Logwatch is a modular log analyser that runs every night and mails you the results. It can also be run from command line.The output is by service and you can limit the output to one particular service. The subscripts which are responsible for the output, mostly convert the raw log lines in structured format.
Logwatch generally ignores the time component in the output, that means, you will know that the reported event was logged in the requested range of time, but you will have to go to the raw log files to get the exact details.
Install logwatch using the following command :-
# sudo apt-get install logwatch
Configuring Logwatch
First you need to make sure you server is able to send the mails outside you can do this using postfix with SMTP server configuration
Now you need to edit logwatch.conf file:-
# sudo nano /usr/share/logwatch/default.conf/logwatch.conf
Change the following information to suit your need:-
Output = mail
Format = html
MailTo = your_email@email.com
Save and exit the file.
Now edit the 00logwatch file:-
# sudo nano /etc/cron.daily/00logwatch
and add the following line :-
/usr/sbin/logwatch --mailto your_email@email.com
Save and exit the file.
This tool is very useful give it a try fellas!.
Note:-If you want to know more available options check logcheck manpage using the following command from your terminal.
# man logcheck
Showing posts with label Ubuntu Stuff. Show all posts
Showing posts with label Ubuntu Stuff. Show all posts
Thursday, August 12, 2010
Tuesday, August 3, 2010
Install Awstats on Ubuntu 10.04
AWStats is a free powerful and featureful tool that generates advanced web, streaming, ftp or mail server statistics, graphically. This log analyzer works as a CGI or from command line and shows you all possible information your log contains, in few graphical web pages. It uses a partial information file to be able to process large log files, often and quickly. It can analyze log files from all major server tools like Apache log files (NCSA combined/XLF/ELF log format or common/CLF log format), WebStar, IIS (W3C log format) and a lot of other web, proxy, wap, streaming servers, mail servers and some ftp servers.
This is how to install Awstats on Ubuntu 10.04 :-
Go to the terminal or ssh to your terminal. :- ssh 10.23.140.222 -l dzul
note change to your server ip or domain, in my case is 10.23.140.222 which is my testing server.
Then issue this command :-
sudo apt-get install awstats
If you to see the country of your visitors then :-
sudo apt-get install libnet-ip-perl
sudo apt-get install libgeo-ipfree-perl
Now we need to configure the Apache to works with awstats. Let's assume you want to analyze the Apache 2 log file of your website “yourdomain.com” (It can be just an IP address).
Create configuration file :-
sudo cp /etc/awstats/awstats.conf /etc/awstats/awstats.yourdomain.com.conf
and update these parameters :-
# apache2
LogFile="/var/log/apache2/access.log"
# domain name
SiteDomain="yourdomain.com"
HostAliases="localhost 127.0.0.1 yourdomain.com"
LogFormat=1
LoadPlugin="tooltips
LoadPlugin="geoipfree"
NOw we to run our awstats by issuing the following command :-
sudo /usr/lib/cgi-bin/awstats.pl -config=yourdomain.com -update
You should see the output something like this :-
Create/Update database for config "/etc/awstats/awstats.yourdomain.com.conf" by AWStats version 6.9(build 1.892)
From data in log file "/var/log/apache2/access.log"...
Phase 1 : First bypass old records, searching new record...
Searching new records from beginning of log file...
Phase 2 : Now process new records (Flush history on disk after 20000 hosts)...
Jumped lines in file: 0
Parsed lines in file: 191338
Found 0 dropped records,
Found 24 corrupted records,
Found 0 old records,
Found 191314 new qualified records.
After that we need to configure Apache to view the statistics. Create a file call statistics at /etc/apache2/conf.d/ directory.
cd /etc/apache2/conf.d/
nano -w statistics
and add the following parameters to that file.
Alias /awstatsclasses "/usr/share/awstats/lib/"
Alias /awstats-icon/ "/usr/share/awstats/icon/"
Alias /awstatscss "/usr/share/doc/awstats/examples/css"
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
ScriptAlias /statistics/ /usr/lib/cgi-bin/
Options ExecCGI -MultiViews +SymLinksIfOwnerMatch
restart your apache :-
sudo /etc/init.d/apache2 restart
if anything goes well, you're done.
To view your statistics, point to your browser like this :-
http://yourdomain.com/statistics/awstats.pl?
If you have more than one config file, then point to your browser like this :-
http://yourdomain.com/statistics/awstats.pl?config=yourdomain.com
Lastly edit your crontab and add the following parameter:-
# update every 10 min
*/10 * * * * root /usr/lib/cgi-bin/awstats.pl -config=yourdomain.com -update > /dev/null
:) Viola. Give it a try!
This is how to install Awstats on Ubuntu 10.04 :-
Go to the terminal or ssh to your terminal. :- ssh 10.23.140.222 -l dzul
note change to your server ip or domain, in my case is 10.23.140.222 which is my testing server.
Then issue this command :-
sudo apt-get install awstats
If you to see the country of your visitors then :-
sudo apt-get install libnet-ip-perl
sudo apt-get install libgeo-ipfree-perl
Now we need to configure the Apache to works with awstats. Let's assume you want to analyze the Apache 2 log file of your website “yourdomain.com” (It can be just an IP address).
Create configuration file :-
sudo cp /etc/awstats/awstats.conf /etc/awstats/awstats.yourdomain.com.conf
and update these parameters :-
# apache2
LogFile="/var/log/apache2/access.log"
# domain name
SiteDomain="yourdomain.com"
HostAliases="localhost 127.0.0.1 yourdomain.com"
LogFormat=1
LoadPlugin="tooltips
LoadPlugin="geoipfree"
NOw we to run our awstats by issuing the following command :-
sudo /usr/lib/cgi-bin/awstats.pl -config=yourdomain.com -update
You should see the output something like this :-
Create/Update database for config "/etc/awstats/awstats.yourdomain.com.conf" by AWStats version 6.9(build 1.892)
From data in log file "/var/log/apache2/access.log"...
Phase 1 : First bypass old records, searching new record...
Searching new records from beginning of log file...
Phase 2 : Now process new records (Flush history on disk after 20000 hosts)...
Jumped lines in file: 0
Parsed lines in file: 191338
Found 0 dropped records,
Found 24 corrupted records,
Found 0 old records,
Found 191314 new qualified records.
After that we need to configure Apache to view the statistics. Create a file call statistics at /etc/apache2/conf.d/ directory.
cd /etc/apache2/conf.d/
nano -w statistics
and add the following parameters to that file.
Alias /awstatsclasses "/usr/share/awstats/lib/"
Alias /awstats-icon/ "/usr/share/awstats/icon/"
Alias /awstatscss "/usr/share/doc/awstats/examples/css"
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
ScriptAlias /statistics/ /usr/lib/cgi-bin/
Options ExecCGI -MultiViews +SymLinksIfOwnerMatch
restart your apache :-
sudo /etc/init.d/apache2 restart
if anything goes well, you're done.
To view your statistics, point to your browser like this :-
http://yourdomain.com/statistics/awstats.pl?
If you have more than one config file, then point to your browser like this :-
http://yourdomain.com/statistics/awstats.pl?config=yourdomain.com
Lastly edit your crontab and add the following parameter:-
# update every 10 min
*/10 * * * * root /usr/lib/cgi-bin/awstats.pl -config=yourdomain.com -update > /dev/null
:) Viola. Give it a try!
Monday, August 2, 2010
Make your Ubuntu Lucid Lynx look pretty.... :)
How to make your Ubuntu look pretty? Nice themes or even look like MacOSX interfaces? This is how i done it.
Open terminal and and add the stable repository :-
sudo add-apt-repository ppa:bisigi/ppa
enter your password and wait for a while.
then update your apt-get :-
sudo apt-get update
enter your password
then :-
sudo apt-get install bisigi-themes
enter your password and wait till finish.
Now your can change your Ubuntu appearances by right click at your desktop - change desktop background and select your prefer themes there. You can also use system - preferences - appearance. :)
Open terminal and and add the stable repository :-
sudo add-apt-repository ppa:bisigi/ppa
enter your password and wait for a while.
then update your apt-get :-
sudo apt-get update
enter your password
then :-
sudo apt-get install bisigi-themes
enter your password and wait till finish.
Now your can change your Ubuntu appearances by right click at your desktop - change desktop background and select your prefer themes there. You can also use system - preferences - appearance. :)
Sunday, August 1, 2010
How To Install And Configure GreenSQL In Ubuntu 9.10
GreenSQL is an Open Source database firewall used to protect databases from SQL injection attacks. GreenSQL works as a proxy for SQL commands and has built in support for MySQL & PostgreSQL . The logic is based on evaluation of SQL commands using a risk scoring matrix as well as blocking known db administrative commands (DROP, CREATE, etc). GreenSQL is distributed under the GPL license.
Installation:
1. Download its source code from its web.
2. Install the needed packages: apt-get install libevent-1.4-2 libpcre3 libmysqlclient15off libpq5 libmysqlclient15-dev libevent-dev libpcre3-dev libpcre3 libpq-dev flex g++ bison build-essential
3. Uncompress it: tar xvfz greensql-fw_*.tar.gz
4. Enter its directory: cd greensql-fw_*
5. Build the deb package: ./build.sh
6. Install the deb package (as root): cd .. && dpkg -i greensql-fw*.deb
7. Answer the questions to connect GreenSQL to your database
Configuration (using Apache):
1. Enter GreenSQL directory: cd /usr/share/greensql-fw
2. Set the right permissions to templates_c : chgrp -R www-data templates_c && chmod -R 770 templates_c
3. Create the file /etc/apache2/conf.d/greensql with the following content(replace [ and ] for angle brackets):
Alias /greensql /usr/share/greensql-fw
[Directory /greensql]
Order deny,allow
Deny from all
Allow from 127.0.0.1
[/Directory]
4. Restart Apache: apache2ctl restart.
5. Access GreenSQL using your web browser (default user is admin and default password is pwd):
http://localhost/greensql
Change the default admin’s password.
Edit GreenSQL configuration to fit your needs.
NOTE : Change "localhost" to your domain name.
How to use:
To use GreenSQL, you have to change the configuration of the applications which connect to your database and point them to the computer where you have installed GreenSQL (localhost in this case) and the port where GreenSQL is running (3305 in my case to proxy my MySQL database). You can test whether it is working connecting to your database and creating a table (it should appear as an alert named “Detected attempt to create database/table/index” in GreenSQL and it should be blocked if you didn’t change the IPS option).
Example:
mysql -u root -h 127.0.0.1 -P 3305 -p
CREATE TABLE greensql_test;
note : if you're running joomla, u need change your configuration setting to look like this :-
var $host = 'localhost'; to var $host = '127.0.0.1:3305';
Now we can go green with greensql. :)
Installation:
1. Download its source code from its web.
2. Install the needed packages: apt-get install libevent-1.4-2 libpcre3 libmysqlclient15off libpq5 libmysqlclient15-dev libevent-dev libpcre3-dev libpcre3 libpq-dev flex g++ bison build-essential
3. Uncompress it: tar xvfz greensql-fw_*.tar.gz
4. Enter its directory: cd greensql-fw_*
5. Build the deb package: ./build.sh
6. Install the deb package (as root): cd .. && dpkg -i greensql-fw*.deb
7. Answer the questions to connect GreenSQL to your database
Configuration (using Apache):
1. Enter GreenSQL directory: cd /usr/share/greensql-fw
2. Set the right permissions to templates_c : chgrp -R www-data templates_c && chmod -R 770 templates_c
3. Create the file /etc/apache2/conf.d/greensql with the following content(replace [ and ] for angle brackets):
Alias /greensql /usr/share/greensql-fw
[Directory /greensql]
Order deny,allow
Deny from all
Allow from 127.0.0.1
[/Directory]
4. Restart Apache: apache2ctl restart.
5. Access GreenSQL using your web browser (default user is admin and default password is pwd):
http://localhost/greensql
Change the default admin’s password.
Edit GreenSQL configuration to fit your needs.
NOTE : Change "localhost" to your domain name.
How to use:
To use GreenSQL, you have to change the configuration of the applications which connect to your database and point them to the computer where you have installed GreenSQL (localhost in this case) and the port where GreenSQL is running (3305 in my case to proxy my MySQL database). You can test whether it is working connecting to your database and creating a table (it should appear as an alert named “Detected attempt to create database/table/index” in GreenSQL and it should be blocked if you didn’t change the IPS option).
Example:
mysql -u root -h 127.0.0.1 -P 3305 -p
CREATE TABLE greensql_test;
note : if you're running joomla, u need change your configuration setting to look like this :-
var $host = 'localhost'; to var $host = '127.0.0.1:3305';
Now we can go green with greensql. :)
Thursday, July 29, 2010
ffmpeg is cool!!! :)
What can i say about ffmpeg? This tool makes my life so much easier in terms of converting media into your desire files extension. No need to twist your head again and spend your tones of time to search free apps or shareware apps to convert your media.
By the way ffmpeg is a free software / open source project that produces libraries and programs for handling multimedia data and publishes them under the GNU Lesser General Public License or GNU General Public License (depending on which options are enabled). The most notable parts of FFmpeg are libavcodec, an audio/video codec library used by several other projects, libavformat, an audio/video container mux and demux library, and the ffmpeg command line program for transcoding multimedia files.
Below are a bunch of ffmpeg command lines that will do just about everything you need.
1. If you want to get an info about your media/videos issues the following command :-
# ffmpeg -i name_of_videos.avi
2. If you want to turn a sequence of images into video, then :-
# ffmpeg -f image2 -i image%d.jpg video.mpg
3. Turn a video into a sequence of images, then :-
# ffmpeg -i video.mpg image%d.jpg
4. Encode your video for Ipod/IPhone
# ffmpeg -i source_video_file.avi -acodec aac -ab 128kb -vcodec mpeg4 -b 1200kb -mbd 2 -flags +4mv -trell 1 -aic 2 -cmp 2 -subcmp 2 -s 320x180 -title X output_file.mp4
5. Encode your video for PSP
# ffmpeg -i source_video_file.avi -b 300 -s 320x240 -vcodec xvid -ab 32 -ar 24000 -acodec aac output_file.mp4
you can try this commmand :-
# ffmpeg -i "OriginalFile.avi" -f psp -r 29.97 -b 768k -ar 24000 -ab 64k -s 320x240 "OutputFile.mp4"
6. Extract audio from a video file and save it as mp3 format
# ffmpeg -i source_video_file.avi -vn -ar 44100 -ac 2 -ab 192 -f mp3 output_file.mp3
7. Convert a wave file to mp3
# ffmpeg -i original_audio_file.avi -vn -ar 44100 -ac 2 -ab 192 -f mp3 output_file.mp3
8. Convert a avi video to mpeg
# ffmpeg -i original_movie.avi output_file.mpg
9. Convert a mpeg video to avi
# ffmpeg -i original_movie.mpg output_file.avi
10. Convert a avi video to uncompressed animated gif
# ffmpeg -i original_movie.avi output_file.gif
11. Add audio to an existing video-only file (mix audio and video)
# ffmpeg -i son.wav -i original_movie.avi output_file.mpg
12. Convert a avi video to flv (flash video)
# ffmpeg -i original_movie.avi -ab 56 -ar 44100 -b 200 -r 15 -s 320x240 -f flv output_file.flv
13. Convert a flv video to mpeg
# ffmpeg -i myFile.flv -ab 56 -ar 22050 -b 500 -s 320x240 myFile.mpg
14. Convert a avi video to dv
# ffmpeg -i original_movie.avi -s ntsc -r ntsc -aspect 4:3 -ar 48000 -ac 2 output_file.dv
15. Convert a avi video to mpeg specifically for DVD creation
# ffmpeg -i source_video.avi -target ntsc-dvd -ps 2000000000 -aspect 16:9 finale_video.mpeg
16. Compress a avi video to Divx
# ffmpeg -i original_movie.avi -s 320x240 -vcodec msmpeg4v2 output_file.avi
17. Convert a Ogg Theora video to mpeg specifically for DVD creation
# ffmpeg -i original_movie.ogm -s 720x576 -vcodec mpeg2video -acodec mp3 output_file.mpg
18. Convert a avi video to mpeg2 for SVCD creation
# ffmpeg -i original_movie.avi -target ntsc-svcd output_file.mpg
19. Convert a avi video to mpeg2 for VCD creation
# ffmpeg -i original_movie.avi -target ntsc-vcd output_file.mpg
Viola...
By the way ffmpeg is a free software / open source project that produces libraries and programs for handling multimedia data and publishes them under the GNU Lesser General Public License or GNU General Public License (depending on which options are enabled). The most notable parts of FFmpeg are libavcodec, an audio/video codec library used by several other projects, libavformat, an audio/video container mux and demux library, and the ffmpeg command line program for transcoding multimedia files.
Below are a bunch of ffmpeg command lines that will do just about everything you need.
1. If you want to get an info about your media/videos issues the following command :-
# ffmpeg -i name_of_videos.avi
2. If you want to turn a sequence of images into video, then :-
# ffmpeg -f image2 -i image%d.jpg video.mpg
3. Turn a video into a sequence of images, then :-
# ffmpeg -i video.mpg image%d.jpg
4. Encode your video for Ipod/IPhone
# ffmpeg -i source_video_file.avi -acodec aac -ab 128kb -vcodec mpeg4 -b 1200kb -mbd 2 -flags +4mv -trell 1 -aic 2 -cmp 2 -subcmp 2 -s 320x180 -title X output_file.mp4
5. Encode your video for PSP
# ffmpeg -i source_video_file.avi -b 300 -s 320x240 -vcodec xvid -ab 32 -ar 24000 -acodec aac output_file.mp4
you can try this commmand :-
# ffmpeg -i "OriginalFile.avi" -f psp -r 29.97 -b 768k -ar 24000 -ab 64k -s 320x240 "OutputFile.mp4"
6. Extract audio from a video file and save it as mp3 format
# ffmpeg -i source_video_file.avi -vn -ar 44100 -ac 2 -ab 192 -f mp3 output_file.mp3
7. Convert a wave file to mp3
# ffmpeg -i original_audio_file.avi -vn -ar 44100 -ac 2 -ab 192 -f mp3 output_file.mp3
8. Convert a avi video to mpeg
# ffmpeg -i original_movie.avi output_file.mpg
9. Convert a mpeg video to avi
# ffmpeg -i original_movie.mpg output_file.avi
10. Convert a avi video to uncompressed animated gif
# ffmpeg -i original_movie.avi output_file.gif
11. Add audio to an existing video-only file (mix audio and video)
# ffmpeg -i son.wav -i original_movie.avi output_file.mpg
12. Convert a avi video to flv (flash video)
# ffmpeg -i original_movie.avi -ab 56 -ar 44100 -b 200 -r 15 -s 320x240 -f flv output_file.flv
13. Convert a flv video to mpeg
# ffmpeg -i myFile.flv -ab 56 -ar 22050 -b 500 -s 320x240 myFile.mpg
14. Convert a avi video to dv
# ffmpeg -i original_movie.avi -s ntsc -r ntsc -aspect 4:3 -ar 48000 -ac 2 output_file.dv
15. Convert a avi video to mpeg specifically for DVD creation
# ffmpeg -i source_video.avi -target ntsc-dvd -ps 2000000000 -aspect 16:9 finale_video.mpeg
16. Compress a avi video to Divx
# ffmpeg -i original_movie.avi -s 320x240 -vcodec msmpeg4v2 output_file.avi
17. Convert a Ogg Theora video to mpeg specifically for DVD creation
# ffmpeg -i original_movie.ogm -s 720x576 -vcodec mpeg2video -acodec mp3 output_file.mpg
18. Convert a avi video to mpeg2 for SVCD creation
# ffmpeg -i original_movie.avi -target ntsc-svcd output_file.mpg
19. Convert a avi video to mpeg2 for VCD creation
# ffmpeg -i original_movie.avi -target ntsc-vcd output_file.mpg
Viola...
Sunday, July 11, 2010
Downloading youtube videos without 3rd party plug-ins.
:) Another lazy Sunday morning.
But i've got a beautiful trick about how to download youtube videos without any 3rd party plug-ins installed. This trick can be achieved only using Ubuntu desktop edition. I'm using Ubuntu Lucid Lynx 10.04. Maybe this trick can be applied to other linux variants. So if you're using windows, just ignore this trick :)
OK, now get online and open your lovely browser firefox. Get in into your youtube videos. Just let it stream till end. After that, go to your filesystem and browse to your temp directory. There's one *.flv or even *.mp4 file in it. Copy and save it to your preferred directory and you're done!
:) this is so simple and no need to think about plug-ins!
NOte: for ubuntu users, if you want to use plug-ins to download youtube videos, try "unplug" for firefox.
But i've got a beautiful trick about how to download youtube videos without any 3rd party plug-ins installed. This trick can be achieved only using Ubuntu desktop edition. I'm using Ubuntu Lucid Lynx 10.04. Maybe this trick can be applied to other linux variants. So if you're using windows, just ignore this trick :)
OK, now get online and open your lovely browser firefox. Get in into your youtube videos. Just let it stream till end. After that, go to your filesystem and browse to your temp directory. There's one *.flv or even *.mp4 file in it. Copy and save it to your preferred directory and you're done!
:) this is so simple and no need to think about plug-ins!
NOte: for ubuntu users, if you want to use plug-ins to download youtube videos, try "unplug" for firefox.
Monday, July 5, 2010
How to Create Bootable Linux USB Flash/Pen Drive from Windows
Most of the popular Linux distributions these days offer live cd so that you can feel how their distribution feels before you can install it on your computer. If you're booting Linux using live CD the system takes ages to boot and applications installed feel sluggish as the optical drive offers lower data transfer rates. But if the same live cd is copied to a USB drive and made bootable then the system feels real fast as if you are booting from a hard disk drive.
There are several ways in which you can create bootable Linux drive, some of them requires lot of steps to be followed. In this post we see how we can create a bootable Linux USB drive from within Windows.
Prerequisite:
1. Windows XP or Windows Vista based host operating computer
2. USB Flash/Pen drive.
3. Get Universal USB Installer from http://www.pendrivelinux.com/
4. A computer that is capable for booting from USB devices.
How to Create Bootable Linux USB Flash/Pen Drive
1. Download the version of Linux that you wish to install in USB drive. In this post we have taken Ubuntu 9.10 ISO file that we downloaded from Internet.
2. Open the Universal USB Installer, click run when prompted.
3. If the security dialog appears, confirm by clicking 'Run'
4. Read the licence agreement and choose 'I Agree' to continue
5. Select Ubuntu Desktop Edition from the dropdown list
6. Click 'Browse' and open the downloaded ISO file
7. Choose the USB drive and click 'Create'
8. Wait till it's finish.
note : make sure your safely remove your thumb drive after it's done.
note : you also can try using UNetbootin software to replace Universal USB Installer.
Now you're ready to bring along your favourite linux OS into your thumb drive wherever you go! :)
There are several ways in which you can create bootable Linux drive, some of them requires lot of steps to be followed. In this post we see how we can create a bootable Linux USB drive from within Windows.
Prerequisite:
1. Windows XP or Windows Vista based host operating computer
2. USB Flash/Pen drive.
3. Get Universal USB Installer from http://www.pendrivelinux.com/
4. A computer that is capable for booting from USB devices.
How to Create Bootable Linux USB Flash/Pen Drive
1. Download the version of Linux that you wish to install in USB drive. In this post we have taken Ubuntu 9.10 ISO file that we downloaded from Internet.
2. Open the Universal USB Installer, click run when prompted.
3. If the security dialog appears, confirm by clicking 'Run'
4. Read the licence agreement and choose 'I Agree' to continue
5. Select Ubuntu Desktop Edition from the dropdown list
6. Click 'Browse' and open the downloaded ISO file
7. Choose the USB drive and click 'Create'
8. Wait till it's finish.
note : make sure your safely remove your thumb drive after it's done.
note : you also can try using UNetbootin software to replace Universal USB Installer.
Now you're ready to bring along your favourite linux OS into your thumb drive wherever you go! :)
Changing your default apache publishing directory
Hi, :)
Always change the default setting. That's a word my friend always told me. Ok now i will show you how to edit the default apache 2 publishing directory. By the way, this howto is on ubuntu 10.04 server edition. It can be applied to ubuntu 9.10, 9.04, 8.10 and 8.04. NOt so sure for the older version of it.
Ubuntu have its own way to manage the apache files. They splitted httpd files into files called mods_available, sites_available and so on. That means, there's no single file named httpd.conf anymore.All that files stored nicely at /etc/apache2/
From our default installation for LAMP Server, our website or apps will be stored at /var/www/. Almost every version of ubuntu is the same. NOw for extra security, we need to change this directory to our own directory. Here is how i done it :-
# ssh into your server, for example :- ssh 10.23.140.222 -l dzul
# after successfully login, switch to root by issuing the following command ,
sudo su
and enter your password once again
you're now root!
then cd to /etc/apache2 dir
then go directory name sites_available
now, make sure you have two files on it, which is default and default-ssl
we need to edit the default file, so at the terminal :-
# nano default
[nano is the editor, it is up to you to use other editor like vi or vim.]
make some changes there.
let say you wanted to host your file at /var/web/dzul then you the change the line /var/www to /var/web/dzul
ctrl+x to save
now make your directory under /var
# mkdir web
# cd web
# mkdir dzul
# cd dzul
# pwd
# /var/web/dzul
now your /var/web/dzul is created.
it's time to restart the apache service.
# /etc/init.d/apache2 restart
If there's no errors, you're successfully make changes of ubuntu apache default publishing directory. Get your files and dump it into /var/web/dzul
But before that you need to chown and chmod user dzul to use that directory. Remember, ONLY root can access everything in your system. To accomplish that, issue the following command :-
# chown root:dzul /var/web/dzul/
# chmod g+w /var/web/dzul/
now you're ready to rock!
Always change the default setting. That's a word my friend always told me. Ok now i will show you how to edit the default apache 2 publishing directory. By the way, this howto is on ubuntu 10.04 server edition. It can be applied to ubuntu 9.10, 9.04, 8.10 and 8.04. NOt so sure for the older version of it.
Ubuntu have its own way to manage the apache files. They splitted httpd files into files called mods_available, sites_available and so on. That means, there's no single file named httpd.conf anymore.All that files stored nicely at /etc/apache2/
From our default installation for LAMP Server, our website or apps will be stored at /var/www/. Almost every version of ubuntu is the same. NOw for extra security, we need to change this directory to our own directory. Here is how i done it :-
# ssh into your server, for example :- ssh 10.23.140.222 -l dzul
# after successfully login, switch to root by issuing the following command ,
sudo su
and enter your password once again
you're now root!
then cd to /etc/apache2 dir
then go directory name sites_available
now, make sure you have two files on it, which is default and default-ssl
we need to edit the default file, so at the terminal :-
# nano default
[nano is the editor, it is up to you to use other editor like vi or vim.]
make some changes there.
let say you wanted to host your file at /var/web/dzul then you the change the line /var/www to /var/web/dzul
ctrl+x to save
now make your directory under /var
# mkdir web
# cd web
# mkdir dzul
# cd dzul
# pwd
# /var/web/dzul
now your /var/web/dzul is created.
it's time to restart the apache service.
# /etc/init.d/apache2 restart
If there's no errors, you're successfully make changes of ubuntu apache default publishing directory. Get your files and dump it into /var/web/dzul
But before that you need to chown and chmod user dzul to use that directory. Remember, ONLY root can access everything in your system. To accomplish that, issue the following command :-
# chown root:dzul /var/web/dzul/
# chmod g+w /var/web/dzul/
now you're ready to rock!
Installing phpmyadmin on ubuntu server 10.04 lucid lynx
This is a simplest steps. Ubuntu always simple as you like. :)
Ssh into your server :-
for exmple :- ssh 10.23.140.222 -l dzul
enter your password and issue the following cmd :-
# sudo apt-get install phpmyadmin
just follow the instructions
select the webserver which is apache.
enter the password, same as your mysql root password from your installation before.
after that, go to your browser, and enter http://10.23.140.222/phpmyadmin
viola!
Ssh into your server :-
for exmple :- ssh 10.23.140.222 -l dzul
enter your password and issue the following cmd :-
# sudo apt-get install phpmyadmin
just follow the instructions
select the webserver which is apache.
enter the password, same as your mysql root password from your installation before.
after that, go to your browser, and enter http://10.23.140.222/phpmyadmin
viola!
Setting Up Webserver using Ubuntu 10.04 [part 3]
Now you're just installed a webserver with ssh at ubuntu 10.04. So what to do next? Are you feel safe enough running your apps/website with this default installation. Please don't.
We need to make your server/system running in maximum security before you can get into out of space! :)
We have SSH installed. That means you can manage your server remotely. [Make sure your Firewall allow your passage to get there].You may say that you're installing a fresh and new ubuntu system, but we need to upgrade first. login in your server using SSH. :-
# ssh 10.23.140.222 -l dzul
at the terminal, get into root privileges by issuing the "sudo su" and enter your password once again
after that :-
# apt-get upgrade
# apt-get update
and then follow my previous article about hardening ubuntu 9.04 here :-
http://rudyisskankin.blogspot.com/2010/07/hardening-your-apache-and-php-on-ubuntu.html
if you're successfully done that, give your peace of mind to get online.
note : hardening your system is a ingoing process, so explore your system well and check for open port regularly.
We need to make your server/system running in maximum security before you can get into out of space! :)
We have SSH installed. That means you can manage your server remotely. [Make sure your Firewall allow your passage to get there].You may say that you're installing a fresh and new ubuntu system, but we need to upgrade first. login in your server using SSH. :-
# ssh 10.23.140.222 -l dzul
at the terminal, get into root privileges by issuing the "sudo su" and enter your password once again
after that :-
# apt-get upgrade
# apt-get update
and then follow my previous article about hardening ubuntu 9.04 here :-
http://rudyisskankin.blogspot.com/2010/07/hardening-your-apache-and-php-on-ubuntu.html
if you're successfully done that, give your peace of mind to get online.
note : hardening your system is a ingoing process, so explore your system well and check for open port regularly.
Setting Up Webserver using Ubuntu 10.04 [part 2]
10. Now you have to partition your hard disk. For simplicity's sake I select Guided - use entire disk - if you know what you're doing, you can also set up your partitions manually).
note : i always use guided - use entire disk [without to setup any LVM] I'll tell you why later in the other post. :)
11.Select the disk that you want to partition.
13.When you're finished, hit Yes when you're asked Write the changes to disks?
14.Afterwards, your new partitions are being created and formatted.
15. Now the base system is being installed.
16.Create a user, for example the user dzul with the user name dzul (don't use the user name admin as it is a reserved name on Ubuntu 10.04) and you'll be asked to make a password for that user. Enter your desire password with strong combination of chars. :)
17. I don't need an encrypted private directory, so I choose No here.
18. Next the package manager apt gets configured. Leave the HTTP proxy line empty unless you're using a proxy server to connect to the Internet. In my case, i have no proxy server to get online. By the way, apt-get is a package manager for ubuntu.
18. I like to update my package manually due to contraints of my apps, therefore I select No automatic updates. Of course, it's up to you what you select here. If you're lazy enough, then select automatic update.
19. I just need a LAMP Serevr and OpenSSH Server. Then continue.
20. Then installation continue, and prompting you a password for you to administer your mysql dabatase. Enter your password and continue.
21. The last past is just to get your installation complete by setting up GRUB bootloader.Select Yes when you are asked Install the GRUB boot loader to the master boot record?
22. If somehow it fail, go to plan B and try to use older boot loader which LILO. LILO is never fail, trust me but it loads more memory for booting up your machine.
23. The base system installation is now finished. Remove the installation CD from the CD drive and hit Continue to reboot the system.
Now you have successfully installed webserver using ubuntu 10.04. It's a ready to get online now, but i recommend to make some hardening first and do a post-installation configuration. Continue your reading to part 3 of this tutorial...
note : i always use guided - use entire disk [without to setup any LVM] I'll tell you why later in the other post. :)
11.Select the disk that you want to partition.
13.When you're finished, hit Yes when you're asked Write the changes to disks?
14.Afterwards, your new partitions are being created and formatted.
15. Now the base system is being installed.
16.Create a user, for example the user dzul with the user name dzul (don't use the user name admin as it is a reserved name on Ubuntu 10.04) and you'll be asked to make a password for that user. Enter your desire password with strong combination of chars. :)
17. I don't need an encrypted private directory, so I choose No here.
18. Next the package manager apt gets configured. Leave the HTTP proxy line empty unless you're using a proxy server to connect to the Internet. In my case, i have no proxy server to get online. By the way, apt-get is a package manager for ubuntu.
18. I like to update my package manually due to contraints of my apps, therefore I select No automatic updates. Of course, it's up to you what you select here. If you're lazy enough, then select automatic update.
19. I just need a LAMP Serevr and OpenSSH Server. Then continue.
20. Then installation continue, and prompting you a password for you to administer your mysql dabatase. Enter your password and continue.
21. The last past is just to get your installation complete by setting up GRUB bootloader.Select Yes when you are asked Install the GRUB boot loader to the master boot record?
22. If somehow it fail, go to plan B and try to use older boot loader which LILO. LILO is never fail, trust me but it loads more memory for booting up your machine.
23. The base system installation is now finished. Remove the installation CD from the CD drive and hit Continue to reboot the system.
Now you have successfully installed webserver using ubuntu 10.04. It's a ready to get online now, but i recommend to make some hardening first and do a post-installation configuration. Continue your reading to part 3 of this tutorial...
Setting Up Webserver using Ubuntu 10.04 [part 1]
Good day.This tutorial shows how to set up an Ubuntu Lucid Lynx (Ubuntu 10.04) server that offers all services needed by ISPs and hosters: Apache web server (SSL-capable), Postfix mail server with SMTP-AUTH and TLS, BIND DNS server, Proftpd FTP server, MySQL server, Courier POP3/IMAP, Quota, Firewall, etc. In the end you should have a system that works reliably, and if you like you can install the free webhosting control panel ISPConfig 2 (i.e., ISPConfig runs on it out of the box).
But in this tutorial, i just show you how to install apache/mysql/php in your server. Maybe i'll write another article to cover it up. :) Also i'll show a little configuration after installation before you can get your webpage online safely.
Ok let get started here :-
To install such a system you will need the following:
* the Ubuntu 10.04 server CD, available here:
http://releases.ubuntu.com/releases/10.04/ubuntu-10.04-server-i386.iso (i386) or http://releases.ubuntu.com/releases/10.04/ubuntu-10.04-server-amd64.iso (x86_64)
Just download that iso file and burn it into a blank cd or dvd.
Before you can go to installation process, make sure you have an IP address for your server.
NOw follow the steps below:-
1. Insert your Ubuntu install CD/DVD into your system and boot from it. If your machine your recognise it, you must check and make sure your boot sequence is reading CD or DVD in a first place.
2. Select your language.
3.Then select Install Ubuntu Server:
4.Choose your language again (? why ubuntu asking your language again):
5. Then select your location:
6. Choose a keyboard layout (you will be asked to press a few keys, and the installer will try to detect your keyboard layout based on the keys you pressed):
Note: I always ignoring this options and just set my keyboard layout to follow US type of keyboard. For Malaysia users, it is ok.
7.The installer checks the installation CD, your hardware, and configures the network with DHCP if there is a DHCP server in the network:
If you're not using dhcp, you need to set up manually your network setting. Choose manually and add your ip address accordingly.
8. Enter the hostname. In this example, my system is called testing.kppk.gov.my, so I enter testing
9. Please check if the installer detected your time zone correctly. If so, select Yes, otherwise No. If your time zone is zero, that means your system have no time zone. You need to select no and make some changes to get the right time zone for you.
///to be continued...
But in this tutorial, i just show you how to install apache/mysql/php in your server. Maybe i'll write another article to cover it up. :) Also i'll show a little configuration after installation before you can get your webpage online safely.
Ok let get started here :-
To install such a system you will need the following:
* the Ubuntu 10.04 server CD, available here:
http://releases.ubuntu.com/releases/10.04/ubuntu-10.04-server-i386.iso (i386) or http://releases.ubuntu.com/releases/10.04/ubuntu-10.04-server-amd64.iso (x86_64)
Just download that iso file and burn it into a blank cd or dvd.
Before you can go to installation process, make sure you have an IP address for your server.
NOw follow the steps below:-
1. Insert your Ubuntu install CD/DVD into your system and boot from it. If your machine your recognise it, you must check and make sure your boot sequence is reading CD or DVD in a first place.
2. Select your language.
3.Then select Install Ubuntu Server:
4.Choose your language again (? why ubuntu asking your language again):
5. Then select your location:
6. Choose a keyboard layout (you will be asked to press a few keys, and the installer will try to detect your keyboard layout based on the keys you pressed):
Note: I always ignoring this options and just set my keyboard layout to follow US type of keyboard. For Malaysia users, it is ok.
7.The installer checks the installation CD, your hardware, and configures the network with DHCP if there is a DHCP server in the network:
If you're not using dhcp, you need to set up manually your network setting. Choose manually and add your ip address accordingly.
8. Enter the hostname. In this example, my system is called testing.kppk.gov.my, so I enter testing
9. Please check if the installer detected your time zone correctly. If so, select Yes, otherwise No. If your time zone is zero, that means your system have no time zone. You need to select no and make some changes to get the right time zone for you.
///to be continued...
Sunday, July 4, 2010
Hardening your Apache and PHP on Ubuntu 9.04 Server
You have installed LAMP and OpenSSH on your Ubuntu 9.04 Server. The first thing to do is to harden it in order to avoid some kind of attacks. You can do the following steps in front of your Ubuntu 9.04 Server or remote access it via OpenSSH.
For OpenSSH, your Ubuntu 9.04 Server is at 10.23.140.222 :
ssh 10.23.140.222 -l dzul
Step 1 :
The avoid someone to list your files on your Apache directory, you should do the following step.
sudo nano /etc/apache2/sites-available/default
Add a minus "-" in the front of "Indexes" and it will looking like this :
Options -Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
Step 2 :
To enable the rewrite module of Apache.
sudo a2enmod rewrite
To avoid Cross-Site-Tracing attack. Add the following lines within "" :
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]
Step 3 :
To avoid HTTP DoS, DDoS or Brute Force attack, you should install this module.
sudo apt-get install libapache2-mod-evasive
Step 4 :
To screen out bad URL requests, such as /etc/shadow or MySQL injection and etc. You should install mod_security module. If you installed a amd64 (64-bit) version of Ubuntu Server, please replaced i386 with amd64 for the following commands.
wget http://etc.inittab.org/~agi/debian/libapache-mod-security2/libapache-mod-security_2.5.9-1_i386.deb
wget http://etc.inittab.org/~agi/debian/libapache-mod-security2/mod-security-common_2.5.9-1_all.deb
sudo dpkg -i libapache-mod-security_2.5.9-1_i386.deb mod-security-common_2.5.9-1_all.deb
Step 5 :
Do not allow any Apache and Ubuntu Server information to be print on the error pages.
sudo nano /etc/apache2/conf.d/security
Change the following lines as the following :
ServerToken Prod
ServerSignature Off
Step 6 :
Now, it is time to harden the PHP.
sudo nano /etc/php5/apache2/php.ini
Change the following lines as the following :
display_errors = Off
log_errors = On
allow_url_fopen = Off
safe_mode = On
expose_php = Off
enable_dl = Off
disable_functions = system, show_source, symlink, exec, dl, shell_exec, passthru, phpinfo, escapeshellarg, escapeshellcmd
Step 7 :
Final step is to restart Apache server.
sudo /etc/init.d/apache2 restart
Step 8 :
sudo nano /etc/sysctl.conf
Uncomment the following line and make it look like this.
#Enable TCP SYN Cookie Protection
net.ipv4.tcp_syncookies = 1
Make the change active.
sudo /sbin/sysctl -p
note:- can be applied to ubuntu 9.10 and ubuntu 10.04 too.
if you want to change the publishing dir which is default to /var/www/, make sure you set the permission it nicely.
For OpenSSH, your Ubuntu 9.04 Server is at 10.23.140.222 :
ssh 10.23.140.222 -l dzul
Step 1 :
The avoid someone to list your files on your Apache directory, you should do the following step.
sudo nano /etc/apache2/sites-available/default
Add a minus "-" in the front of "Indexes" and it will looking like this :
Options -Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
Step 2 :
To enable the rewrite module of Apache.
sudo a2enmod rewrite
To avoid Cross-Site-Tracing attack. Add the following lines within "
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]
Step 3 :
To avoid HTTP DoS, DDoS or Brute Force attack, you should install this module.
sudo apt-get install libapache2-mod-evasive
Step 4 :
To screen out bad URL requests, such as /etc/shadow or MySQL injection and etc. You should install mod_security module. If you installed a amd64 (64-bit) version of Ubuntu Server, please replaced i386 with amd64 for the following commands.
wget http://etc.inittab.org/~agi/debian/libapache-mod-security2/libapache-mod-security_2.5.9-1_i386.deb
wget http://etc.inittab.org/~agi/debian/libapache-mod-security2/mod-security-common_2.5.9-1_all.deb
sudo dpkg -i libapache-mod-security_2.5.9-1_i386.deb mod-security-common_2.5.9-1_all.deb
Step 5 :
Do not allow any Apache and Ubuntu Server information to be print on the error pages.
sudo nano /etc/apache2/conf.d/security
Change the following lines as the following :
ServerToken Prod
ServerSignature Off
Step 6 :
Now, it is time to harden the PHP.
sudo nano /etc/php5/apache2/php.ini
Change the following lines as the following :
display_errors = Off
log_errors = On
allow_url_fopen = Off
safe_mode = On
expose_php = Off
enable_dl = Off
disable_functions = system, show_source, symlink, exec, dl, shell_exec, passthru, phpinfo, escapeshellarg, escapeshellcmd
Step 7 :
Final step is to restart Apache server.
sudo /etc/init.d/apache2 restart
Step 8 :
sudo nano /etc/sysctl.conf
Uncomment the following line and make it look like this.
#Enable TCP SYN Cookie Protection
net.ipv4.tcp_syncookies = 1
Make the change active.
sudo /sbin/sysctl -p
note:- can be applied to ubuntu 9.10 and ubuntu 10.04 too.
if you want to change the publishing dir which is default to /var/www/, make sure you set the permission it nicely.
Saturday, July 3, 2010
Ubuntu 10.04 is called lucid lynx
Good day everyone. I've been using linux for a long times now. I'm not using linux distros for my desktop yet until the release of ubuntu 10.04. They called it as a Ubuntu Lucid Lynx. Cool. :)
I'm not encouraging you to use this distro without knowing what is the ubuntu lucid lynx actually. What is Ubuntu? Come on you must heard this word somewhere. Ubuntu, an operating system based on Debian GNU/Linux, makes two releases every year, using the year and month of the release as a version number. The first Ubuntu release, for example, was Ubuntu 4.10 and was released on 20 October 2004. Consequently, version numbers for future versions are provisional; if the release is delayed until a different month to that planned, the version number changes accordingly.
Ubuntu releases are timed to be approximately one month after GNOME releases, which are in turn about one month after releases of X.Org, resulting in each Ubuntu release including a newer version of GNOME and X. To date every fourth release, in the second quarter of even-numbered years, has been designated as a Long Term Support (LTS) release, indicating that it has updates for three years for desktop use and five years for server, with paid technical support also available from Canonical Ltd.. Releases 6.06, 8.04, and 10.04 are the LTS releases.
Ubuntu releases are also given code names, using an adjective and an animal with the same first letter (e.g. Dapper Drake). With the exception of the first two releases, code names are in alphabetical order, allowing a quick determination of which release is newer. Commonly, Ubuntu releases are often referred to using only the adjective portion of the code name (e.g. Dapper).
So.. that's a brief of ubuntu. I got my first hand with ubuntu when i stucked with redhat es 4. The depencies and RHNetworks won't recognise me anymore... that's a little shame for REd HAT. I took a drastic action to start from zero. Then i took the iso images from the net, surprisingly, this distro won't take me long to understand. I like tis distro better than others.