virtualhost apache pada ip vps

Hai, kali ini saya akan share cara bikin virtual host ke vps kita.
Yang pertama, pastikan buat record IN A dulu ke ip public vps kita, kemudian kita login ke vps dan tambahkan file /etc/apache2/sites-enabled/lg.yam.net.id.conf

<VirtualHost *:80>
    ServerAdmin noc@yam.net.id
    ServerName lg.yam.net.id
    ServerAlias www.lg.yam.net.id
    DocumentRoot /var/www/html/lg
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

kemudian lakukan perintah a2ensite lg.yam.net.id.conf
lalu restart apachenya service apache2 restart

Continue

smokeping with sendmail gmail relay

Halo, jumpa lagi,

Kita akan belajar bagaimana caranya bikin smokeping latency grapher, semacem ping monitoring gitu lah, yang tujuannya biar monitor berapa sih ping dari server ke target remote dan disertakan dengan log nya, jam sekian intermittent, dlsb.

Baiklah, pertama tama, install dahulu 

apt install sendmail sendmail-bin mailutils

lalu

mkdir -m 700 /etc/mail/authinfo 

lalu edit file gmail-smtp-auth

 /etc/mail/authinfo/gmail-smtp-auth

 kemudian isikan

AuthInfo: "U:root" "I:USER@gmail.com" "P:GMAIL_USER_PASSWORD"

sesuaikan dengan email gmail anda dan passwordnya

sekarang generate sendmail gmail authentication

makemap hash /etc/mail/authinfo/gmail-smtp-auth < /etc/mail/authinfo/gmail-smtp-auth

jika sudah akan terbentuk file /etc/mail/authinfo/gmail-smtp-auth.db

kemudian edit file /etc/mail/sendmail.mc

di baris paling bawah, ubah setingan seperti berikut ini

dnl #
dnl # Defining Gmail Smarthost for sendmail
define(`SMART_HOST',`[smtp.gmail.com]')dnl
define(`RELAY_MAILER_ARGS', `TCP $h 587')dnl
define(`ESMTP_MAILER_ARGS', `TCP $h 587')dnl
define(`confAUTH_OPTIONS', `A p')dnl
TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
FEATURE(`authinfo',`hash -o /etc/mail/authinfo/gmail-smtp-auth.db')dnl
dnl #
dnl # Default Mailer setup
MAILER_DEFINITIONS
MAILER(`local')dnl
MAILER(`smtp')dnl

kemudian eksekusi

make -C /etc/mail
...
Creating /etc/mail/relay-domains
# Optional file...
Updating Makefile ...
Reading configuration from /etc/mail/sendmail.conf.
Validating configuration.
Creating /etc/mail/Makefile...
Updating sendmail.cf ...
The following file(s) have changed:
  /etc/mail/relay-domains /etc/mail/sendmail.cf
** ** You should issue `/etc/init.d/sendmail reload` ** **
make: Leaving directory '/etc/mail'

DONE!

jangan lupa reload sendmailnya /etc/init.d/sendmail reload
untuk testnya silahkan bisa lakukan seperti berikut :

echo "This is a test for sendmail gmail relay" | sendmail test-user@gmail.com

Continue

locate freebsd

begini cara install locate di freebsd

root@sync:/var/named # pkg search locate
p5-File-Locate-0.62            Search the locate(1)-database from Perl
root@sync:/var/named # pkg install p5-File-Locate-0.62
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
root@sync:/var/named # /usr/libexec/locate.updatedb
>>> WARNING
>>> Executing updatedb as root.  This WILL reveal all filenames
>>> on your machine to all login users, which is a security risk.
root@sync:/var/named # locate bind

Continue

filter porn unbound

Kali ini akan saya share script untuk blokir unbound berdasarkan list porn StevenBlack.
Syarat penggunaan script ini adalah jika unbound telah berhasil diinstall dan berjalan dengan baik tanpa error. Jangan lupa install dahulu dos2unix jika belum terinstall, caranya

apt install dos2unix -y

Baiklah, silahkan buat file convert.sh, kemudian chmod 777 convert.sh

# list of ads domain names
array=( https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn/hosts )
for i in "${array[@]}"
do
wget $i -O w
grep -v " #\|<td>\|<p>\|<meta>\|<link>\|<title>\|href\|title=\|=\|<" w > adsList.txt
rm w
dos2unix adsList.txt
# remove host syntax and clean file
sed -i 's/0.0.0.0//g' adsList.txt
sed -i 's/127.0.0.1//g' adsList.txt
sed -i 's/localhost//g' adsList.txt
sed -i 's/.localdomain//g' adsList.txt
# remove commentary after domain name
sed -i 's/#.*//' adsList.txt
# remove tabulation character and carriage return
sed -i "s/\t//g" adsList.txt
sed -i "s/\r//g" adsList.txt
# remove useless space
sed -i 's/ //g' adsList.txt
# remove empty lines
sed -i '/^\s*$/d' adsList.txt
# add prefix and suffix for unbound
sed -i "s/.*/local-zone: \"&\" static/" adsList.txt
cat adsList.txt >> adsListFinal.txt
done
# order list by name, it didn't cost a lot and could maybe increase unbound performance
sort adsListFinal.txt -o adsListFinal.txt
# remove duplicate ads domain in order to avoid warning with Unbound
uniq adsListFinal.txt > adslist.txt
# remove tempory files
rm adsListFinal.txt adsList.txt

kemudian eksekusi ./convert.sh 
dari hasil script di atas akan muncul file adsList.txt, kemudian pindahkan ke /etc/unbound/unbound.conf.d/
kemudian laukan pengecekan

root@DNS-20-10:/home/rahox # unbound-checkconf
unbound-checkconf: no errors in /etc/unbound/unbound.conf

jika dipastikan tidak error silahkan reload atau restart unbound dengan cara

unbound-control reload 

atau

unbound-control restart

Jika sudah, lakukan pengecekan seperti berikut, pastikan /etc/resolv.conf sudah diarahkan ke 127.0.0.1

root@DNS-20-10:/home/rahox # nslookup xnxx.com
Server:         127.0.0.1
Address:        127.0.0.1#53
** server can't find xnxx.com: NXDOMAIN

source :https://blog.mirabellette.eu/index.php?article17/block-advertise-domain-name-with-unbound

Continue

proxmox repository

deb http://kartolo.sby.datautama.net.id/debian stretch main contrib non-free
deb http://kartolo.sby.datautama.net.id/debian stretch-updates main contrib non-free
deb http://kartolo.sby.datautama.net.id/debian-security/ stretch/updates main contrib non-free
deb http://download.proxmox.com/debian/pve stretch pve-no-subscription

disable /etc/apt/sources.list.d/pve-enterprise.list

disable apt update ipv6

nano /etc/apt/apt.conf.d/99force-ipv4
Acquire::ForceIPv4 "true";

apt update; apt dist-upgrade

Continue

smokeping sample configuration

# source : https://nsrc.org/workshops/ws-files/2011/sanog17/exercises/exercises-smokeping.html

# Note that all IP addresses in this file are false, to prevent some
# machine falling under a deadly DOS storm because all users keep
# the same addresses in their config.

*** General ***

################################################
# DON'T TOUCH UNLESS YOU KNOW WHAT YOU'RE DOING
# BETWEEN THESE MARKS!
################################################
sendmail = /usr/sbin/sendmail
imgcache = /var/www/smokeping
imgurl   = ../smokeping
datadir  = /var/lib/smokeping
piddir   = /var/run/smokeping
smokemail = /etc/smokeping/smokemail
tmail    = /etc/smokeping/tmail
################################################
# END OF DON'T TOUCH SECTION
################################################


# Please edit this to suit your installation
#
# If you have a fully qualified domain name, then you should add this to all
# occurrences of "noc".
#
owner    = The NOCMeister
contact  = monitor@noc
cgiurl   = http://noc/cgi-bin/smokeping.cgi
mailhost = localhost 
# specify this to get syslog logging
syslogfacility = local0
# each probe is now run in its own process
# disable this to revert to the old behaviour
# concurrentprobes = no

*** Alerts ***
to = monitor@noc
from = smokealert@noc

+bigloss
type = loss
# in percent
pattern = ==0%,==0%,==0%,==0%,>0%,>0%,>0%
comment = suddenly there is packet loss

+someloss
type = loss
# in percent
pattern = >0%,*12*,>0%,*12*,>0%
comment = loss 3 times  in a row

+startloss
type = loss
# in percent
pattern = ==S,>0%,>0%,>0%
comment = loss at startup

+rttdetect
type = rtt
# in milli seconds
pattern = <10,<10,<10,<10,<10,<100,>100,>100,>100
comment = routing messed up again ?

+hostdown
type = loss
# in percent
pattern = ==0%,==0%,==0%, ==U
comment = no reply

+lossdetect
type = loss
# in percent
pattern = ==0%,==0%,==0%,==0%,>20%,>20%,>20%
comment = suddenly there is packet loss




*** Database ***

step     = 300
pings    = 20

# consfn mrhb steps total

AVERAGE  0.5   1  1008
AVERAGE  0.5  12  4320
    MIN  0.5  12  4320
    MAX  0.5  12  4320
AVERAGE  0.5 144   720
    MAX  0.5 144   720
    MIN  0.5 144   720

*** Presentation ***

template = /etc/smokeping/basepage.html

+ overview 

width = 600
height = 50
range = 10h

+ detail

width = 600
height = 200
unison_tolerance = 2

"Last 3 Hours"    3h
"Last 30 Hours"   30h
"Last 10 Days"    10d
"Last 400 Days"   400d

*** Probes ***

+ FPing
binary = /usr/bin/fping

+ EchoPingHttp

+ DNS
binary = /usr/bin/dig
pings = 5
step = 180



*** Targets ***

probe = FPing

## You have to edit and uncomment all what you want below this.
# Please, refer to smokeping_config man page for more info
# The given adresses aren't real to avoid DoS.

menu = Top
title = Network Latency Grapher
remark = intERLab at AIT Network Operations and Management Workshop \
         sample SmokePing site 

+ Local

menu = APRICOT 2008 
title = Network Management Workshop 

#
####### LATENCY ########
#

++ Latency

menu = Latency
title = Measure of Latency using icmp ping

+++ LocalMachine 

menu = NOC 
title = The NOC@intERLab
host = localhost
alerts = startloss,someloss,bigloss,rttdetect,hostdown

#++ NOCSquid
#
#menu = The NOC Squid
#title = www-cache / HTTP for noc@apricot2008
#probe = EchoPingHttp
#host = localhost
#port = 8080 # use the squid port
#url = http://localhost/
#

#
## You should edit this for your particular class setup.
## For each PC if you have a fully qualified domain name,
## you should add this as well.
##
#

+++ PC1

menu = pc1
title = pc1
host = pc1
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC2

menu = pc2
title = pc2
host = pc2
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC3

menu = pc3
title = pc3
host = pc3
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC4

menu = pc4
title = pc4
host = pc4
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC5

menu = pc5
title = pc5
host = pc5
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC6

menu = pc6
title = pc6
host = pc6
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC7

menu = pc7
title = pc7
host = pc7
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC8

menu = pc8
title = pc8
host = pc8
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC9

menu = pc9
title = pc9
host = pc9
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC10

menu = pc10
title = pc10
host = pc10
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC11

menu = pc11
title = pc11
host = pc11
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC12

menu = pc12
title = pc12
host = pc12
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC13

menu = pc13
title = pc13
host = pc13
alerts = startloss,someloss,bigloss,rttdetect,hostdown
+++ PC14

menu = pc14
title = pc14
host = pc14
alerts = startloss,someloss,bigloss,rttdetect,hostdown

+++ PC15

menu = pc15
title = pc15
host = pc15
alerts = startloss,someloss,bigloss,rttdetect,hostdown

#
####### APACHE ########
#

#
# You should edit this for your particular class setup.
# For each PC if you have a fully qualified domain name,
# you should add this as well.
#

++ Apache

menu = HTTP
title = Apache (http) service

+++ NOC

menu = NOC
title = Apache 2 Server for noc
probe = FPing
host = localhost

+++ PC1

menu = PC1 
title = Apache 2 Server for pc1
probe = FPing
host = pc1

+++ PC2

menu = PC2 
title = Apache 2 Server for pc2
probe = FPing
host = pc2

+++ PC3

menu = PC3 
title = Apache 2 Server for pc3
probe = FPing
host = pc3

+++ PC4

menu = PC4 
title = Apache 2 Server for pc4
probe = FPing
host = pc4

+++ PC5

menu = PC5 
title = Apache 2 Server for pc5
probe = FPing
host = pc5

+++ PC6

menu = PC6 
title = Apache 2 Server for pc6
probe = FPing
host = pc6

+++ PC7

menu = PC7 
title = Apache 2 Server for pc7
probe = FPing
host = pc7

+++ PC8

menu = PC8 
title = Apache 2 Server for pc8
probe = FPing
host = pc8

+++ PC9

menu = PC9 
title = Apache 2 Server for pc9
probe = FPing
host = pc9

+++ PC10

menu = PC10 
title = Apache 2 Server for pc10
probe = FPing
host = pc10

+++ PC11

menu = PC11 
title = Apache 2 Server for pc11
probe = FPing
host = pc11

+++ PC12

menu = PC12 
title = Apache 2 Server for pc12
probe = FPing
host = pc12

+++ PC13

menu = PC13 
title = Apache 2 Server for pc13
probe = FPing
host = pc13

+++ PC14

menu = PC14 
title = Apache 2 Server for pc14
probe = FPing
host = pc14

+++ PC15

menu = PC15 
title = Apache 2 Server for pc15
probe = FPing
host = pc15

#
####### APACHE ########
#

++ DNS 

probe = DNS
menu = DNS 
title = DNS (name server latency)


+++ NOC

menu = NOC
title = Name Server Latency for noc
host = noc 

#
####### WORLD ########
#

+ World

menu = World
title = Worldwide Connectivity

++ Africa

menu = Africa
title = African Connectivity

+++ SouthAfrica

menu = AfNOG
title = African Network Operators Group
host = afnog.org

++ NorthAmerica

menu = North America
title = North American Connectivity

+++ USA

menu = USA
title = Select US Servers

++++ NSRC

menu = NSRC
title = NSRC (Eugene, Oregon, USA)
host = nsrc.org

++++ WRC

menu = WRC
title = ISOC Workshop Resource Centre (Eugene, Oregon, USA)
host = ws.edu.isoc.org

++++ shell

menu = shell.uoregon.edu
title = Main User Box, University of Oregon (Eugene, Oregon, USA)
host = shell.uoregon.edu

++ SouthAmerica

menu = South America
title =South American Connectivity

+++ Chile

menu = Chile
title = sageduck.org
host = sageduck.org


#
####### Multi Targe ########
#

#+ MultiTarget 

#menu = MultiTarget 
#title = Multi Target Graph of ping Latency  

#++ NorthAmerica 

#menu = NorthAmerica 
#title = North American Servers
#host = shell.uoregon.edu \
#       nsrc.org \
#       psg.com
#alerts = bigloss,rttdetect 

Continue