.so.3 for package: net-snmp—> Processing Dependency: net-snmp-libs = 1:5.3.2.2-9.el5_5.1 for package: net-snmp—-> Package net-snmp-utils.i386 1:5.3.2.2-9.el5_5.1 set to be updated—> Running transaction check—-> Package net-snmp-libs.i386 1:5.3.2.2-9.el5_5.1 set to be updated—-> Package lm_sensors.i386 0:2.10.7-9.el5 set to be updated—> Finished Dependency Resolution
———————-cutt————————————-

Installed: net-snmp-utils.i386 1:5.3.2.2-9.el5_5.1
Dependency Installed: lm_sensors.i386 0:2.10.7-9.el5 net-snmp.i386 1:5.3.2.2-9.el5_5.1
Updated: net-snmp-libs.i386 1:5.3.2.2-9.el5_5.1
Complete!
[root@mail gtoms]#

[root@mail gtoms]# nano /etc/snmp/snmpd.conf

[root@mail gtoms]# /etc/init.d/snmpd start
Starting snmpd: [ OK ]
[root@mail gtoms]#

Kembali ke server MRTG nya

[root@ns1 gtoms]# /usr/bin/cfgmaker—global ‘WorkDir: /var/www/mrtg’—output /etc/mrtg/mrtg.cfg public@202.137.2x.2zz

[root@ns1 mrtg]# /usr/bin/cfgmaker—global ‘WorkDir: /var/www/mrtg’—output /etc/mrtg/mrtg.cfg public@192.168.0.1

Instalasi Webmin

[root@ns1 gtoms]# rpm ~~U webmin~~1.510-1.noarch.rpm
warning: webmin-1.510-1.noarch.rpm: Header V3 DSA signature: NOKEY, key ID 11f63c51
Operating system is CentOS Linux
Webmin install complete. You can now login to https://ns1.xyz.co.id:10000/
as root with your root password.
[root@ns1 gtoms]#

Instalasi IDS mengunakan The Advanced Intrusion Detection Environment (AIDE)

Untuk mengkonfigurasi AIDE, SELINUX harus enabled.

[root@ns1 gtoms]# yum install aide

[root@ns1 gtoms]# /usr/sbin/aide—init

[root@ns1 gtoms]# cp /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz
[root@ns1 gtoms]# /usr/sbin/aide—check

[root@ns1 gtoms]# aide—check
AIDE, version 0.13.1

### All files match AIDE database. Looks okay!

[root@ns1 gtoms]# vi /etc/cron.weekly/aide.cron

#!/bin/bash
/usr/sbin/aide—check | /bin/mail -s “Weekly Aide Data” IT@zyx.co.id

Instalasi DDOS protection

APF —Advanced Policy-based Firewall

[root@ns1 gtoms]# wget http://rfxnetworks.com/downloads/apf-current.tar.gz
[root@ns1 gtoms]# tar xfz apf-current.tar.gz
[root@ns1 apf-current]# cd apf-*
[root@ns1 apf-current]# ./install.sh

[root@ns1 apf-current]# vi /etc/apf/conf.apf
DEVEL_MODE=”0”
IG_TCP_CPORTS=”21,22,25,53,80,110,143,443,3306”
IG_UDP_CPORTS=”53,111”
USE_AD=”1”

[root@ns1 apf-current]# vi /etc/apf/ad/conf.antidos
sesuaikan sendiri ….

BFD —Brute Force Detection
[root@ns1 gtoms]# wget http://rfxnetworks.com/downloads/bfd-current.tar.gz
[root@ns1 gtoms]# tar xfz bfd-current.tar.gz
[root@ns1 bfd-current]# cd bfd-*
[root@ns1 bfd-current]# ./install.sh

[root@ns1 bfd-current]# vi /usr/local/bfd/conf.bfd

ALERT=”1”
EMAIL_USR=”IT@xyz.co.id”

[root@ns1 bfd-current]# vi /usr/local/bfd/ignore.hosts
sesuaikan sendiri ….

DDoS Deflate
[root@ns1 gtoms]# wget http://www.inetbase.com/scripts/ddos/install.sh
[root@ns1 gtoms]# sh install.sh

[root@ns1 gtoms]#vi /usr/local/ddos/ddos.conf
sesuaikan sendiri ….

[root@ns1 gtoms]# /usr/local/ddos/ddos.sh -c

RootKit—Spyware and Junkware detection and removal tool

[root@ns1 gtoms]# wget http://sourceforge.net/projects/rkhunter/files/rkhunter/1.3.6/rkhunter-1.3.6.tar.gz/download
[root@ns1 gtoms]# tar xfz rkhunter-1.3.6.tar.gz
[root@ns1 gtoms]# cd rkhunter-1.3.6
[root@ns1 rkhunter-1.3.6]# ./installer.sh
[root@ns1 rkhunter-1.3.6]# run rkhunter
[root@ns1 rkhunter-1.3.6]# rkhunter -c

Install Mod_dosevasive untuk Apache

[root@ns1 gtoms]# wget http://www.zdziarski.com/projects/mod_evasive/mod_evasive_1.10.1.tar.gz

[root@ns1 gtoms]# tar -zxvf mod_evasive_1.10.1.tar.gz

[root@ns1 gtoms]# cd mod_evasive_1.10.1

[root@ns1 mod_evasive_1.10.1]# $APACHE_ROOT/bin/apxs -cia mod_evasive20.c

[root@ns1 mod_evasive_1.10.1]# vi /usr/local/apache/conf/httpd.conf

DOSHashTableSize 3097
DOSPageCount 2
DOSSiteCount 50
DOSPageInterval 1
DOSSiteInterval 1
DOSBlockingPeriod 300

[root@ns1 mod_evasive_1.10.1]# /usr/loca/apache/bin/apachectl restart

Install Mod_security

[root@ns1 gtoms]# http://www.modsecurity.org/download/modsecurity-apache-1.9.2.tar.gz

[root@ns1 gtoms]# tar ~~zxvf modsecurity~~apache-1.9.2.tar.gz

[root@ns1 gtoms]# cd modsecurity-apache-1.9.2

[root@ns1 modsecurity-apache-1.9.2]# /usr/local/apache/bin/apxs -cia mod_security.c

Buat sebuah file dengan nama mod_security.conf didalam folder /usr/local/apache/conf

[root@ns1 modsecurity-apache-1.9.2]# vi /usr/local/apache/conf/mod_security.conf

Rules yang dapat kita buat bisa merujuk ke http://www.modsecurity.org/documentation/quick-examples.html

Kita masukkan path mod_security.conf kedalam file httpd.conf

[root@ns1 modsecurity-apache-1.9.2]# vi /usr/local/apache/conf/httpd.conf

/usr/local/apache/conf/mod_security.conf

[root@ns1 modsecurity-apache-1.9.2]# /usr/local/apache/bin/apachectl stop

[root@ns1 modsecurity-apache-1.9.2]# /usr/local/apache/bin/apachectl start

Selesai,Tinggal memonitor.

henry@gultom.or.id

menambah disclaimer (altermime) pada zimbra 6.0.6

gtoms — Wed, 25 Aug 2010 10:49:22 +0000

Contoh sebuah disclaimer pada sebuah email sebagai berikut :

—-
© 2010 copyright PT. XYZ.

The contents of this email and any attachments are confidential to the intended recipient.
They may not be disclosed to or used by anyone other than the intended recipient. If this email is
received in error, please email IT@xyz.co.id, quoting the name of the sender and
the email address to which it has been sent and then delete it.

Untuk membuat semua email-email karyawan mendapat footer seperti itu, pada mailserver Zimbra dibutuhkan tool bernama altermime, berikut proses konfigurasinya :

[root@mail gtoms]# su – zimbra
[zimbra@mail ~]$ zmcontrol -v

Release 6.0.6_GA_2324.RHEL5_20100406144520 CentOS5 FOSS edition.

[zimbra@mail ~]$

[root@mail gtoms]# wget http://www.pldaniels.com/altermime/altermime-0.3.10.tar.gz

—10:49:13— http://www.pldaniels.com/altermime/altermime-0.3.10.tar.gz
Resolving www.pldaniels.com… 202.130.35.19
Connecting to www.pldaniels.com|202.130.35.19|:80… connected.
HTTP request sent, awaiting response… 200 OK
Length: 85396 (83K) [application/x-gzip]—10:49:26— (try: 2) http://www.pldaniels.com/altermime/altermime-0.3.10.tar.gz
Reusing existing connection to www.pldaniels.com:80.
HTTP request sent, awaiting response… 200 OK
Length: 85396 (83K) [application/x-gzip]
Saving to: `altermime-0.3.10.tar.gz’————cutt——————[root@mail gtoms]#

[root@mail gtoms]# tar ~~zxvf altermime~~0.3.10.tar.gz
altermime-0.3.10/
altermime-0.3.10/altermime.c
altermime-0.3.10/mime_alter.c
altermime-0.3.10/mime_alter.h
altermime-0.3.10/logger.c
altermime-0.3.10/logger.h
altermime-0.3.10/ffget.c
altermime-0.3.10/ffget.h
altermime-0.3.10/pldstr.c
altermime-0.3.10/pldstr.h
altermime-0.3.10/filename-filters.c
altermime-0.3.10/filename-filters.h
altermime-0.3.10/MIME_headers.c
altermime-0.3.10/MIME_headers.h
altermime-0.3.10/libmime-decoders.c
altermime-0.3.10/libmime-decoders.h
altermime-0.3.10/boundary-stack.c
altermime-0.3.10/boundary-stack.h
altermime-0.3.10/strstack.c
altermime-0.3.10/strstack.h
altermime-0.3.10/qpe.c
altermime-0.3.10/qpe.h
altermime-0.3.10/Makefile
altermime-0.3.10/LICENCE
altermime-0.3.10/INSTALL
altermime-0.3.10/README
altermime-0.3.10/CHANGELOG
[root@mail gtoms]#

[root@mail gtoms]# cd altermime-0.3.10

[root@mail altermime-0.3.10]# make
cc -Wall -Werror -g -I. -O2 -c strstack.c
cc -Wall -Werror -g -I. -O2 -c mime_alter.c
cc -Wall -Werror -g -I. -O2 -c ffget.c
cc -Wall -Werror -g -I. -O2 -c pldstr.c
cc ~~Wall -Werror -g -I. -O2 -c filename~~filters.c
cc -Wall -Werror -g -I. -O2 -c logger.c
cc -Wall -Werror -g -I. -O2 -c MIME_headers.c
cc ~~Wall -Werror -g -I. -O2 -c libmime~~decoders.c
cc ~~Wall -Werror -g -I. -O2 -c boundary~~stack.c
cc -Wall -Werror -g -I. -O2 -c qpe.c
cc ~~Wall -Werror -g -I. -O2 altermime.c strstack.o mime_alter.o ffget.o pldstr.o filename~~filters.o logger.o MIME_headers.o libmime-decoders.o boundary-stack.o qpe.o -o altermime
[root@mail altermime-0.3.10]#

[root@mail altermime-0.3.10]# make install
strip altermime
cp altermime /usr/local/bin
chmod a+rx /usr/local/bin/altermime
[root@mail altermime-0.3.10]#

[root@mail altermime-0.3.10]# chown root.root /usr/local/bin/altermime
[root@mail altermime-0.3.10]# chmod 755 /usr/local/bin/altermime

[root@mail altermime-0.3.10]# useradd -r -c “Postfix Filters” -d /var/spool/filter filter

[root@mail altermime-0.3.10]# mkdir /var/spool/filter
[root@mail altermime-0.3.10]# chown filter.filter /var/spool/filter
[root@mail altermime-0.3.10]# chmod 750 /var/spool/filter

[root@mail altermime-0.3.10]# cp /opt/zimbra/postfix/conf/master.cf /opt/zimbra/postfix/conf/master.cf.orig

[root@mail altermime-0.3.10]# vi /opt/zimbra/postfix/conf/master.cf.in

smtp inet n - n - - smtpd
-o content_filter=dfilt:
dfilt unix - n n - - pipe
flags=Rq user=filter argv=/opt/zimbra/postfix/conf/disclaimer -f ${sender}—${recipient}

[root@mail altermime-0.3.10]# vi /opt/zimbra/postfix/conf/disclaimer.txt
—-
2010 copyright PT. XYZ.

The contents of this email and any attachments are confidential to the intended recipient. They may not be disclosed to or used by anyone other than
the intended recipient. If this email is received in error, please email IT@xyz.co.id, quoting the name of the sender and the email
address to which it has been sent and then delete it.

[root@mail altermime-0.3.10]# vi /opt/zimbra/postfix/conf/disclaimer.html

The contents of this email and any attachments are confidential to the intended recipient. They may not be disclosed to or used by anyone other than the intended recipient. If this email is received in error, please email href=”mailto:IT@xyz.co.id”>IT@xyz.co.id, quoting the name of the sender and the email address to which it has been sent and then delete it.

[root@mail altermime-0.3.10]# vi /opt/zimbra/postfix/conf/disclaimer

#!/bin/sh
   INSPECT_DIR=/var/spool/filter
   SENDMAIL=/opt/zimbra/postfix/sbin/sendmail
   FOLDER_DISCLAIMER=/opt/zimbra/postfix/conf
   DOMAIN="xyz.co.id"

   # Exit codes from 
   EX_TEMPFAIL=75
   EX_UNAVAILABLE=69

   # Clean up when done or when aborting.
   trap "rm -f in.$$" 0 1 2 3 15

   # Start processing.
   cd $INSPECT_DIR || { echo $INSPECT_DIR does not exist; exit $EX_TEMPFAIL; }

   TEXT_DISCLAIMER=`grep "[[:alnum:]]" ${FOLDER_DISCLAIMER}/disclaimer.txt | grep -v "_" | tail -4 | head -1`
   cat > in.$$ || { echo Cannot save mail to file; exit $EX_TEMPFAIL; }

   # Verify if is there the disclaimer present in the mail body
   grep -q "${TEXT_DISCLAIMER}" in.$$
   let R1="$?"

   # Verify if the sender is from DOMAIN
   #grep "From:" in.$$ | head -1 | grep -i $DOMAIN > /dev/null 2>&1
   echo "$2" | grep -i -q "$DOMAIN"
   let R2="$?"

   # Verify if the recipient is from DOMAIN
   echo "$4" | grep -i -q "$DOMAIN"
   let R3="$?"

   if [[ $R1 != 0 && $R2 == 0 && $R3 != 0 ]]; then
       /usr/local/bin/altermime --input=in.$$
                      --disclaimer=${FOLDER_DISCLAIMER}/disclaimer.txt
                      --disclaimer-html=${FOLDER_DISCLAIMER}/disclaimer.html ||
                      { echo -e n Message content rejected; exit $EX_UNAVAILABLE; }
   fi

   $SENDMAIL -i "$@" < in.$$

   exit $?

jangan lupa sesuaikan domain dan path altermime.

[root@mail altermime-0.3.10]# chgrp filter /opt/zimbra/postfix/conf/disclaimer
[root@mail altermime-0.3.10]# chmod 750 /opt/zimbra/postfix/conf/disclaimer

[root@mail gtoms]# su – zimbra

[zimbra@mail ~]$ zmmtactl stop
Stopping zmmtaconfig…done.
postfix/postfix-script: stopping the Postfix mail system
Stopping saslauthd…done.

[zimbra@mail ~]$ zmmtactl start
Rewriting configuration files…done.
Starting zmmtaconfig…done.
postfix/postfix-script: starting the Postfix mail system
Starting saslauthd…done.
[zimbra@mail ~]$

Test kirim email menggunakan webmail,mail client,dan selalu perhatikan jika ada masalah di /var/log/zimbra.log

Installing Lotus Domino Server 8.5

gtoms — Sun, 15 Aug 2010 11:01:57 +0000

Untuk urusan messaging, collaboration,calendar, scheduling, dan applications, IBM masih mempunyai Lotus Domino. Produk mailservernya IBM ini masih bersaing ketat dengan Microsoft Exchange. Tapi bagi saya IBM Lotus Domino Server dan Microsoft Exchange Server sangat disukai oleh perusahaan yang memiliki bujet IT besar.

Okay kali ini saya dokumentasikan instalasi Lotus Domino Server 8.5 pada platform Linux Centos 5.5(Final). Loh kok Linux ? Kata Project Managernya lebih murah daripada pakai platform Windows Server, jadi dalam implementasi ini tidak perlu membeli lisensi untuk sistem operasi servernya, dan tetap untuk Lotus Dominonya harus beli.

Tahapannya :

- Install sistem operasi Linux Centos 5.5(Final)

- Setting dan install required Linux packages untuk Domino 8.5

- Copy file setup dari Domino 8.5 CD yaitu Domino85Linux.tar ke server.

- Instalasi Lotus Domino 8.5 Server ke Linux Centos 5.5

Berikut proses instalasi yang sempat saya dokumentasikan.

Install sistem operasi Linux Centos 5.5(Final)

Disini instalasi Centos 5.5 sudah selesai.

[root@mail gtoms]# uname -a
Linux mail.xxxxxxx.com 2.6.18-194.el5 #1 SMP Fri Apr 2 14:58:35 EDT 2010 i686 i686 i386 GNU/Linux

[root@mail ~]# cat /etc/redhat-release
CentOS release 5.5 (Final)

Setting dan install required Linux packages untuk Domino 8.5

[root@mail gtoms]# yum install glibc libgcc libstdc++ libXp

Loaded plugins: fastestmirror

Loading mirror speeds from cached hostfile

addons: centos.idrepo.or.id

base: centos.idrepo.or.id

extras: centos.idrepo.or.id

updates: centos.idrepo.or.id

Setting up Install Process

Package libgcc-4.1.2-48.el5.i386 already installed and latest version

Package libstdc++-4.1.2-48.el5.i386 already installed and latest version

Resolving Dependencies
—> Running transaction check
—> Processing Dependency: glibc = 2.5-49 for package: nscd
—-> Package glibc.i686 0:2.5-49.el5_5.4 set to be updated
—> Processing Dependency: glibc-common = 2.5-49.el5_5.4 for package: glibc
—-> Package libXp.i386 0:1.0.0-8.1.el5 set to be updated
—> Running transaction check
—-> Package glibc-common.i386 0:2.5-49.el5_5.4 set to be updated
—-> Package nscd.i386 0:2.5-49.el5_5.4 set to be updated
—> Finished Dependency Resolution

Dependencies Resolved
———————-skip————————-

Installed:

libXp.i386 0:1.0.0-8.1.el5

Updated:

glibc.i686 0:2.5-49.el5_5.4

Dependency Updated:

glibc-common.i386 0:2.5-49.el5_5.4 nscd.i386 0:2.5-49.el5_5.4

Complete!

[root@mail gtoms]#

[root@mail gtoms]# yum install compat-libstdc++-296 compat-libstdc++-33

Loaded plugins: fastestmirror

Loading mirror speeds from cached hostfile

addons: centos.idrepo.or.id

base: centos.idrepo.or.id

extras: centos.idrepo.or.id

updates: centos.idrepo.or.id

Setting up Install Process

Resolving Dependencies
—> Running transaction check
—-> Package compat-libstdc++-296.i386 0:2.96-138 set to be updated
—-> Package compat-libstdc++-33.i386 0:3.2.3-61 set to be updated
—> Finished Dependency Resolution

Dependencies Resolved
—————————-skip————-

Installed:

compat-libstdc++-296.i386 0:2.96-138 compat-libstdc++-33.i386 0:3.2.3-61

Complete!

[root@mail gtoms]#

[root@mail gtoms]# yum install glib libpng pango unixODBC
——————-skip————————————————
Installed:

glib.i386 1:1.2.10-20.el5 unixODBC.i386 0:2.2.11-7.1

Updated:

libpng.i386 2:1.2.10-7.1.el5_5.3 pango.i386 0:1.14.9-8.el5.centos

Complete!

[root@mail gtoms]#

Langkah berikut ini penting agar instalasi setup files Domino 8.5 lancar :

[root@mail gtoms]# chmod 1777 /tmp

[root@mail gtoms]# ls -ald /tmp

drwxrwxrwt 3 root root 4096 Aug 14 16:03 /tmp

[root@mail gtoms]# cat /etc/fstab

/dev/VolGroup00/LogVol00 / ext3 defaults 1 1

LABEL=/boot /boot ext3 defaults 1 2

tmpfs /dev/shm tmpfs defaults 0 0

devpts /dev/pts devpts gid=5,mode=620 0 0

sysfs /sys sysfs defaults 0 0

proc /proc proc defaults 0 0

/dev/VolGroup00/LogVol01 swap swap defaults 0 0

pastikan /etc/fstab tidak ada noexec dan nosuid options untuk /tmp.

[root@mail gtoms]# /usr/sbin/adduser notes

[root@mail gtoms]# passwd notes

Changing password for user notes.

New UNIX password:

Retype new UNIX password:

passwd: all authentication tokens updated successfully.

[root@mail gtoms]#

[root@mail gtoms]# mkdir /local

[root@mail gtoms]# mkdir /local/notesdata

[root@mail gtoms]# chown notes: /local/notesdata

Disini nanti kita perlu tiga ID files untuk Domino server: Organization certifier,Administrator ID, Server ID without a password. Hal ini bisa di set menggunakan Domino Administrator client.

Instalasi Lotus Domino 8.5 Server

Mount CDROM berisi Domino 8.5 CD dan copy file Domino85Linux.tar ke folder /opt

Letak file instalasi di folder /opt

[root@mail gtoms]# cd /opt

[root@mail opt]#

[root@mail opt]# ls

Domino85Linux.tar

[root@mail opt]# tar xvf Domino85Linux.tar

linux/domino/

linux/domino/tools/

linux/domino/tools/checkminimumos.pl

linux/domino/tools/install.nls

linux/domino/tools/PathUtil.pl

linux/domino/tools/MoveExistingRevision.pl

linux/domino/tools/checksoftlink.pl

linux/domino/tools/Lsetup.pl

linux/domino/tools/os390_script_full.dat

linux/domino/tools/ShScript.pm

linux/domino/tools/install.pl

linux/domino/tools/install.sh

linux/domino/tools/GetUserId.pl

linux/domino/tools/SysCmd.pl

linux/domino/tools/checkos.dat

linux/domino/tools/ChangeDataSubPermissions.pl

linux/domino/tools/CheckOwnerGroup.pl

linux/domino/tools/PerlUtil.pl

linux/domino/tools/media.inf

linux/domino/tools/setup.jar

linux/domino/tools/InstBE.pl

linux/domino/tools/tty.nls

linux/domino/tools/CreateSoftLink.pl

linux/domino/tools/ChangeJavaPermissions.pl

linux/domino/tools/checkos.pl

linux/domino/tools/tty.pl

linux/domino/tools/nui.cfg

linux/domino/tools/uxrmfile.txt

linux/domino/tools/InstBE.nls

linux/domino/tools/uxrmfile64.txt

linux/domino/tools/ProcessLangFiles.pl

linux/domino/tools/CdPath.pl

linux/domino/tools/GetGroupId.pl

linux/domino/tools/AddSolarisDrivers.pl

linux/domino/tools/CfgData.pm

linux/domino/tools/GetPreviousRevision.pl

linux/domino/tools/setupLinux.bin

linux/domino/remote_script.dat

linux/domino/install

linux/domino/unix_response.dat

linux/notes/

linux/notes/repository/

linux/notes/repository/notes.linux.kit/

linux/notes/repository/notes.linux.kit/build_contents.xml

linux/notes/repository/notes.linux.kit/felement.xml

linux/notes/repository/notes.linux.kit/fe.zip

linux/notes/repository/notes.linux.kit/build_fitness.xml

[root@mail opt]#

[root@mail opt]# cd linux

[root@mail linux]# ls

domino notes

[root@mail linux]# cd domino

[root@mail domino]# ls

install remote_script.dat tools unix_response.dat

[root@mail domino]# ./install

Lotus Domino for Unix Install Program
——————————————————
You have to set environment variable DISPLAY to run in graphic mode

Answer Yes to continue in console mode

Answer No to exit application.

Do you want to continue installation in console mode?[Yes]

Continuing in console mode

InstallShield Wizard

Initializing InstallShield Wizard…

Preparing Java™ Virtual Machine…

...................................

..............................
———————————————————————————————————————-

Welcome to the InstallShield Wizard for Lotus Domino

The InstallShield Wizard will install Lotus Domino on your computer.

To continue, choose Next.

Lotus Domino

IBM

http://www.lotus.com

Press 1 for Next, 3 to Cancel or 4 to Redisplay [1] 1
———————————————————————————————————————-

Software Licensing Agreement

Press Enter to display the license agreement on your screen. Please

read the agreement carefully before installing the Program. After

reading the agreement, you will be given the opportunity to accept it

or decline it. If you choose to decline the agreement, installation

will not be completed and you will not be able to use the Program.

International License Agreement for Evaluation of Programs

Part 1 – General Terms

BY DOWNLOADING, INSTALLING, COPYING, ACCESSING, OR USING

THE PROGRAM YOU AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU

ARE ACCEPTING THESE TERMS ON BEHALF OF ANOTHER PERSON OR A

COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT AND WARRANT

THAT YOU HAVE FULL AUTHORITY TO BIND THAT PERSON, COMPANY,

OR LEGAL ENTITY TO THESE TERMS. IF YOU DO NOT AGREE TO

THESE TERMS,

– DO NOT DOWNLOAD, INSTALL, COPY, ACCESS, OR USE THE

PROGRAM; AND

Press Enter to continue viewing the license agreement, or, Enter 1 to

accept the agreement, 2 to decline it or 99 to go back to the previous

screen.

– PROMPTLY RETURN THE PROGRAM TO THE PARTY FROM WHOM YOU

ACQUIRED IT. IF YOU DOWNLOADED THE PROGRAM, CONTACT THE

PARTY FROM WHOM YOU ACQUIRED IT.

“IBM” is International Business Machines Corporation or one

of its subsidiaries.

“License Information” (“LI”) is a document that provides

information specific to a Program. The Program’s LI is

available in a file in the Program’s directory, by the use

of a system command, or as a booklet which accompanies the

Program. The LI may also be found at

http://www.ibm.com/software/sla/ .

Press Enter to continue viewing the license agreement, or, Enter 1 to

accept the agreement, 2 to decline it or 99 to go back to the previous

screen.

“Program” is the following, including the original and all

whole or partial copies: 1) machine-readable instructions

and data, 2) components, 3) audio-visual content (such as

images, text, recordings, or pictures), 4) related licensed

materials, and 5) license use documents or keys, and

documentation.

“You” and “Your” refer either to an individual person or to

a single legal entity.

This Agreement includes Part 1 – General Terms, Part 2 –
Country-unique Terms (if any), and License Information and

is the complete agreement between You and IBM regarding the

Press Enter to continue viewing the license agreement, or, Enter 1 to

accept the agreement, 2 to decline it or 99 to go back to the previous

screen.

use of the Program. It replaces any prior oral or written

communications between You and IBM concerning Your use of

the Program. The terms of Part 2 and License Information

may replace or modify those of Part 1.

1. Entitlement

License

The Program is owned by IBM or an IBM supplier, and is

copyrighted and licensed, not sold.

IBM grants You a nonexclusive license to use the Program

when You lawfully acquire it.

Press Enter to continue viewing the license agreement, or, Enter 1 to

accept the agreement, 2 to decline it or 99 to go back to the previous

screen.

You may 1) use the Program only for internal evaluation,

testing, or demonstration purposes, on a trial or

“try-and-buy” basis; and 2) make and install a reasonable

number of copies, including a backup copy, of the Program

to support such use. The terms of this license apply to

each copy You make. You will reproduce all copyright

notices and all other legends of ownership on each copy, or

partial copy, of the Program.

THE PROGRAM MAY CONTAIN A DISABLING DEVICE THAT WILL

PREVENT IT FROM BEING USED AFTER THE EVALUATION PERIOD

ENDS. YOU WILL NOT TAMPER WITH THIS DISABLING DEVICE OR THE

PROGRAM. YOU SHOULD TAKE PRECAUTIONS TO AVOID ANY LOSS OF

Press Enter to continue viewing the license agreement, or, Enter 1 to

accept the agreement, 2 to decline it or 99 to go back to the previous

screen.

DATA THAT MIGHT RESULT WHEN THE PROGRAM CAN NO LONGER BE

USED.

You will 1) maintain a record of all copies of the Program

and 2) ensure that anyone who uses the Program (accessed

either locally or remotely) does so only for Your

authorized use and complies with the terms of this

Agreement.

You may not 1) use, copy, modify or distribute the Program

except as provided in this Agreement; 2) reverse assemble,

reverse compile, or otherwise translate the Program except

as specifically permitted by law without the possibility of

contractual waiver; or 3) sublicense, rent, or lease the

Press Enter to continue viewing the license agreement, or, Enter 1 to

accept the agreement, 2 to decline it or 99 to go back to the previous

screen.

Program.

The evaluation period begins when You agree to the terms of

this Agreement and ends 1) as of the duration or date

specified in the License Information, or 2) when the

Program automatically disables itself. There is no charge

for the use of the Program for the duration of the

evaluation period. Unless IBM specifies in the License

Information that You may retain the Program, You will

destroy the Program and all copies made of it within ten

days of the end of the evaluation period. If IBM specifies

that You may retain the Program, and You elect to do so,

the Program will be then subject to a different license

agreement, that will be provided to You at that time. In

Press Enter to continue viewing the license agreement, or, Enter 1 to

accept the agreement, 2 to decline it or 99 to go back to the previous

screen.

addition, a charge may apply.

IBM may terminate Your license if You fail to comply with

the terms of this Agreement. If IBM does so, You must

destroy all copies of the Program.

2. No Warranty

SUBJECT TO ANY STATUTORY WARRANTIES WHICH CANNOT BE

EXCLUDED, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER

EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE

IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY,

FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT,

REGARDING THE PROGRAM OR TECHNICAL SUPPORT, IF ANY.

Press Enter to continue viewing the license agreement, or, Enter 1 to

accept the agreement, 2 to decline it or 99 to go back to the previous

screen.

The exclusion also applies to any of IBM’s Program

developers and suppliers.

Manufacturers, suppliers, or publishers of non-IBM Programs

may provide their own warranties.

IBM does not provide technical support, unless IBM

specifies otherwise.

3. Limitation of Liability

Circumstances may arise where, because of a default on

IBM’s part or other liability, You are entitled to recover

Press Enter to continue viewing the license agreement, or, Enter 1 to

accept the agreement, 2 to decline it or 99 to go back to the previous

screen.

damages from IBM. In each such instance, regardless of the

basis on which You may be entitled to claim damages from

IBM, (including fundamental breach, negligence,

misrepresentation, or other contract or tort claim), IBM is

liable for no more than 1) damages for bodily injury

(including death) and damage to real property and tangible

personal property and 2) the amount of any other actual

direct damages up to the charges for the Program that is

the subject of the claim.

This limitation of liability also applies to IBM’s Program

developers and suppliers. It is the maximum for which they

and IBM are collectively responsible.

Press Enter to continue viewing the license agreement, or, Enter 1 to

accept the agreement, 2 to decline it or 99 to go back to the previous

screen.

UNDER NO CIRCUMSTANCES IS IBM, ITS PROGRAM DEVELOPERS OR

SUPPLIERS LIABLE FOR ANY OF THE FOLLOWING, EVEN IF INFORMED

OF THEIR POSSIBILITY:

1. LOSS OF, OR DAMAGE TO, DATA;

2. SPECIAL, INCIDENTAL, OR INDIRECT DAMAGES, OR FOR ANY

ECONOMIC CONSEQUENTIAL DAMAGES; OR

3. LOST PROFITS, BUSINESS, REVENUE, GOODWILL, OR

ANTICIPATED SAVINGS.

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION

OF INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE

Press Enter to continue viewing the license agreement, or, Enter 1 to

accept the agreement, 2 to decline it or 99 to go back to the previous

screen.

==skip==============

Press 1 for Next, 2 for Previous, 3 to Cancel or 4 to Redisplay [1]
———————————————————————————————————————-

Selecting the option below allows you to install additional or upgrade existing

Server Partitions. The existing Program directory must be specified in order

for new Server Partitions to be created, but it will not be upgraded. Existing

Data directories do not need to be listed. Only those Data directories

specified will be upgraded or added. If you wish to add more than one Partition

to your existing Domino server, check the box when asked if you want to install

a Partitioned server. Otherwise you will only be able to upgrade or install one

Data directory. Warning: If you do not have an existing Domino Server on your

system, please do not check the box below for the option to add data

directories only.

[ ] 1 – Install Data Directories Only for Partitioned Domino Server

To select an item enter its number, or 0 when you are finished: [0]

Press 1 for Next, 2 for Previous, 3 to Cancel or 4 to Redisplay [1]
———————————————————————————————————————-

Lotus Domino Install Location

Please specify a directory or press Enter to accept the default directory.

Program Files Directory Name [/opt/ibm/lotus]

Server with more than one partition

Answer Yes to install partitioned server

Answer No to install non-partitioned server

Partitioned Server: [No]

Press 1 for Next, 2 for Previous, 3 to Cancel or 4 to Redisplay [1]
———————————————————————————————————————-

Lotus Domino Install Location

Please specify a directory or press Enter to accept the default directory.

Data Files Directory Name [/local/notesdata]

Press 1 for Next, 2 for Previous, 3 to Cancel or 4 to Redisplay [1]
———————————————————————————————————————-

Input Unix/Linux user name and group name panel

User Name [notes]

Group Name [notes]

Press 1 for Next, 2 for Previous, 3 to Cancel or 4 to Redisplay [1]
———————————————————————————————————————-

Select Server Setup

After the installation completes, for new installation server setup will be

launched and for upgrade the server will be restarted automatically.

The default value is “Manual Server Setup” which does not launch server setup

or restart the server after installation.

Select “Local Server Setup” to launch server setup after a new server

installation or to restart the server after a server upgrade.

Select “Remote Server Setup” to launch server setup in listen mode for new

server installations. You will then be able to connect to the server with the

Remote Server Setup tool.

[ ] 1 – Local

[ ] 2 – Remote

[X] 3 – Manual

To select an item enter its number, or 0 when you are finished: [0] 2

[ ] 1 – Local

[X] 2 – Remote

[ ] 3 – Manual

To select an item enter its number, or 0 when you are finished: [0]

Choose the setup type that best suits your needs.

[ ] 1 – Domino Utility Server

Installs a Domino server that provides application services only. Note

that it does not include support for messaging services. See full

licensing text for details.

[ ] 2 – Domino Messaging Server

Installs a Domino server that provides messaging services. Note that it

does not include support for application services or Domino clusters.

[X] 3 – Domino Enterprise Server

Installs a Domino server that provides both messaging and application

services.

[ ] 4 – Customize Domino Server

Allows you to select the features you want to install.

To select an item enter its number, or 0 when you are finished: [0] 0

Press 1 for Next, 2 for Previous, 3 to Cancel or 4 to Redisplay [1]
———————————————————————————————————————-

Lotus Domino will be installed in the following location:

Program Files: /opt/ibm/lotus

Data Files: /local/notesdata

Domino Kit Type: EnterpriseServer

Unix Install Options:

User Name: notes

Group Name: notes

Install Data Only: No

Start Server Setup: Yes (Remote)

with the following features:

Program Files

Billing Support

Clustering Support

Data Files

Required Templates

Administration Templates

Press ENTER to read the text [Type q to quit]

Optional Templates

Certificate Management

Web Services Data Files

Readme – NSF File

Dojo

XPages

Domino Enterprise Connection Services

Domino Offline Services

Lotus iNotes

Sametime Integration

Resource Modeling Engine

Help

for a total size:

1051.5 MB

Press 1 for Next, 2 for Previous, 3 to Cancel or 4 to Redisplay [1]

Installing Lotus Domino. Please wait…

|—————-|—————-|—————-|——————|

0% 25% 50% 75% 100%

|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||

Creating uninstaller…

Configuring Domino Server from

Unix user name : notes

Unix group name : notes

Domino program directory: /opt/ibm/lotus

Domino data directory: /local/notesdata

You will be prompted for the password of the notesdata owner.
———————————————————————————————————————-

The InstallShield Wizard has successfully installed Lotus Domino. Choose Finish

to exit the wizard.

Press 3 to Finish or 4 to Redisplay [3]

WARNING: the maximum number of file handles (ulimit -n)

allowed for Domino is 1024.

See Release Notes and set the allowable maximum to 20000.

/proc/sys/kernel/sem has been set to “250 256000 32 1024”.

/proc/sys/net/ipv4/tcp_fin_timeout has been set to “15”.

/proc/sys/net/ipv4/tcp_max_syn_backlog has been set to “16384”.

/proc/sys/net/ipv4/tcp_tw_reuse has been set to “1”.

/proc/sys/net/ipv4/ip_local_port_range has been set to “1024 65535”.

08/14/2010 05:36:06 PM Created new log file as /local/notesdata/log.nsf

08/14/2010 05:36:06 PM IBM Lotus Domino does not have a production license. A temporary evaluation license has been enrolled for you to use for 90 days.

08/14/2010 05:36:06 PM WARNING: You are using a temporary license. You have 89 days left in the trial license period.

./java -ss512k -Xoss5M -cp jhall.jar:cfgdomserver.jar:Notes.jar lotus.domino.setup.WizardManagerDomino -data /local/notesdata -listen

Remote server setup enabled on port 8585.

The Domino setup server is now in listening mode.

A remote client can now connect to this server and configure Domino.

To connect to this server, launch the Remote Domino Setup program from a command-prompt as follows:

From a Domino administrator client: serversetup -remote

From a Domino server: server -remote

To end this server, launch the Remote Domino Setup program from a command-prompt as follows:

From a Domino administrator client: serversetup -q mail.xxxxxx.com

From a Domino server: server -q mail.xxxxxx.com

For more information, see the printed guide Setting Up Domino Networks and Servers.

Sampai disini instalasi Domino Server berhasil. Selanjutnya menggunakan Windows client untuk remote setup console menggunakan Domino Administrator, karena saya remote ke server ini menggunanakan Putty.

Untuk menjalankan Domino

su notes

cd /local/notesdata && /opt/ibm/lotus/bin/server

show server

Test konek ke Domino server melalui Lotus Notes.

Beberapa untuk setting Startup scripts, Domino Administrator, dan sebagainya, belum disertakan dalam tutorial ini.

Henry Gultom (henry@gultom.or.id)

Setting D-LINK DNS-323

gtoms — Thu, 12 Aug 2010 09:05:56 +0000

D-LINK DNS-323 merupakan Network Attached Storage (NAS) devices yang berguna untuk membackup files/data darimana saja. Memiliki 10/100/1000 Gigabit Ethernet Port dan dua 3.5” SATA HDD Bay. Harga juga terjangkau dibawah 2 juta. Sewaktu membeli NAS ini belum termasuk hard disk. Jadi untuk keperluan backup data server saya membeli 2 harddisk masing-masing dengan kapasitas 2 TB(Terabyte). Yang saya suka NAS ini sudah memiliki sistem operasi Linux version 2.6.12.6-arm1 (tim@SWTEST2) jadi bisa disetting melalui konsol disamping melalui web. Dengan kernal linux tersebut bisa kita tambahkan plugin kedalamnya seperti Lighttpd Web Server, OpenSSH Secure Shell, Mediatomb UPnP Media Server, NTP Network Time Daemon, UNFS3 User-Space NFS Server, NFS-Utils NFS Server (requires kernel support), RSync File Transfer Utility.

2 Harddisk masing-masing 2 Terabyte dimasukan ke sisi kanan dan sisi kiri DNS 323 . Keduanya diset memakai RAID 1. Sebelum dimasukkan ke server produksi(data centre) saya mencoba terlebih dahulu di test server selama beberapa hari.

Test server aja sudah pakai rack yah…hehe

Capture dari web admin, berisi info dan proses sedang berjalan Sync antar Harddisk.

Setelah selesai testing dan konfigurasi serta penyesuaian IP untuk di data Centre, D-LINK DNS-323 sudah siap berproduksi di Data centre.

Berikut konfigurasi didalamnya yang boleh saya bagikan melalui konsol linux :

[gtoms@localhost ~]$ ssh 192.168.1.18 -l root
root@192.168.1.18’s password:

root@ID51-ND248:~# ps axf
PID   USER     COMMAND
1 root     init
2 root     [ksoftirqd/0]
3 root     [events/0]
4 root     [khelper]
5 root     [kthread]
11 root     [kblockd/0]
14 root     [khubd]
49 root     [pdflush]
50 root     [pdflush]
52 root     [aio/0]
189 root     [scsi_eh_0]
51 root     [kswapd0]
190 root     [scsi_eh_1]
200 root     [mtdblockd]
217 root     [kcryptd/0]
218 root     [kmirrord/0]
229 root     [loop0]
1227 root     xmldb -n config
1273 root     [md0_raid1]
1328 root     [kjournald]
1403 root     [kjournald]
1452 root     [kjournald]
1495 root     chkbutton
1524 root     /web/webs
1546 root     fancontrol 0
1553 root     op_server 3 3 3
1567 root     -sh
1591 root     check_hotplug
1667 root     atd
1685 root     lpd Waiting
1719 root     mserver
1720 root     apkg
1872 root     /ffp/sbin/rpc.portmap
1882 root     /ffp/sbin/unfsd -e /ffp/etc/exports
1901 root     /ffp/sbin/sshd
30702 root     /usr/sbin/samba/smbd -D
30706 root     /usr/sbin/samba/nmbd -D
30714 root     /usr/sbin/samba/smbd -D
30721 root     crond
23393 root     sshd: root@pts/0
23399 root     [sh]
23401 root     -sh
23407 root     ps axf

root@ID51-ND248:~# uname -a
Linux ID51-ND248 2.6.12.6-arm1 #32 Wed Jun 24 15:19:48 CST 2009 armv5tejl unknown

root@ID51-ND248:~# netstat -nltup
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:2049            0.0.0.0:*               LISTEN      1882/unfsd
tcp        0      0 0.0.0.0:515             0.0.0.0:*               LISTEN      1685/lpd Waiting
tcp        0      0 0.0.0.0:139             0.0.0.0:*               LISTEN      30702/smbd
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      1872/rpc.portmap
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      1524/webs
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1901/sshd
tcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTEN      1524/webs
tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN      30702/smbd
udp        0      0 0.0.0.0:1024            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:2049            0.0.0.0:*                           1882/unfsd
udp        0      0 0.0.0.0:1026            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1027            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1028            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1029            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1030            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1031            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1032            0.0.0.0:*                           1524/webs
udp        0      0 192.168.1.18:137        0.0.0.0:*                           30706/nmbd
udp        0      0 0.0.0.0:137             0.0.0.0:*                           30706/nmbd
udp        0      0 192.168.1.18:138        0.0.0.0:*                           30706/nmbd
udp        0      0 0.0.0.0:138             0.0.0.0:*                           30706/nmbd
udp        0      0 224.0.0.1:13579         0.0.0.0:*                           1553/op_server
udp        0      0 0.0.0.0:1036            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1037            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1038            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1039            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1040            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1041            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1042            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1043            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1044            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1045            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1046            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1047            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1048            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1049            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1050            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1051            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1052            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1053            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1054            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1055            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1056            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1057            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1058            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1059            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1060            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1061            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1062            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1063            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1064            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1065            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1066            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1067            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1068            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1069            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1070            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1071            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1072            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1073            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1074            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1075            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1076            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:24629           0.0.0.0:*                           1719/mserver
udp        0      0 0.0.0.0:1078            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1079            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1080            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1081            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1082            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1083            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1084            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1085            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1086            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1087            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1088            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1089            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1090            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1091            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1092            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1093            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1094            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:1095            0.0.0.0:*                           1524/webs
udp        0      0 0.0.0.0:30958           0.0.0.0:*                           1720/apkg
udp        0      0 0.0.0.0:111             0.0.0.0:*                           1872/rpc.portmap

root@ID51-ND248:/etc/samba# vi smb.conf
[ global ]
interfaces = egiga0
unix charset = UTF8
workgroup = workgroup
netbios name = ID51-ND248
server string = NAS
hosts allow =
hosts deny =
security = USER
encrypt passwords = yes
max log size = 0
socket options = TCP_NODELAY SO_RCVBUF=65536 SO_SNDBUF=65536
max xmit = 65535
create mask = 0777
directory mask = 0777
force create mode = 0777
force directory mode = 0777
load printers = Yes
printcap name = /usr/local/LPRng/etc/printcap
min print space = 2000
max print jobs = 1000
printing = lprng
print command = /usr/local/LPRng/bin/lpr -P%p -r %s
lpq command = /usr/local/LPRng/bin/lpq -P%p
lprm command = /usr/local/LPRng/bin/lprm -P%p %j
lppause command = /usr/local/LPRng/sbin/lpc hold %p %j
lpresume command = /usr/local/LPRng/sbin/lpc release %p %j
queuepause command = /usr/local/LPRng/sbin/lpc -P%p stop
queueresume command = /usr/local/LPRng/sbin/lpc -P%p start
use sendfile =yes

[ web_page ]
comment = Enter Our Web Page Setting
path = /mnt/web_page
valid users =
read only = yes
guest ok = yes

[printers]
path = /mnt/HD_a4/.lpd
guest ok = Yes
printable = Yes
use client driver = Yes
browseable = No

[ Volume_1 ]
comment =
path = /mnt/HD_b2
valid users = nouser
read only = yes
guest ok = no
oplocks = no
map archive = no

root@ID51-ND248:/etc# cat mdadm.conf
ARRAY /dev/md0 level=raid1 num-devices=2 UUID=fcb80005:9a2e583c:c6c77c0b:af5d25ef
root@ID51-ND248:/etc#

root@ID51-ND248:/# dmesg
Linux version 2.6.12.6-arm1 (tim@SWTEST2) (gcc version 3.3.3) #32 Wed Jun 24 15:19:48 CST 2009
CPU: ARM926EJ-Sid(wb) [41069260] revision 0 (ARMv5TEJ)
CPU0: D VIVT write-back cache
CPU0: I cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
CPU0: D cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
Machine: MV-88fxx81
Using UBoot passing parameters structure
Sys Clk = 166000000, Tclk = 166000000
Memory policy: ECC disabled, Data cache writeback
On node 0 totalpages: 16384
DMA zone: 16384 pages, LIFO batch:7
Normal zone: 0 pages, LIFO batch:1
HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: root=/dev/ram console=ttyS0,115200 :::DB88FXX81:egiga0:none
PID hash table entries: 512 (order: 9, 8192 bytes)
Console: colour dummy device 80×30
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 64MB 0MB 0MB 0MB = 64MB total
Memory: 55296KB available (2596K code, 463K data, 112K init)
Calibrating delay loop… 331.77 BogoMIPS (lpj=1658880)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
checking if image is initramfs…it isn’t (no cpio magic); looks like an initrd
Freeing initrd memory: 6323K
NET: Registered protocol family 16

Marvell Development Board (LSP Version 1.7.6_NAS)—RD-88F5182-NAS-2
Detected Tclk 166000000 and SysClk 166000000
Marvell USB EHCI Host controller #0: c0e49a40
Marvell USB EHCI Host controller #1: c0e49bc0
pexBarOverlapDetect: winNum 2 overlap current 0
mvPexInit:Warning :Bar 2 size is illigal
it will be disabled
please check Pex and CPU windows configuration
PCI: bus0: Fast back to back transfers enabled
PCI: bus1: Fast back to back transfers enabled
SCSI subsystem initialized
usbcore: registered new driver usbfs
usbcore: registered new driver hub
cesadev_init(c0012498)
Fast Floating Point Emulator V0.9© Peter Teichmann.
inotify device minor=63
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
squashfs: version 3.3 (2007/10/31) Phillip Lougher
Installing knfsd (copyright© 1996 okir@monad.swb.de).
Initializing Cryptographic API
Serial: 8250/16550 driver $Revision: 1.1.1.1 $ 4 ports, IRQ sharing disabled
ttyS0 at MMIO 0×0 (irq = 3) is a 16550A
io scheduler noop registered
io scheduler deadline registered
RAMDISK driver initialized: 16 RAM disks of 10240K size 1024 blocksize
loop: loaded (max 8 devices)
Marvell Gigabit Ethernet Driver ‘egiga’:
o Ethernet descriptors in DRAM
o DRAM SW cache-coherency
o Checksum offload enabled
o Loading network interface ‘egiga0’
Intergrated Sata device found
scsi0 : Marvell SCSI to SATA adapter
scsi1 : Marvell SCSI to SATA adapter
Vendor: Seagate   Model: ST32000542AS      Rev: CC34
Type:   Direct-Access                      ANSI SCSI revision: 03
Vendor: Seagate   Model: ST32000542AS      Rev: CC34
Type:   Direct-Access                      ANSI SCSI revision: 03
Attached scsi generic sg0 at scsi0, channel 0, id 0, lun 0, type 0
Attached scsi generic sg1 at scsi1, channel 0, id 0, lun 0, type 0
physmap flash device: 800000 at ff800000
phys_mapped_flash: Found 1×16 devices at 0×0 in 8-bit bank
Amd/Fujitsu Extended Query Table at 0×0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
cmdlinepart partition parsing not available
RedBoot partition parsing not available
Using physmap partition definition
Creating 5 MTD partitions on “phys_mapped_flash”:
0×00000000-0×00010000 : “MTD1”
0×00010000-0×00020000 : “MTD2”
0×00020000-0×001a0000 : “Linux Kernel”
0×001a0000-0×007d0000 : “File System”
0×007d0000-0×00800000 : “u-boot”
ehci_platform ehci_platform.20865: EHCI Host Controller
ehci_platform ehci_platform.20865: new USB bus registered, assigned bus number 1
ehci_platform ehci_platform.20865: irq 17, io mem 0×00000000
ehci_platform ehci_platform.20865: park 0
ehci_platform ehci_platform.20865: USB 0.0 initialized, EHCI 1.00, driver 10 Dec 2004
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ehci_platform ehci_platform.86401: EHCI Host Controller
ehci_platform ehci_platform.86401: new USB bus registered, assigned bus number 2
ehci_platform ehci_platform.86401: irq 12, io mem 0×00000000
ehci_platform ehci_platform.86401: park 0
ehci_platform ehci_platform.86401: USB 0.0 initialized, EHCI 1.00, driver 10 Dec 2004
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
ohci_hcd: 2004 Nov 08 USB 1.1 ‘Open’ Host Controller (OHCI) Driver (PCI)
mice: PS/2 mouse device common for all mice
md: linear personality registered as nr 1
md: raid0 personality registered as nr 2
md: raid1 personality registered as nr 3
md: md driver 0.90.1 MAX_MD_DEVS=256, MD_SB_DISKS=27
device-mapper: 4.4.0-ioctl (2005-01-12) initialised: dm-devel@redhat.com
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
NET: Registered protocol family 1
NET: Registered protocol family 17
md: Autodetecting RAID arrays.
md: autorun …
md: ... autorun DONE.
RAMDISK: Compressed image found at block 0
EXT2-fs warning: mounting unchecked fs, running e2fsck is recommended
VFS: Mounted root (ext2 filesystem).
Freeing init memory: 112K
SCSI device sda: 3907029168 512-byte hdwr sectors (2000399 MB)
SCSI device sda: drive cache: write back
SCSI device sda: 3907029168 512-byte hdwr sectors (2000399 MB)
SCSI device sda: drive cache: write back
sda: sda1 sda2 sda4
Attached scsi disk sda at scsi0, channel 0, id 0, lun 0
SCSI device sdb: 3907029168 512-byte hdwr sectors (2000399 MB)
SCSI device sdb: drive cache: write back
SCSI device sdb: 3907029168 512-byte hdwr sectors (2000399 MB)
SCSI device sdb: drive cache: write back
sdb: sdb1 sdb2 sdb4
Attached scsi disk sdb at scsi1, channel 0, id 0, lun 0
usbcore: registered new driver usblp
drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver
egiga0: mac address changed
egiga0: Ilegal MTU value 3000, rounding MTU to: 3004
egiga0: change mtu 1500 (buffer-size 1520) to 3004 (buffer-size 3024)
egiga0: link down
egiga0: link up<5>, full duplex<5>, speed 100 Mbps<5>
Adding 530104k swap on /dev/sda1. Priority:-1 extents:1
Adding 530104k swap on /dev/sdb1. Priority:-2 extents:1
kjournald starting. Commit interval 5 seconds
EXT3 FS on sda4, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3 FS on sdb4, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
md: md0 stopped.
md: md1 stopped.
md: bind
md: md0: raid array is not clean—starting background reconstruction
raid1: raid set md0 active with 1 out of 1 mirrors
md: couldn’t update array info. -22
kjournald starting. Commit interval 5 seconds
EXT3 FS on md0, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3 FS on sda4, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3 FS on sdb4, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
md: mdadm(pid 1677) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 1941) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 2039) used obsolete MD ioctl, upgrade your software to use new ictls.
egiga0: link down
egiga0: link up<5>, full duplex<5>, speed 100 Mbps<5>
md: mdadm(pid 2573) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 2635) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 2695) used obsolete MD ioctl, upgrade your software to use new ictls.

***************************************

* HD0 stand by now! *

***************************************

#######################################

# HD0 awake now ! #

#######################################
md: mdadm(pid 2846) used obsolete MD ioctl, upgrade your software to use new ictls.
md: bind
RAID1 conf printout:—- wd:1 rd:2
disk 0, wo:0, o:1, dev:sdb2
disk 1, wo:1, o:1, dev:sda2
..<6>md: syncing RAID array md0
md: minimum guaranteed reconstruction speed: 1000 KB/sec/disc.
md: using maximum available idle IO bandwith (but not more than 100000 KB/sec) for reconstruction.
md: using 128k window, over a total of 1952467712 blocks.
md: mdadm(pid 2961) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 4609) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 12907) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 15201) used obsolete MD ioctl, upgrade your software to use new ictls.
md: md0: sync done.
RAID1 conf printout:—- wd:2 rd:2
disk 0, wo:0, o:1, dev:sdb2
disk 1, wo:0, o:1, dev:sda2
md: mdadm(pid 28163) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 28207) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 28340) used obsolete MD ioctl, upgrade your software to use new ictls.

***************************************

* HD0 stand by now! *

***************************************
md: mdadm(pid 28550) used obsolete MD ioctl, upgrade your software to use new ictls.

***************************************

* HD1 stand by now! *

***************************************

#######################################

# HD1 awake now ! #

#######################################
md: mdadm(pid 30470) used obsolete MD ioctl, upgrade your software to use new ictls.

#######################################

# HD0 awake now ! #

#######################################
md: mdadm(pid 30855) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 30909) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 31003) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 31594) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 32078) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 32378) used obsolete MD ioctl, upgrade your software to use new ictls.

***************************************

* HD0 stand by now! *

***************************************

* HD1 stand by now! *

***************************************

#######################################

# HD1 awake now ! #

#######################################
md: mdadm(pid 6620) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 6664) used obsolete MD ioctl, upgrade your software to use new ictls.

***************************************

* HD1 stand by now! *

***************************************

#######################################

# HD1 awake now ! #

#######################################
md: mdadm(pid 23079) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 23125) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 23173) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 23213) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 23252) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 23322) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 23362) used obsolete MD ioctl, upgrade your software to use new ictls.

#######################################

# HD0 awake now ! #

#######################################
md: mdadm(pid 23641) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 23684) used obsolete MD ioctl, upgrade your software to use new ictls.
md: mdadm(pid 23726) used obsolete MD ioctl, upgrade your software to use new ictls.
root@ID51-ND248:/#

root@ID51-ND248:/# vi /ffp/etc/exports

#/mnt/HD_a2 192.168.1.0/24(rw,no_root_squash)

#/mnt/HD_a4 192.168.1.0/24(rw,no_root_squash)

#/mnt/web_page 192.168.1.0/24(rw,no_root_squash)
/mnt/HD_a2/domU-ID41-ND008-varbacula 192.168.1.3(rw,no_root_squash)
~

root@ID51-ND248:/# cat /dev/s
/dev/scd0   /dev/sda7   /dev/sdc10 /dev/sdd15 /dev/sde6   /dev/sdg1   /dev/sdh14 /dev/sdi5   /dev/sdk    /dev/sdl13 /dev/sdm4   /dev/sdn9   /dev/sdp12
/dev/scd1   /dev/sda8   /dev/sdc11 /dev/sdd2   /dev/sde7   /dev/sdg10 /dev/sdh15 /dev/sdi6   /dev/sdk1   /dev/sdl14 /dev/sdm5   /dev/sdo    /dev/sdp13
/dev/scd2   /dev/sda9   /dev/sdc12 /dev/sdd3   /dev/sde8   /dev/sdg11 /dev/sdh2   /dev/sdi7   /dev/sdk10 /dev/sdl15 /dev/sdm6   /dev/sdo1   /dev/sdp14
/dev/scd3   /dev/sdb    /dev/sdc13 /dev/sdd4   /dev/sde9   /dev/sdg12 /dev/sdh3   /dev/sdi8   /dev/sdk11 /dev/sdl2   /dev/sdm7   /dev/sdo10 /dev/sdp15
/dev/scd4   /dev/sdb1   /dev/sdc14 /dev/sdd5   /dev/sdf    /dev/sdg13 /dev/sdh4   /dev/sdi9   /dev/sdk12 /dev/sdl3   /dev/sdm8   /dev/sdo11 /dev/sdp2
/dev/scd5   /dev/sdb10 /dev/sdc15 /dev/sdd6   /dev/sdf1   /dev/sdg14 /dev/sdh5   /dev/sdj    /dev/sdk13 /dev/sdl4   /dev/sdm9   /dev/sdo12 /dev/sdp3
/dev/scd6   /dev/sdb11 /dev/sdc2   /dev/sdd7   /dev/sdf10 /dev/sdg15 /dev/sdh6   /dev/sdj1   /dev/sdk14 /dev/sdl5   /dev/sdn    /dev/sdo13 /dev/sdp4
/dev/scd7   /dev/sdb12 /dev/sdc3   /dev/sdd8   /dev/sdf11 /dev/sdg2   /dev/sdh7   /dev/sdj10 /dev/sdk15 /dev/sdl6   /dev/sdn1   /dev/sdo14 /dev/sdp5
/dev/sda    /dev/sdb13 /dev/sdc4   /dev/sdd9   /dev/sdf12 /dev/sdg3   /dev/sdh8   /dev/sdj11 /dev/sdk2   /dev/sdl7   /dev/sdn10 /dev/sdo15 /dev/sdp6
/dev/sda1   /dev/sdb14 /dev/sdc5   /dev/sde    /dev/sdf13 /dev/sdg4   /dev/sdh9   /dev/sdj12 /dev/sdk3   /dev/sdl8   /dev/sdn11 /dev/sdo2   /dev/sdp7
/dev/sda10 /dev/sdb15 /dev/sdc6   /dev/sde1   /dev/sdf14 /dev/sdg5   /dev/sdi    /dev/sdj13 /dev/sdk4   /dev/sdl9   /dev/sdn12 /dev/sdo3   /dev/sdp8
/dev/sda11 /dev/sdb2   /dev/sdc7   /dev/sde10 /dev/sdf15 /dev/sdg6   /dev/sdi1   /dev/sdj14 /dev/sdk5   /dev/sdm    /dev/sdn13 /dev/sdo4   /dev/sdp9
/dev/sda12 /dev/sdb3   /dev/sdc8   /dev/sde11 /dev/sdf2   /dev/sdg7   /dev/sdi10 /dev/sdj15 /dev/sdk6   /dev/sdm1   /dev/sdn14 /dev/sdo5
/dev/sda13 /dev/sdb4   /dev/sdc9   /dev/sde12 /dev/sdf3   /dev/sdg8   /dev/sdi11 /dev/sdj2   /dev/sdk7   /dev/sdm10 /dev/sdn15 /dev/sdo6
/dev/sda14 /dev/sdb5   /dev/sdd    /dev/sde13 /dev/sdf4   /dev/sdg9   /dev/sdi12 /dev/sdj3   /dev/sdk8   /dev/sdm11 /dev/sdn2   /dev/sdo7
/dev/sda15 /dev/sdb6   /dev/sdd1   /dev/sde14 /dev/sdf5   /dev/sdh    /dev/sdi13 /dev/sdj4   /dev/sdk9   /dev/sdm12 /dev/sdn3   /dev/sdo8
/dev/sda2   /dev/sdb7   /dev/sdd10 /dev/sde15 /dev/sdf6   /dev/sdh1   /dev/sdi14 /dev/sdj5   /dev/sdl    /dev/sdm13 /dev/sdn4   /dev/sdo9
/dev/sda3   /dev/sdb8   /dev/sdd11 /dev/sde2   /dev/sdf7   /dev/sdh10 /dev/sdi15 /dev/sdj6   /dev/sdl1   /dev/sdm14 /dev/sdn5   /dev/sdp
/dev/sda4   /dev/sdb9   /dev/sdd12 /dev/sde3   /dev/sdf8   /dev/sdh11 /dev/sdi2   /dev/sdj7   /dev/sdl10 /dev/sdm15 /dev/sdn6   /dev/sdp1
/dev/sda5   /dev/sdc    /dev/sdd13 /dev/sde4   /dev/sdf9   /dev/sdh12 /dev/sdi3   /dev/sdj8   /dev/sdl11 /dev/sdm2   /dev/sdn7   /dev/sdp10
/dev/sda6   /dev/sdc1   /dev/sdd14 /dev/sde5   /dev/sdg    /dev/sdh13 /dev/sdi4   /dev/sdj9   /dev/sdl12 /dev/sdm3   /dev/sdn8   /dev/sdp11

============================================

Data aman deh bisa tidur nyenyak….

Instalasi IP Camera untuk rumah,warnet,kantor

gtoms — Tue, 10 Aug 2010 03:45:35 +0000

Manfaat IP Camera dapat memantau toko/kantor/pabrik dari rumah, dan banyak lainnya. Dapat memantau dari jarak jauh, kantor perwakilan-cabang dari pusat secara langsung (dengan remote camera, wireless camera, IP Camera, kamera cctv Internet atau via satelit). Dapat mengawasi rumah (babby sitter/pembantu dll) selagi anda bekerja di kantor, mengawasi pegawai, murid sekolah, dll.

Instalasi IP Camera kali ini untuk memantau sebuah usaha warung internet, dimana pemiliknya membeli sebuah ip camera dan ditempatkan di tempat usahanya dan dapat memantau perkembangan usahanya dari luar melalui internet. Usahanya terdiri dari warnet, fotocopy, wartel. Topology jaringannya secara singkat sbb :

ip camera———->switch———>server proxy——->modem ADSL Speedy———>internet<-----pemilik usaha

Langganan internetnya menggunakan Speedy Biz 3 MB jadi sudah memiliki IP Static di modemnya yang tidak berubah-rubah. Untuk proses instalasinya :

1. Pasang IP Camera disalah satu sudut yang strategis di tempat usahanya

2. Hubungkan ip camera ke switch(hub) menggunakan cable LAN, Setting IP dan port pada IP Camera device dalam hal ini diberikan IP Privat(local)

3. Forward Port ip camera dari modem ADSL Speedy ke server Proxy, kemudian dari server proxy forward port ip camera ke IP device IP Camera.

4. Si pemilik Usaha akan dapat mengakses IP Camera melalui IP Static(Public) ADSL Speedy dengan port IP Camera.

Berikut instalasinya yang sempat saya dokumentasikan dengan text dan capture gambar :

Proses 1-2 bisa dilihat gambar dibawah ini, dimana IP Camera disambungkan ke switch D-Link, kabel warna biru adalah kabel dari IP Camera device ke Switch :

Selanjutnya masuk ke konsol/web IP Camera device untuk setting IP Privat dan Portnya. Misal IP Privatnya 192.168.1.236 dan portnya 81 Jangan lupa set user dan password untuk login ke IP Camera ini. Kalau masih bingung bisa buka buku manual yang diertakan sata membeli perangkat IP Cameranya.

Proses 3, masuk ke konsol Modem Speedy dalam kasus ini menggunakan Modem ADSL Huawei SmartAX MT882a :

Basic—————-> NAT———————->Virtual Server

Masukkan Port IP Camera dan di forward ke IP Server Proxy :

Selanjutnya login ke Server Proxy(eth0 ke modem speedy, eth1 gateway LAN) dan setting forwarding IP dan Port ke IP Camera device:

#iptables -A PREROUTING -t nat -i eth0 -p tcp—dport 81 -j DNAT —to 192.168.1.236:81

#iptables -A INPUT -p tcp -m state—state NEW —dport 81 -i eth0 -j ACCEPT

#iptables -nvL -t nat
Chain PREROUTING (policy ACCEPT 703K packets, 43M bytes)
pkts bytes target prot opt in out source destination
571 34260 DNAT tcp — eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:81 to:192.168.1.236:81

Sampai disini sudah selesai tinggal testing pada proses 4:

Dari luar si pemilik usaha tinggal masuk melalui browser seperti internet explorer,firefox ke IP Static Modem ADSL dan portnya kemudian login dan bisa melihat secara real time kegiatan di tempat usahanya.

Membuat mailserver kantor dengan zimbra dan internet speedy

gtoms — Sun, 08 Aug 2010 04:31:16 +0000

Case studies ini pada perusahaan menengah dengan jumlah karyawan 25 orang dan berkeinginan memiliki sendiri mailserver pada kantor mereka. Ada banyak sisi positif jika menempatkan mailserver pada kantor sendiri daripada meng host di tempat lain. Untuk urusan keperluan IT kantor ini sudah memiliki komputer desktop dan server proxy,printer,internet. Semua sudah tersambung dalam jaringan Local Area Network, tinggal mailserver yang akan di setup disana. Internet memakai Telkom Speedy tersambung dengan Proxy server dimana proses access filtering sangat ketat, salah satunya hanya membolehkan membuka email kantor, email pribadi dan gratisan tidak diperkenankan. Direkturnya yang juga melek IT meminta saya membuat mailserver pakai Zimbra dengan topology existing yang sudah ada. Dia tanya perlu apa saja untuk keperluan diatas ? Saya jawab saya minta 1 unit komputer dan akses ke modem,server proxy dan domain manager perusahaannya. Setelah dipenuhi semuanya dia minta setengah hari harus jadi. Kondisi pada perusahaan ini untuk memiliki mailserver adalah tidak memiliki ip public (static) dikarenakan memakai layanan internet Speedy dengan IP Dynamic(berubah-rubah). Hal ini tidak menjadi kendala dan bisa diatasin dengan menggunakan fasilitas free dari Zoneedit.com yang dapat mengupdate domain perusahaan agar selalu mengarah ke ip dynamic Internet Speedy. Jadi Zimbra diset tanpa ip public dan melakukan MTA Relay ke SMTP Telkom(smtp.telkom.net). Step by step secara lengkap akan saya jabarkan di artikel ini sbb :

Registrasi domain kantor ini ke zoneedit.com sebagai Managed DNS Service dan support Dynamic DNS. Jadi bisa mengupdate IP Speedy yang berubah-rubah. Add MX untuk domain perusahaan dan IP Address(A). Semua dilakukan pada control panel Zoneedit setelah kita berhasil registrasi.

Mengganti nameserver domain perusahaan ini ke nameserver Zoneedit yang diberikan saat registrasi sebelumnya. Ini harus masuk ke domain manager perusahaan ini dimana diregister pertama kali.

Re-setting Modem Speedy Sanex ADSL-SA 5100 untuk option Virtual Server dan DMZ diarahkan ke server proxy.

Download dan Install Dynamic dns clients yang disupport oleh zoneedit .

Menambah forwarding IP dan Port Policy pada server proxy ke server zimbra. Dalam hal ini port yang yang harus diforward ke IP Zimbra adalah Postfix 25,HTTP 80,POP3 110,IMAP 143,LDAP 389,HTTPS 443,Tomcat IMAP SSL 993,Tomcat POP SSL 995,Tomcat LMTP 7025,7306,7307

Install Sistem operasi Linux dan Deploy Zimbra Open Source Edition ke server mailserver.

Testing kirim dan terima email mengunakan webmail dan mail client.

Okay sekarang saatnya melihat proses instalasi dan konfigurasi berupa text dan capture gambar yang sempat saya dokumentasikan :

Kondisi IP Devices dan Sistem Operasi

Modem Speedy Sanex ADSL-SA 5100 dengan IP 10.10.10.1

Server Linux Debian 5.0.5 dengan proxy Squid 3.1 dengan IP eth0 10.10.10.10, eth1 192.168.1.1

Server Linux Debian 5.0.5 dengan Zimbra Open Sources 6.0.7 dengan IP 192.168.1.82

Tahap I
Registrasi domain perusahaan ini ke http://www.zoneedit.com
Create zone domain perusahaan dan, MX dan IP Address (A)

Tahap II

Mengganti nameserver domain perusahaan ini ke nameserver zoneedit dalam case studies ini ns13.zoneedit.com 66.223.40.121 dan
ns9.zoneedit.com 66.240.231.42

Tahap III

Re-setting Modem Speedy Sanex ADSL-SA 5100 :

Advance———-> Virtual Server————>Services

Advance———-> Virtual Server————>DMZ

Tahap IV

Menambah forwarding IP dan Port Policy pada server proxy ke server zimbra. Dalam hal ini port yang yang harus diforward ke IP Zimbra adalah Postfix 25,HTTP 80,POP3 110,IMAP 143,LDAP 389,HTTPS 443,Tomcat IMAP SSL 993,Tomcat POP SSL 995,Tomcat LMTP 7025,7306,7307

Set IP dan Port forwarding ke IP Zimbra 192.168.1.82

iptables -A PREROUTING -t nat -i eth0 -p tcp—dport 110 -j DNAT —to 192.168.1.82:110
iptables -A PREROUTING -t nat -i eth0 -p tcp—dport 25 -j DNAT —to 192.168.1.82:25
iptables -A PREROUTING -t nat -i eth0 -p tcp—dport 143 -j DNAT —to 192.168.1.82:143
iptables -A PREROUTING -t nat -i eth0 -p tcp—dport 443 -j DNAT —to 192.168.1.82:443
iptables -A PREROUTING -t nat -i eth0 -p tcp—dport 80 -j DNAT —to 192.168.1.82:80
iptables -A PREROUTING -t nat -i eth0 -p tcp—dport 993 -j DNAT —to 192.168.1.82:993
iptables -A PREROUTING -t nat -i eth0 -p tcp—dport 995 -j DNAT —to 192.168.1.82:995
iptables -A PREROUTING -t nat -i eth0 -p tcp—dport 7025 -j DNAT —to 192.168.1.82:7025
iptables -A PREROUTING -t nat -i eth0 -p tcp—dport 7306 -j DNAT —to 192.168.1.82:7306
iptables -A PREROUTING -t nat -i eth0 -p tcp—dport 7307 -j DNAT —to 192.168.1.82:7307
iptables -A INPUT -p tcp -m state—state NEW —dport 25 -i eth0 -j ACCEPT
iptables -A INPUT -p tcp -m state—state NEW —dport 110 -i eth0 -j ACCEPT
iptables -A INPUT -p tcp -m state—state NEW —dport 143 -i eth0 -j ACCEPT
iptables -A INPUT -p tcp -m state—state NEW —dport 443 -i eth0 -j ACCEPT
iptables -A INPUT -p tcp -m state—state NEW —dport 80 -i eth0 -j ACCEPT
iptables -A INPUT -p tcp -m state—state NEW —dport 993 -i eth0 -j ACCEPT
iptables -A INPUT -p tcp -m state—state NEW —dport 995 -i eth0 -j ACCEPT
iptables -A INPUT -p tcp -m state—state NEW —dport 7025 -i eth0 -j ACCEPT
iptables -A INPUT -p tcp -m state—state NEW —dport 7306 -i eth0 -j ACCEPT
iptables -A INPUT -p tcp -m state—state NEW —dport 7307 -i eth0 -j ACCEPT

Tahap V

Install Sistem operasi Linux dan Deploy Zimbra Open Source Edition ke server mailserver. Dalam hal ini instalasi Linux Debian 5.05 (Lenny) sudah selesai dan tinggal melanjutkan ke Deploy Zimbra 6.0.7

mail:/home/gtoms# cat /etc/debian_version
5.0.5

mail:/home/gtoms# uname -a
Linux mail 2.6.26-2-686 #1 SMP Mon Jun 21 05:58:44 UTC 2010 i686 GNU/Linux

mail:/home/gtoms# nano /etc/hosts
127.0.0.1 localhost
192.168.1.82 mail.xyxyxyxy.com mail

mail:/home/gtoms# ifconfig
eth0 Link encap:Ethernet HWaddr 08:00:27:1e:8c:25
inet addr:192.168.1.82 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::a00:27ff:fe1e:8c25/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:349684 errors:0 dropped:0 overruns:0 frame:0
TX packets:221465 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:478596197 (456.4 MiB) TX bytes:19847969 (18.9 MiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:20 errors:0 dropped:0 overruns:0 frame:0
TX packets:20 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1392 (1.3 KiB) TX bytes:1392 (1.3 KiB)

Instalasi DNS Server menggunakan BIND

mail:/home/gtoms# apt-get install -y bind9
Reading package lists… Done
Building dependency tree
Reading state information… Done
The following extra packages will be installed:
bind9utils
Suggested packages:
bind9-doc resolvconf ufw
The following NEW packages will be installed:
bind9 bind9utils
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 380kB of archives.
After this operation, 1147kB of additional disk space will be used.
Get:1 http://security.debian.org lenny/updates/main bind9utils 1:9.6.ESV.R1+dfsg-0+lenny2 [104kB]
Get:2 http://security.debian.org lenny/updates/main bind9 1:9.6.ESV.R1+dfsg-0+lenny2 [276kB]
Fetched 380kB in 11s (33.9kB/s)
Preconfiguring packages …
Selecting previously deselected package bind9utils.
(Reading database … 19153 files and directories currently installed.)
Unpacking bind9utils (from …/bind9utils_1%3a9.6.ESV.R1+dfsg-0+lenny2_i386.deb) ...
Selecting previously deselected package bind9.
Unpacking bind9 (from …/bind9_1%3a9.6.ESV.R1+dfsg-0+lenny2_i386.deb) ...
Processing triggers for man-db …
Setting up bind9utils (1:9.6.ESV.R1+dfsg-0+lenny2) ...
Setting up bind9 (1:9.6.ESV.R1+dfsg-0+lenny2) ...
Adding group `bind’ (GID 106) ...
Done.
Adding system user `bind’ (UID 104) ...
Adding new user `bind’ (UID 104) with group `bind’ ...
Not creating home directory `/var/cache/bind’.
wrote key file “/etc/bind/rndc.key”

#
Starting domain name service…: bind9.

Menambah zona domain perusahaan ke BIND

mail:/etc/bind# nano named.conf

zone “localhost” {
type master;
file “/etc/bind/db.local”;
};

zone “127.in-addr.arpa” {
type master;
file “/etc/bind/db.127”;
};

zone “0.in-addr.arpa” {
type master;
file “/etc/bind/db.0”;
};

zone “255.in-addr.arpa” {
type master;
file “/etc/bind/db.255”;
};

zone “mail.xyxyxyxy.com” {
type master;
file “/etc/bind/db.mail.xyxyxyxy.com”;
};

include “/etc/bind/named.conf.local”;

mail:/etc/bind# nano db.mail.xyxyxyxy.com

$TTL 86400

@ IN SOA mail.xyxyxyxy.com. admin.mail.xyxyxyxy.com. (
2010080700 ; Serial
43200 ; Refresh
3600 ; Retry
3600000 ; Expire
2592000 ; Minimum
)

; Define the nameservers and the mail servers

IN NS 192.168.1.82
IN A 192.168.1.82
IN MX 10 mail.xyxyxyxy.com.

webmail IN A 192.168.1.82
mail IN A 192.168.1.82

mail:/etc/bind# /etc/init.d/bind9 restart
Stopping domain name service…: bind9.
Starting domain name service…: bind9.

mail:/etc/bind# tail -f /var/log/syslog
Aug 7 19:33:43 mail named[2615]: command channel listening on 127.0.0.1#953
Aug 7 19:33:43 mail named[2615]: command channel listening on ::1#953
Aug 7 19:33:43 mail named[2615]: zone 0.in-addr.arpa/IN: loaded serial 1
Aug 7 19:33:43 mail named[2615]: zone 127.in-addr.arpa/IN: loaded serial 1
Aug 7 19:33:43 mail named[2615]: zone 255.in-addr.arpa/IN: loaded serial 1
Aug 7 19:33:43 mail named[2615]: zone mail.xyxyxyxy.com/IN: NS ‘192.168.1.82.mail.xyxyxyxy.com’ has no address records (A or AAAA)
Aug 7 19:33:43 mail named[2615]: zone mail.xyxyxyxy.com/IN: loaded serial 2010080700
Aug 7 19:33:43 mail named[2615]: zone localhost/IN: loaded serial 2
Aug 7 19:33:43 mail named[2615]: running
Aug 7 19:33:43 mail named[2615]: zone mail.xyxyxyxy.com/IN: sending notifies (serial 2010080700)
^C

mail:/home/gtoms# ping mail.xyxyxyxy.com
PING mail.xyxyxyxy.com (192.168.1.82) 56(84) bytes of data.
64 bytes from mail.xyxyxyxy.com (192.168.1.82): icmp_seq=1 ttl=64 time=0.019 ms
64 bytes from mail.xyxyxyxy.com (192.168.1.82): icmp_seq=2 ttl=64 time=0.025 ms
64 bytes from mail.xyxyxyxy.com (192.168.1.82): icmp_seq=3 ttl=64 time=0.027 ms
^C—- mail.xyxyxyxy.com ping statistics—-
3 packets transmitted, 3 received, 0% packet loss, time 1999ms
rtt min/avg/max/mdev = 0.019/0.023/0.027/0.006 ms
mail:/home/gtoms# host -t mx mail.xyxyxyxy.com
mail.xyxyxyxy.com mail is handled by 10 mail.xyxyxyxy.com.

Install file-file yang berhubungan dengan Zimbra ang belum terinstall saat pertama kali menginstall Linux Debian 5.0.5

mail:/etc/bind# apt-get install libc6-i686 sudo libidn11 curl fetchmail libgmp3c2 libexpat1 libgetopt-mixed-perl libxml2 libstdc++6 libpcre3 libltdl3 flex sysstat
Reading package lists… Done
Building dependency tree
Reading state information… Done
libc6-i686 is already the newest version.
sudo is already the newest version.
libidn11 is already the newest version.
libxml2 is already the newest version.
libstdc++6 is already the newest version.
libpcre3 is already the newest version.
The following extra packages will be installed:
binutils ca-certificates cpp cpp-4.3 gcc gcc-4.3 libc6-dev libcurl3 libgomp1 libmpfr1ldbl libssh2-1 linux-libc-dev openssl
Suggested packages:
binutils-doc cpp-doc gcc-4.3-locales fetchmailconf exim4 mail-transport-agent resolvconf bison gcc-multilib make manpages-dev autoconf automake1.9
libtool gdb gcc-doc gcc-4.3-multilib libmudflap0-4.3-dev gcc-4.3-doc libgcc1-dbg libgomp1-dbg libmudflap0-dbg glibc-doc
The following NEW packages will be installed:
binutils ca-certificates cpp cpp-4.3 curl fetchmail flex gcc gcc-4.3 libc6-dev libcurl3 libexpat1 libgetopt-mixed-perl libgmp3c2 libgomp1 libltdl3
libmpfr1ldbl libssh2-1 linux-libc-dev openssl
0 upgraded, 20 newly installed, 0 to remove and 0 not upgraded.
Need to get 16.3MB of archives.
After this operation, 46.2MB of additional disk space will be used.
Do you want to continue [Y/n]? y
Get:1 http://mirror.unej.ac.id lenny/main flex 2.5.35-6 [314kB]
Get:2 http://mirror.unej.ac.id lenny/main binutils 2.18.1~cvs20080103-7 [2686kB]
Get:3 http://mirror.unej.ac.id lenny/main openssl 0.9.8g-15+lenny7 [1034kB]
Get:4 http://mirror.unej.ac.id lenny/main ca-certificates 20080809 [151kB]
Get:5 http://mirror.unej.ac.id lenny/main libgmp3c2 2:4.2.2+dfsg-3 [231kB]
Get:6 http://mirror.unej.ac.id lenny/main libmpfr1ldbl 2.3.1.dfsg.1-2 [339kB]
Get:7 http://mirror.unej.ac.id lenny/main cpp-4.3 4.3.2-1.1 [3087kB]
Get:8 http://mirror.unej.ac.id lenny/main cpp 4:4.3.2-2 [13.9kB]
Get:9 http://mirror.unej.ac.id lenny/main libssh2-1 0.18-1 [64.3kB]
Get:10 http://mirror.unej.ac.id lenny/main libcurl3 7.18.2-8lenny4 [228kB]
Get:11 http://mirror.unej.ac.id lenny/main curl 7.18.2-8lenny4 [208kB]
Get:12 http://mirror.unej.ac.id lenny/main fetchmail 6.3.9~rc2-4+lenny2 [653kB]
Get:13 http://mirror.unej.ac.id lenny/main libgomp1 4.3.2-1.1 [13.2kB]
Get:14 http://mirror.unej.ac.id lenny/main gcc-4.3 4.3.2-1.1 [2747kB]
Get:15 http://mirror.unej.ac.id lenny/main gcc 4:4.3.2-2 [5008B]
Get:16 http://mirror.unej.ac.id lenny/main linux-libc-dev 2.6.26-24 [768kB]
Get:17 http://mirror.unej.ac.id lenny/main libc6-dev 2.7-18lenny4 [3387kB]
Get:18 http://mirror.unej.ac.id lenny/main libexpat1 2.0.1-4+lenny3 [132kB]
Get:19 http://mirror.unej.ac.id lenny/main libgetopt-mixed-perl 1.008-10 [19.3kB]
Get:20 http://mirror.unej.ac.id lenny/main libltdl3 1.5.26-4+lenny1 [177kB]
Fetched 16.3MB in 2min59s (90.6kB/s)
Preconfiguring packages …
Selecting previously deselected package flex.
(Reading database … 19216 files and directories currently installed.)
Unpacking flex (from …/flex_2.5.35-6_i386.deb) ...
Selecting previously deselected package binutils.
Unpacking binutils (from …/binutils_2.18.1~cvs20080103-7_i386.deb) ...
Selecting previously deselected package openssl.
Unpacking openssl (from …/openssl_0.9.8g-15+lenny7_i386.deb) ...
Selecting previously deselected package ca-certificates.
Unpacking ca-certificates (from …/ca-certificates_20080809_all.deb) ...
Selecting previously deselected package libgmp3c2.
Unpacking libgmp3c2 (from …/libgmp3c2_2%3a4.2.2+dfsg-3_i386.deb) ...
Selecting previously deselected package libmpfr1ldbl.
Unpacking libmpfr1ldbl (from …/libmpfr1ldbl_2.3.1.dfsg.1-2_i386.deb) ...
Selecting previously deselected package cpp-4.3.
Unpacking cpp-4.3 (from …/cpp-4.3_4.3.2-1.1_i386.deb) ...
Selecting previously deselected package cpp.
Unpacking cpp (from …/cpp_4%3a4.3.2-2_i386.deb) ...
Selecting previously deselected package libssh2-1.
Unpacking libssh2-1 (from …/libssh2-1_0.18-1_i386.deb) ...
Selecting previously deselected package libcurl3.
Unpacking libcurl3 (from …/libcurl3_7.18.2-8lenny4_i386.deb) ...
Selecting previously deselected package curl.
Unpacking curl (from …/curl_7.18.2-8lenny4_i386.deb) ...
Selecting previously deselected package fetchmail.
Unpacking fetchmail (from …/fetchmail_6.3.9~rc2-4+lenny2_i386.deb) ...
Selecting previously deselected package libgomp1.
Unpacking libgomp1 (from …/libgomp1_4.3.2-1.1_i386.deb) ...
Selecting previously deselected package gcc-4.3.
Unpacking gcc-4.3 (from …/gcc-4.3_4.3.2-1.1_i386.deb) ...
Selecting previously deselected package gcc.
Unpacking gcc (from …/gcc_4%3a4.3.2-2_i386.deb) ...
Selecting previously deselected package linux-libc-dev.
Unpacking linux-libc-dev (from …/linux-libc-dev_2.6.26-24_i386.deb) ...
Selecting previously deselected package libc6-dev.
Unpacking libc6-dev (from …/libc6-dev_2.7-18lenny4_i386.deb) ...
Selecting previously deselected package libexpat1.
Unpacking libexpat1 (from …/libexpat1_2.0.1-4+lenny3_i386.deb) ...
Selecting previously deselected package libgetopt-mixed-perl.
Unpacking libgetopt-mixed-perl (from …/libgetopt-mixed-perl_1.008-10_all.deb) ...
Selecting previously deselected package libltdl3.
Unpacking libltdl3 (from …/libltdl3_1.5.26-4+lenny1_i386.deb) ...
Processing triggers for man-db …
Setting up flex (2.5.35-6) ...
Setting up binutils (2.18.1~cvs20080103-7) ...
Setting up openssl (0.9.8g-15+lenny7) ...
Setting up ca-certificates (20080809) ...
Updating certificates in /etc/ssl/certs….done.
Running hooks in /etc/ca-certificates/update.d….done.
Setting up libgmp3c2 (2:4.2.2+dfsg-3) ...
Setting up libmpfr1ldbl (2.3.1.dfsg.1-2) ...
Setting up cpp-4.3 (4.3.2-1.1) ...
Setting up cpp (4:4.3.2-2) ...
Setting up libssh2-1 (0.18-1) ...
Setting up libcurl3 (7.18.2-8lenny4) ...
Setting up curl (7.18.2-8lenny4) ...
Setting up fetchmail (6.3.9~rc2-4+lenny2) ...
Adding system user `fetchmail’ (UID 105) ...
Adding new user `fetchmail’ (UID 105) with group `nogroup’ ...
Creating home directory `/var/lib/fetchmail’ ...
usermod: no changes
Edit /etc/default/fetchmail to start fetchmail
Setting up libgomp1 (4.3.2-1.1) ...
Setting up gcc-4.3 (4.3.2-1.1) ...
Setting up gcc (4:4.3.2-2) ...
Setting up linux-libc-dev (2.6.26-24) ...
Setting up libc6-dev (2.7-18lenny4) ...
Setting up libexpat1 (2.0.1-4+lenny3) ...
Setting up libgetopt-mixed-perl (1.008-10) ...
Setting up libltdl3 (1.5.26-4+lenny1) ...
mail:/etc/bind#

DEPLOY Zimbra Collaboration Suite Open Source Edition :

mail:/etc/bind# cd /home/gtoms

mail:/home/gtoms# wget http://files2.zimbra.com/downloads/6.0.7_GA/zcs-6.0.7_GA_2473.DEBIAN5.20100616212143.tgz

mail:/home/gtoms# ls
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143.tgz

mail:/home/gtoms# tar xvfz zcs-6.0.7_GA_2473.DEBIAN5.20100616212143.tgz
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/readme_source_en_US.txt
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/util/
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/util/addUser.sh
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/util/globals.sh
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/util/modules/
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/util/modules/postinstall.sh
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/util/modules/packages.sh
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/util/modules/getconfig.sh
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/util/utilfunc.sh
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/readme_binary_en_US.txt
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/data/
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/data/versions-init.sql
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/zcl.txt
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/ZCS_Toaster.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/Import_Wizard_Outlook.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/MigrationWizard_Domino.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/RNZCSO_2005Beta.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/User Instructions for ZCS Import Wizard.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/Zimbra Schema.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/Zimbra iCalendar Migration Guide.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/admin.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/OSmultiserverinstall.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/quick_start.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/ZWC User Guide_6_0.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/MigrationWizard.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/en_US/Zimbra_Release_Note.pdf
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/zimbra_public_eula_2.1.txt
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/docs/YPL.txt
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/README.txt
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/bin/
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/bin/get_plat_tag.sh
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/bin/zmdbintegrityreport
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/packages/
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/packages/zimbra-snmp_6.0.7_GA_2473.DEBIAN5_i386.deb
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/packages/zimbra-apache_6.0.7_GA_2473.DEBIAN5_i386.deb
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/packages/zimbra-memcached_6.0.7_GA_2473.DEBIAN5_i386.deb
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/packages/zimbra-ldap_6.0.7_GA_2473.DEBIAN5_i386.deb
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/packages/zimbra-spell_6.0.7_GA_2473.DEBIAN5_i386.deb
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/packages/zimbra-mta_6.0.7_GA_2473.DEBIAN5_i386.deb
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/packages/zimbra-core_6.0.7_GA_2473.DEBIAN5_i386.deb
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/packages/zimbra-proxy_6.0.7_GA_2473.DEBIAN5_i386.deb
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/packages/zimbra-store_6.0.7_GA_2473.DEBIAN5_i386.deb
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/packages/zimbra-logger_6.0.7_GA_2473.DEBIAN5_i386.deb
zcs-6.0.7_GA_2473.DEBIAN5.20100616212143/install.sh
mail:/home/gtoms#

mail:/home/gtoms# cd zcs-6.0.7_GA_2473.DEBIAN5.20100616212143
mail:/home/gtoms/zcs-6.0.7_GA_2473.DEBIAN5.20100616212143# ls
bin data docs install.sh packages readme_binary_en_US.txt readme_source_en_US.txt README.txt util

mail:/home/gtoms/zcs-6.0.7_GA_2473.DEBIAN5.20100616212143# ./install.sh

Operations logged to /tmp/install.log.4555
Checking for existing installation…
zimbra-ldap…NOT FOUND
zimbra-logger…NOT FOUND
zimbra-mta…NOT FOUND
zimbra-snmp…NOT FOUND
zimbra-store…NOT FOUND
zimbra-apache…NOT FOUND
zimbra-spell…NOT FOUND
zimbra-convertd…NOT FOUND
zimbra-memcached…NOT FOUND
zimbra-proxy…NOT FOUND
zimbra-archiving…NOT FOUND
zimbra-cluster…NOT FOUND
zimbra-core…NOT FOUND

PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE.
ZIMBRA, INC. (“ZIMBRA”) WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU
FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING
THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY
THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS
AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.

License Terms for the Zimbra Collaboration Suite:
http://www.zimbra.com/license/zimbra_public_eula_2.1.html

Press Return to continue

Checking for prerequisites…
FOUND: NPTL
FOUND: sudo-1.6.9p17-3
FOUND: libidn11-1.8+20080606-1
FOUND: libpcre3-7.6-2.1
FOUND: libgmp3c2-2:4.2.2+dfsg-3
FOUND: libexpat1-2.0.1-4+lenny3
FOUND: libstdc++6-4.3.2-1.1
Checking for suggested prerequisites…
FOUND: perl-5.10.0
FOUND: sysstat
Prerequisite check complete.

Checking for installable packages

Found zimbra-core
Found zimbra-ldap
Found zimbra-logger
Found zimbra-mta
Found zimbra-snmp
Found zimbra-store
Found zimbra-apache
Found zimbra-spell
Found zimbra-memcached
Found zimbra-proxy

Select the packages to install

Install zimbra-ldap [Y]

Install zimbra-logger [Y]

Install zimbra-mta [Y]

Install zimbra-snmp [Y]

Install zimbra-store [Y]

Install zimbra-apache [Y]

Install zimbra-spell [Y]

Install zimbra-memcached [N] y

Install zimbra-proxy [N]
Checking required space for zimbra-core
checking space for zimbra-store

Installing:
zimbra-core
zimbra-ldap
zimbra-logger
zimbra-mta
zimbra-snmp
zimbra-store
zimbra-apache
zimbra-spell
zimbra-memcached

The system will be modified. Continue? [N] y

Removing /opt/zimbra
Removing zimbra crontab entry…done.
Cleaning up zimbra init scripts…done.
Cleaning up /etc/ld.so.conf…done.
Cleaning up /etc/security/limits.conf…done.

Finished removing Zimbra Collaboration Suite.

Installing packages

zimbra-core…...zimbra-core_6.0.7_GA_2473.DEBIAN5_i386.deb…done
zimbra-ldap…...zimbra-ldap_6.0.7_GA_2473.DEBIAN5_i386.deb…done
zimbra-logger…...zimbra-logger_6.0.7_GA_2473.DEBIAN5_i386.deb…done
zimbra-mta…...zimbra-mta_6.0.7_GA_2473.DEBIAN5_i386.deb…done
zimbra-snmp…...zimbra-snmp_6.0.7_GA_2473.DEBIAN5_i386.deb…done
zimbra-store…...zimbra-store_6.0.7_GA_2473.DEBIAN5_i386.deb…
——————————-skip——————————-

Checking for port conflicts

Main menu

1) Common Configuration:
2) zimbra-ldap: Enabled
3) zimbra-store: Enabled
+Create Admin User: yes
+Admin user to create: admin@mail.xyxyxyxy.com

******* +Admin Password UNSET
+Enable automated spam training: yes
+Spam training user: spam.r8qa_lir@mail.xyxyxyxy.com
+Non-spam(Ham) training user: ham.ghop_irqqb@mail.xyxyxyxy.com
+Global Documents Account: wiki@mail.xyxyxyxy.com
+SMTP host: mail.xyxyxyxy.com
+Web server HTTP port: 80
+Web server HTTPS port: 443
+Web server mode: http
+IMAP server port: 143
+IMAP server SSL port: 993
+POP server port: 110
+POP server SSL port: 995
+Use spell check server: yes
+Spell server URL: http://mail.xyxyxyxy.com:7780/aspell.php
+Configure for use with mail proxy: FALSE
+Configure for use with web proxy: FALSE
+Enable version update checks: TRUE
+Enable version update notifications: TRUE
+Version update notification email: admin@mail.xyxyxyxy.com
+Version update source email: admin@mail.xyxyxyxy.com

4) zimbra-mta: Enabled
5) zimbra-snmp: Enabled
6) zimbra-logger: Enabled
7) zimbra-spell: Enabled
8) Default Class of Service Configuration:
r) Start servers after configuration yes
s) Save config to file
x) Expand menu
q) Quit

Store configuration

1) Status: Enabled
2) Create Admin User: yes
3) Admin user to create: admin@mail.xyxyxyxy.com
4) Admin Password set
5) Enable automated spam training: yes
6) Spam training user: spam.r8qa_lir@mail.xyxyxyxy.com
7) Non-spam(Ham) training user: ham.ghop_irqqb@mail.xyxyxyxy.com
8) Global Documents Account: wiki@mail.xyxyxyxy.com
9) SMTP host: mail.xyxyxyxy.com
10) Web server HTTP port: 80
11) Web server HTTPS port: 443
12) Web server mode: http
13) IMAP server port: 143
14) IMAP server SSL port: 993
15) POP server port: 110
16) POP server SSL port: 995
17) Use spell check server: yes
18) Spell server URL: http://mail.xyxyxyxy.com:7780/aspell.php
19) Configure for use with mail proxy: FALSE
20) Configure for use with web proxy: FALSE
21) Enable version update checks: TRUE
22) Enable version update notifications: TRUE
23) Version update notification email: admin@mail.xyxyxyxy.com
24) Version update source email: admin@mail.xyxyxyxy.com

*** CONFIGURATION COMPLETE - press ‘a’ to apply
Select from menu, or press ‘a’ to apply config (? – help) a
Save configuration data to a file? [Yes] yes
Save config in file: [/opt/zimbra/config.10854]
Saving config in /opt/zimbra/config.10854…done.
The system will be modified – continue? [No] y
Operations logged to /tmp/zmsetup.08072010-212532.log
Setting local config values…done.
Setting up CA…done.
Deploying CA to /opt/zimbra/conf/ca …done.
Creating SSL certificate…done.
Installing mailboxd SSL certificates…done.
Initializing ldap…done.
Setting replication password…done.
Setting Postfix password…done.
Setting amavis password…done.
Setting nginx password…done.
Creating server entry for mail.xyxyxyxy.com…done.
Saving CA in ldap …done.
Saving SSL Certificate in ldap …done.
Setting spell check URL…done.
Setting service ports on mail.xyxyxyxy.com…done.
Adding mail.xyxyxyxy.com to zimbraMailHostPool in default COS…done.
Installing webclient skins…
pebble…done.
sky…done.
hotrod…done.
twilight…done.
oasis…done.
zmail…done.
lemongrass…done.
yahoo…done.
beach…done.
waves…done.
sand…done.
bones…done.
tree…done.
lake…done.
bare…done.
steel…done.
smoke…done.
lavender…done.
Finished installing webclient skins.
Setting zimbraFeatureIMEnabled=FALSE…done.
Setting zimbraFeatureTasksEnabled=TRUE…done.
Setting zimbraFeatureBriefcasesEnabled=TRUE…done.
Setting zimbraFeatureNotebookEnabled=TRUE…done.
Setting MTA auth host…done.
Setting TimeZone Preference…done.
Initializing mta config…done.
Setting services on mail.xyxyxyxy.com…done.
Creating domain mail.xyxyxyxy.com…done.
Setting default domain name…done.
Creating domain mail.xyxyxyxy.com…already exists.
Creating admin account admin@mail.xyxyxyxy.com…done.
Creating root alias…done.
Creating postmaster alias…done.
Creating user wiki@mail.xyxyxyxy.com…done.
Creating user spam.r8qa_lir@mail.xyxyxyxy.com…done.
Creating user ham.ghop_irqqb@mail.xyxyxyxy.com…done.
Setting spam training accounts…done.
Initializing store sql database…done.
Setting zimbraSmtpHostname for mail.xyxyxyxy.com…done.
Configuring SNMP…done.
Checking for default IM conference room…not present.
Initializing default IM conference room…done.
Setting up syslog.conf…done.

You have the option of notifying Zimbra of your installation.
This helps us to track the uptake of the Zimbra Collaboration Suite.
The only information that will be transmitted is:
The VERSION of zcs installed (6.0.7_GA_2473_DEBIAN5)
The ADMIN EMAIL ADDRESS created (admin@mail.xyxyxyxy.com)

Notify Zimbra of your installation? [Yes] yes
Notifying Zimbra of installation via http://www.zimbra.com/cgi-bin/notify.cgi?VER=6.0.7_GA_2473_DEBIAN5&MAIL=admin@mail.xyxyxyxy.com

Starting servers…done.
Installing common zimlets…
com_zimbra_bulkprovision…done.
com_zimbra_cert_manager…done.
com_zimbra_url…done.
com_zimbra_dnd…done.
com_zimbra_email…done.
com_zimbra_phone…done.
com_zimbra_date…done.
com_zimbra_ymemoticons…done.
com_zimbra_adminversioncheck…done.
Finished installing common zimlets.
Initializing Documents…done.
Restarting mailboxd…done.
Setting up zimbra crontab…done.

Moving /tmp/zmsetup.08072010-212532.log to /opt/zimbra/log

Configuration complete – press return to exit

mail:/home/gtoms/zcs-6.0.7_GA_2473.DEBIAN5.20100616212143# netstat -nltup
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 192.168.1.82:389 0.0.0.0:* LISTEN 14874/slapd
tcp 0 0 127.0.0.1:10663 0.0.0.0:* LISTEN 32738/zmlogger: zmr
tcp 0 0 127.0.0.1:10024 0.0.0.0:* LISTEN 29095/amavisd (mast
tcp 0 0 127.0.0.1:10025 0.0.0.0:* LISTEN 2605/smtpd
tcp 0 0 127.0.0.1:7306 0.0.0.0:* LISTEN 23995/mysqld
tcp 0 0 0.0.0.0:587 0.0.0.0:* LISTEN 30883/master
tcp 0 0 0.0.0.0:11211 0.0.0.0:* LISTEN 29028/memcached
tcp 0 0 0.0.0.0:3310 0.0.0.0:* LISTEN 29193/clamd
tcp 0 0 0.0.0.0:465 0.0.0.0:* LISTEN 30883/master
tcp 0 0 192.168.1.82:53 0.0.0.0:* LISTEN 4499/named
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 4499/named
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1728/sshd
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 30883/master
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 4499/named
tcp6 0 0 :::7072 :::* LISTEN 3657/java
tcp6 0 0 :::7777 :::* LISTEN 3657/java
tcp6 0 0 :::993 :::* LISTEN 3657/java
tcp6 0 0 :::995 :::* LISTEN 3657/java
tcp6 0 0 :::7780 :::* LISTEN 29212/httpd
tcp6 0 0 :::5222 :::* LISTEN 3657/java
tcp6 0 0 :::5223 :::* LISTEN 3657/java
tcp6 0 0 :::7335 :::* LISTEN 3657/java
tcp6 0 0 :::11211 :::* LISTEN 29028/memcached
tcp6 0 0 :::110 :::* LISTEN 3657/java
tcp6 0 0 :::143 :::* LISTEN 3657/java
tcp6 0 0 :::80 :::* LISTEN 3657/java
tcp6 0 0 :::7025 :::* LISTEN 3657/java
tcp6 0 0 :::5269 :::* LISTEN 3657/java
tcp6 0 0 :::53 :::* LISTEN 4499/named
tcp6 0 0 :::22 :::* LISTEN 1728/sshd
tcp6 0 0 ::1:953 :::* LISTEN 4499/named
tcp6 0 0 :::10015 :::* LISTEN 3657/java
tcp6 0 0 :::7071 :::* LISTEN 3657/java
udp 0 0 192.168.1.82:53 0.0.0.0:* 4499/named
udp 0 0 127.0.0.1:53 0.0.0.0:* 4499/named
udp 0 0 0.0.0.0:11211 0.0.0.0:* 29028/memcached
udp6 0 0 :::53 :::* 4499/named
udp6 0 0 :::11211 :::* 29028/memcached
udp6 0 0 :::46184 :::* 3657/java

mail:/home/gtoms/zcs-6.0.7_GA_2473.DEBIAN5.20100616212143# su – zimbra

zimbra@mail:~$ zmcontrol status
Host mail.xyxyxyxy.com
antispam Running
antivirus Running
ldap Running
logger Running
mailbox Running
memcached Running
mta Running
snmp Running
spell Running
stats Running
zimbra@mail:~$

Setting domain dan email account pada Zimbra Admin :

https://mail.xyxyxyxy.com:7071/zimbraAdmin

Create domain : xyxyxyxy.com
Create test email : henry@xyxyxyxy.com

Create SMTP ISP RELAY dalam hal ini kita tambahkan smtp.telkom.net dengan port 25

GLOBAL SETTINGS————————-> MTA

Relay MTA for external delivery : smtp.telkom.net 25

Save.

TESTING

Masuk ke webmail(Zimbra Client) test kirim email dari henry@xyxyxyxy.com ke henry.gultom@gmail.com

mail:/home/gtoms# tail -f /var/log/zimbra.log

Aug 7 22:53:50 mail postfix/smtpd[26569]: connect from mail.xyxyxyxy.com[192.168.1.82]
Aug 7 22:53:50 mail postfix/smtpd[26569]: 8D3A7630D9: client=mail.xyxyxyxy.com[192.168.1.82]
Aug 7 22:53:50 mail postfix/cleanup[26578]: 8D3A7630D9: message-id=<9088725.6.1281196428559.JavaMail.root@mail>

Aug 7 22:53:50 mail postfix/qmgr[30889]: 8D3A7630D9: from=, size=656, nrcpt=1 (queue active)
Aug 7 22:53:50 mail postfix/smtpd[26569]: disconnect from mail.xyxyxyxy.com[192.168.1.82]
Aug 7 22:53:50 mail postfix/postfix-script[26579]: refreshing the Postfix mail system
Aug 7 22:53:50 mail amavis[29642]: (29642-03) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20100807T214639-29642: -> SIZE=656 Received: from mail.xyxyxyxy.com ([127.0.0.1]) by localhost (mail.xyxyxyxy.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for ; Sat, 7 Aug 2010 22:53:50 +0700 (WIT)
Aug 7 22:53:50 mail postfix/master[30883]: reload—version 2.6.6, configuration /opt/zimbra/postfix-2.6.6.2z/conf
Aug 7 22:53:50 mail amavis[29642]: (29642-03) Checking: hiqCsSc4ANXC MYNETS [192.168.1.82] ->
Aug 7 22:53:50 mail postfix/qmgr[26585]: 8D3A7630D9: skipped, still being delivered
Aug 7 22:53:51 mail postfix/smtpd[26589]: connect from localhost[127.0.0.1]
Aug 7 22:53:51 mail postfix/smtpd[26589]: 77726630DA: client=localhost[127.0.0.1]
Aug 7 22:53:51 mail postfix/cleanup[26593]: 77726630DA: message-id=<9088725.6.1281196428559.JavaMail.root@mail>

Aug 7 22:53:51 mail postfix/qmgr[26585]: 77726630DA: from=, size=1125, nrcpt=1 (queue active)
Aug 7 22:53:51 mail postfix/smtpd[26589]: disconnect from localhost[127.0.0.1]
Aug 7 22:53:51 mail amavis[29642]: (29642-03) FWD via SMTP: -> ,BODY=7BIT 250 2.0.0 Ok, id=29642-03, from MTA: 250 2.0.0 Ok: queued as 77726630DA
Aug 7 22:53:51 mail amavis[29642]: (29642-03) Passed CLEAN, MYNETS LOCAL [192.168.1.82] [192.168.1.82] -> , Message-ID: <9088725.6.1281196428559.JavaMail.root@mail>, mail_id: hiqCsSc4ANXC, Hits: -2.91, size: 656, queued_as: 77726630DA, 839 ms
Aug 7 22:53:51 mail postfix/smtp[26580]: 8D3A7630D9: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=0.96, delays=0.03/0.08/0.01/0.84, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=29642-03, from MTA: 250 2.0.0 Ok: queued as 77726630DA)
Aug 7 22:54:06 mail zmmailboxdmgr[26839]: status requested
Aug 7 22:54:06 mail zmmailboxdmgr[26839]: status OK
Aug 7 22:55:13 mail zmmailboxdmgr[27722]: status requested
Aug 7 22:55:13 mail zmmailboxdmgr[27722]: status OK
Aug 7 22:55:13 mail zmmailboxdmgr[27780]: status requested
Aug 7 22:55:13 mail zmmailboxdmgr[27780]: status OK
Aug 7 22:55:39 mail postfix/smtpd[27817]: connect from smtpf1.telkom.net[125.160.6.252]
Aug 7 22:55:39 mail postfix/smtpd[27817]: 9D245630DB: client=smtpf1.telkom.net[125.160.6.252]
Aug 7 22:55:39 mail postfix/smtpd[27817]: disconnect from smtpf1.telkom.net[125.160.6.252]
Aug 7 22:55:49 mail postfix/smtp[26595]: 77726630DA: to=, relay=smtp.telkom.net[125.160.6.252]:25, delay=118, delays=0.04/0.04/0.21/118, dsn=2.0.0, status=sent (250 OK id=1OhlkV-0003l6-5N)

Full Header :

Delivered-To: henry.gultom@gmail.com
Received: by 10.229.5.196 with SMTP id 4cs20491qcw;
Sat, 7 Aug 2010 08:55:53 -0700 (PDT)
Received: by 10.142.88.7 with SMTP id l7mr4464107wfb.296.1281196552756;
Sat, 07 Aug 2010 08:55:52 -0700 (PDT)
Return-Path:
Received: from smtp.gate.s9d3.telkom.net (smtp.gate.s9d3.telkom.net [125.160.6.250])
by mx.google.com with ESMTP id k11si6755198wfa.149.2010.08.07.08.55.52;
Sat, 07 Aug 2010 08:55:52 -0700 (PDT)
Received-SPF: neutral (google.com: 125.160.6.250 is neither permitted nor denied by best guess record for domain of henry@xyxyxyxy.com) client-ip=125.160.6.250;
Authentication-Results: mx.google.com; spf=neutral (google.com: 125.160.6.250 is neither permitted nor denied by best guess record for domain of henry@xyxyxyxy.com) smtp.mail=henry@xyxyxyxy.com
Received: from [125.160.6.252] (helo=smtpf1.telkom.net)
by server9.gate.telkom.net with esmtps (TLSv1:AES256-SHA:256)
id 1Ohlln-0004E8-PV
for henry.gultom@gmail.com; Sat, 07 Aug 2010 22:57:11 +0700
Received: from [125.166.79.138] (helo=mail.xyxyxyxy.com)
by smtpf1.telkom.net with esmtp id 1OhlkV-0003l6-5N
for henry.gultom@gmail.com; Sat, 07 Aug 2010 22:55:51 +0700
Received: from localhost (localhost [127.0.0.1])
by mail.xyxyxyxy.com (Postfix) with ESMTP id 77726630DA
for ; Sat, 7 Aug 2010 22:53:51 +0700 (WIT)
X-Virus-Scanned: amavisd-new at mail.xyxyxyxy.com
Received: from mail.xyxyxyxy.com ([127.0.0.1])
by localhost (mail.xyxyxyxy.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id hiqCsSc4ANXC for ;
Sat, 7 Aug 2010 22:53:50 +0700 (WIT)
Received: from mail.xyxyxyxy.com (mail.xyxyxyxy.com [192.168.1.82])
by mail.xyxyxyxy.com (Postfix) with ESMTP id 8D3A7630D9
for ; Sat, 7 Aug 2010 22:53:50 +0700 (WIT)
Date: Sat, 7 Aug 2010 22:53:48 +0700 (WIT)
From: Henry Gultom
To: henry gultom
Message-ID: <9088725.6.1281196428559.JavaMail.root@mail>

Subject: test ke gmail
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [192.168.1.75]
X-Mailer: Zimbra 6.0.7_GA_2473.DEBIAN5 (ZimbraWebClient – FF3.0 (Linux)/6.0.7_GA_2473.DEBIAN5)

Test kirim email ke diri sendiri.

Aug 7 22:37:56 mail postfix/smtpd[13049]: connect from mail.xyxyxyxy.com[192.168.1.82]
Aug 7 22:37:56 mail postfix/smtpd[13049]: 56431630D9: client=mail.xyxyxyxy.com[192.168.1.82]
Aug 7 22:37:56 mail postfix/cleanup[13052]: 56431630D9: message-id=<20122356.2.1281195476194.JavaMail.root@mail>

Aug 7 22:37:56 mail postfix/qmgr[30889]: 56431630D9: from=, size=649, nrcpt=1 (queue active)
Aug 7 22:37:56 mail postfix/smtpd[13049]: disconnect from mail.xyxyxyxy.com[192.168.1.82]
Aug 7 22:37:56 mail amavis[29642]: (29642-02) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20100807T214639-29642: -> SIZE=649 Received: from mail.xyxyxyxy.com ([127.0.0.1]) by localhost (mail.xyxyxyxy.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for ; Sat, 7 Aug 2010 22:37:56 +0700 (WIT)
Aug 7 22:37:56 mail amavis[29642]: (29642-02) Checking: C8IHJpnLqab5 MYNETS [192.168.1.82] ->
Aug 7 22:37:56 mail postfix/smtpd[13056]: connect from localhost[127.0.0.1]
Aug 7 22:37:56 mail postfix/smtpd[13056]: C0D20630DA: client=localhost[127.0.0.1]
Aug 7 22:37:56 mail postfix/cleanup[13052]: C0D20630DA: message-id=<20122356.2.1281195476194.JavaMail.root@mail>

Aug 7 22:37:56 mail postfix/qmgr[30889]: C0D20630DA: from=, size=1317, nrcpt=1 (queue active)
Aug 7 22:37:56 mail postfix/smtpd[13056]: disconnect from localhost[127.0.0.1]
Aug 7 22:37:56 mail amavis[29642]: (29642-02) FWD via SMTP: -> ,BODY=7BIT 250 2.0.0 Ok, id=29642-02, from MTA: 250 2.0.0 Ok: queued as C0D20630DA
Aug 7 22:37:56 mail amavis[29642]: (29642-02) Passed CLEAN, MYNETS LOCAL [192.168.1.82] [192.168.1.82] -> , Message-ID: <20122356.2.1281195476194.JavaMail.root@mail>, mail_id: C8IHJpnLqab5, Hits: -2.91, size: 649, queued_as: C0D20630DA, 424 ms
Aug 7 22:37:56 mail postfix/smtp[13053]: 56431630D9: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=0.49, delays=0.02/0.02/0.04/0.4, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=29642-02, from MTA: 250 2.0.0 Ok: queued as C0D20630DA)
Aug 7 22:37:56 mail postfix/qmgr[30889]: 56431630D9: removed
Aug 7 22:37:56 mail postfix/lmtp[13057]: C0D20630DA: to=, relay=mail.xyxyxyxy.com[192.168.1.82]:7025, delay=0.13, delays=0.01/0.05/0/0.06, dsn=2.1.5, status=sent (250 2.1.5 Delivery OK)
Aug 7 22:37:56 mail postfix/qmgr[30889]: C0D20630DA: removed
Aug 7 22:38:06 mail zmmailboxdmgr[13305]: status requested
Aug 7 22:38:06 mail zmmailboxdmgr[13305]: status OK

Testing kirim email ke mailserver lain di IIX.

Aug 7 23:03:56 mail postfix/smtpd[2441]: connect from mail.xyxyxyxy.com[192.168.1.82]
Aug 7 23:03:56 mail postfix/smtpd[2441]: E0248630D9: client=mail.xyxyxyxy.com[192.168.1.82]
Aug 7 23:03:56 mail postfix/cleanup[2444]: E0248630D9: message-id=<21238171.10.1281197036775.JavaMail.root@mail>

Aug 7 23:03:56 mail postfix/qmgr[26585]: E0248630D9: from=, size=726, nrcpt=1 (queue active)
Aug 7 23:03:56 mail postfix/smtpd[2441]: disconnect from mail.xyxyxyxy.com[192.168.1.82]
Aug 7 23:03:56 mail amavis[29666]: (29666-03) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20100807T220654-29666: -> SIZE=726 Received: from mail.xyxyxyxy.com ([127.0.0.1]) by localhost (mail.xyxyxyxy.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for ; Sat, 7 Aug 2010 23:03:56 +0700 (WIT)
Aug 7 23:03:57 mail amavis[29666]: (29666-03) Checking: qEEbYg+S+tpk MYNETS [192.168.1.82] ->
Aug 7 23:03:58 mail postfix/smtpd[2448]: connect from localhost[127.0.0.1]
Aug 7 23:03:58 mail postfix/smtpd[2448]: 0AA72630DA: client=localhost[127.0.0.1]
Aug 7 23:03:58 mail postfix/cleanup[2444]: 0AA72630DA: message-id=<21238171.10.1281197036775.JavaMail.root@mail>

Aug 7 23:03:58 mail postfix/qmgr[26585]: 0AA72630DA: from=, size=1187, nrcpt=1 (queue active)
Aug 7 23:03:58 mail amavis[29666]: (29666-03) FWD via SMTP: -> ,BODY=7BIT 250 2.0.0 Ok, id=29666-03, from MTA: 250 2.0.0 Ok: queued as 0AA72630DA
Aug 7 23:03:58 mail amavis[29666]: (29666-03) Passed CLEAN, MYNETS LOCAL [192.168.1.82] [192.168.1.82] -> , Message-ID: <21238171.10.1281197036775.JavaMail.root@mail>, mail_id: qEEbYg+S+tpk, Hits: -2.91, size: 726, queued_as: 0AA72630DA, 1130 ms
Aug 7 23:03:58 mail postfix/smtp[2445]: E0248630D9: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=1.2, delays=0.02/0.02/0.01/1.1, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=29666-03, from MTA: 250 2.0.0 Ok: queued as 0AA72630DA)
Aug 7 23:03:58 mail postfix/qmgr[26585]: E0248630D9: removed
Aug 7 23:03:58 mail postfix/smtpd[2448]: disconnect from localhost[127.0.0.1]
Aug 7 23:04:06 mail zmmailboxdmgr[2693]: status requested
Aug 7 23:04:06 mail zmmailboxdmgr[2693]: status OK
Aug 7 23:04:58 mail postfix/smtpd[2441]: connect from smtpf2.telkom.net[125.160.17.195]
Aug 7 23:04:58 mail postfix/smtpd[2441]: 8CB94630D9: client=smtpf2.telkom.net[125.160.17.195]
Aug 7 23:04:58 mail postfix/smtpd[2441]: disconnect from smtpf2.telkom.net[125.160.17.195]
Aug 7 23:05:02 mail zmmailboxdmgr[3578]: status requested
Aug 7 23:05:02 mail zmmailboxdmgr[3578]: status OK
Aug 7 23:05:03 mail zmmailboxdmgr[3636]: status requested
Aug 7 23:05:03 mail zmmailboxdmgr[3636]: status OK
Aug 7 23:05:08 mail postfix/smtp[2449]: 0AA72630DA: to=, relay=smtp.telkom.net[125.160.17.195]:25, delay=71, delays=0.01/0.04/0.08/71, dsn=2.0.0, status=sent (250 OK id=1OhltW-0002MP-6E)
Aug 7 23:05:08 mail postfix/qmgr[26585]: 0AA72630DA: removed

Testing menggunakan mailclient Thunderbird

Aug 8 09:19:23 mail postfix/smtpd[14558]: connect from smtp.gate.s7d2.telkom.net[222.124.18.141]
Aug 8 09:19:23 mail postfix/smtpd[14558]: setting up TLS connection from smtp.gate.s7d2.telkom.net[222.124.18.141]
Aug 8 09:19:23 mail postfix/smtpd[14558]: Anonymous TLS connection established from smtp.gate.s7d2.telkom.net[222.124.18.141]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
Aug 8 09:19:23 mail postfix/smtpd[14558]: 50335630DB: client=smtp.gate.s7d2.telkom.net[222.124.18.141]
Aug 8 09:19:23 mail postfix/cleanup[14574]: 50335630DB: message-id=<4C5E1406.4000907@gtoms.com>
Aug 8 09:19:23 mail postfix/qmgr[26585]: 50335630DB: from=, size=1190, nrcpt=1 (queue active)
Aug 8 09:19:23 mail amavis[29666]: (29666-08) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20100807T220654-29666: -> SIZE=1190 Received: from mail.xyxyxyxy.com ([127.0.0.1]) by localhost (mail.xyxyxyxy.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for ; Sun, 8 Aug 2010 09:19:23 +0700 (WIT)
Aug 8 09:19:23 mail amavis[29666]: (29666-08) Checking: ELrz8StLvhgS [222.124.18.141] ->
Aug 8 09:19:23 mail postfix/smtpd[14558]: disconnect from smtp.gate.s7d2.telkom.net[222.124.18.141]
Aug 8 09:19:24 mail postfix/smtpd[14808]: connect from localhost[127.0.0.1]
Aug 8 09:19:24 mail postfix/smtpd[14808]: A008C630DC: client=localhost[127.0.0.1]
Aug 8 09:19:24 mail postfix/cleanup[14574]: A008C630DC: message-id=<4C5E1406.4000907@gtoms.com>
Aug 8 09:19:24 mail postfix/qmgr[26585]: A008C630DC: from=, size=1819, nrcpt=1 (queue active)
Aug 8 09:19:24 mail postfix/smtpd[14808]: disconnect from localhost[127.0.0.1]
Aug 8 09:19:24 mail amavis[29666]: (29666-08) FWD via SMTP: -> ,BODY=7BIT 250 2.0.0 Ok, id=29666-08, from MTA: 250 2.0.0 Ok: queued as A008C630DC
Aug 8 09:19:24 mail amavis[29666]: (29666-08) Passed CLEAN, [222.124.18.141] [125.160.17.195] -> , Message-ID: <4C5E1406.4000907@gtoms.com>, mail_id: ELrz8StLvhgS, Hits: -0.001, size: 1190, queued_as: A008C630DC, 1279 ms
Aug 8 09:19:24 mail postfix/smtp[14805]: 50335630DB: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=1.4, delays=0.07/0.02/0.01/1.3, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=29666-08, from MTA: 250 2.0.0 Ok: queued as A008C630DC)
Aug 8 09:19:24 mail postfix/qmgr[26585]: 50335630DB: removed
Aug 8 09:19:24 mail postfix/lmtp[14809]: A008C630DC: to=, relay=mail.xyxyxyxy.com[192.168.1.82]:7025, delay=0.12, delays=0.01/0.04/0/0.07, dsn=2.1.5, status=sent (250 2.1.5 Delivery OK)
Aug 8 09:19:24 mail postfix/qmgr[26585]: A008C630DC: removed

Selesai sudah proses membuat mailserver kantor dengan zimbra dan internet speedy. Tinggal menambahkan user-user email karyawan perusahaan ini, setting di masing-masing mail client komputer desktop user, tunning zimbra dan antispam,set firewall.

backup mysql binary logs

gtoms — Wed, 04 Aug 2010 15:24:56 +0000

Saya paling suka membackup hehe…mau delete log files lama juga sayang kan, mana tau suatu saat di minta polisi mencari jejak kan tinggal kasih. Untuk keperluan membackup mysql binary logs diperlukan bash script dan saya modifikasi dari http://forge.mysql.com/tools/tool.php?id=73

backup_user=binlog
backup_password=password
backup_port=3306
backup_host=localhost
log_file=/var/log/binlog_backup.log
binlog_dir=/san/mysql-us/mysqllogs
backup_dir=/home/gtoms/mysql_binlog_backup/

PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin
export PATH

Log()
{

echo “`date` : $*” >> $log_file
}

mysql_options()
{

common_opts=”—user=$backup_user—password=$backup_password”
if [ “$backup_host” != “localhost” ]; then
common_opts=”$common_opts—host=$backup_host—port=$backup_port”
fi
}

mysql_command()
{

mysql $common_opts—batch—skip-column-names $1 -e “$2”
}

Log “[INIT] Starting MySQL binlog backup”

Log “Flushing MySQL binary logs (FLUSH LOGS)”

mysql_command mysql “flush logs”

master_binlog=`mysql_command mysql “show master status” 2>/dev/null | cut -f1`

Log “Current binary log is: $master_binlog”

copy_status=0

for b in `mysql_command mysql “show master logs” | cut -f1`
do
if [ -z $first_log ]; then
first_log=$b
fi
if [ $b != $master_binlog ]; then
Log “Copying binary log ${b} to ${backup_dir}”
rsync -a $binlog_dir/$b $backup_dir >& /dev/null
if [ $? -ne 0 ]; then
copy_status=1
break
fi
else
break
fi
done

if [ $copy_status -eq 1 ]; then
Log “[ERR] Failed to copy binary logs cleanly…aborting”
exit 1
fi

Server Management & Source Control dengan Puppet

gtoms — Sat, 24 Jul 2010 10:53:28 +0000

Seminggu lalu aku mulai menekuni Puppet, dan ingin menjadi Puppet Master. Puppet adalah pahlawan bagi system admin, friendly tools, and my best friend. Puppet merupakan software open source yang dapat berjalan pada cross platform baik unix,linux,windows,mac,sun solaris. Puppet merupakan open source data center automation and configuration management framework. Jika saya mempunyai ratusan server di data centre atau ratusan pc desktop, kita cukup mengontrol semuanya dengan puppet. Anda bisa mengatur perubahan system,konfigurasi,troubleshoot,maintain,deploy dari satu titik menggunakan puppet. Puppet digunakan juga oleh Twiter, Sun Microsystems, Google Office,dsb. Pada Sun Microsystems mereka menggunakan puppet untuk 650 Sun servers di seluruh U.S. data centers yaitu Menlo Park, CA, San Francisco, CA dan Las Vegas, NV. dan bertanggung jawab juga untuk konfigurasi software dan operating system server termasuk Internet domains pada sun.com, java.com, mysql.com, openoffice.org

Saya memakai puppet untuk konfigurasi beberapa server di data centre IIX, dan sebelum ke server produksi saya habiskan berjam-jam untuk mencoba pada test server saya. Berikut instalasi dan konfigurasi basic saya dalam memulai berkenalan dengan puppet :

Test Server :

Fedora 13 : puppet-master.gtoms.lab (192.168.1.75)
Ubuntu 10.4 : puppet-client.gtoms.lab (192.168.1.71)

INSTALL PUPPET MASTER :

[root@gtoms gtoms]# uname -a
Linux gtoms.lab 2.6.33.5-124.fc13.i686 #1 SMP Fri Jun 11 09:48:40 UTC 2010 i686 i686 i386 GNU/Linux

127.0.0.1       gtoms.lab       localhost.localdomain   localhost
192.168.1.75    puppet-master.gtoms.lab puppet-master
192.168.1.75    puppet.gtoms.lab puppet
::1             localhost6.localdomain6 localhost6

[root@gtoms gtoms]# yum install puppet-server
Loaded plugins: presto, refresh-packagekit
Setting up Install Process
Resolving Dependencies—> Running transaction check—-> Package puppet-server.noarch 0:0.25.5-1.fc13 set to be updated—> Processing Dependency: puppet = 0.25.5-1.fc13 for package: puppet-server-0.25.5-1.fc13.noarch—> Processing Dependency: /usr/bin/ruby for package: puppet-server-0.25.5-1.fc13.noarch—> Running transaction check—-> Package puppet.noarch 0:0.25.5-1.fc13 set to be updated—> Processing Dependency: ruby(abi) = 1.8 for package: puppet-0.25.5-1.fc13.noarch—> Processing Dependency: facter >= 1.5 for package: puppet-0.25.5-1.fc13.noarch—> Processing Dependency: ruby-shadow for package: puppet-0.25.5-1.fc13.noarch—> Processing Dependency: ruby-augeas for package: puppet-0.25.5-1.fc13.noarch—> Processing Dependency: ruby(selinux) for package: puppet-0.25.5-1.fc13.noarch—-> Package ruby.i686 0:1.8.6.399-5.fc13 set to be updated—> Running transaction check—-> Package facter.noarch 0:1.5.7-1.fc12 set to be updated—-> Package libselinux-ruby.i686 0:2.0.90-5.fc13 set to be updated—-> Package ruby-augeas.i686 0:0.3.0-1.fc12 set to be updated—> Processing Dependency: augeas-libs >= 0.5.1 for package: ruby-augeas-0.3.0-1.fc12.i686—> Processing Dependency: libaugeas.so.0(AUGEAS_0.8.0) for package: ruby-augeas-0.3.0-1.fc12.i686—> Processing Dependency: libaugeas.so.0(AUGEAS_0.1.0) for package: ruby-augeas-0.3.0-1.fc12.i686—> Processing Dependency: libaugeas.so.0 for package: ruby-augeas-0.3.0-1.fc12.i686—-> Package ruby-libs.i686 0:1.8.6.399-5.fc13 set to be updated—> Processing Dependency: libreadline.so.5 for package: ruby-libs-1.8.6.399-5.fc13.i686—-> Package ruby-shadow.i686 0:1.4.1-13.fc12 set to be updated—> Running transaction check—-> Package augeas-libs.i686 0:0.7.1-1.fc13 set to be updated—-> Package compat-readline5.i686 0:5.2-17.fc12 set to be updated—> Finished Dependency Resolution

Dependencies Resolved

====================================================================
Package                                   Arch                            Version                                    Repository                        Size
====================================================================
Installing:
puppet-server                             noarch                          0.25.5-1.fc13                              updates                           22 k
Installing for dependencies:
augeas-libs                               i686                            0.7.1-1.fc13                               updates                          249 k
compat-readline5                          i686                            5.2-17.fc12                                fedora                           121 k
facter                                    noarch                          1.5.7-1.fc12                               fedora                            49 k
libselinux-ruby                           i686                            2.0.90-5.fc13                              fedora                            95 k
puppet                                    noarch                          0.25.5-1.fc13                              updates                          758 k
ruby                                      i686                            1.8.6.399-5.fc13                           updates                          488 k
ruby-augeas                               i686                            0.3.0-1.fc12                               fedora                            19 k
ruby-libs                                 i686                            1.8.6.399-5.fc13                           updates                          1.6 M
ruby-shadow                               i686                            1.4.1-13.fc12                              fedora                            11 k

Transaction Summary
====================================================================
Install 10 Package(s)
Upgrade 0 Package(s)

Total download size: 3.3 M
Installed size: 11 M
Is this ok [y/N]: y
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 3.3 M
(1/10): augeas-libs-0.7.1-1.fc13.i686.rpm                                                                                             | 249 kB     00:10
(2/10): compat-readline5-5.2-17.fc12.i686.rpm                                                                                         | 121 kB     00:04
(3/10): facter-1.5.7-1.fc12.noarch.rpm                                                                                                | 49 kB     00:00
(4/10): libselinux-ruby-2.0.90-5.fc13.i686.rpm                                                                                        | 95 kB     00:01
(5/10): puppet-0.25.5-1.fc13.noarch.rpm                                                                                               | 758 kB     00:10
(6/10): puppet-server-0.25.5-1.fc13.noarch.rpm                                                                                        | 22 kB     00:00
(7/10): ruby-1.8.6.399-5.fc13.i686.rpm                                                                                                | 488 kB     00:05
(8/10): ruby-augeas-0.3.0-1.fc12.i686.rpm                                                                                             | 19 kB     00:00
(9/10): ruby-libs-1.8.6.399-5.fc13.i686.rpm                                                                                           | 1.6 MB     00:19
(10/10): ruby-shadow-1.4.1-13.fc12.i686.rpm                                                                                           | 11 kB     00:00—————————————————————————————————————————————————————————————————————————Total                                                                                                                         58 kB/s | 3.3 MB     00:59
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing     : augeas-libs-0.7.1-1.fc13.i686                                                                                                        1/10
Installing     : compat-readline5-5.2-17.fc12.i686                                                                                                    2/10
Installing     : ruby-libs-1.8.6.399-5.fc13.i686                                                                                                      3/10
Installing     : ruby-1.8.6.399-5.fc13.i686                                                                                                           4/10
Installing     : ruby-shadow-1.4.1-13.fc12.i686                                                                                                       5/10
Installing     : ruby-augeas-0.3.0-1.fc12.i686                                                                                                        6/10
Installing     : libselinux-ruby-2.0.90-5.fc13.i686                                                                                                   7/10
Installing     : facter-1.5.7-1.fc12.noarch                                                                                                           8/10
Installing     : puppet-0.25.5-1.fc13.noarch                                                                                                          9/10
Installing     : puppet-server-0.25.5-1.fc13.noarch                                                                                                  10/10

Installed:
puppet-server.noarch 0:0.25.5-1.fc13

Dependency Installed:
augeas-libs.i686 0:0.7.1-1.fc13 compat-readline5.i686 0:5.2-17.fc12 facter.noarch 0:1.5.7-1.fc12 libselinux-ruby.i686 0:2.0.90-5.fc13
puppet.noarch 0:0.25.5-1.fc13 ruby.i686 0:1.8.6.399-5.fc13 ruby-augeas.i686 0:0.3.0-1.fc12 ruby-libs.i686 0:1.8.6.399-5.fc13
ruby-shadow.i686 0:1.4.1-13.fc12

Complete!
[root@gtoms gtoms]#

[root@gtoms puppet]# yum install ruby-rdoc
Loaded plugins: presto, refresh-packagekit
adobe-linux-i386                                                                                                                      | 951 B     00:00
livna                                                                                                                                 | 3.2 kB     00:00
rpmfusion-free-updates                                                                                                                | 2.8 kB     00:00
updates/metalink                                                                                                                      | 9.2 kB     00:00
Setting up Install Process
Resolving Dependencies—> Running transaction check—-> Package ruby-rdoc.i686 0:1.8.6.399-5.fc13 set to be updated—> Processing Dependency: ruby-irb = 1.8.6.399-5.fc13 for package: ruby-rdoc-1.8.6.399-5.fc13.i686—> Running transaction check—-> Package ruby-irb.i686 0:1.8.6.399-5.fc13 set to be updated—> Finished Dependency Resolution

Dependencies Resolved

================================================================
Package                              Arch                            Version                                       Repository                          Size
==================================================================
Installing:
ruby-rdoc                            i686                            1.8.6.399-5.fc13                              updates                            336 k
Installing for dependencies:
ruby-irb                             i686                            1.8.6.399-5.fc13                              updates                            272 k

Transaction Summary
=================================================================
Install 2 Package(s)
Upgrade 0 Package(s)

Total download size: 608 k
Installed size: 2.1 M
Is this ok [y/N]: y
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 608 k
(1/2): ruby-irb-1.8.6.399-5.fc13.i686.rpm                                                                                        | 272 kB     00:02
(2/2): ruby-rdoc-1.8.6.399-5.fc13.i686.rpm                                                                                     | 336 kB     00:02————————————————————————————————————————————————————————————————————————————-
Total                                                                                                                        102 kB/s | 608 kB     00:05
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing     : ruby-irb-1.8.6.399-5.fc13.i686                                                                                            1/2
Installing     : ruby-rdoc-1.8.6.399-5.fc13.i686                                                                                         2/2

Installed:
ruby-rdoc.i686 0:1.8.6.399-5.fc13

Dependency Installed:
ruby-irb.i686 0:1.8.6.399-5.fc13

Complete!
[root@gtoms puppet]#

[root@gtoms gtoms]# cd /etc/puppet/

[root@gtoms puppet]# ll
total 16
rwr—r—1 root root 2346 May 8 19:31 auth.conf
rwr—r—1 root root 381 Apr 17 17:05 fileserver.conf
drwxr-xr-x 2 root root 4096 May 20 20:50 manifests
rwr—r—1 root root 855 May 17 11:10 puppet.conf
[root@gtoms puppet]#

[root@gtoms puppet]# nano fileserver.conf
[files]
path /var/lib/puppet/files
allow *.gtoms.lab
allow 192.168.1.0/24

[root@gtoms puppet]# cd manifests/

[root@gtoms manifests]# nano site.pp

#tampilkan pesan banner motd
file { “/etc/motd”:
source => “puppet:///files/motd/banner”,
}

atur permissions pada sudo
class sudo {
file { “/etc/sudoers”:
owner => root,
group => root,
mode => 440,
}

}

node default {
include sudo
}

[root@gtoms manifests]# nano /var/lib/puppet/files/motd/banner
NOTICE TO USERS

This is a GTOMS LAB computer (and/or it is directly connected to a GTOMS local network system) that is the property of GTOMS.COM. It is for authorized use o$

Any or all uses of this system and all files on this system may be intercepted, monitored, recorded, copied, audited, inspected, and disclosed to authorized$
system, the user consents to such interception, monitoring, recording, copying, auditing, inspection, and disclosure at the discretion of authorized
site or GTOMS security personnel.

Unauthorized or improper use of this system may result in administrative disciplinary action and civil and criminal penalties. By continuing to use this sys$
you do not agree to the conditions stated in this warning.

[root@gtoms puppet]# nano puppet.conf

[main]

The Puppet log directory.
The default value is ‘$vardir/log’.
logdir = /var/log/puppet

Where Puppet PID files are kept.
The default value is ‘$vardir/run’.
rundir = /var/run/puppet

Where SSL certificates are kept.
The default value is ‘$confdir/ssl’.
ssldir = $vardir/ssl

[puppetd]
server = puppet-master.gtoms.lab

The file in which puppetd stores a list of the classes
associated with the retrieved configuratiion. Can be loaded in
the separate ``puppet`` executable using the ``—loadclasses``
option.
The default value is ‘$confdir/classes.txt’.
classfile = $vardir/classes.txt

Where puppetd caches the local configuration. An
extension indicating the cache format is added automatically.
The default value is ‘$confdir/localconfig’.
localconfig = $vardir/localconfig

[root@gtoms puppet]# service puppetmaster start
Starting puppetmaster: [ OK ]

[root@gtoms puppet]# chkconfig puppetmaster on

[root@gtoms puppet]# ps axf |grep puppet
10702 pts/0 S+ 0:00 _ grep puppet
10691 ? Ss 0:00 /usr/bin/ruby /usr/sbin/puppetmasterd

[root@gtoms puppet]# puppetca—list
puppet-client.gtoms.lab
[root@gtoms puppet]#

[root@gtoms puppet]# puppetca—list—all
+ gtoms.lab
+ puppet-client.gtoms.lab
[root@gtoms puppet]# puppetca—version
0.25.5
[root@gtoms puppet]#

[root@gtoms puppet]# /etc/init.d/puppetmaster restart
Stopping puppetmaster: [ OK ]
Starting puppetmaster: ^[[A [ OK ]
[root@gtoms puppet]# tail -f /var/log/messages
Jun 27 23:52:04 gtoms puppetd[13173]: Could not retrieve catalog from remote server: Connection refused – connect(2)
Jun 27 23:52:04 gtoms puppetd[13173]: Using cached catalog
Jun 27 23:52:04 gtoms puppetd[13173]: Could not retrieve catalog; skipping run
Jun 27 23:52:53 gtoms puppetmasterd[13351]: Reopening log files
Jun 27 23:52:53 gtoms puppetmasterd[13351]: Starting Puppet server version 0.25.5
Jun 27 23:53:12 gtoms puppetd[13173]: Caught TERM; calling stop
Jun 27 23:54:37 gtoms puppetmasterd[13351]: Reparsing /etc/puppet/puppet.conf
Jun 27 23:54:49 gtoms puppetmasterd[13351]: Caught TERM; calling stop
Jun 27 23:54:49 gtoms puppetmasterd[13525]: Reopening log files
Jun 27 23:54:49 gtoms puppetmasterd[13525]: Starting Puppet server version 0.25.5
Jun 27 23:54:52 gtoms puppetmasterd[13525]: puppet-client.gtoms.lab has a waiting certificate request
^C
[root@gtoms puppet]# puppetca—sign puppet-client.gtoms.lab
puppet-client.gtoms.lab
notice: Signed certificate request for puppet-client.gtoms.lab
notice: Removing file Puppet::SSL::CertificateRequest puppet-client.gtoms.lab at ‘/var/lib/puppet/ssl/ca/requests/puppet-client.gtoms.lab.pem’

INSTALL PUPPET CLIENT :

root@puppet-client:/home/gtoms# uname -a
Linux puppet-client 2.6.32-21-generic #32-Ubuntu SMP Fri Apr 16 08:10:02 UTC 2010 i686 GNU/Linux
root@puppet-client:/home/gtoms#

root@puppet-client:/home/gtoms# nano /etc/hosts
127.0.0.1      localhost
127.0.1.1      puppet-client.gtoms.lab   puppet-client
192.168.1.71   puppet-client.gtoms.lab   puppet-client
192.168.1.75   puppet.gtoms.lab    puppet

root@puppet-client:/home/gtoms# apt-get install puppet
Reading package lists… Done
Building dependency tree
Reading state information… Done
The following extra packages will be installed:
augeas-lenses facter irb1.8 libaugeas-ruby1.8 libaugeas0 libopenssl-ruby libopenssl-ruby1.8 libreadline-ruby1.8 libreadline5 libruby libruby1.8
libshadow-ruby1.8 libxmlrpc-ruby puppet-common rdoc rdoc1.8 ruby ruby1.8
Suggested packages:
augeas-tools puppet-el vim-puppet etckeeper graphviz ruby1.8-examples ri1.8
The following NEW packages will be installed:
augeas-lenses facter irb1.8 libaugeas-ruby1.8 libaugeas0 libopenssl-ruby libopenssl-ruby1.8 libreadline-ruby1.8 libreadline5 libruby libruby1.8
libshadow-ruby1.8 libxmlrpc-ruby puppet puppet-common rdoc rdoc1.8 ruby ruby1.8
0 upgraded, 19 newly installed, 0 to remove and 2 not upgraded.
Need to get 3,164kB of archives.
After this operation, 14.5MB of additional disk space will be used.
Do you want to continue [Y/n]? y
Get:1 http://id.archive.ubuntu.com/ubuntu/ lucid/main augeas-lenses 0.7.0-1ubuntu1 [102kB]
Get:2 http://id.archive.ubuntu.com/ubuntu/ lucid/main libruby1.8 1.8.7.249-2 [1,452kB]
Get:3 http://id.archive.ubuntu.com/ubuntu/ lucid/main ruby1.8 1.8.7.249-2 [24.1kB]
Get:4 http://id.archive.ubuntu.com/ubuntu/ lucid/main ruby 4.2 [20.7kB]
Get:5 http://id.archive.ubuntu.com/ubuntu/ lucid/main libopenssl-ruby1.8 1.8.7.249-2 [122kB]
Get:6 http://id.archive.ubuntu.com/ubuntu/ lucid/main facter 1.5.6-2ubuntu2 [33.8kB]
Get:7 http://id.archive.ubuntu.com/ubuntu/ lucid/main libreadline5 5.2-7build1 [132kB]
Get:8 http://id.archive.ubuntu.com/ubuntu/ lucid/main libreadline-ruby1.8 1.8.7.249-2 [10.4kB]
Get:9 http://id.archive.ubuntu.com/ubuntu/ lucid/main irb1.8 1.8.7.249-2 [80.3kB]
Get:10 http://id.archive.ubuntu.com/ubuntu/ lucid/main libaugeas0 0.7.0-1ubuntu1 [155kB]
Get:11 http://id.archive.ubuntu.com/ubuntu/ lucid/main libaugeas-ruby1.8 0.2.0-2ubuntu3 [6,564B]
Get:12 http://id.archive.ubuntu.com/ubuntu/ lucid/main libopenssl-ruby 4.2 [5,008B]
Get:13 http://id.archive.ubuntu.com/ubuntu/ lucid/main libruby 4.2 [5,280B]
Get:14 http://id.archive.ubuntu.com/ubuntu/ lucid/main libshadow-ruby1.8 1.4.1-8build1 [8,828B]
Get:15 http://id.archive.ubuntu.com/ubuntu/ lucid/main libxmlrpc-ruby 4.2 [2,344B]
Get:16 http://id.archive.ubuntu.com/ubuntu/ lucid/main puppet-common 0.25.4-2ubuntu6 [679kB]
Get:17 http://id.archive.ubuntu.com/ubuntu/ lucid/main puppet 0.25.4-2ubuntu6 [194kB]
Get:18 http://id.archive.ubuntu.com/ubuntu/ lucid/main rdoc1.8 1.8.7.249-2 [125kB]
Get:19 http://id.archive.ubuntu.com/ubuntu/ lucid/main rdoc 4.2 [5,326B]
Fetched 3,164kB in 31s (100kB/s)
Selecting previously deselected package augeas-lenses.
(Reading database … 24132 files and directories currently installed.)
Unpacking augeas-lenses (from …/augeas-lenses_0.7.0-1ubuntu1_all.deb) ...
Selecting previously deselected package libruby1.8.
Unpacking libruby1.8 (from …/libruby1.8_1.8.7.249-2_i386.deb) ...
Selecting previously deselected package ruby1.8.
Unpacking ruby1.8 (from …/ruby1.8_1.8.7.249-2_i386.deb) ...
Selecting previously deselected package ruby.
Unpacking ruby (from …/apt/archives/ruby_4.2_all.deb) ...
Selecting previously deselected package libopenssl-ruby1.8.
Unpacking libopenssl-ruby1.8 (from …/libopenssl-ruby1.8_1.8.7.249-2_i386.deb) ...
Selecting previously deselected package facter.
Unpacking facter (from …/facter_1.5.6-2ubuntu2_all.deb) ...
Selecting previously deselected package libreadline5.
Unpacking libreadline5 (from …/libreadline5_5.2-7build1_i386.deb) ...
Selecting previously deselected package libreadline-ruby1.8.
Unpacking libreadline-ruby1.8 (from …/libreadline-ruby1.8_1.8.7.249-2_i386.deb) ...
Selecting previously deselected package irb1.8.
Unpacking irb1.8 (from …/irb1.8_1.8.7.249-2_all.deb) ...
Selecting previously deselected package libaugeas0.
Unpacking libaugeas0 (from …/libaugeas0_0.7.0-1ubuntu1_i386.deb) ...
Selecting previously deselected package libaugeas-ruby1.8.
Unpacking libaugeas-ruby1.8 (from …/libaugeas-ruby1.8_0.2.0-2ubuntu3_i386.deb) ...
Selecting previously deselected package libopenssl-ruby.
Unpacking libopenssl-ruby (from …/libopenssl-ruby_4.2_all.deb) ...
Selecting previously deselected package libruby.
Unpacking libruby (from …/archives/libruby_4.2_all.deb) ...
Selecting previously deselected package libshadow-ruby1.8.
Unpacking libshadow-ruby1.8 (from …/libshadow-ruby1.8_1.4.1-8build1_i386.deb) ...
Selecting previously deselected package libxmlrpc-ruby.
Unpacking libxmlrpc-ruby (from …/libxmlrpc-ruby_4.2_all.deb) ...
Selecting previously deselected package puppet-common.
Unpacking puppet-common (from …/puppet-common_0.25.4-2ubuntu6_all.deb) ...
Selecting previously deselected package puppet.
Unpacking puppet (from …/puppet_0.25.4-2ubuntu6_all.deb) ...
Selecting previously deselected package rdoc1.8.
Unpacking rdoc1.8 (from …/rdoc1.8_1.8.7.249-2_all.deb) ...
Selecting previously deselected package rdoc.
Unpacking rdoc (from …/apt/archives/rdoc_4.2_all.deb) ...
Processing triggers for man-db …
Processing triggers for ureadahead …
Setting up augeas-lenses (0.7.0-1ubuntu1) ...
Setting up libruby1.8 (1.8.7.249-2) ...

Setting up ruby1.8 (1.8.7.249-2) ...
Setting up ruby (4.2) ...
Setting up libopenssl-ruby1.8 (1.8.7.249-2) ...
Setting up facter (1.5.6-2ubuntu2) ...
Setting up libreadline5 (5.2-7build1) ...

Setting up libreadline-ruby1.8 (1.8.7.249-2) ...
Setting up irb1.8 (1.8.7.249-2) ...

Setting up libaugeas0 (0.7.0-1ubuntu1) ...

Setting up libaugeas-ruby1.8 (0.2.0-2ubuntu3) ...
Setting up libopenssl-ruby (4.2) ...
Setting up libruby (4.2) ...
Setting up libshadow-ruby1.8 (1.4.1-8build1) ...
Setting up libxmlrpc-ruby (4.2) ...
Setting up puppet-common (0.25.4-2ubuntu6) ...
adduser: Warning: The home directory `/var/lib/puppet’ does not belong to the user you are currently creating.

Setting up puppet (0.25.4-2ubuntu6) ...

Starting puppet configuration management tool
puppet not configured to start, please edit /etc/default/puppet to enable
[ OK ]

Setting up rdoc1.8 (1.8.7.249-2) ...
Setting up rdoc (4.2) ...
Processing triggers for libc-bin …
ldconfig deferred processing now taking place
root@puppet-client:/home/gtoms#

root@puppet-client:/home/gtoms# cd /etc/puppet
root@puppet-client:/etc/puppet# ll
total 28
drwxr-xr-x 4 root root 4096 2010-06-27 21:19 ./
drwxr-xr-x 81 root root 4096 2010-06-27 21:19 ../
~~rwxr~~xr-x 1 root root 245 2010-04-14 05:43 etckeeper-commit-post*
~~rwxr~~xr-x 1 root root 256 2010-04-14 05:43 etckeeper-commit-pre*
drwxr-xr-x 2 root root 4096 2010-04-14 05:44 manifests/
rwr—r— 1 root root 276 2010-04-14 05:43 puppet.conf
drwxr-xr-x 2 root root 4096 2010-04-14 05:44 templates/
root@puppet-client:/etc/puppet#

root@puppet-client:/etc/puppet# nano puppet.conf
[main]
server = puppet-master.gtoms.lab
logdir=/var/log/puppet
vardir=/var/lib/puppet
ssldir=/var/lib/puppet/ssl
rundir=/var/run/puppet
factpath=$vardir/lib/facter
pluginsync=true
templatedir=$confdir/templates
prerun_command=/etc/puppet/etckeeper-commit-pre
postrun_command=/etc/puppet/etckeeper-commit-post

root@puppet-client:/etc/puppet# nano /etc/default/puppet

Defaults for puppet – sourced by /etc/init.d/puppet

Start puppet on boot?
START=yes

Startup options
DAEMON_OPTS=””

root@puppet-client:/etc/puppet# /etc/init.d/puppet restart

Restarting puppet configuration management tool [ OK ]
root@puppet-client:/etc/puppet#

root@puppet-client:/etc/puppet# ps axf |grep puppet
2420 pts/0 S+ 0:00 _ grep—color=auto puppet
2411 ? Ss 0:00 /usr/bin/ruby1.8 /usr/sbin/puppetd
root@puppet-client:/etc/puppet#

root@puppet-client:/home/gtoms# tail -f /var/log/syslog
Jun 27 23:54:29 puppet-client puppetd[1203]: Retrieved certificate does not match private key
Jun 27 23:54:29 puppet-client puppetd[1203]: Creating a new SSL certificate request for puppet-client.gtoms.lab
Jun 27 23:54:29 puppet-client puppetd[1203]: Caching certificate for puppet-client.gtoms.lab
Jun 27 23:54:29 puppet-client puppetd[1203]: Expiring the certificate cache of puppet-client.gtoms.lab
Jun 27 23:54:29 puppet-client puppetd[1203]: Removing file Puppet::SSL::Certificate puppet-client.gtoms.lab at ‘/etc/puppet/ssl/certs/puppet-client.gtoms.lab.pem’
Jun 27 23:54:29 puppet-client puppetd[1203]: Retrieved certificate does not match private key
Jun 27 23:54:29 puppet-client puppetd[1203]: Caching certificate for puppet-client.gtoms.lab
Jun 27 23:54:29 puppet-client puppetd[1203]: Expiring the certificate cache of puppet-client.gtoms.lab
Jun 27 23:54:29 puppet-client puppetd[1203]: Removing file Puppet::SSL::Certificate puppet-client.gtoms.lab at ‘/etc/puppet/ssl/certs/puppet-client.gtoms.lab.pem’
Jun 27 23:54:29 puppet-client puppetd[1203]: Retrieved certificate does not match private key
Jun 27 23:56:29 puppet-client puppetd[1203]: Caching certificate for puppet-client.gtoms.lab
Jun 27 23:56:29 puppet-client puppetd[1203]: Starting Puppet client version 0.25.4
Jun 27 23:56:30 puppet-client puppetd[1203]: Caching certificate_revocation_list for ca
Jun 27 23:56:30 puppet-client puppetd[1203]: Caching catalog for puppet-client.gtoms.lab
Jun 27 23:56:30 puppet-client puppetd[1203]: Applying configuration version ‘1277657813’
Jun 27 23:56:30 puppet-client puppetd[1203]: (Filebucket[/var/puppet/clientbucket]) Adding /etc/motd(eca1e821e3c6b4583c84e05cef7c658c)
Jun 27 23:56:30 puppet-client puppetd[1203]: (//File[/etc/motd]) Filebucketed /etc/motd to puppet with sum eca1e821e3c6b4583c84e05cef7c658c
Jun 27 23:56:30 puppet-client puppetd[1203]: (//File[/etc/motd]/ensure) content changed ‘{md5}eb870248555b856cf502b74eed595458’ to ‘{md5}eb870248555b856cf502b74eed595458’
Jun 27 23:56:30 puppet-client puppetd[1203]: Creating state file /var/puppet/state/state.yaml
Jun 27 23:56:30 puppet-client puppetd[1203]: Finished catalog run in 0.24 seconds

root@puppet-client:/etc/puppet# /etc/init.d/puppet restart

Restarting puppet configuration management tool
puppet not configured to start, please edit /etc/default/puppet to enable
[ OK ]
root@puppet-client:/etc/puppet# tail -f /var/log/syslog
Jun 27 23:56:29 puppet-client puppetd[1203]: Caching certificate for puppet-client.gtoms.lab
Jun 27 23:56:29 puppet-client puppetd[1203]: Starting Puppet client version 0.25.4
Jun 27 23:56:30 puppet-client puppetd[1203]: Caching certificate_revocation_list for ca
Jun 27 23:56:30 puppet-client puppetd[1203]: Caching catalog for puppet-client.gtoms.lab
Jun 27 23:56:30 puppet-client puppetd[1203]: Applying configuration version ‘1277657813’
Jun 27 23:56:30 puppet-client puppetd[1203]: (Filebucket[/var/puppet/clientbucket]) Adding /etc/motd(eca1e821e3c6b4583c84e05cef7c658c)
Jun 27 23:56:30 puppet-client puppetd[1203]: (//File[/etc/motd]) Filebucketed /etc/motd to puppet with sum eca1e821e3c6b4583c84e05cef7c658c
Jun 27 23:56:30 puppet-client puppetd[1203]: (//File[/etc/motd]/ensure) content changed ‘{md5}eb870248555b856cf502b74eed595458’ to ‘{md5}eb870248555b856cf502b74eed595458’
Jun 27 23:56:30 puppet-client puppetd[1203]: Creating state file /var/puppet/state/state.yaml
Jun 27 23:56:30 puppet-client puppetd[1203]: Finished catalog run in 0.24 seconds

Testing ssh ke puppet-client.gtoms.lab

This is a GTOMS LAB computer (and/or it is directly connected to a GTOMS local network system) that is the property of GTOMS.COM. It is for authorized use o$

Last login: Sun Jun 27 23:13:03 2010 from 192.168.1.70
gtoms@puppet-client:~$

Untuk module Puppet lain bisa kita tulis sendiri sesuai keinginan kita, dan puppet support untuk module :Web Servers, Applications, Package Management,Operating Systems, Programming Languages,Networking, Utilities, Monitoring and Trending, Security,Virtualization.

Untuk module-module tersebut bisa didapat di http://example42.com/ atau http://forge.puppetlabs.com/

Interview ketiga dengan Google

gtoms — Sat, 17 Jul 2010 09:46:16 +0000

Interview dengan perusahaan GOOGLE memang cukup alot dan panjang, mereka tidak hanya mencari orang pintar, tetapi sangat pintar dibidangnya masing-masing. Jika tawarannya untuk system engineer unix/linux, berarti harus sangat pintar di bagian tersebut. So far saya sudah selesai interview tahap III dimana testingnya banyak ke praktek dan share document menggunakan Google Docs, Gtalk. Mulai dari jam 1 sampai jam 2 dini hari. Persiapan saya menggunakan 1 laptop dan 1 pc yang terhubung dengan LAN dan internet. Laptop untuk Google Docs dan Gtalk, dan PC yang terinstall sistem operasi Linux. Pada interview ketiga mereka tidak menanyakan pertanyaan teori seperti interview kedua seperti : “What is a Unix kernel?”, Explain how TCP works,dsb. Pertanyaannya lebih banyak menyelesaikan problem dalam mysql,matematika,unix,linux, menulis program dalam Shell, Python or Perl,C++

Semua pertanyaannya relatif dalam dan terstruktur, sebelum dimulai mereka juga kasih semangat, dengan mengatakan bahwa selangkah lagi anda akan bekerja disini. Jadi anda harus bisa menjawab semua pertanyaan dengan baik. 1 jam lebih proses interview ketiga berlangsung sampai selesai dan mereka memberitahukan akan memberitahukan hasilnya kemudian melalui phone dan email hasilnya. Ini merupakan pengalaman yang tidak terlupakan, dimana menjadi alat ukur skill saya. Pertanyaan detail dari GOOGLE tidak bisa saya share disini karena sesuatu hal. Dan saya bangga bisa terpilih diinterview dengan GOOGLE. Metode rekruitment mereka yang hanya ingin tahu kemampuan(skill) kita sesuai lowongan yang mereka buat patut ditiru perusahaan di sini yang mencari tenaga kerja IT. Sejauh dan sekuat apa kita mampu dapat memberikan kontribusi bagi perusahaan mereka.

Ok selebihnya tinggal doa yang bekerja untuk memuluskan langkah ke sana.

-Interview kedua dengan Google
-Interview pertama dengan Google
-Google Engineering Opportunity

Linux APC UPS with apcupsd

gtoms — Thu, 15 Jul 2010 07:05:01 +0000

Saya punya APC Back-UPS CS 650 digunakan pada salah satu server virtual untuk kebutuhan sehari-hari. Sebagai tools power management dan controlling UPS saya menggunakan apcupsd APC UPS software yang bisa diinstall pada linux Centos 5.4, dengan apcupsd saya dapat mengetahui masalah seperti power failure,battery dan sebagainya.

Berikut proses instalasi dan konfigurasi apcupsd pada Linux Centos 5.4 :

yum install apcups*

vi /etc/apcupsd/apcupsd.conf
UPSCABLE usb
UPSTYPE usb
DEVICE
LOCKFILE /var/lock
SCRIPTDIR /etc/apcupsd
PWRFAILDIR /etc/apcupsd
NOLOGINDIR /etc
ONBATTERYDELAY 6
BATTERYLEVEL 5
MINUTES 3
TIMEOUT 0
ANNOY 300
ANNOYDELAY 60
NOLOGON disable
KILLDELAY 0
NETSERVER on
NISIP 0.0.0.0
NISPORT 3551
EVENTSFILE /var/log/apcupsd.events
EVENTSFILEMAX 10
UPSCLASS standalone
UPSMODE disable
STATTIME 0
STATFILE /var/log/apcupsd.status
LOGSTATS off
DATATIME 0

Sebelum saya menjalankan apcupsd, kabel USB dari UPS APC di colokkan(plug in) ke slot USB pada server :

#/etc/init.d/apcupsd start
Starting UPS monitoring:                                   [ OK ]

Log messages :

Jul 15 11:57:11 ID41-ND201 apcupsd[2383]: apcupsd 3.14.2 (15 September 2007) redhat startup succeeded
Jul 15 11:57:12 ID41-ND201 apcupsd[2383]: NIS server startup succeeded

/etc/init.d/apcupsd status
apcupsd (pid 2383) is running…
APC      : 001,043,1054
DATE     : Thu Jul 15 11:57:15 WIT 2010
HOSTNAME : ID41-ND201.xxxx
RELEASE : 3.14.2
VERSION : 3.14.2 (15 September 2007) redhat
UPSNAME : ID41-ND201.xxxx
CABLE    : USB Cable
MODEL    : Back-UPS CS 650
UPSMODE : Stand Alone
STARTTIME: Thu Jul 15 11:57:09 WIT 2010
STATUS   : ONLINE
LINEV    : 216.0 Volts
LOADPCT : 24.0 Percent Load Capacity
BCHARGE : 100.0 Percent
TIMELEFT : 25.0 Minutes
MBATTCHG : 5 Percent
MINTIMEL : 3 Minutes
MAXTIME : 0 Seconds
OUTPUTV : 230.0 Volts
SENSE    : Medium
DWAKE    : 000 Seconds
DSHUTD   : 000 Seconds
LOTRANS : 180.0 Volts
HITRANS : 266.0 Volts
RETPCT   : 000.0 Percent
ITEMP    : 29.2 C Internal
ALARMDEL : Always
BATTV    : 13.5 Volts
LINEFREQ : 50.0 Hz
LASTXFER : Low line voltage
NUMXFERS : 0
TONBATT : 0 seconds
CUMONBATT: 0 seconds
XOFFBATT : N/A
SELFTEST : NO
STATFLAG : 0×07000008 Status Flag
SERIALNO : QB0645339457
BATTDATE : 2006-11-05
NOMOUTV : 230
NOMINV   : 230
NOMBATTV : 12.0
FIRMWARE : 817.v4.I USB FW:v4
APCMODEL : Back-UPS CS 650
END APC : Thu Jul 15 11:57:16 WIT 2010

ps axf |grep apcupsd
2507 pts/4    S+     0:00          _ grep apcupsd
2383 ?        Ssl    0:00 /sbin/apcupsd -f /etc/apcupsd/apcupsd.conf

Selesai. – apcupsd Online Manual

Interview kedua dengan Google

gtoms — Thu, 08 Jul 2010 03:43:48 +0000

Setelah menunggu seminggu, akhirnya saya diberitahu untuk masuk ke tahap II interview dengan perusahaan GOOGLE. Selanjutnya melalui email disepakati tanggal dan jamnya, dan aku punya waktu 3 hari mempersiapkannya dimana materi interview tahap II akan lebih banyak ke pertanyaan technical. Pihak recruiter juga memberitahukan materi pertanyaan akan seputar :

TCP/IP, UNIX, LINUX, System Administrator, Math, Data-Structures, Algorithms, C++, JAVA, perl, bash, mysql.

Kalau dilihat dari materi diatas cukup banyak dan wajar Google mengklaim karyawannya adalah expert dan Guru di bidangnya masing-masing. Untuk materi TCP/IP, UNIX, LINUX, System Administrator, perl, bash, mysql, Math, Data-Structures saya memiliki basic yang kuat, tetapi untuk materi Algorithms, C++, JAVA saya tidak pernah berkutat didalamnya jadi perlu belajar lagi. Proses interview tahap kedua hanya 60 menit dan waktu saya hanya 3 hari untuk mempersiapkannya. Waktu singkat saya pakai mempelajari dasar Algorithms, C++, JAVA dan Data-Structures.

Akhirnya hari interview tahap II tiba, dengan kemampuan dan usaha saya coba jawab satu persatu pertanyaan mereka. Ada banyak sekali pertanyaan sekitar 25 question lebih ditanyakan, kalau saya jawabnya benar pasti reaksi mereka bilang ‘Great’ atau ‘Good’ nah kalau jawabnya kurang benar keluar suara ‘hmmm’ atau diam saja melanjutkan ke pertanyaan selanjutnya. Pertanyaan TCP/IP, UNIX, LINUX, System Administrator, perl, mysql relatif bisa saya jawab benar ada pertanyaan basic dan ada pertanyaan advanced, hampir semua pertanyaannya pernah saya pelajari dan bagian dari job pekerjaan saya selama ini, jadi pengalaman memang penting dan menjadi guru yang utama. Jika anda belum pernah jadi system administrator unix/linux selama lebih dari 3 tahun jangan harap bisa menjawab pertanyaan mereka.

Untuk materi Math, Data-Structures, Algorithms, sepertinya tidak terlalu baik menjawabnya. Contoh dari Big-O notation, sorting, balance, integers, tree, Hashtables, n-choose-k problems, dan lainnya agak sulit dan saya cenderung bingung.

Untuk materi C++,bash, dan Java tidak ditanyakan sampai akhir interview tahap II, Recruiter Google mengatakan akan memberitahukan hasilnya seminggu setelah pembicaraan dengan management.

Saat artikel ini saya tulis saya sudah mendapat jawabannya dan pihak Google dan akan melanjutkan interview tahap III, seminggu kemudian dengan tambahan media menggunakan Google Docs dan Gtalk. Materi C++,bash, dan Java juga akan diikutkan disini. Perjalanan menuju Silicon Valley- Mountain View CA sudah setengah jalan, pengalaman baru bagi saya di interview perusahaan sebesar GOOGLE. Karena Tahap III merupakan tahap akhir yang menentukan untuk calon karyawan diluar USA, sebelum diberangkatkan ke kantor pusat mereka untuk test tahap akhir.

Interview pertama dengan Google

Google Engineering Opportunity