[SERVER] Install VNC Server on Ubuntu Server

<div dir="ltr" style="text-align: left;" trbidi="on"><b>[1] Install VNC Server to operate Ubuntu with GUI from remote Windows client.</b><br /><blockquote class="tr_bq">root@dlp:~# aptitude -y install vnc4server<br />root@dlp:~# su - narwhal<br /><br /><b># switch to a user who set VNC</b><br />narwhal@dlp:~$ vncpasswd<br /><br /><b># set VNC password</b><br />Password:<br /><br /><b># any password you like to set</b><br />Verify:<br />narwhal@dlp:~$ vncserver :1<br /><br /><b># start</b><br />xauth: file /home/narwhal/.Xauthority does not exist<br />New 'dlp:1 (narwhal)' desktop is dlp:1<br />Creating default startup script /home/narwhal/.vnc/xstartup<br />Starting applications specified in /home/narwhal/.vnc/xstartup<br />Log file is /home/narwhal/.vnc/dlp:1.log<br />narwhal@dlp:~$ vncserver -kill :1<br /><br /><b># stop</b><br />Killing Xvnc4 process ID 10540<br />narwhal@dlp:~$ vi .vnc/xstartup<br /><br /><b># add follows</b><br />exec gnome-session &<br /><br /><b># start with diplay number '1', screen resolution '800x600', color depth '24'</b><br />narwhal@dlp:~$ vncserver :1 -geometry 800x600 -depth 24<br />New 'dlp:1 (narwhal)' desktop is dlp:1<br />Starting applications specified in /home/narwhal/.vnc/xstartup<br />Log file is /home/narwhal/.vnc/dlp:1.log</blockquote><b>[2] Install VNC viewer on client computer next. Download from the site below to install.</b><br /><blockquote class="tr_bq"><a href="http://www.realvnc.com/products/free/4.1/download.html">http://www.realvnc.com/products/free/4.1/download.html</a><br />Start VNC viewer after installing. Then following scrren is shown. Input [(Server's hostname or IP address):(display number)] like following example.</blockquote><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJHK8tOJUei-J4aCxSZFZPsgLGUBYx58v2J65bOheSsSahLjCB7fcRwE6GU6AUObsiLk5aGAQteioQlnqnC_t5-JJabQoVyAQypdydA3PsB3VX5Ab3yTQZySkLN45oioAPPhhSSJFosiQ/s1600/vnc1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="132" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJHK8tOJUei-J4aCxSZFZPsgLGUBYx58v2J65bOheSsSahLjCB7fcRwE6GU6AUObsiLk5aGAQteioQlnqnC_t5-JJabQoVyAQypdydA3PsB3VX5Ab3yTQZySkLN45oioAPPhhSSJFosiQ/s320/vnc1.jpg" width="320" /></a></div><br /><b>[3] Password is required. Input VNC password you set in the section [1]. </b><br /><b><br /></b><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJ_98Oh6iBsu0UqxK8vCoLc8Ve6l34yPqfmRQAwFVZPIip18tiqiX3OJQyQ_Y3OijVVl4hLpHDETW_vwLLP4O2MuHQprHFYV-8zHzMZFad0a_VOgIXJTE-qltHdIKukZyZDGrN3PazSMQ/s1600/vnc2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="97" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJ_98Oh6iBsu0UqxK8vCoLc8Ve6l34yPqfmRQAwFVZPIip18tiqiX3OJQyQ_Y3OijVVl4hLpHDETW_vwLLP4O2MuHQprHFYV-8zHzMZFad0a_VOgIXJTE-qltHdIKukZyZDGrN3PazSMQ/s320/vnc2.jpg" width="320" /></a></div><br /><b>[4] Just connected. </b><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilaDGHj-xf_mkxEf9STQHrh-ZZBwQCApzp4y-CQmi_Q2gaConzZor-WoZrroVG5rv1pUqp5rbE6JQ4ufPjmvJItNiDtmqrD9aCGxOaCyLrzPbTTyqh6nhbQhhr4NitnSYy4T0585fRIIM/s1600/vnc3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="208" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilaDGHj-xf_mkxEf9STQHrh-ZZBwQCApzp4y-CQmi_Q2gaConzZor-WoZrroVG5rv1pUqp5rbE6JQ4ufPjmvJItNiDtmqrD9aCGxOaCyLrzPbTTyqh6nhbQhhr4NitnSYy4T0585fRIIM/s320/vnc3.jpg" width="320" /></a></div><br /></div>

[SERVER] Install VNC Server on Ubuntu Server

[1] Install VNC Server to operate Ubuntu with GUI from remote Windows client. root@dlp:~# aptitude -y install vnc4server root@dlp:~# su - na...

Baca selengkapnya »

[SERVER] Install PHP on Ubuntu Server

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div class="separator" style="clear: both; text-align: center;"><b><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinQu1nHcxbR2syDUO8a9PSrXkMVhtQbMfzs6NXxYfD2ETGWApSFKPtgB4pOY0TZcxVmPpu9hPFPG_bYsMUwlcANUpa9Qwk49vQFfWaLEdf1GYNBo9AIB-hVnlEScbGzzdI38VqfKiMvI8/s1600/install-php5%5B10%5D.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="199" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinQu1nHcxbR2syDUO8a9PSrXkMVhtQbMfzs6NXxYfD2ETGWApSFKPtgB4pOY0TZcxVmPpu9hPFPG_bYsMUwlcANUpa9Qwk49vQFfWaLEdf1GYNBo9AIB-hVnlEScbGzzdI38VqfKiMvI8/s320/install-php5%5B10%5D.png" width="320" /></a></b></div><br /><b>[1] Install PHP</b><br /><blockquote class="tr_bq">root@www:~# aptitude -y install php5 php5-cgi libapache2-mod-php5 php5-common php-pear<br />root@www:~# vi /etc/apache2/mods-enabled/mime.conf<br /><br /># near line 219: add extension for PHP<br />AddHandler php5-script .php<br />root@www:~# /etc/init.d/apache2 restart<br /><br />* Restarting web server apache2<br />... waiting ...done.</blockquote><b>[2] Create a PHP test page and access to it with web browser. It's OK if following page is shown.</b><br /><blockquote class="tr_bq">root@www:~# vi /var/www/index.php<br /><br /><html><br /><body><br /><div style="width: 100%; font-size: 40px; font-weight: bold; text-align:center;"><br /><?php<br />print Date("Y/m/d");<br />?><br /></div><br /></body><br /></html></blockquote></div>

[SERVER] Install PHP on Ubuntu Server

[1] Install PHP root@www:~# aptitude -y install php5 php5-cgi libapache2-mod-php5 php5-common php-pear root@www:~# vi /etc/apache2/mods-enab...

Baca selengkapnya »

[SERVER] Configure Squid3 as a Reverse Proxy on Ubuntu Server

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjy4_74pBWtEIXQUrpZVoZJO6b1-D5G_FpLGJFemaoGJkpYgaoEDEzVhKWINpHoKZAJw3-hgRS4SxvqR1mpMqB5gPcNKRdpe4gYEguvBaQM1hH2Qk3kmZ4cKM3LYg3FlEj0eF8WEyUFJdQ/s1600/squid3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="180" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjy4_74pBWtEIXQUrpZVoZJO6b1-D5G_FpLGJFemaoGJkpYgaoEDEzVhKWINpHoKZAJw3-hgRS4SxvqR1mpMqB5gPcNKRdpe4gYEguvBaQM1hH2Qk3kmZ4cKM3LYg3FlEj0eF8WEyUFJdQ/s320/squid3.jpg" width="320" /></a></div><div style="text-align: justify;"><br /><b>[1] Install Squid </b></div><blockquote class="tr_bq"><b>root@lan:~#</b><br />aptitude -y install squid3<br /><br /><b>root@lan:~#</b><br />vi /etc/squid3/squid.conf<br /> </blockquote><blockquote><div style="text-align: justify;">acl CONNECT method CONNECT<br /><b> </b></div><div style="text-align: justify;"><b># line 706: define ACL for internal</b>acl lan src 10.0.0.0/24<br />http_access allow localhost<br /><b> </b></div></blockquote><blockquote><b># line 830: add (set ACL for internal)</b><br />http_access allow lan<br /><br /><b># line 1117: change</b><br />http_port<br />8080<br /><br /><b># line 3368: add follows</b><br />request_header_access Referer deny all<br />request_header_access X-Forwarded-For deny all<br />request_header_access Via deny all<br />request_header_access Cache-Control deny all<br /><br /><b># line 3653: add (define hostname)</b><br />visible_hostname lan.server.world<br /><br /><b># forwarded_for on</b><br /><b># line 5384:: add (hide IP address)</b><br />forwarded_for off<br /><br /><b>root@lan:~#</b><br />/etc/init.d/squid3 restart<br /><br />* Restarting Squid HTTP Proxy 3.x squid3<br />* Waiting...<br />...done.<br />* Creating Squid HTTP Proxy 3.x cache structure<br />2011/05/05 03:31:41| Creating Swap Directories<br />...done.</blockquote><div style="text-align: justify;"><b>[2] Start Web browser on your client PC. This is the example on Internet Explorer 9. Select [Tools] - [Internet Options] and move to [Connections] tab like below.</b></div><div style="text-align: justify;"><b><br />[3] Check 'use a proxy' and input server's hostname and port number set in the section [1]. Then, you can access to internet through proxy server.</b></div></div>

[SERVER] Configure Squid3 as a Reverse Proxy on Ubuntu Server

[1] Install Squid root@lan:~# aptitude -y install squid3 root@lan:~# vi /etc/squid3/squid.conf   acl CONNECT method CONNECT   # line 706: de...

Baca selengkapnya »

[SERVER] Configure SSL di Ubuntu Server

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><br /></div><div class="separator" style="clear: both; text-align: center;"><b><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgN5sX7qYFhd94KocfvxuvnRFC2EzNhL3SPzbcs0xhpCxr_Uxhh33_TtmyRYqmtgpumSC4kUKi5gJHF5y0ShJUxvf6KJ8QgI0ON03ucWifwdv9hrwUYU9rTKYUBhKb6lCPTgZB_a-oC9m4/s1600/SSL.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgN5sX7qYFhd94KocfvxuvnRFC2EzNhL3SPzbcs0xhpCxr_Uxhh33_TtmyRYqmtgpumSC4kUKi5gJHF5y0ShJUxvf6KJ8QgI0ON03ucWifwdv9hrwUYU9rTKYUBhKb6lCPTgZB_a-oC9m4/s320/SSL.jpg" width="320" /></a></b></div><br /><div style="text-align: justify;"><b>[1] Create certificates first. See here.<br />[2] Configure SSL </b></div><blockquote class="tr_bq">root@www:~#<br />vi /etc/apache2/sites-available/default-ssl<br /><br /># line 3: change to webmaster's email<br />ServerAdmin<br />webmaster@mr-ekoapriadi.net<br /><br /># line 11,12: change<br />Options FollowSymLinks<br />ExecCGI<br /><br />AllowOverride<br />All<br /><br /># line 51,52: change<br />SSLCertificateFile<br />/etc/ssl/private/server.crt<br /><br />SSLCertificateKeyFile<br />/etc/ssl/private/server.key<br /><br />root@www:~#<br />a2ensite default-ssl<br /><br />Enabling site default-ssl.<br />Run '/etc/init.d/apache2 reload' to activate new configuration!<br />root@www:~#<br />a2enmod ssl<br /><br />Enabling module ssl.<br />See /usr/share/doc/apache2.2-common/README.Debian.gz on how to configure SSL and create self-signed certificates.<br />Run '/etc/init.d/apache2 restart' to activate new configuration!<br />root@www:~#<br />/etc/init.d/apache2 restart<br /><br />* Restarting web server apache2<br />... waiting ...done.</blockquote><div style="text-align: justify;"><b></b></div><div style="text-align: justify;"><b>[3] Access to the test page with https. Following window is shown because Certification File is made by yourdelf, it's no ploblem, Click Ok to proceed. </b></div></div>

[SERVER] Configure SSL di Ubuntu Server

[1] Create certificates first. See here. [2] Configure SSL root@www:~# vi /etc/apache2/sites-available/default-ssl # line 3: change to webma...

Baca selengkapnya »

[JASA SETTING ONLINE] Mikrotik | Proxy

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWpM9wvSdYH4jON47MeswE1FWbRyE2GJzTyUNXdE1elUyu2HkspQH2Rj4mFKusDSUADTyU5z9TRjdK27-wZ61lsd_Pis6M595E1J509VOoQkbX8N4z0BtKcXo3GXFbRISmns479QvipxSQ/s1600/jasa.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="96" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWpM9wvSdYH4jON47MeswE1FWbRyE2GJzTyUNXdE1elUyu2HkspQH2Rj4mFKusDSUADTyU5z9TRjdK27-wZ61lsd_Pis6M595E1J509VOoQkbX8N4z0BtKcXo3GXFbRISmns479QvipxSQ/s320/jasa.png" width="320" /></a></div><b><span style="color: #990000;"><br /></span></b><b><span style="color: #990000;">DAFTAR PAKET :</span></b><br /><blockquote>Mikrotik Load Balancing 2 Line + Routing Mark + Proxy Squid Lusca High Peforma : Rp.800.000 <a href="ymsgr:sendIM?mr.ekoapriadi">PESAN</a> / <span style="color: red;"><b>+6282376222119</b></span><blockquote></blockquote></blockquote><blockquote>Mikrotik Load Balancing 3-4 Line + Routing Mark + Proxy Squid Lusca High Peforma: Rp.1.000.000 <a href="ymsgr:sendIM?mr.ekoapriadi">PESAN</a> / <span style="color: #006600;"><b>+6282376222119</b></span></blockquote><blockquote>Mikrotik Load Balancing 5-7 Line + Routing Mark + Proxy Squid Lusca High Peforma: Rp.1.250.000 <a href="ymsgr:sendIM?mr.ekoapriadi">PESAN</a> / <span style="color: #000099;"><b>+6282376222119</b></span></blockquote><span style="color: #ff9966;"><b><span style="color: #666666;">NB:</span> <span style="color: #993399;">GARANSI PEMELIHARAAN 3 BULAN </span></b></span></div>

[JASA SETTING ONLINE] Mikrotik | Proxy

DAFTAR PAKET : Mikrotik Load Balancing 2 Line + Routing Mark + Proxy Squid Lusca High Peforma : Rp.800.000 PESAN / +6282376222119 Mikro...

Baca selengkapnya »

[SERVER] Install Postfix 2.9.6

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDs6dKc_gdqiivn0PfAkH5o5r0eEMrToHehTHstqRLjOha9tQjlLgopsl7xAuEv50QLr3r9MzODl1x3_4U3R6w1pcG_gi0yU3kU3qd2D5MGhq7OGQTJa0bSyqG1DqeBnf4edFxMtLA4YE/s1600/postfix.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDs6dKc_gdqiivn0PfAkH5o5r0eEMrToHehTHstqRLjOha9tQjlLgopsl7xAuEv50QLr3r9MzODl1x3_4U3R6w1pcG_gi0yU3kU3qd2D5MGhq7OGQTJa0bSyqG1DqeBnf4edFxMtLA4YE/s1600/postfix.gif" /></a></div><div class="tr_bq"><br /></div><div class="tr_bq">This tutorial shows you how to install Postfix (2.9.6) with Dovecot (2.0.19) and the manage tool Vimbadmin (2.2.2) on Ubuntu Server 12.04.</div><br />Perform all actions as root!<br /><br />Checks<br />Hostname<br />You should check that your server has a valid fqdn hostname (complete with the domain part):<br /><br />hostname --fqd<br />If you get something like “localhost” or “mail” it’s not ok and you have to do some work on /etc/hosts and /etc/hostname<br /><br />Time zone<br />Check your time with the command:<br /><br />date<br />and eventually adjust the time zone as needed (this is important for logging and mail):<br /><br />dpkg-reconfigure tzdata<br />Installation<br />System<br />apt-get install postfix postfix-mysql dovecot-pop3d dovecot-imapd dovecot-mysql dovecot-sieve dovecot-managesieved bcrypt<br />Vimbadmin<br />https://github.com/opensolutions/ViMbAdmin/wiki/Install-using-git<br /><br />Make sure that you set the same uid and guid in application.ini as in Postfix with these lines:<br /><br />defaults.mailbox.uid = 5000<br />defaults.mailbox.gid = 5000<br />Change the mailbox home directory:<br /><br />defaults.mailbox.homedir = "/var/vmail/"<br />Besides these changes, configure the salt(s) and other settings in this file to suit your needs.<br /><br />Configuration<br />Postfix<br />nano /etc/postfix/main.cf<br />Add to the bottom:<br /><br />virtual_uid_maps = static:5000<br />virtual_gid_maps = static:5000<br />virtual_alias_maps = mysql:/etc/postfix/mysql/virtual-aliases.cf<br />virtual_mailbox_domains = mysql:/etc/postfix/mysql/virtual-domains.cf<br />virtual_mailbox_maps = mysql:/etc/postfix/mysql/virtual-mailboxes.cf<br />Add the following below the smtpd lines. This allows the use of SASL (Simple Authentication And Security Layer), so email clients like thunderbird are allowed to send mail with this mail server if the credentials are correct.<br /><br />smtpd_tls_auth_only = yes<br />smtpd_sasl_auth_enable = yes<br />broken_sasl_auth_clients = yes<br />smtpd_sasl_authenticated_header = yes<br />smtpd_sasl_type = dovecot<br />smtpd_sasl_path = private/auth<br />smtpd_sasl_security_options = noanonymous, noplaintext<br />smtpd_sasl_tls_security_options = noanonymous<br />smtpd_recipient_restrictions =<br />    permit_mynetworks,<br />    permit_sasl_authenticated,<br />    reject_unauth_destination,<br />    reject_invalid_hostname,<br />    reject_unauth_pipelining,<br />    reject_non_fqdn_sender,<br />    reject_unknown_sender_domain,<br />    reject_non_fqdn_recipient,<br />    reject_unknown_recipient_domain,<br />    reject_rbl_client sbl.spamhaus.org,<br />    permit<br />Create the following files so that postfix uses the MySQL database and tables that Vimbadmin uses. For more information see https://github.com/opensolutions/ViMbAdmin/wiki/Postfix-and-MySQL-Integration.<br /><br />Create a MySQL folder:<br /><br />mkdir /etc/postfix/mysql<br />Create /etc/postfix/mysql/virtual-aliases.cf<br /><br />nano /etc/postfix/mysql/virtual-aliases.cf<br />user = vimbadmin<br />password = password<br />hosts = 127.0.0.1<br />dbname = vimbadmin<br />query = SELECT goto FROM alias WHERE address = '%s' AND active = '1'<br />Create /etc/postfix/mysql/virtual-domains.cf<br /><br />nano /etc/postfix/mysql/virtual-domains.cf<br />user = vimbadmin<br />password = password<br />hosts = 127.0.0.1<br />dbname = vimbadmin<br />query = SELECT domain FROM domain WHERE domain = '%s' AND backupmx = '0' AND active = '1'<br />Create /etc/postfix/mysql/virtual-mailboxes.cf<br /><br />nano /etc/postfix/mysql/virtual-mailboxes.cf<br />user = vimbadmin<br />password = password<br />hosts = 127.0.0.1<br />dbname = vimbadmin<br />query = SELECT maildir FROM mailbox WHERE username = '%s' AND active = '1'<br />For further advanced configuration see https://github.com/opensolutions/ViMbAdmin/wiki/Config-Files-for-full-domain-aliasing.<br /><br />When Postfix receive an e-mail it will send it to another software: “Dovecot”. Dovecot will then manage the IMAP and POP3 services for the users. Tell Postfix to do this by adding the following line at the end of the file /etc/postfix/master.cf.<br /><br />nano /etc/postfix/master.cf<br />dovecot   unix  -       n       n       -       -       pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient}<br />And specify a few more options in the config file (/etc/postfix/main.cf) by executing:<br /><br />postconf -e virtual_transport=dovecot<br />postconf -e dovecot_destination_recipient_limit=1<br />Restart postfix<br /><br />service postfix restart<br />Dovecot<br />Dovecot can do several things for use. Get emails from Postfix and save them to disk, watch quotas (how much space a user may use on the servers disk), execute user-based “sieve” filter rules (can be used to put away emails to different folders), allow users to fetch emails using POP3 or IMAP. Create a user and a group just for storing emails (choose a free uid/gid):<br /><br />groupadd -g 5000 vmail<br />useradd -g vmail -u 5000 vmail -d /var/vmail -m<br />Set protocols that may be used in the dovecot configuration file:<br /><br />nano /etc/dovecot/dovecot.conf<br />protocols = imap pop3<br />Set mail location:<br /><br />nano /etc/dovecot/conf.d/10-mail.conf<br />mail_location = maildir:/var/vmail/%d/%n/Maildir<br />Configure authentication:<br /><br />nano /etc/dovecot/conf.d/10-auth.conf<br />Set authentication mechanisms to:<br /><br />auth_mechanisms = plain login<br />Comment the following line:<br /><br />#!include auth-system.conf.ext<br />And add to the bottom:<br /><br />passdb {<br />    driver = sql<br />    args = /etc/dovecot/dovecot-sql.conf<br />}<br />userdb {<br />    driver = static<br />    args = uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes<br />}<br />The “allow_all_users=yes” setting means that it is not necessary for Dovecot to check if a certain user exists. We can do that because Postfix has already ensured (in the virtual_mailbox_maps query) that the users existed before their email was handed over to Dovecot’s “deliver” agent.<br /><br />Set authentication service:<br /><br />nano /etc/dovecot/conf.d/10-master.conf<br />service auth {<br />  # auth_socket_path points to this userdb socket by default. It's typically<br />  # used by dovecot-lda, doveadm, possibly imap process, etc. Its default<br />  # permissions make it readable only by root, but you may need to relax these<br />  # permissions. Users that have access to this socket are able to get a list<br />  # of all usernames and get results of everyone's userdb lookups.<br />  unix_listener auth-userdb {<br />    mode = 0600<br />    user = vmail<br />    group = vmail<br />  }<br /><br />  # Postfix smtp-auth<br />  unix_listener /var/spool/postfix/private/auth {<br />    mode = 0660<br />    user = postfix<br />    group = postfix<br />  }<br /><br />  # Auth process is run as this user.<br />  #user = $default_internal_user<br />}<br />Set Dovecot LDA (Local Delivery Agent):<br /><br />nano /etc/dovecot/conf.d/15-lda.conf<br />protocol lda {<br />    postmaster_address = postmaster@example.com<br />    mail_plugins = sieve<br />    auth_socket_path = /var/run/dovecot/auth-userdb<br />    log_path = /var/vmail/dovecot-deliver.log<br />}<br />Set log path:<br /><br />nano /etc/dovecot/conf.d/10-logging.conf<br />log_path = /var/vmail/dovecot-deliver.log<br />The log file can become quite large, so let the system rotate the log file.<br /><br />nano /etc/logrotate.d/dovecot-deliver<br />/var/vmail/dovecot-deliver.log {<br />    weekly<br />    rotate 14<br />    compress<br />}<br />Set the correct SQL settings:<br /><br />cp /etc/dovecot/dovecot-sql.conf.ext /etc/dovecot/dovecot-sql.conf<br />nano /etc/dovecot/dovecot-sql.conf<br />Paste:<br /><br /><blockquote># This file is opened as root, so it should be owned by root and mode 0600.<br />#<br /># http://wiki2.dovecot.org/AuthDatabase/SQL<br />#<br /># For the sql passdb module, you'll need a database with a table that<br /># contains fields for at least the username and password. If you want to<br /># use the user@domain syntax, you might want to have a separate domain<br /># field as well.<br />#<br /># If your users all have the same uig/gid, and have predictable home<br /># directories, you can use the static userdb module to generate the home<br /># dir based on the username and domain. In this case, you won't need fields<br /># for home, uid, or gid in the database.<br />#<br /># If you prefer to use the sql userdb module, you'll want to add fields<br /># for home, uid, and gid. Here is an example table:<br />#<br /># CREATE TABLE users (<br />#     username VARCHAR(128) NOT NULL,<br />#     domain VARCHAR(128) NOT NULL,<br />#     password VARCHAR(64) NOT NULL,<br />#     home VARCHAR(255) NOT NULL,<br />#     uid INTEGER NOT NULL,<br />#     gid INTEGER NOT NULL,<br />#     active CHAR(1) DEFAULT 'Y' NOT NULL<br /># );<br /># Database driver: mysql, pgsql, sqlite<br />driver = mysql<br /># Database connection string. This is driver-specific setting.<br />#<br /># HA / round-robin load-balancing is supported by giving multiple host<br /># settings, like: host=sql1.host.org host=sql2.host.org<br />#<br /># pgsql:<br />#   For available options, see the PostgreSQL documention for the<br />#   PQconnectdb function of libpq.<br />#   Use maxconns=n (default 5) to change how many connections Dovecot can<br />#   create to pgsql.<br />#<br /># mysql:<br />#   Basic options emulate PostgreSQL option names:<br />#     host, port, user, password, dbname<br />#<br />#   But also adds some new settings:<br />#     client_flags        - See MySQL manual<br />#     ssl_ca, ssl_ca_path - Set either one or both to enable SSL<br />#     ssl_cert, ssl_key   - For sending client-side certificates to server<br />#     ssl_cipher          - Set minimum allowed cipher security (default: HIGH)<br />#     option_file         - Read options from the given file instead of<br />#                           the default my.cnf location<br />#     option_group        - Read options from the given group (default: client)<br />#<br />#   You can connect to UNIX sockets by using host: host=/var/run/mysql.sock<br />#   Note that currently you can't use spaces in parameters.<br />#<br /># sqlite:<br />#   The path to the database file.<br />#<br /># Examples:<br />#   connect = host=192.168.1.1 dbname=users<br />#   connect = host=sql.example.com dbname=virtual user=virtual password=blarg<br />#   connect = /etc/dovecot/authdb.sqlite<br />#<br />connect = host=127.0.0.1 dbname=vimbadmin user=vimbadmin password=yourpassword<br /># Default password scheme.<br />#<br /># List of supported schemes is in<br /># http://wiki2.dovecot.org/Authentication/PasswordSchemes<br />#<br />default_pass_scheme = SHA512-CRYPT<br /># passdb query to retrieve the password. It can return fields:<br />#   password - The user's password. This field must be returned.<br />#   user - user@domain from the database. Needed with case-insensitive lookups.<br />#   username and domain - An alternative way to represent the "user" field.<br />#<br /># The "user" field is often necessary with case-insensitive lookups to avoid<br /># e.g. "name" and "nAme" logins creating two different mail directories. If<br /># your user and domain names are in separate fields, you can return "username"<br /># and "domain" fields instead of "user".<br />#<br /># The query can also return other fields which have a special meaning, see<br /># http://wiki2.dovecot.org/PasswordDatabase/ExtraFields<br />#<br /># Commonly used available substitutions (see http://wiki2.dovecot.org/Variables<br /># for full list):<br />#   %u = entire user@domain<br />#   %n = user part of user@domain<br />#   %d = domain part of user@domain<br />#<br /># Note that these can be used only as input to SQL query. If the query outputs<br /># any of these substitutions, they're not touched. Otherwise it would be<br /># difficult to have eg. usernames containing '%' characters.<br />#<br /># Example:<br />#   password_query = SELECT userid AS user, pw AS password \<br />#     FROM users WHERE userid = '%u' AND active = 'Y'<br />#<br />#password_query = \<br />#  SELECT username, domain, password \<br />#  FROM mailbox WHERE username = '%u' AND domain = '%d'<br /># userdb query to retrieve the user information. It can return fields:<br />#   uid - System UID (overrides mail_uid setting)<br />#   gid - System GID (overrides mail_gid setting)<br />#   home - Home directory<br />#   mail - Mail location (overrides mail_location setting)<br />#<br /># None of these are strictly required. If you use a single UID and GID, and<br /># home or mail directory fits to a template string, you could use userdb static<br /># instead. For a list of all fields that can be returned, see<br /># http://wiki2.dovecot.org/UserDatabase/ExtraFields<br />#<br /># Examples:<br />#   user_query = SELECT home, uid, gid FROM users WHERE userid = '%u'<br />#   user_query = SELECT dir AS home, user AS uid, group AS gid FROM users where userid = '%u'<br />#   user_query = SELECT home, 501 AS uid, 501 AS gid FROM users WHERE userid = '%u'<br />#<br />#user_query = \<br />#  SELECT homedir AS home, uid, gid \<br />#  FROM mailbox WHERE username = '%u' AND domain = '%d'<br /># If you wish to avoid two SQL lookups (passdb + userdb), you can use<br /># userdb prefetch instead of userdb sql in dovecot.conf. In that case you'll<br /># also have to return userdb fields in password_query prefixed with "userdb_"<br /># string. For example:<br />password_query = \<br />  SELECT username AS user, password, \<br />    homedir AS userdb_home, uid AS userdb_uid, gid AS userdb_gid \<br />  FROM mailbox WHERE username = '%u'<br /># Query to get a list of all usernames.<br />iterate_query = SELECT username AS user FROM mailbox</blockquote><br />Adjust the driver, connect and default_pass_scheme variable to your situation.<br /><br />Set permissions:<br /><br />chgrp vmail /etc/dovecot/dovecot.conf<br />chmod g+r /etc/dovecot/dovecot.conf<br />/etc/init.d/dovecot restart<br />chown vmail.vmail /var/vmail/dovecot-deliver.log<br />chown root:root /etc/dovecot/dovecot-sql.conf<br />chmod go= /etc/dovecot/dovecot-sql.conf<br />Testing / relay<br />Get a report on your domain from http://www.pingability.com/zoneinfo.jsp. This invaluable report will check a number of things. Whether your email server is an open relay; that it is listening on a public IP; that you have an MX DNS record; and more. DNSReport may warn about missing reverse DNS entries.<br /><br />Trouble shooting<br />List made changes with:<br /><br />doveconf -n<br />Postfix log:<br /><br /><blockquote class="tr_bq">tail -n100 /var/log/mail.log </blockquote></div>

[SERVER] Install Postfix 2.9.6

This tutorial shows you how to install Postfix (2.9.6) with Dovecot (2.0.19) and the manage tool Vimbadmin (2.2.2) on Ubuntu Server 12.04. P...

Baca selengkapnya »

[SERVER] dropbear8 licuid Ubuntu Server 10.04

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwVHwDjJJnmohkibfuxOg1_1Su3Zv4n-krARQrw0XkwrUK78eOJ4tQV-lyZSxqUFyR3oDJeyT5e8uiVd__GSdtQlOr9sdQ4m2Urm4TRZQOgjTZst07YPYvhP8qSQ5Q7L7UDda4yX7psFE/s1600/ubuntu_logo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="290" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwVHwDjJJnmohkibfuxOg1_1Su3Zv4n-krARQrw0XkwrUK78eOJ4tQV-lyZSxqUFyR3oDJeyT5e8uiVd__GSdtQlOr9sdQ4m2Urm4TRZQOgjTZst07YPYvhP8qSQ5Q7L7UDda4yX7psFE/s320/ubuntu_logo.png" width="320" /></a></div><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><a href="http://manpages.ubuntu.com/manpages/lucid/" style="border: 0px; color: #dd4814; font-family: Ubuntu, 'DejaVu Sans', 'Bitstream Vera Sans', Tahoma, sans-serif; font-size: 12px; font-weight: normal; line-height: 12px; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">lucid</a><span style="background-color: #f7f7f7; color: #333333; font-family: Ubuntu, 'DejaVu Sans', 'Bitstream Vera Sans', Tahoma, sans-serif; font-size: 12px; font-weight: normal; line-height: 12px;"> (</span><a href="http://manpages.ubuntu.com/manpages/lucid/man8" style="border: 0px; color: #dd4814; font-family: Ubuntu, 'DejaVu Sans', 'Bitstream Vera Sans', Tahoma, sans-serif; font-size: 12px; font-weight: normal; line-height: 12px; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">8</a><span style="background-color: #f7f7f7; color: #333333; font-family: Ubuntu, 'DejaVu Sans', 'Bitstream Vera Sans', Tahoma, sans-serif; font-size: 12px; font-weight: normal; line-height: 12px;">) </span><a href="http://manpages.ubuntu.com/manpages.gz/lucid/man8/dropbear.8.gz" style="border: 0px; color: #dd4814; font-family: Ubuntu, 'DejaVu Sans', 'Bitstream Vera Sans', Tahoma, sans-serif; font-size: 12px; font-weight: normal; line-height: 12px; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">dropbear.8.gz</a><br style="color: #333333; font-family: Ubuntu, 'DejaVu Sans', 'Bitstream Vera Sans', Tahoma, sans-serif; font-size: 12px; font-weight: normal; line-height: 12px;" /><span style="background-color: #f7f7f7; color: #333333; font-family: Ubuntu, 'DejaVu Sans', 'Bitstream Vera Sans', Tahoma, sans-serif; font-size: 12px; font-weight: normal; line-height: 12px;">Provided by: </span><a href="https://launchpad.net/ubuntu/lucid/+package/dropbear" style="border: 0px; color: #dd4814; font-family: Ubuntu, 'DejaVu Sans', 'Bitstream Vera Sans', Tahoma, sans-serif; font-size: 12px; font-weight: normal; line-height: 12px; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">dropbear_0.52-4_i386</a><span style="background-color: #f7f7f7; color: #333333; font-family: Ubuntu, 'DejaVu Sans', 'Bitstream Vera Sans', Tahoma, sans-serif; font-size: 12px; font-weight: normal; line-height: 12px;"> </span><a href="https://bugs.launchpad.net/ubuntu/+source/dropbear/+filebug-advanced" style="border: 0px; color: #dd4814; font-family: Ubuntu, 'DejaVu Sans', 'Bitstream Vera Sans', Tahoma, sans-serif; font-size: 12px; font-weight: normal; line-height: 12px; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" title="Report a bug in the content of this documentation"><img alt="bug" border="0" src="http://manpages.ubuntu.com/img/bug.png" style="border: 0px; font-family: inherit; font-style: inherit; line-height: 1; margin: 0px; padding: 0px; vertical-align: baseline;" /></a></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; line-height: 16px;">NAME</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       dropbear - lightweight SSH2 server</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; line-height: 16px;">SYNOPSIS</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       dropbear [-FEmwsgjki] [-b banner] [-d dsskey] [-r rsakey] [-p port]</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; line-height: 16px;">DESCRIPTION</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       dropbear  is  a  SSH 2 server designed to be small enough to be used in</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       small memory environments, while  still  being  functional  and  secure</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       enough for general use.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; line-height: 16px;">OPTIONS</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -b banner</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              bannerfile.  Display the contents of the file banner before user</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              login (default: none).</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -d dsskey</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              dsskeyfile.  Use the contents of the file  dsskey  for  the  DSS</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              host  key  (default: /etc/dropbear/dropbear_dss_host_key).  Note</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              that some SSH implementations use the  term  "DSA"  rather  than</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              "DSS",  they  mean  the same thing.  This file is generated with</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              dropbearkey(8).</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -r rsakey</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              rsakeyfile.  Use the contents of the file  rsakey  for  the  rsa</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              host  key  (default: /etc/dropbear/dropbear_rsa_host_key).  This</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              file is generated with dropbearkey(8).</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -F     Don’t fork into background.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -E     Log to standard error rather than syslog.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -m     Don’t display the message of the day on login.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -w     Disallow root logins.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -s     Disable password logins.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -g     Disable password logins for root.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -j     Disable local port forwarding.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -k     Disable remote port forwarding.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -p [address:]port</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              Listen on specified address and TCP port.  If  just  a  port  is</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              given  listen  on  all  addresses.   up  to  10 can be specified</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              (default 22 if none specified).</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -i     Service program mode.  Use this option  to  run  dropbear  under</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              TCP/IP  servers  like  inetd,  tcpsvd, or tcpserver.  In program</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              mode the -F option is implied, and -p options are ignored.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -P pidfile</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              Specify a pidfile to create when running as  a  daemon.  If  not</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              specified, the default is /var/run/dropbear.pid</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -a     Allow remote hosts to connect to forwarded ports.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -W windowsize</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              Specify  the  per-channel receive window buffer size. Increasing</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              this may improve network performance at the  expense  of  memory</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              use. Use -h to see the default buffer size.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -K timeout_seconds</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              Ensure  that  traffic  is  transmitted  at a certain interval in</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              seconds. This is useful for working around firewalls or  routers</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              that  drop connections after a certain period of inactivity. The</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              trade-off is that  a  session  may  be  closed  if  there  is  a</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              temporary lapse of network connectivity. A setting if 0 disables</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              keepalives.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       -I idle_timeout</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              Disconnect the session if no traffic is transmitted or  received</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              for idle_timeout seconds.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; line-height: 16px;">FILES</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       Authorized Keys</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              ~/.ssh/authorized_keys  can be set up to allow remote login with</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              a RSA or DSS key. Each line is of the form</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       [restrictions] ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIgAsp... [comment]</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              and can be extracted from  a  Dropbear  private  host  key  with</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              "dropbearkey  -y".  This  is the same format as used by OpenSSH,</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              though  the  restrictions  are  a  subset  (keys  with   unknown</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              restrictions  are  ignored).   Restrictions are comma separated,</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              with  double  quotes  around  spaces  in  arguments.   Available</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              restrictions are:</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       no-port-forwarding</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              Don’t allow port forwarding for this connection</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       no-agent-forwarding</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              Don’t allow agent forwarding for this connection</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       no-X11-forwarding</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              Don’t allow X11 forwarding for this connection</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       no-pty Disable  PTY  allocation. Note that a user can still obtain most</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              of the same functionality with other means  even  if  no-pty  is</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              set.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       command="forced_command"</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              Disregard  the  command  provided  by  the  user  and always run</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              forced_command.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              The authorized_keys file and  its  containing  ~/.ssh  directory</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              must  only  be writable by the user, otherwise Dropbear will not</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              allow a login using public key authentication.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       Host Key Files</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              Host key files are read at startup from a standard location,  by</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              default          /etc/dropbear/dropbear_dss_host_key         and</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              /etc/dropbear/dropbear_rsa_host_key   or   specified   on    the</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              commandline  with  -d  or -r. These are of the form generated by</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              dropbearkey.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       Message Of The Day</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              By default the file /etc/motd will  be  printed  for  any  login</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              shell  (unless  disabled  at  compile-time).  This  can  also be</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">              disabled per-user by creating a file ~/.hushlogin .</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; line-height: 16px;">AUTHOR</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       Matt Johnston (matt@ucc.asn.au).</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       Gerrit Pape (pape@smarden.org) wrote this manual page.</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; line-height: 16px;">SEE ALSO</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       dropbearkey(8), dbclient(1)</span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;"><br /></span></span></h4><h4 id="contenttoc0" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #333333; font-family: Ubuntu, DejaVu Sans, Bitstream Vera Sans, Tahoma, sans-serif;"><span style="font-size: 12px; font-weight: normal; line-height: 16px;">       <a href="http://matt.ucc.asn.au/dropbear/dropbear.html">http://matt.ucc.asn.au/dropbear/dropbear.html</a></span></span></h4></div>

[SERVER] dropbear8 licuid Ubuntu Server 10.04

lucid  ( 8 )  dropbear.8.gz Provided by:  dropbear_0.52-4_i386   NAME        dropbear - lightweight SSH2 server SYNOPSIS        dropbear [-F...

Baca selengkapnya »

[SERVER] Konfigurasi WebMail Server Debian

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiW-vzTio1euBjvd6nfMqzSbtxWK4g-c0g-UYHXlLw4iB1a2_b_Q199CucTpleTVsAhzUqJwcrBF8mnAr687kazx2IO5Fxen12K7Yi9KWn90NvZ3MUVhy-pOwd0yg6-IZ0rRDSm4LoiJh0/s1600/webmail.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="235" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiW-vzTio1euBjvd6nfMqzSbtxWK4g-c0g-UYHXlLw4iB1a2_b_Q199CucTpleTVsAhzUqJwcrBF8mnAr687kazx2IO5Fxen12K7Yi9KWn90NvZ3MUVhy-pOwd0yg6-IZ0rRDSm4LoiJh0/s320/webmail.gif" width="320" /></a></div><br />Setelah berhasil Mengkonfigurasi Web Server Selanjutnya kita akan mengkonfigurasi Webmail Server. Pada setting kali ini akan sangat memerlukan ketelitian. Silahkan ikuti langkah berikut: <br /><br />Kata2 yang bercetak tebal adalah perintah yang dijalankan pada komputer server.<br />Kata2 yang berwarna merah adalah yang harus anda ubah atau buat.<br /><br /><b>1)</b> apt-get install postfix squirrelmail courier-imap courier-pop<br /><blockquote class="tr_bq"><blockquote class="tr_bq">Create directories for web-based administration : NO<br />Local only                                                         : OK<br />General type of mail configuration                      : Internet Site<br />System mail name                                              : namesite.com</blockquote></blockquote><br /><b>2)</b> pico /etc/apache2/apache2.conf<br /><blockquote class="tr_bq">Include the virtual host configurations:<br />Include /etc/apache2/sites-enabled/<br />Include /etc/squirrelmail/apache.conf</blockquote><b>3)</b> pico /etc/squirrelmail/apache.conf<br /><blockquote class="tr_bq">users will prefer a simple URL like http://webmail.example.com<br /><virtualhost 1.2.3.4><br />DocumentRoot /usr/share/squirrelmail<br />ServerName webmail.example.com<br /></virtualhost><br /><virtualhost *:80><br />DocumentRoot /usr/share/squirrelmail<br />ServerName    mail.namesite.com<br /></virtualhost></blockquote><br /><ul style="text-align: left;"><li>Jangan ubah / hapus baris yang lainnya.</li></ul><div style="text-align: left;"><br /><b>4)</b> /etc/init.d/apache2  restart</div><blockquote class="tr_bq">Restarting web server: apache2 waiting...</blockquote><div style="text-align: left;"><br /><b>5)</b> Buka browser komputer client dan masukkan url mail.namesite.com </div><div style="text-align: left;"><br /><b>6)</b> maildirmake <b style="color: blue;"> /etc/skel/Maildir</b><br /><br /><b>7)</b> adduser antok<br /><br /><b>8)</b> adduser anisa<br /><br /><b>9)</b> dpkg-reconfigure postfix</div><blockquote class="tr_bq">Local only                                                                : OK<br />General type of mail configuration                              : Internet Site<br />System mail name                                                     : namesite.com<br />Root and postmaster mail recipient                            : (kosongkan)<br />Other destinations to accept mail for (blank for none) : 172.16.1.0/26 (<- tambahan baris terakhir)<br />Force synchronous updates on mail queue                 : No<br />Local networks                                                         : 172.16.1.0/26<br />Use procmail for local delivery                                  : NO<br />Mailbox size limit (bytes)                                           : 0<br />Local address extension character                             : +<br />Internet protocols to use                                            : ipv4</blockquote><div style="text-align: left;"><br /><b>10)</b> pico /etc/postfix/main.cf<br /></div><blockquote class="tr_bq">inet_interfaces = all<br />inet_protocols  = ipv4<br />home_mailbox    = Maildir/</blockquote><div style="text-align: left;"><br /></div><ul style="text-align: left;"><li>Jangan ubah / hapus baris lainnya.</li></ul><div style="text-align: left;"><br /><b>11)</b> /etc/init.d/postfix  restart</div><blockquote class="tr_bq"><blockquote class="tr_bq">Stopping Postfix Mail Transport Agent  : postfix.<br />Starting Postfix Mail Transport Agent    : postfix.</blockquote></blockquote><div style="text-align: left;"><br /><b>12)</b> /etc/init.d/courier-imap  restart</div><blockquote class="tr_bq">Stopping Courier IMAP server  : imapd.<br />Starting Courier IMAP server    : imapd.</blockquote><div style="text-align: left;"><br /><b>13)</b> /etc/init.d/courier-pop  restart</div><blockquote class="tr_bq"><blockquote class="tr_bq">Stopping Courier POP3 server : pop3d.<br />Starting Courier POP3 server   : pop3d.</blockquote></blockquote><div style="text-align: left;"><br /><b>14)</b>  Buka Browser PC client anda. Masukkan url "http://mail.namesite.com" Setelah itu silahkan email2an Jika berhasil maka konfigurasi WebMailserver anda sukses.<br /><br /><b>Selamat Mencoba.</b></div></div>

[SERVER] Konfigurasi WebMail Server Debian

Setelah berhasil Mengkonfigurasi Web Server Selanjutnya kita akan mengkonfigurasi Webmail Server. Pada setting kali ini akan sangat memerluk...

Baca selengkapnya »

[ROUTER] Cara menginstall telnet di Debian 5 Lenny

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCyZf8_Ph91yW8CL34lf1UffvxK_mlLSgeWj9KSkTXHb7F_zTyCfQvfeBxnLYHZK2wnPYi288ZR7bvADYEhL9qa7PED46op7Qb-1lCJogF5J5Uq9E9dDOg32qpZ-vm8cSoUxeQWnS6vAg/s1600/telnet.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="161" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCyZf8_Ph91yW8CL34lf1UffvxK_mlLSgeWj9KSkTXHb7F_zTyCfQvfeBxnLYHZK2wnPYi288ZR7bvADYEhL9qa7PED46op7Qb-1lCJogF5J5Uq9E9dDOg32qpZ-vm8cSoUxeQWnS6vAg/s320/telnet.jpg" width="320" /></a></div><div style="text-align: center;"><br /></div><div style="text-align: center;"><u><b>Debian 5 Lenny</b></u></div><blockquote class="tr_bq">1. Masuk ke terminal dan login sebagai <b>root</b><br />2. Ketik perintah ini di terminal:<b> apt-get install telnetd </b><br />3. Install pun selesai.Sekarang kita tes dengan menggunakan perintah: <b>telnet 127.0.0.1 </b></blockquote>Masukan username dan password untuk telnet anda.<br /><br />Namun sayangnya, tools telnet ini tidak direkomendasikan. karena telnet bekerja di format clear text. Jadi disarankan menggunakan tools ssh. Tools ini bekerja melalui port 22 yang mirp.<br />Cara menginstall ssh di Debian 5 Lenny adalah:<br /><blockquote class="tr_bq">1. Masuk ke terminal dan login sebagai <b>root</b>.<br />2. Ketik perintah ini di terminal: <b>apt-get install ssh </b><br />3. Install pun selesai.Sekarang kita tes dengan menggunakan perintah: <b>ssh 127.0.0.1 </b></blockquote>Masukan username dan password untuk root anda<br /><br />Sekarang kita tes dengan menggunakan tools nmap untuk mengetahui service apa saja yang berjalan di server kita.<br />Caranya: <b>nmap 127.0.0.1</b><br /><br /><b>Selamat Mencoba.</b><br /></div>

[ROUTER] Cara menginstall telnet di Debian 5 Lenny

Debian 5 Lenny 1. Masuk ke terminal dan login sebagai root 2. Ketik perintah ini di terminal: apt-get install telnetd 3. Install pun selesa...

Baca selengkapnya »

[ROUTER] Installing DHCP server in Debian

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZBJEsSjlNdXHMDNfFWtMBnhJKepjBZQ0hIt6PW18X3IpTv80mcOt-f_77DQELxhhqTK7BkyRUPjIJUN7tEbODZA-zW3N17IUpANO9-XSU2gRE25E4TzGxa7Ssl-PTYNqazw2tt7HoEeI/s1600/dhcp+server.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="141" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZBJEsSjlNdXHMDNfFWtMBnhJKepjBZQ0hIt6PW18X3IpTv80mcOt-f_77DQELxhhqTK7BkyRUPjIJUN7tEbODZA-zW3N17IUpANO9-XSU2gRE25E4TzGxa7Ssl-PTYNqazw2tt7HoEeI/s320/dhcp+server.png" width="320" /></a></div><br /><b>Installing DHCP server in Debian</b><br /><blockquote class="tr_bq">#apt-get install dhcp3-server </blockquote>Once you press enter installation will start it will ask you some questions just you need to click ok for all three times<br /><br />Configuring DHCP server<br />The main Configuration file for DHCP server is<b style="color: blue;"> /etc/dhcp3/dhcpd.conf </b><br />Before doing any changes take backup copy of this file and add the following lines<br /><blockquote>option domain-name "test1.com";<br />option domain-name-servers 192.0.0.1, 194.2.0.50;<br />option routers 192.0.0.151;<br />default-lease-time 3600;<br />subnet 192.0.0.0 netmask 255.255.255.0 {<br />arrange 192.0.0.200 192.0.0.254;<br />}</blockquote>Each one of the above line is explained below<br /><br />first line provides the name field for the clients, second line gives DNS for for the clients, third one is for router ip,fourth one is lease time fifth line is subnet and netmask details, sixth line is ipaddress range for your clients<br /><br />If you want more details in dhcpd.conf file check the man page of this file<br /><br />If you want to configure static ipaddress for some machines follow this<br /><br /><blockquote class="tr_bq">host hostname {<br />hardware ethernet 00:B0:CF:8B:49:37;<br />fixed-address 192.0.0.19;<br />}</blockquote>Each one of the above line is explained below<br /><br />First line name of the host you want to configure static ip address,second one is MAC address of that perticular machine,if you want to find the MAC address of that machine you need to run the "ifconfig" command,third one is ipaddress you want to assign to that perticular machine.<br /><br />You need to restart the DHCP daemon to take effect of your new changes.<br /><blockquote class="tr_bq">/etc/init.d/dhcp3-server restart</blockquote>If it restarts without any errors your configuration is correct. If you get any errors you need to check the log files for more error information<br /><blockquote class="tr_bq">tail /var/log/messages</blockquote>The following file give you the complete details about the DHCP clients connecting to the DHCP server this details includes the following<br /><br />IP address of the client machine<br />MAC address of the client machine<br />Name of the client machine<br />Beginning and ending of ipaddress lease time<br /><br />Client Machine Configuration<br /><br />You need to modify the following file <br /><blockquote class="tr_bq">vi /etc/network/interfaces</blockquote>You need to add the following lines and save the file.<br /><blockquote class="tr_bq">auto lo eth0<br />iface lo inet loopback<br />iface eth0 inet dhcp</blockquote>Now you need to restart the networking service to take these new changes<br /><blockquote class="tr_bq">/etc/init.d/networking restart</blockquote>If you want to check your machine is configured properly you need to run the following command<br /><blockquote class="tr_bq">ifconfig</blockquote>Finally you can check your log file(<b style="color: blue;">/var/log/messages</b>) everything is properly configured or not.<br /><br /><br /><br /><b>Selamat Mencoba.</b><br /></div>

[ROUTER] Installing DHCP server in Debian

Installing DHCP server in Debian #apt-get install dhcp3-server Once you press enter installation will start it will ask you some questions j...

Baca selengkapnya »

[ROUTER] Setting Time Synchronization Pada Linux

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3jJIOQFnLT4u2p5YKbPdx9t97dhfvlclgebKe6Y76jAiL6kZK3btMMe-qgi8G3wsXX1fYLHdvgxiWaFrjyG0artGA5CJVN1KDJUqTR0ZEQ9z0Ei7bx1aAydXg7hp6r_MfX9dks6-8bP8/s1600/time.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3jJIOQFnLT4u2p5YKbPdx9t97dhfvlclgebKe6Y76jAiL6kZK3btMMe-qgi8G3wsXX1fYLHdvgxiWaFrjyG0artGA5CJVN1KDJUqTR0ZEQ9z0Ei7bx1aAydXg7hp6r_MfX9dks6-8bP8/s1600/time.jpg" /></a></div><br />NTP atau Network Time Protocol, adalah TCP / IP protokol yang digunakan untuk sinkronisasi waktu. klien NTP (seperti ntpdate) sinkronisasi waktu sistem dengan server NTP yang ditunjuk waktu (seperti ntpd dari Linux), yang biasanya diklasifikasikan dalam Strata 1 dan Strata 2. <br /><br />Stratum 1 server NTP menggunakan jam atom untuk waktu yang tepat, sedangkan strata 2 server NTP menggunakan jam non-atom yang menghasilkan waktu yang sedikit kurang akurat. NTP.org umumnya merupakan situs dikreditkan untuk referensi publik yang tersedia, Internet waktu server NTP dari kedua strata 1 dan strata 2. <br />Langkah-langkah untuk setup waktu sinkronisasi NTP Linux <br />Harus berlaku untuk Redhat, Debian, Linux / UNIX sama. <br /><br /><b>Asumsi: </b><br />WalkerNews adalah mesin Linux di segmen DMZ, berjalan ntpd untuk menyinkronkan sistem waktu dengan NTP server internet, dan pada gilirannya fungsi sebagai server master NTP lokal untuk perangkat komputer jaringan di area network internal lokal. <br /><br />WN2 adalah server Linux di 172.20.1.x segmen (jaringan area internal lokal) yang meminta waktu sinkronisasi dengan WalkerNews melalui ntpdate klien NTP. <br /><br /><b>1)</b> Install Linux waktu server NTP dan NTP ntpd ntpdate klien yang datang dengan distribusi Linux masing-masing. Misalnya, <br /><br />Redhat Linux: <br /><blockquote class="tr_bq">rpm-Uvh ntp-4.1.2-4.EL3.1.rpm <br />Debian Sarge: <br />apt-get install ntp </blockquote><br /><b>2)</b> Edit file WalkerNews Linux NTP server konfigurasi <br /><blockquote class="tr_bq">/ Etc / ntp.conf </blockquote><br />(Membuat file ini jika tidak ada). <br /><br /><b>a)</b> Tambahkan dalam setidaknya dua server NTP publik untuk mengurangi ketergantungan pada setiap waktu server tunggal eksternal. Misalnya, <br /><blockquote class="tr_bq">server time.nist.gov <br />server stdtime.gov.hk </blockquote><b>b)</b> Menetapkan cara ini NTP server Internet untuk berperilaku. Sebagai contoh, berikut setting yang didefinisikan bahwa Internet NTP server tidak memungkinkan untuk memodifikasi WalkerNews konfigurasi run-time atau WalkerNews query ntpd server: <br /><blockquote class="tr_bq">membatasi topeng time.nist.gov 255.255.255.255 nomodify noquery notrap <br />membatasi stdtime.gov.hk topeng 255.255.255.255 nomodify noquery notrap </blockquote><b>c)</b> Karena WalkerNews Linux waktu server NTP juga melayani server sinkronisasi internal waktu, saya juga akan harus mendefinisikan masing-masing segmen jaringan yang mengirimkan permintaan NTP waktu sinkronisasi ke WalkerNews. Misalnya, <br /><blockquote class="tr_bq">membatasi 172.20.1.0 mask 255.255.255.0 notrust nomodify notrap </blockquote>Hal ini untuk memungkinkan server dan / atau perangkat jaringan di 172.20.1.x segmen (dengan maksimal 255 perangkat) mengirimkan permintaan waktu sinkronisasi NTP untuk mencapai di WalkerNews server NTP Linux. <br /><br /><b>d)</b> Ini juga bagus untuk memungkinkan 127.0.0.1 localhost untuk query server Linux WalkerNews NTP. Alasannya adalah untuk membuat pemecahan masalah lebih mudah, ketika terjadi bahwa server lokal lainnya tidak dapat menyinkronkan waktu dengan WalkerNews. <br /><blockquote class="tr_bq">membatasi 127.0.0.1 </blockquote><b>e)</b> Itu saja untuk saat ini. Simpan file ntp.conf dan restart waktu server ntpd dengan perintah ini: <br /><br />Redhat Linux <br /><blockquote class="tr_bq">layanan ntpd restart </blockquote>Debian Sarge <br /><blockquote class="tr_bq">/ Etc / init.d / ntp restart </blockquote>Selama start-up, kedua server NTP mungkin memerlukan beberapa waktu untuk menyinkronkan, mungkin sepuluh detik beberapa menit. <br /><br />Untuk mengkonfirmasi WalkerNews Linux waktu server NTP adalah sistem jam sinkronisasi dengan NTP server Internet yang dirinci dalam langkah 2a, cobalah untuk mengeksekusi perintah ntpq-p pada command prompt root. Jika sinkronisasi waktu adalah bekerja dengan baik, output perintah ntpq-p harus menunjukkan tanda server NTP itu sync ke dengan tanda bintang. Selain itu, baik "penundaan" dan "offset" tidak boleh nol, sementara "jitter" nilai harus di bawah 100. <br /><br />Jika sinkronisasi waktu ntpd gagal, coba ganti FQDN dari server NTP internet dengan alamat IP-nya. Juga, pastikan bahwa firewall tidak memblokir lalu lintas NTP. <br /><br />Selanjutnya, untuk mengkonfirmasi WN2 segmen 172.20.1.x mampu melakukan sinkronisasi waktu dengan WalkerNews waktu server NTP Linxu, WalkerNews.net ntpdate-ketik q - baik "penundaan" dan "offset" tidak boleh nol juga. Jika tidak, Anda juga akan melihat "tidak ada server yang sesuai untuk sinkronisasi ditemukan" error pada output perintah ntpdate-q!<br /><br /><br /><br /><br />Selamat Mencoba.<br /></div>

[ROUTER] Setting Time Synchronization Pada Linux

NTP atau Network Time Protocol, adalah TCP / IP protokol yang digunakan untuk sinkronisasi waktu. klien NTP (seperti ntpdate) sinkronisasi w...

Baca selengkapnya »

[SERVER] Install Samba Server di Ubuntu 10.04 Lucid

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOHTq40X1fbc5rA36DpAy8QvlSZykTLs2fr1hhwrd-bQKDqgGeEKrqaz3G3NPhfSXsPe5-OqXbZBFdE5NZ4W_cCnsN0j2o7eXvX1KJtEq5hyT-XN5gLrpN7JYj4cUmlFmMg2TyNk87GIc/s1600/anetworking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOHTq40X1fbc5rA36DpAy8QvlSZykTLs2fr1hhwrd-bQKDqgGeEKrqaz3G3NPhfSXsPe5-OqXbZBFdE5NZ4W_cCnsN0j2o7eXvX1KJtEq5hyT-XN5gLrpN7JYj4cUmlFmMg2TyNk87GIc/s320/anetworking.jpg" width="320" /></a></div><div style="text-align: justify;"><br /><br />Bagi yang ingin Linux Ubuntu nya dijadikan sebagian folder sebagai share dengan komputer/laptop lain baik menggunakan OS Linux, Windows atau Mac, solusi salah satunya adalah menggunakan Samba.<br /><br />OK, langsung saja kita mulai cara instalasi Samba di Ubuntu 10.04 Lucid (atau versi diatas nya).<br />Berlaku juga untuk versi karmic Ubuntu 9.04, 10.10, Natty 11.04, dan 11.10.<br /><br />Cara Install, masuk ke terminal, lalu ketik sbb.:</div><blockquote class="tr_bq">[sourcecode light="true" language="bash"]<br />sudo apt-get install samba smbfs<br />[/sourcecode]</blockquote><div style="text-align: justify;"><br />Sebagai contoh jika kita ingin folder /share dijadikan sebagai data berbagi Linux kita.<br /><br />Masuk ke terminal, lalu ketik sbb.:</div><blockquote class="tr_bq">[sourcecode light="true" language="bash"]sudo pico /etc/samba/smb.conf<br />[/sourcecode]</blockquote><div style="text-align: justify;"><br />atau jika ingin menggunakan gedit:</div><blockquote class="tr_bq">[sourcecode light="true" language="bash"]gksu gedit /etc/samba/smb.conf<br />[/sourcecode]</blockquote><div style="text-align: justify;"><br />Cari bagian ini:</div><blockquote class="tr_bq">[sourcecode light="true" language="bash"]#<br />[global]<br />security = USER<br />[/sourcecode]</blockquote><div style="text-align: justify;"><br />Tambah kode dibawahnya persis setelah tulisan security = USER.<br />Kode nya sbb.:</div><blockquote class="tr_bq">[sourcecode light="true" language="bash"]hosts allow =<br /><br />[homes]<br />comment = Home Directories<br />browseable = no<br />writable = yes<br /><br />[share]<br />comment = Kincir File Server<br />path = /share/<br />force user = samba<br />force group = samba<br />read only = No<br />hosts allow =[/sourcecode]</blockquote><div style="text-align: justify;"><br />Untuk lebih rapih dan juga ter password, Anda dapat gunakan fasilitas user, yang nantinya akan menuju folder /home/namausernya<br /><br />Caranya, pertama, kita tambahkan user di Ubuntu kita, dengan cara ketik di terminal sbb.:</div><blockquote class="tr_bq">[sourcecode light="true" language="bash"]sudo adduser user1<br />[/sourcecode]</blockquote><div style="text-align: justify;"><br />atau</div><blockquote class="tr_bq">[sourcecode light="true" language="bash"]sudo -i[/sourcecode]</blockquote><div style="text-align: justify;"><br />masukkan passwd kita, lalu<br /><br />Hasilnya<br />========</div><blockquote>[sourcecode light="true" language="bash"]root@zaibatsu:~# adduser user1</blockquote><div style="text-align: justify;"><br /></div><blockquote class="tr_bq">Adding user `user1′ …<br />Adding new group `user1′ (1003) …<br />Adding new user `user1′ (1003) with group `user1′ …<br />Creating home directory `/home/user1′ …<br />Copying files from `/etc/skel’ …<br />Enter new UNIX password:<br />Retype new UNIX password:<br />passwd: password updated successfully<br />Changing the user information for user1<br />Enter the new value, or press ENTER for the default<br />Full Name []:<br />[/sourcecode]</blockquote><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkrfSVU3NpIHbqA9mtAGgm5ZmVmZQKCb6ClH-izGBXcVmtCrUNpl69nV0MzqLQWdsQT6JlOGONXdK0Brn3w0Y2pB6_tyB_Icf07aLgjp3PGgTQhDxSpWO1G3klLPChbtRZJ0vjHA08zaQ/s694/ubuntu_add_user1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="221" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkrfSVU3NpIHbqA9mtAGgm5ZmVmZQKCb6ClH-izGBXcVmtCrUNpl69nV0MzqLQWdsQT6JlOGONXdK0Brn3w0Y2pB6_tyB_Icf07aLgjp3PGgTQhDxSpWO1G3klLPChbtRZJ0vjHA08zaQ/s320/ubuntu_add_user1.jpg" width="320" /></a></div><div style="text-align: justify;"><br />Isikan password, nama, dan info lain seperlu nya, tidak harus diisi semua, yg perlu password nya diisi :)<br /><br />Nah, sekarang tinggal kita link kan agar user1 tersebut masuk ke user samba.<br />Caranya, ketik di terminal sbb.:</div><blockquote>[sourcecode light="true" language="bash"]sudo smbpasswd -a user1<br />[/sourcecode]</blockquote><div style="text-align: justify;"><br />Lalu masukkan password nya, samakan saja dengan user system di Ubuntu kita.<br /><br />Hasilnya<br />========</div><blockquote class="tr_bq">[sourcecode light="true" language="bash"]New SMB password:<br />Retype new SMB password:<br />Added user user1.<br />[/sourcecode]</blockquote><div style="text-align: justify;"><br />OK, untuk melihat perubahan2 diatas, kita perlu restart Ubuntu atau cukup restart samba nya, dengan cara ketik di terminal sbb.:</div><blockquote class="tr_bq">[sourcecode light="true" language="bash"]sudo service smbd restart<br />sudo service nmbd restart<br />[/sourcecode]</blockquote><div style="text-align: justify;"><br />Selesai sudah, silahkan coba koneksikan dari Linux atau Windows, lalu beri alamat IP (misalnya 192.168.1.9) atau hostname Ubuntu kita dan foldernya, contoh jika menggunakan user1, maka:<br />Alamat Drive share nya: \192.168.1.9user1<br />Setelah itu, masukan username nya user1 dan password sesuai dengan password diwaktu kita buat tadi diatas.<br /><br /><b>Selamat Mencoba</b></div></div>

[SERVER] Install Samba Server di Ubuntu 10.04 Lucid

Bagi yang ingin Linux Ubuntu nya dijadikan sebagian folder sebagai share dengan komputer/laptop lain baik menggunakan OS Linux, Windows atau...

Baca selengkapnya »