Monday, May 18, 2009

Ubuntu Linux


Linux has a lot of distribution. One of the popular distro is Ubuntu distributions.
Ubuntu is quite strong in the desktop, multimedia, and the server. One of that is a the great hardware detection. Ubuntu is contains are: web browser, presentation, document and spreadsheet software, instant messaging, multimedia and more.

And that this distribution Ubuntu distro that is free.

How do I get this Ubuntu distributions?
Many ways, is:
1. Download di Ubuntu Download in Ubuntu.
2. Shipit.

Ubuntu also provides for ease of use, because the use of so easily as we use the operating system Microsoft Windows neighbors.

Try it ... :P Read More .. : P

Remoting from Windows to Linux

Now, we dont have to confuse about how to remote from Windows to Linux.
The answer is easy by using Putty application.
Putty is the remote console (not graphic).
Putty can be downloaded at Download.

Copying file cross platform



Because so friendly between Linux and Windows is available for application to copy from windows to Linux and vice versa.
This application is WinSCP.

WinSCP can be downloaded at the links: WinSCP.
Actually, WinSCP looks like a Windows application that has been popular in Microsoft Windows is Windows Commander.

Wednesday, May 13, 2009

Security on the mail server using iptables

Example of a simple iptables configuration on the mail server using Centos 5.3.
Configuration file is located in /etc/sysconfig/iptables

*filter * filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPTICMP-type 8-j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT #SMTP
-A INPUT -p udp -m udp --dport 50 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 51 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 110 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT #POP3
-A INPUT -p tcp -m tcp --dport 80 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT #webmail
-A INPUT -p tcp -m tcp --dport 443 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -m state --state NEW -j REJECT --reject-with icmp-port-unreachable
-A OUTPUT -o lo -j ACCEPT -A OUTPUT-o lo-j ACCEPT
-A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -p udp -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -p icmp -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
COMMIT

After you have finished configuring the iptables, then start the service of iptables

# service iptables start
Or
# /etc/init.d/iptables start

End.

Tips SSH without using a password (ssh-keygen)

SSH Secure Shell is also called, is a remote computer console (command line) that introducing by LINUX.
SSH uses port 22 (default).

How to use SSH:

# ssh (ip destination)

Using SSH without using passwords.
Things that need to do:
1. ssh-keygen ssh-keygen
bash-3.2# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa)
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
0a:2f:ca:50:88:5f:f6:a6:e4:de:7f:61:77:5a:17:43 root@punyaku.com

note: empty (press enter) Enter passphrase in part.
Then will id_rsa.pub file in the / root / .ssh

2. Copy id_rsa.pub files to other computers with rename file to authorized_keys

bash-3.2# scp ~/.ssh/id_dsa.pub (destination ip):~/.ssh/authorized_keys

After successfully to copy a file, then try to SSH to the destination computer.
If the remote without using a password then we have succeeded in the experiment.

To use SSH or remote without using a password we need to consider risk as it could be a problem for our own (admin) because they can simply log in without using a password.
Congratulations

Regards.

Customize your needs

Syncronization data using rsync

Backup ...

As an IT, the data is important and must be on guard.
One of the important issues that need to be done is backup all the data.
Many ways to make a backup, can use the program / application that is already there.
The easiest way is copying the data to another partition or other media.
But Linux has tools / backup command with the syncronisasi.
That is "rsync".

Usage:
# rsync --(option) (source) (destination)

Example:


# rsync --delete-during /home/bastian/* /backup/

option - delete-during data = copy and delete data at the same time.

To use can be seen in the manual of rsync.

# Man rsync

Appropriate with the case.

Backup Email Procedure (*. PST) - MS. Outlook 2007

Backup Email is done periodically, should be 2 weeks or once a maximum of 1 month. Backup can be stored in data storage such as portable hard drive or server (call the administrator). If you need to copy the CD / DVD.
There are several steps to make a backup file email:
1. Make sure Microsoft Outlook is closed, if not then the file can not be in the copy.
2. Please check the location of PST file in the Control Panel -> Mail -> Data Files.

In the picture above the red color be surrounded is the file name and location of PST files. Jadi terdapat file BAC.pst dan Gmail.pst terdapat di directory D:\Outlook (sesuaikan dengan configurasi dan settingan email anda). So there is a file BAC.pst and Gmail.pst found in the directory D: \ Outlook (configurasi adjust with your email and settingan).
Kemudian copy file tersebut ke storage data anda. Then copy the file to your data storage.
3. After copying the file copy directory in Outlook
Windows XP
C:\Documents and Settings\Local Settings\Application Data\Microsoft
Windows Vista Windows Vista
C:\Users\AppData\Roaming\Microsoft
Into your data storage.
This directory saved the file to your profile if you restore the mail, your email settings that you have downloaded is not downloaded again.