This is All About Networking

Install Webmin at Ubuntu

2009-01-08T21:16:00.021-07:00

Webmin is a tool that can be used to administer the system via the web, so webmin will be very easy for us to handle the system configuration, such as setup dns, apache, squid, file sharing, sarg, and much more. Webmin by default running on port 10000 https protocol.

To learn more about webmin http://www.webmin.com/ please read on and

to download please visit http://www.webmin.com/download.html.

The following step-by-step how to install webmin at ubuntu 8.04 :

Create an installation location

Here I install webmin on the folder /opt/webmin, so the first step is we need to create folders webmin, steps:

root@server:/# cd /opt
root@server:/# mkdir webmin
root@server:/# cd /opt/webmin
root@server:/opt/webmin#

Download webmin

Here I will install webmin-1.360 and to download webmin-1360 through the console please do the following:

root@server:/opt/webmin# wget http://internode.dl.sourceforge.net/sourceforge/webadmin/webmin-1.360.tar.gz
root@server:/opt/webmin# tar xzf webmin-1.360.tar.gz

Install additional modules required

Webmin-1360 after we downloaded, the next step is we need to install the packages needed by webmin:

root@server:/opt/webmin# aptitude install libauthen-pam-perl libnet-ssleay-perl libpam-runtime openssl perl perl-modules openssl perl-modules

After doing the above commands install webmin next steps:

root@server:/opt/webmin# . /setup.sh

Please answer the questions as needed, and the installation is finished !

and for uninstall webmin on server just run command :

root@server:/opt/webmin# /etc/webmin/uninstall.sh

Reference : http://www.udiniqgeek.com/

Setup Local Web Server at Ubuntu

2008-10-23T00:11:00.005-07:00

Web server is a server software that functions accept HTTP or HTTPS requests from clients which is known as a web browser and sends the results back in the form of web pages that usually form an HTML document.

Here I install apache2 as web server on ubuntu linux and I plan to add drupal in apache2.

In a Web server installed on ubuntu that needs to be installed are as follows:

apache2
php5
mysql server
libapache2
mysql
php5-mysql
phpmyadmin

To install a web server in ubuntu we are using apache, the following steps :

root@server:~# aptitude update
root@server:~# aptitude install apache2 php5 mysql-server libapache2-mod-auth-mysql php5-mysql phpmyadmin

during the installation process to note is the mysql password not to forget that this mysql password which we will use in making the needs of the database.

If the process is complete apache2 install to check if the web server running normally, please open your browser and type in any http://ip_address_of_the_computer_webserver and writing IT'S WORK! then the web server is running normally. To put file2 html or php which you'll use as a website please put the web server folder ubuntu /var/www .

Powered by :

Install SSH at Ubuntu

2008-10-21T18:43:00.005-07:00

SSH is one of the feature remote access program on ubuntu. It is make easier our job in access set of Equipment.

With ssh I can do remote to my server with ease, so that I can do updates and install packages without having to deal directly with it, namely in the sense I can do it all from work, my house, and when I will be traveling with family.

The following step by step setup SSH on ubuntu :

1. Install package SSH

To install ssh on ubuntu is not too complicated, because the ubuntu repository servers are available for this ssh package, so that we can directly download it with apt-get command.

root@server:~# aptitude update
root@server:~# aptitude install SSH

2. Edit file sshd_config

Purpose of this configuration change is to our server security, since port 22 is the default port of ssh, then we can replace it with a port that we want, so that others will be difficult to guess.

root@server:~# vim /etc/ssh/sshd_config

# change port 22 with port 2222 ( can used with other port )
# change PermitRootLogin yes with change PermitRootLogin no

# save with esc:wq and enter

3. Restart SSH

root@server:~# /etc/init.d/ssh restart

SSH installation is finally completed, to try it we can do remotely through our laptop using putty software, where in the putty software please fill IP address of the server and select the port on ssh.

DNS Server with Ubuntu

2008-10-21T18:18:00.005-07:00

DNS Server ( Domain Name System)

The Domain Name System (DNS) is a hierarchical naming system for computers, services, or any resource participating in the Internet.

It associates various information with domain names assigned to such participants. Most importantly, it translates humanly meaningful domain names to the numerical (binary) identifiers associated

with networking equipment for the purpose of locating and addressing these devices world-wide.

An often used analogy to explain the Domain Name System is that it serves as the "phone book" for the Internet by translating human-friendly computer hostnames into IP addresses. For example, www.example.com translates to 208.77.188.166.

How to Setup DNS Server ?

Specs PC : Minimum Pentium III, Operating System : Linux Ubuntu, Domain : www.routerwireless.biz

Install package bind
root@server:~# aptitude update && aptitude install bind9o apt-get install bind9

2. Change DNS PC with your IP, example :192.168.168.1

root@server:~# vim /etc/resolv.conf
# input your IP DNS with write i

nameserver 192.168.168.1

# save be write :wq and enter

3. Edit configuration file named.conf
root@server:~# vim /etc/bind/named.conf

# add this script by write i :

zone “udiniqgeeks.com” {
type master;
file “/etc/bind/db.udiniq”;

};

zone “10.14.10.in-addr.arpa” {
type master;
file “/etc/bind/db.ip_udiniq”;
};

# save be write :wq and enter

Ok, next step is we need to create a database for the domain name we will create the dns server and as plan at the beginning, a domain which we will create is udiniqgeeks.com with MX mail.udiniqgeeks.com, and here I am will create a database db.udiniq and resolver file with db.ip_udiniq.

To simplify the configuration database, so here we copy an existing database, which is db.local. following step-by-stepnya:

root@server:~# cp /etc/bind/db.local /etc/bind/db.udiniq

Then we edit db.udiniq:

root@server:~# vim /etc/bind/db.udiniq

;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA ns1.udiniqgeeks.com. root.udiniqgeeks.com. (
2 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS ns1.udiniqgeeks.com.
@ IN A 10.14.10.27
@ IN MX 10 mail.udiniqgeeks.com

mail IN A 10.14.10.27
ns1 IN A 10.14.10.27
www IN CNAME ns1

# save be write :wq and enter

If the database already db.udiniq ok, then we create a file resolver, the following steps :

root@server:~# vim /etc/bind/db.ip_udiniq

@ IN NS ns1.udiniqgeeks.com.
27 IN PTR ns1.udiniqgeeks.com.

27 IN PTR mail.udiniqgeeks.com.

The next step is to restart bind you to all the config can be run, run the following command:

root@server:~# /etc/init.d/bind9 restart

To check domain name, please do the following commands:

1. To check the SOA record, therein including the series of the new zone we created, run the following command:

root@server:~# dig @localhost soa udiniqgeeks.com

2. To check your MX records, use the following command:

root@server:~# dig @localhost mx udiniqgeeks.com

3. To check the A record or CNAME record :

root@server:~# dig @localhost www.udiniqgeeks.com

Finally OK !

How to Setup DHCP Server with Ubuntu ?

2008-10-21T18:15:00.002-07:00

Specs PC : Minimum Pentium III, Operating System : Linux Ubuntu 8.04 ( Hardy )

Example network :

Network : 192.168.1.0/24
Range IP : 192.168.1.10-192.168.1.50
Gateway : 192.168.1.1 as DHCP Server

Oke !, Let's Install DHCP Server :

1. Install package DHCP Server

root@root:~$ sudo apt-get install dhcp3-server

2. Configuration dhcp-server reside in file /etc/dhcp3/dhcpd.conf

root@root:~$ sudo vim /etc/dhcp3/dhcp.conf

Please change this script :

# A slightly different configuration for an internal subnet

#subnet 10.5.5.0 netmask 255.255.255.224 {

# range 10.5.5.26 10.5.5.30;

# option domain-name-servers ns1.internal.example.org;

# option domain-name “internal.example.org”;

# option routers 10.5.5.1;

# option broadcast-address 10.5.5.31;

# default-lease-time 600;

# max-lease-time 7200;

Change to be :

subnet 192.168.1.0 netmask 255.255.255.0 {

range 192.168.1.10-192.168.1.50;

option domain-name-servers 192.168.0.1; # suit by your DNS ISP

option domain-name “domain.com”;

option routers 192.168.1.1;

option broadcast-address 192.168.1.255;

default-lease-time 600;

max-lease-time 7200;

}

3. If want add special IP at certain of PC, add below script at file /etc/dhcp3/dhcpd.conf :

host server {
hardware ethernet 09:AE:88:0c:95:23;
fixed-address 192.168.1.20;
}

Above configuration will bringing dhcp server give IP 192.168.1.20 to PC by MAC address 09:AE:88:0c:95:23

3. Setting interfaces for dhcp server, edit file /etc/default/dhcp3-server

root@root:~$ sudo vim /etc/default/dhcp3-server

# On what interfaces should the DHCP server (dhcpd) serve DHCP requests?

# Separate multiple interfaces with spaces, e.g. “eth0 eth1″.

INTERFACES=”eth1″ # suit with your interfaces used

4. Next, active DHCP Server !

root@root:~$ sudo /etc/init.d/dhcp3-server restart

Finally OK !

Proxy Server with Ubuntu

2008-10-21T18:14:00.004-07:00

a proxy server is a server (a computer system or an application program) which services the requests of its clients by forwarding requests to other servers. A client connects to the proxy server, requesting some service, such as a file, connection, web page, or other resource, available from a different server.

The proxy server provides the resource by connecting to

the specified server and requesting the service on behalf of the client.

A proxy server may optionally alter the client's request or the server's response, and sometimes it may serve the request without contacting the specified server. In this case, it would 'cache' the first request to the remote server, so it could save the information for later, and make everything as fast as possible.

A proxy server that passes all requests and replies unmodified is usually called a gateway or sometimes tunneling proxy.

A proxy server can be placed in the user's local computer or at various points between the user and the destination servers or the Internet.

The following step by step for setup Proxy Server with Linux Ubuntu 8.04 Server :

1. install package squid
root@root:~$ sudo apt-get install squid

2. move the configuration file squid original
root@root:~$ sudo mv /etc/squid/squid.conf /etc/squid/squid.conf.original

3. make configuration new squid
root@root:~$ sudo vim /etc/squid/squid.conf
#input below script be write i

http_port 8080 transparent
icp_port 3130
udp_incoming_address 0.0.0.0
udp_outgoing_address 255.255.255.255
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 64 MB
cache_swap_low 90
cache_swap_high 95
connect_timeout 1 minutes
negative_ttl 5 minutes
read_timeout 15 minutes
request_timeout 5 minutes
persistent_request_timeout 1 minutes
client_lifetime 5 day
pconn_timeout 120 seconds
shutdown_lifetime 30 seconds
maximum_object_size 20480 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 4096 KB
ipcache_size 1024
ipcache_low 90
ipcache_high 95
fqdncache_size 1024
cache_replacement_policy lru
memory_replacement_policy lru
cache_dir ufs /var/spool/squid 15000 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
log_ip_on_direct on
debug_options ALL,1
client_netmask 255.255.255.255
ftp_user Squid@
ftp_list_width 32
ftp_passive on
ftp_sanitycheck on
ftp_telnet_protocol on
redirect_children 10
auth_param basic children 10
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
quick_abort_min 16 KB
quick_abort_max 16 KB
quick_abort_pct 95
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 6667 7000
acl Safe_ports port 80 # http
acl Safe_ports port 81
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https
acl Safe_ports port 70 # ghoper
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 110 # pop3
acl Safe_ports port 4461
acl Safe_ports port 5050
acl CONNECT method CONNECT
http_access allow manager localhost
acl perusahaan src 192.168.0.0/24 # please, change by your local IP ( LAN )
http_access allow perusahaan
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all
http_reply_access allow all
icp_access allow all
miss_access allow all
cache_mgr udiniq #your name
visible_hostname routerwireless.biz # your domain
logfile_rotate 10
buffered_logs off
snmp_port 3401
snmp_access allow localhost
snmp_access deny all
snmp_access deny all
coredump_dir /var/spool/squid
ie_refresh on
##Delay pools
acl download url_regex -i ftp \.exe$ \.mp3$ \.mp4$ \.tar.gz$ \.gz$ \.tar.bz2$ \.rpm$ \.zip$ \.rar$
acl download url_regex -i \.avi$ \.mpg$ \.mpeg$ \.rm$ \.iso$ \.wav$ \.mov$ \.dat$ \.mpe$ \.mid$
acl download url_regex -i \.midi$ \.rmi$ \.wma$ \.wmv$ \.ogg$ \.ogm$ \.m1v$ \.mp2$ \.mpa$ \.wax$
acl download url_regex -i \.m3u$ \.asx$ \.wpl$ \.wmx$ \.dvr-ms$ \.snd$ \.au$ \.aif$ \.asf$ \.m2v$
acl download url_regex -i \.m2p$ \.ts$ \.tp$ \.trp$ \.div$ \.divx$ \.mod$ \.vob$ \.aob$ \.dts$
acl download url_regex -i \.ac3$ \.cda$ \.vro$ \.deb$
delay_pools 1
delay_class 1 1
delay_parameters 1 6000/32000
delay_access 1 allow download
delay_access 1 deny all

# save be write :wq and enter

4. start Squid proxy
root@root:~$ /etc/init.d/squid start

5. Setup for transparent proxy
root@root:~$ sudo /sbin/iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-ports 8080
root@root:~$ sudo /sbin/iptables -t nat -A PREROUTING -i eth1 -p udp --dport 80 -j REDIRECT --to-ports 8080

6. Save transparent proxy on rc.local
root@root:~$ sudo vim /etc/rc.local

# input this script below rc.local be write i :
/sbin/iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-ports 8080
/sbin/iptables -t nat -A PREROUTING -i eth1 -p udp --dport 80 -j REDIRECT --to-ports 8080

# save be write :wq and enter

7. Reboot proxy server
root@root:~$ sudo reboot

Finally OK !

Setup Mail Server with Ubuntu

2008-10-21T18:02:00.000-07:00

A mail transfer agent (MTA) (also called a mail transport agent, message transfer agent, or smtpd (short for SMTP daemon)), is a computer program or software agent that transfers electronic mail messages from one computer to another.

The term mail server is also used to mean a computer acting as an MTA that is running the appropriate software. The term mail exchanger (MX), in the context of the Domain Name System formally refers to an IP address assigned to a device hosting a mail server, and by extension also indicates the server itself.

A Mail Delivery Agent (MDA) is software that delivers e-mail messages right after they've been accepted on a server, distributing them to recipients' individual mailboxes.

An e-mail client, aka Mail User Agent (MUA), aka e-mail reader is a frontend computer program used to manage e-mail.

Sometimes, the term e-mail client is also used to refer to any agent acting as a client toward an e-mail server, independently of it being a real MUA, a relaying server, or a human typing directly on a telnet terminal. In addition, a web application providing the

How to Setup a Mail Server ?

Specs PC : Pentium IV with RAM 512, Operating System : Linux Ubuntu 8.04

Installation mail server need some software :

1. Postfix ( MTA )
2. Dovecot ( MDA )
3. SASL
4. Squirrel Mail ( Webmail )

The following how to install mail server ubuntu 8.04

1. Install Postfix MTA (Mail Transfer Agent)

root@root:~$ sudo apt-get install postfix postfix-tls libsasl2 sasl2-bin libsasl2-modules

2. Install Dovecot MDA ( Mail Delivery Agent )

root@root:~$ sudo apt-get install dovecot-imapd dovecot-pop3d dovecot-common

# File configuration Dovecote at /etc/dovecot/dovecot.conf :

root@root:~$ sudo gedit /etc/dovecot/dovecot.conf

edit to be :

# specify protocols = imap imaps pop3 pop3s
protocols = pop3 imap
# uncomment this and change to no.
disable_plaintext_auth = no
pop3_uidl_format = %08Xu%08Xv3.

3. Configuration SASL Authentication with TLS

# Edit /etc/postfix/main.cf

root@root:~$ sudo gedit /etc/postfix/main.cf

# Input the configuration this script

smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = yourdomain.com
smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination
smtpd_sasl_security_options = noanonymous

# order command :

sudo rm -r /var/run/saslauthd/
sudo mkdir -p /var/spool/postfix/var/run/saslauthd
sudo ln -s /var/spool/postfix/var/run/saslauthd /var/run
sudo chgrp sasl /var/spool/postfix/var/run/saslauthd
sudo adduser postfix sasl

# File /etc/dovecot/dovecot.conf must you configuration again for dovecot daemon socket :

root@root:~$ sudo gedit /etc/dovecot/dovecot.conf

input this script :

auth default2 {
mechanisms = plain login
passdb pam {
}
userdb passwd {
}
socket listen {
client {
path = /var/spool/postfix/private/auth
mode = 0660
user = postfix
group = postfix
}
}}

4. Installation squirrel Mail

root@root:~$ sudo apt-get install apache2 libapache2-mod-php5 php5-cli php5-common php5-cgi squirrelmail

# edit file /etc/apache2/apache2.conf

root@root:~$ sudo gedit /etc/apache2/apache2.conf

# input this information :

Include/etc/squirrelmail/apache.conf

5. Restart your PC

root@root:~$ sudo reboot

You all can send email to other user by use of your PC. For can send email via internet you must install SASL authentication.

PC Router with Ubuntu

2008-10-19T22:56:00.000-07:00

PC Router is a PC have installed software router with a purpose can forwarding information. For the software can using license ( like : Kerio WinRoute ) or free license ( can use : linux ubuntu, etc )

The following step by step for setup PC Router with Linux Ubuntu 8.04 Server :

PC Pentium III 800 Mhz + 2 Ethernet card Realtek ( minimal Specs J )

1. Setup Ubuntu on PC

Boot…
Choose Language >> choise : English
Choose a country, territory or area >>
Detect keyboard layout >> pilih : No
The origin of the keyboard >> pilih : U.S. English
Follow next step and wait several minute.
Configure the network : DHCP
For hostname appropriated, like root
Partition Disks dengan cara manual :
- Logical > swap > utk swap ( appropriated ) : 1 GB
- Logical > boot > utk boot (appropriated) : 200 MB
- Logical > ext3 > utk root / (appropriated) : 8 GB
- Logical > home > utk home /home (residue of partition) : 10 GB
Configure time zone >> pilih : appropriated
System clock set to UTC >> pilih : Yes
Set up user and passwords :
- Full name for the new user : root
- User for your account : root
- Choose a password for the new user : ***** (appropriated)
- Re-enter password to verify : ***** (appropriated)
Installing the base system ( wait process installation on progress) ….
Software selection : ssh
Finish the installation Complete

2. Setup IP on interface ( 2 LAN Card )

root@root:~$ sudo vim /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
# eth1 >> Description “ LAN Connection “
auto eth1
iface eth1 inet static
address 192.168.0.1
netmask 255.255.255.0
network 192.168.0.0
broadcast 192.168.0.255
# eth0 >> Description “ Outside Connection “
auto eth0
iface eth2 inet static
address 192.168.1.5
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.254

3. Restart interface networking :

root@root:~$ sudo /etc/init.d/networking restart
* Reconfiguring network interfaces… [ OK ]

4. Make sure setting ip on interface OK !
root@root:~$ sudo ifconfig

5. Make sure ping to yahoo.com OK !
root@root:~$ ping yahoo.com

6. if connection OK, so the moment for update :
root@root:~$ sudo apt-get update
root@root:~$ sudo apt-get upgrade

7. edit file sysctl.conf :
root@root:~$ sudo nano /etc/sysctl.conf
# net.ipv4.conf.default.forwarding=1
change to be :
net.ipv4.conf.default.forwarding=1
ctrl+x, write y and enter

8. edit file ip_forward the valuabe 0 to be 1 :
root@root:~$ echo "1" > /proc/sys/net/ipv4/ip_forward

9. make the routing between eth 1 to eth0 :
root@root:~$ sudo /sbin/iptables -t nat -A POSTROUTING -s 192.168.0.0/255.255.255.0 -d 0/0 -j MASQUERADE

10. The secure server from virus :
root@root:~$ sudo /sbin/iptables -A FORWARD -p tcp --dport 135:139 -o eth0 -j DROP
root@root:~$ sudo /sbin/iptables -A FORWARD -p udp --dport 135:139 -o eth0 -j DROP
root@root:~$ sudo /sbin/iptables -A OUTPUT -p tcp --sport 135:139 -o eth0 -j DROP
root@root:~$ sudo /sbin/iptables -A OUTPUT -p udp --sport 135:139 -o eth0 -j DROP

11. Don’t forget save all on file rc.local :
root@root:~$ sudo nano /etc/rc.local
Delete exit=0 and input this script below rc.local :

echo "1" > /proc/sys/net/ipv4/ip_forward

/sbin/iptables -t nat -A POSTROUTING -s 192.168.0.0/255.255.255.0 -d 0/0 -j MASQUERADE

# drop port virus
/sbin/iptables -A FORWARD -p tcp --dport 135:139 -o eth0 -j DROP
/sbin/iptables -A FORWARD -p udp --dport 135:139 -o eth0 -j DROP
/sbin/iptables -A OUTPUT -p tcp --sport 135:139 -o eth0 -j DROP
/sbin/iptables -A OUTPUT -p udp --sport 135:139 -o eth0 -j DROP

ctrl+x, write y and enter

12. Reboot PC Router Ubuntu :
root@root:~$ sudo reboot

Finally, OK !

Configuration Cisco 1721 as Gateway

2008-08-12T18:10:00.000-07:00

The following step by step for configuration router cisco 1721 as gateway internet :

Preparations for installation :
1. Cisco Router 1721 with 1 fastethernet and 1 ethernet
2. Laptop
3. RS 232 to USB cable
3. Console cable

Network Topology :

1. Open hyperterminal program, setting configuration at restore default

router> enable, -------- >> router #

........................................... .....................................
router# clock set hh:mm:ss dd month yyy
router# config t
router(config)#hostname udiniq
udiniq(config)#ip name-server 202.163.217.80
udiniq(config)#ip name-server 202.163.217.90
.................................................. .............................

udiniq(config)# interface fasteth0
udiniq(config-if)# description ## Connection to ISP ##
udiniq(config-if)# ip address 192.168.1.2 255.255.255.248
udiniq(config-if)# speed-auto
udiniq(config-if)# duplex-auto
udiniq(config-if)# no shutdown
.....................................................................

udiniq(config)# interface eth0
udiniq(config-if)# description ## Connection to LAN Office ##
udiniq(config-if)# ip address 10.10.1.1 255.255.255.0
udiniq(config-if)# speed auto
udiniq(config-if)# duplex-auto
udiniq(config-if)# no shutdown
.............................. .............................................................

udiniq(config)# ip classless

udiniq(config)# ip default-gateway 192.168.1.1

udiniq(config)# ip route 0.0.0.0 0.0.0.0 192.168.1.1

.............................................. ..............

Finally OK !