Mengatasi SSH Can't Agree ketika diremote dari winbox

Pernahkah anda mengalami seperti berikut ini ketika me-remote server linux anda melalui ssh

Hal itu terjadi ketika Anda meng-install openssh-server versi terbaru yang telah bundling dengan apt-get saat anda menggunakan server berbasis debian.

Untuk mengatasi hal itu, pada server linux Debian/Ubuntu Anda  nano /etc/ssh/sshd_config
Lalu tambahkan script berikut pada bagian akhir file sshd_config tadi

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc

Kemudian tekan CTRL + O atau CTRL + X

Save modified buffer (ANSWERING "No" WILL DESTROY CHANGES) ?
 Y Yes
 N No           ^C Cancel

Tekan huruf Y lalu enter
Lalu restart service ssh Anda dengan cara :

root@deb8:/home/kangrahox# /etc/init.d/ssh restart
[ ok ] Restarting ssh (via systemctl): ssh.service.

Dan coba lagi remote ssh server Debian anda kembali sehingga berhasil login seperti berikut ini :

Continue

Script Linux Dump ASNUMBER

Kali ini saya akan bagi script untuk dumping ip-ip dalam suatu ASNUMBER tertentu. Buatlah script dengan ekstensi dot sh pada console linux anda. Jangan lupa di chmod 777 file.sh tadi kemudian jalaankan script.

rm -rf ASN
rm -rf IP
touch ASN
touch IP
clear
echo "========================================="
echo -n "asnumber / ipnya berapa ?  = "
read asnum
if [[ $asnum =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
whois -h whois.radb.net -i origin $asnum | grep '^notify:' | awk '{print "ini kak deskripsinya:   = "$2}'
fi
echo -n "address-list-nya ? contoh: cidr_akamai = "
read addrlist
echo -n "comment-nya apa ? contoh: akamai = "
read comment
rm -rf "$asnum"-"$comment".rsc
echo "========#[tunggu sebentar ya kak]#======="
echo ""
if [[ $asnum =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
whois -h whois.radb.net -i origin $asnum | grep '^origin:' | awk '{print $2}' >> ASN
sort -u -o ASN ASN
tail -f IP &
for ASN in $(cat ASN | awk '{print $1}');
do
{ whois -h whois.radb.net -- "-i origin $ASN" | grep '^route:' | perl -MNet::Netmask -ne'm!(\d+\.\d+\.\d+\.\d+/?\d*)! or next; $h = $1; $h =~ s/(\.0)+$//; $b=Net::Netmask->new($h); $b->storeNetblock(); END {print map {$_->base()."/".$_->bits()."\n"} cidrs2cidrs(dumpNetworkTable)}'; } >> IP
sleep 3
done
echo "";
sort -V IP | uniq | awk '{print "/ip firewall address-list add list='$addrlist' comment='$comment' address=" $1}' >> /var/www/html/dump/"$asnum"-"$comment".rsc
#sed -i '4d' "$addrlist".rsc
cat /var/www/html/dump/"$asnum"-"$comment".rsc
else
whois -h whois.radb.net -i origin $asnum | grep '^route:' | perl -MNet::Netmask -ne'm!(\d+\.\d+\.\d+\.\d+/?\d*)! or next; $h = $1; $h =~ s/(\.0)+$//; $b=Net::Netmask->new($h); $b->storeNetblock(); END {print map {$_->base()."/".$_->bits()."\n"} cidrs2cidrs(dumpNetworkTable)}'  >> temp.txt
sort -V temp.txt | uniq | awk '{print "/ip firewall address-list add list='$addrlist' comment='$comment' address=" $1}' >> /var/www/html/dump/"$asnum"-"$comment".rsc
cat /var/www/html/dump/"$asnum"-"$comment".rsc
rm temp.txt
fi

Hasilnya sepeti berikut ini :

Jangan khawatir jika ada double ip yang tertera dalam file tersebut karena sudah difilter dan dipastikan UNIQ, alias tidak mungkin sama! 

Tidak sampai di situ saja, hasil generate anda berwujud file rsc yang siap di import di mikrotik anda setiap anda men-generate as number baru, berikut penampakannya :

Semoga bermanfaat. Terima kasih.

Continue

Mikrotik AutoBackup Gmail

Buat script pada mikrotik seperti berikut ini, sesuaikan dengan email anda.

:log warning message="backup beginning now"
:global backupfile ([/system identity get name] . "-" . [/system clock get time])
/system backup save name=$backupfile
:log warning message="backup pausing for 10s"
:delay 10s
:log warning message="backup being emailed"
/tool e-mail send tls=yes port=587 to="<email.anda@gmail.com>" subject=([/system identity get name] . \
" Backup") from=<terserah@gmail.com> file=$backupfile server=74.125.68.108
:delay 20s
/file remove $backupfile

Lalu buat scheduler, sesuaikan durasi kapan harus otomatis dibackup, bisa setiap bulan, tiap minggu, dan lain sebagainya.

Continue

Bypass Whatsapp BBM LINE Telegram Hotspot Mikrotik

/ip hotspot walled-garden ip
add action=accept comment=whatsapp disabled=no dst-address=50.23.90.128/27
add action=accept comment=whatsapp disabled=no dst-address=108.168.176.192/26
add action=accept comment=whatsapp disabled=no dst-address=108.168.177.0/27
add action=accept comment=whatsapp disabled=no dst-address=108.168.180.96/27
add action=accept comment=whatsapp disabled=no dst-address=157.240.7.54
add action=accept comment=whatsapp disabled=no dst-address=158.85.48.224/27
add action=accept comment=whatsapp disabled=no dst-address=158.85.58.0/25
add action=accept comment=whatsapp disabled=no dst-address=158.85.224.160/27
add action=accept comment=whatsapp disabled=no dst-address=169.44.82.96/27
add action=accept comment=whatsapp disabled=no dst-address=169.45.71.32/27
add action=accept comment=whatsapp disabled=no dst-address=169.45.71.96/27
add action=accept comment=whatsapp disabled=no dst-address=169.45.87.128/26
add action=accept comment=whatsapp disabled=no dst-address=169.45.210.64/27
add action=accept comment=whatsapp disabled=no dst-address=169.45.214.224/27
add action=accept comment=whatsapp disabled=no dst-address=169.45.219.224/27
add action=accept comment=whatsapp disabled=no dst-address=169.45.238.32/27
add action=accept comment=whatsapp disabled=no dst-address=169.45.248.96/27
add action=accept comment=whatsapp disabled=no dst-address=169.45.248.160/27
add action=accept comment=whatsapp disabled=no dst-address=169.47.5.192/26
add action=accept comment=whatsapp disabled=no dst-address=169.47.35.32/27
add action=accept comment=whatsapp disabled=no dst-address=169.47.40.128/27
add action=accept comment=whatsapp disabled=no dst-address=169.47.42.96/27
add action=accept comment=whatsapp disabled=no dst-address=169.47.42.160/27
add action=accept comment=whatsapp disabled=no dst-address=169.47.42.192/26
add action=accept comment=whatsapp disabled=no dst-address=169.53.29.128/27
add action=accept comment=whatsapp disabled=no dst-address=169.53.71.224/27
add action=accept comment=whatsapp disabled=no dst-address=169.53.81.64/27
add action=accept comment=whatsapp disabled=no dst-address=169.53.250.128/26
add action=accept comment=whatsapp disabled=no dst-address=169.55.67.224/27
add action=accept comment=whatsapp disabled=no dst-address=169.55.210.96/27
add action=accept comment=whatsapp disabled=no dst-address=198.11.251.32/27
add action=accept comment=bbm disabled=no dst-address=206.51.26.0/24
add action=accept comment=bbm disabled=no dst-address=193.109.81.0/24
add action=accept comment=bbm disabled=no dst-address=103.246.200.0/22
add action=accept comment=bbm disabled=no dst-address=216.9.240.0/20
add action=accept comment=bbm disabled=no dst-address=206.53.144.0/20
add action=accept comment=bbm disabled=no dst-address=67.223.64.0/19
add action=accept comment=bbm disabled=no dst-address=93.186.16.0/20
add action=accept comment=bbm disabled=no dst-address=68.171.224.0/19
add action=accept comment=bbm disabled=no dst-address=74.82.64.0/19
add action=accept comment=bbm disabled=no dst-address=173.247.32.0/19
add action=accept comment=bbm disabled=no dst-address=178.239.80.0/20
add action=accept comment=bbm disabled=no dst-address=5.100.168.0/21
add action=accept comment=bbm disabled=no dst-address=131.117.168.0/21
add action=accept comment=bbm disabled=no dst-address=111.95.240.0/24
add action=accept comment=bbm disabled=no dst-address=68.171.238.0/24
add action=accept comment=telegram disabled=no dst-address=149.154.160.0/20
add action=accept comment=telegram disabled=no dst-address=149.154.164.0/22
add action=accept comment=telegram disabled=no dst-address=91.108.4.0/22
add action=accept comment=telegram disabled=no dst-address=91.108.56.0/22
add action=accept comment=telegram disabled=no dst-address=91.108.8.0/22
add action=accept comment=line disabled=no dst-address=125.209.253.0/24
add action=accept comment=line disabled=no dst-address=203.105.150.0/24
add action=accept comment=line disabled=no dst-address=203.104.153.0/24
add action=accept comment=line disabled=no dst-address=203.104.174.0/24
add action=accept comment=line disabled=no dst-address=74.82.94.0/24
add action=accept comment=line disabled=no dst-address=139.193.253.0/24
add action=accept comment=line disabled=no dst-address=111.94.254.0/24
add action=accept comment=line disabled=no dst-address=203.104.142.0/24
add action=accept comment=bbm disabled=no dst-address=68.171.238.0/24
add action=accept comment=bbm disabled=no dst-address=74.82.91.0/24
add action=accept comment=bbm disabled=no dst-address=74.125.200.0/24
add action=accept comment=bbm disabled=no dst-address=111.94.254.0/24
add action=accept comment=telegram disabled=no dst-address=91.108.56.0/22
add action=accept comment=telegram disabled=no dst-address=74.82.91.0/24
add action=accept comment=telegram disabled=no dst-address=68.171.238.0/24
add action=accept comment=telegram disabled=no dst-address=91.108.56.0/22
add action=accept comment=bbm disabled=no dst-address=208.65.75.21
add action=accept comment=bbm disabled=no dst-address=208.65.75.22
add action=accept comment=bbm disabled=no dst-address=74.82.72.232/29
add action=accept comment=bbm disabled=no dst-address=178.239.90.232/29

Continue

Script DNS Service Mikrotik

Kali ini saya akan bagi tips bagi anda yang menggunakan DNS server local pada jaringan anda dengan menggunakan Mikrotik RouterOS. Setelah DNS Server anda konfigurasi ada kalanya saat ingin mengubah konfigurasi dns terjadi service off, yakni dns server tidak running sebagaimana mestinya, bisa jadi karena bug atau permasalahan yang lain. Solusinya, jalankan script berikut ini agar meminimalisir terjadinya down service dengan cara me-redirect sementara saat dns server kita down. Buatlah scheduler dengan script berikut ini :

# sesuaikan bagian ini
:local dns 27.131.2x.x
:local addrlist dns_aktif
:local interface ether5.DNS
# buat rule tangkap service dns jika belum ada
:if ([:len [/ip firewall filter find comment=cek-dns]] = 0) do={
   /ip firewall filter add action=add-src-to-address-list address-list=$addrlist address-list-timeout=10s chain=forward comment=cek-dns disabled=no in-interface=$interface protocol=udp src-address=$dns src-port=53
   }
# buat rule redirect dns jika dns server mati
:if ([:len [/ip firewall nat find comment=redirect-dns]] = 0) do={
   /ip firewall nat add action=dst-nat chain=dstnat comment=redirect-dns disabled=yes dst-address=$dns dst-port=53 protocol=udp to-addresses=208.67.220.220 to-ports=443
   }
# sensor dns diaktifkan
:if ([:len [/ip firewall address-list find list=$addrlist address=$dns] ] = 0) do={
   /ip firewall nat set [/ip firewall nat find comment=redirect-dns disabled=yes] disabled=no
   } else {
   /ip firewall nat set [/ip firewall nat find comment=redirect-dns disabled=no] disabled=yes
   }

Semoga Bermanfaat. 

Continue

ps_mem.py debian raspberry

root@dns:/home/pi # apt-get install gcc python-dev python-pip
root@dns:/home/pi # pip install ps_mem
Collecting ps_mem
  Downloading ps_mem-3.6.tar.gz
Building wheels for collected packages: ps-mem
  Running setup.py bdist_wheel for ps-mem ... done
  Stored in directory: /root/.cache/pip/wheels/62/da/b7/06050fabac6563945185c173835cd76dd2ccc273172eb3f5f7
Successfully built ps-mem
Installing collected packages: ps-mem
Successfully installed ps-mem-3.6

root@dns:/home/pi # wget https://raw.githubusercontent.com/pixelb/ps_mem/master/ps_mem.py
--2017-11-26 18:43:35--  https://raw.githubusercontent.com/pixelb/ps_mem/master/ps_mem.py
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.0.133, 151.101.64.133, 151.101.128.133, ...
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|151.101.0.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 22127 (22K) [text/plain]
Saving to: ‘ps_mem.py’
ps_mem.py    100%[============================================================================>]  21.61K  --.-KB/s    in 0.03s
2017-11-26 18:43:36 (818 KB/s) - ‘ps_mem.py’ saved [22127/22127]

root@dns:/home/pi # chmod 777 ps_mem.py

root@dns:/home/pi # ./ps_mem.py
 Private  +   Shared  =  RAM used       Program
316.0 KiB +  53.0 KiB = 369.0 KiB       sftp-server
276.0 KiB + 144.5 KiB = 420.5 KiB       cron
272.0 KiB + 204.5 KiB = 476.5 KiB       thd
392.0 KiB + 216.0 KiB = 608.0 KiB       agetty (2)
504.0 KiB + 395.0 KiB = 899.0 KiB       systemd-timesyncd
584.0 KiB + 478.0 KiB =   1.0 MiB       systemd-logind
740.0 KiB + 347.0 KiB =   1.1 MiB       dbus-daemon
304.0 KiB + 851.0 KiB =   1.1 MiB       avahi-daemon (2)
744.0 KiB + 509.0 KiB =   1.2 MiB       su (2)
800.0 KiB + 478.5 KiB =   1.2 MiB       (sd-pam)
  1.3 MiB + 154.5 KiB =   1.4 MiB       systemd-udevd
  1.3 MiB +  96.5 KiB =   1.4 MiB       rsyslogd
748.0 KiB + 864.0 KiB =   1.6 MiB       sudo (2)
  1.2 MiB + 430.0 KiB =   1.6 MiB       systemd-journald
  1.5 MiB +   2.2 MiB =   3.7 MiB       systemd (2)
  1.7 MiB +   5.5 MiB =   7.2 MiB       sshd (7)
 16.4 MiB +   1.4 MiB =  17.8 MiB       bash (4)
 11.7 MiB +   9.2 MiB =  20.9 MiB       apache2 (10)
 27.6 MiB + 986.5 KiB =  28.5 MiB       unbound
---------------------------------
                         92.6 MiB
=================================
Warning: Swap is not reported by this system.

Continue