.perangkaian

Installing FreeBSD on IT Unit server: DAY-1

2011-02-14T00:35:00.002+08:00

They burn the installer disc.
They boot the disc.
so i'm just guide them what need to do, what need to choose during installation.
so IT Unit staffs did great job. they know what i told they. they know why i choose that thing and that thing.

so, after boot, express installation, format and partioning disk just "a" and minimal distribution.
done and restart.
so very fast they said. yeah just like that to install operating system.

they ask, why need to restart.
i said first we boot from disc, and now we wanna boot from harddisk for first time.

after restarting, do configure on sysinstall.
root password.
networking. server have 4 network interface. so which one selected when plug up rj45 connector.
so i figure out can use

ifconfig |more

see on which interface was active.
so ftp and ssh set on networking configuration on sysinstall. just uncomment from vi editor. to save the file press Esc then type :wq!

finish then copy ports distribution through sysinstall. default collection get from installer disc.

then exit sysinstall

so check on /etc/rc.conf makesure sshd was enable.

so before restart second time to see whether service up or not, let give root permission first in order to use ssh.

ee /etc/ssh/sshd_config

uncomment permit root. change no to yes. and then restart
init 6

finish. i wanna set package from remote after this.
wait, when restarting, operating system ignore other 9Gig RAM.
huh what happens?

so google it to get answer.

i leave server room and start putty to get ssh connection from the new server. like what i did on vmware, i install xorg, xdm and xsm. successful configure like what guided in freebsd handbook.

then start install apache

cd /usr/ports/www/apache22
make config-recursive
make install clean

finish and try to run but it failed.

apachectl start

try mysql installation

cd/usr/ports/databases/mysql51_server
make config-recursive
make install clean

opsss.. it failed.. the mysql51 distfiles no longer exist.
so

init 6

bye bye.. see u tomorrow.

Wanna Install FreeBSD 8.1 with xdm into Server

2011-02-12T12:51:00.002+08:00

IT Department wants me help them in installing a new arrive Server. This gonna be a web server. So i decided to install FreeBSD 8.1. If server is mine, i really don't care about GUI, but for them the best thing is including xdm.

So before start the installation, i tried install xdm in my Virtual Machine. so let see what happened

First Try

Easy way installing FreeBSD
boot from FreeBSD8.1 disc.
select country and then keyboard type
on sysinstall menu, i choosed Express
FDISK, i choosed "a" then "q".
boot manager, i choosed BootMgr
disklabel, i choosed "a" then "q"
distribution, i choosed minimal
then installation process
then exit install no need to review or what ever, restart it.
install xdm
i configure first my os. give hostname, set root password, networking, ssh then make all up.
i need to install xorg via sysinstall, by choose configure post installation
package
using ftp, choose taiwan mirror
then facebook a while before ftp make it successfully list package
so choose x then xorg
so wait until xorg finish using tbz compiled format.
repeat for package xdm

Hmmm.. when all is done, i think i don't get any packages file that i install it in the os so, if i install in real server i must again download. and i think compiled tbz compatible or not with server spec. so next try, second try, so i using ports. all file were download into /usr/distifiles. but it will take on time to compile, i know it.

Second try

finish another virtual machine freebsd installation.
configure it network and what ever i thinks it is needed.
then i install ports collection from cd using sysinstall > configure > distribution
then i install xorg first
cd /usr/ports/x11/xorg
make config-recursive
make install clean
then configure xorg. i forgot configuration process so i refer freebsd handbook online.
startx
after copy xorg.conf. but it still not success plus it is dark screen not showing the result.
ctrl + alt + tab + F1 and ctrl + c to quit x.
vmware tools installation /usr/ports/emulator/vmware-tools6/ was problem, so recognize missing /usr/ports/x11-drivers/xf86-video-vmware
configure again and startx. i did it.
/usr/ports/x11/xdm
ee /etc/ttys
ttyv8 "/usr/local/bin/xdm -nodaemon" xterm on secure
init 6

yes i got xdm
but the problem when i put root or user it not success to login.
if i give wrong password it detected. so get out from the place and buy egg benjoo and milo ice.

that's all last two days of story..
today i have the answer..
/usr/ports/x11/xsm

orite tomorow wait for me to install on real server.

Firefox 3.0 with Cooliris (PicLens) add-ons + Picasa

2008-09-08T13:30:00.003+08:00

Wanna browse internet pictures with fun 3D view? This tip actually credit to E-Cafe UiTM teams because introduce it to me. However i also discover tip to preview it off-line. that mean we can also use this plugin to our local pictures. yeah.. off course using PicLens Publisher..

Here you go!

in bahasa

Sebelum ni aku bukanlah pengguna Mozilla Firefox. dan aku mmg xsuka pakai internet explorer sejak dulu lagi. First web browser kesayangan aku adalah Netscape. aku kenal internet ni pun waktu study kat Arau sejak 1997. then aku buat first website pada tahun 1998 guna Netscape Composer. Lepas habis study, aku kerja kat UUM yang memaksa aku pakai internet explorer utk beberapa sistem web dalaman.. dan aku rasakan ianya terlalu memeritkan. banyak benda yang dibuat hanya support ie shj. aku pun tak paham. Then masa tu Opera merupakan alternatif aku yang terbaik selain browser yang laju-ringan dan tak banyak bugs. Sekarang ni pun aku menulis blog atas Opera.
Berenti kerja kat UUM aku sambung pengajian di UiTM. di situlah baru aku menjadi pengguna Firefox yang setia. Padahal masa kat UUM aku tengok member2 pakai firefox, aku masih lagi ngan opera. Sebab lain kat UiTM aku pakai firefox kerana FreeBSD aku xder lain utk mengadu kasih.. firefox jer..
Tips kali ini..
1. Please upgrage your Firefox version to the latest one. version 3 (point something something). Then you will feel that we have a good view of browser. Nak navigate to previous and back to latest page pun lagi senang.
2. Then tambah Add-ons Pic Lens.
setakat ni aku tak pakai banyak add-ons. cuma New Tab Button on Tab Right, Duplicate Tab, Ctrl-Tab, DownloadHelper dan Cooliris Previews. Tab-Effect masih lagi version3 tak support.
3. Download Picasa2.
pastikan anda dah signup google account, so senang nak pakai picasa. gmail ke blogspot ker pakai account yang sama.
4. Upload Gambar-gambar ke picasaweb.
Easy by using Picasa2. then gambar2 tu boleh set public ataupun tidak utk kasi org lain view.
contoh kat picasaweb aku --> http://picasaweb.google.com/nadahahs
5. Browse Picasaweb tersebut dengan Firefox+PicLens.
Pergh.. mainlah sebelum jemu!!!
6. (Optional)Kalau nak 3D tersebut untuk gambar2 yang offline (local) bolehlah download PicLens Publisher http://piclens.com/lite/publisher-win.php.

additional: This tips have writen before Cooliris still know as PicLens... so hope you enjoy it.

Yahoo! Messenger

2008-06-20T15:43:00.000+08:00

Have you ever try running other programs such as trillian, pidgin, gaim for you ym account? Here is my experience about ymessenger.

in bahasa

ymessenger
Terlebih dahulu ingin ku ceritakan serba sedikit sejarah penglibatanku dengan yahoo messenger ni. Pada tahun 1998 aku baru kenal internet dengan website, email dan irc (org dah tak yah telnet utk chat dah time ni). Aku kurang chat kat mirc walaupun ada nick kat mamak dan kampung, sbb nak online kena pergi cc. Mood aku utk chat hanyalah pada time tension nak siapkan assignment dan time dot dot dot ajer. Aku juga suka berlakon jadi awek kat mirc. Aku juga suka berlakon jadi org jahat gertak2 mamat poyo dalam mirc. Then 1999 aku join icq, chat ngan abang aku kat Jepun. Adala kawan2 dia kat sana. Pastu aku praktikal kat Perwaja Steel dalam tahun 2000 aku pun dikenalkan dengan ymessenger ni oleh staf2 kat MIS. Sebab features voice chat tu yang kami sumer pakat menggunakan semaksimumnyer.. hek hek hek... sekian hari ini dalam sejarah.

mana nak download ymessenger ni?
pergi jer ke website yahoo..
www.yahoo.com

xnak install?
boleh jer korang pakai meebo
www.meebo.com
sekarang boleh chat kat email yahoo jer
http://mail.yahoo.com

pakai banyak2 IM?
pakai ymessenger version terbaru ada intergrate dengan MSN, LCS, Lotus Sesame
pakai trillian
http://www.ceruleanstudios.com/

nak pakai dalam platform linux
org dalam linux jangan risau.. mesti ada punya

nak remove banner
google ajer. usaha tangga kejayaan.. mesti ada punya

dah dapat banner removal tapi tak support ymessenger version baru.
http://www.filehippo.com/
huh software lain pun ada yer...
nak lagi canggih.. nak sniff org lain chat kat ym? nak baca archive yang tak boleh baca guna notepad tu? nak guna hmmm.. melampau2 ek..
yahoo messenger spy
yahoo messenger monitor sniffer
sniffIM
yammy
super yahoo messenger archieve decoder
etc

ada masalah firewall untuk running ymessenger
http://iloveim.com

Files over Savefile

2008-04-16T11:46:00.001+08:00

Here a tip to find some file on savefile. Kindda get a lot result.. actually cannot satisfy our specific search but it's ok to search some file not to search.

in bahasa

nak cari fail2 dalam savefile
apa yang aku buat hanyalah googlekan

inurl:savefile.com/projects lagu

lepas tu first result page aku klik pada repeat the search with the omitted results included.

okay, aku download lagu2 mana2 yang best..
senang kan..

*peringatan: jangan missused cara ini.. sendiri buat sendiri tanggung, aku xnak bertanggungjawab kay.

Idea - Alert! On Snort

2006-09-01T08:07:00.000+08:00

i'm searching via google and i found this picture is kinda interest...

this is a screenshot taken from SAM (Snort Alert Monitor) website at here

How can SAM alert me that my thresholds have been crossed?
SAM has many ways of grabbing your attention. The first is the rather large stop light in the top left corner of the screen. The second is by playing a specific sound when a particuliar threshold is reached. Currently we are using HAL quotes, but you are welcome to change them to anything you like. They are rather obviously labeled in the sam/wav directory. The third way you can be notified is that an email can be sent to a specific person or group of persons. And lastly a plugin architecture is being planned where you can create your own creative way of alerting the appropriate people.

another tool that i found is Snort alert verification now on v0.9.6 from it project download page.

idea: FreeBSD GUI Installer

2006-06-26T14:03:00.000+08:00

in Bahasa

FreeBSD tidak laris seperti pisang panas utk pengguna Unix berbanding distro2 terkemuka Linux yakni Redhat, Mandrake dan Suse.
antara sebab yang boleh diterima pakai adalah antaramuka untuk proses installasi sistem operasi tersebut.. klu dalam linux sendiri pun, peratusan pengguna Slackware pun tidak ramai berbanding distro yg mempunyai GUI installer ini.

kajian:
betulkah FreeBSD tak pernah ada GUI installer?
pentingkah GUI installer utk FreeBSD? (boleh edar questionaire nih)
susahker nak develope GUI installer utk FreeBSD? (guna third party mcm anaconda dalam redhat?)

so any comment utk menambah ke adventure-an tajuk thesis ini?

Customize Your Bash

2006-02-25T07:30:00.000+08:00

in Bahasa

sini ada tips sikit utk customize bash prompt anda..

hehehe

1: check kat home directory anda, .bashrc anda wujud ke tidak
$ ls -a

klu tak der create newfile bernama .bashrc di dlm home directory anda
boleh guna apa2 aja editor yg anda tahu/suka
vi, dtpad, gnome-text-editor, pico, kwrite dan sbgnya..

2. masukkan line
PS1="prompt baru anda"
ke dalam .bashrc

contoh2nya
CODE

PS1="nadahahs was here >"
PS1="nadahahs@localhost $"
PS1="[\u@\h:\W, \@, \d]> "#nota satu
PS1="[\u][\w] >" #nota dua

nota satu
\u utk whoami
\h hostname
\W working directory (format pendek)
\@ masa sekarang
\d tarikh hari ni

nota dua
\w working directory (format panjang)

klu beginner.. tak faham sangat...
ok dalam linux anda pastikan anda sedang menggunakan bash
taip spt bawah ini (tanda dollar tu takyah taip la bang oi)
$ echo $SHELL

klu /bin/bash.. sah anda menggunakan bash
jadi langkah seterusnya taip
$ echo "PS1="[\u@\h][\w] \@, \d]>"" >> .bashrc

selamat mencuba

Bash Script: an Example

2006-02-15T16:21:00.000+08:00

#script begin
j=5
MAX=10000
for ((nr=1; nr<$MAX; nr++))
do

let "t = $nr % $j"
case $j:$t in
5:3 ) nr=$nr-1; j=7;;
7:4 ) nr=$nr-1; j=9;;
9:5 ) break;;
*) j=5;;
esac;
done
echo
echo ============
echo Number = $nr

Idea - Signiture Update on Web Filter

2005-12-02T09:53:00.000+08:00

in bahasa

aku ada terpikir satu projek..

bolehker kita upload file html (php, asp ker aper ker dsb) ke web hosting (e.g geocities) kemdian kita browse ke situ sblm kita masuk web site yg disahkan illegal oleh web filtering skool dan universiti....

kaedahnya cam kita install tor dekat server diluar, kemdian kita gunakan server tersebut sbg tunnel utk kita browse website yg tdk dibenarkan oleh organisasi LAN yg kita pakai...

objektifnya : membuktikan web filtering terpaksa mengupdate signiture (mcm antivirus) kerana macam2 programming boleh buat utk tunneling based on html..

Subnet mask - range calculation

2005-11-11T14:42:00.000+08:00

how to calculate subnet mask?

e.g - 200.10.10.0 --> usable host 16

what is 6th usable subnet range?
: from here we know every subnet must have 16 hosts..
so 6th usable subnet range is from 6th to 7th subnet
6th subnet address = 16 x 6 = 96
7th subnet address = 16 x 7 = 112

the answer is : 200.10.10.96 to 200.10.10.111

what is subnet number for 4th usable subnet?
: 16 x 4 = 64

the answer is : 200.10.10.64

what is subnet broadcast address for the 3rd usable subnet?
: take 4th subnet becoz the broadcast address of 3rd subnet is before 4th subnet address.
16 x 4 =64

the answer is : 200.10.10.63

what are the assignable address for the 5th usable subnet?
: 16 x 5 = 80 ; 16 x 6 = 96
range 200.10.10.80 to 200.10.10.95 ... then exclude address and broadcast

the answer is : 200.10.10.81 to 200.10.10.94

Data Can Be Corrupted During Transmission

2005-11-10T15:02:00.000+08:00

Data can be corrupted during transmission. For reliable communication, errors must be detected and corrected.

Single-Bit err vs Burs err --> only 1 err vs more than 1

Error detection uses the concept of redundancy, which means adding extra bits for detecting errors at the destination.

CRC is one of Detection Method (lain²: parity check [vrc + lrc], checksum)
crc use polynomial as divisor. e.g. x7 + x5 + x² + x + 1 --> 10100111

b4 sent, generate remainder as redundant bit.
e.g data=100100 divisor=1101

then sent data+remainder

receive.. (data+remainder) divide 1101 must get remainder '0'. else --> error.
in data correction, can use Hamming Code.

place a redundant bit to take care of every single bit of data..
then put the redundant bit.. r8, r4, r2, r1
do check.. if error, calculate which bit is error...

Idea - Study nmap Source code

2005-10-18T14:16:00.000+08:00

mission: source code nmap
objective: to know how scanner created
vision: we can create our own scanner

how to do:
- download nmap with source code
- use nmap with option provided
- compile nmap
- read source code

when:
-during UiTM semester holiday...

team:
-SIGs "Security & Network Admin" members... ;)

Read /etc/passwd from contentServ Vuln.

2005-09-27T23:50:00.000+08:00

in Bahasa

(cuba ushar http://www.packetstormsecurity.org ruangan exploit)

Sistem yang menggunakan contentServ yang disyaki mempunyai vuln.
contentServ tu salah satu cms.
cms tu content management system, satu sistem portal yang telah disiapkan utk user buat sendiri isi portal tsbt.

kemdian googlekan utk cari laman web mana yang pakai contentServ nih..
contohnya

Gebhard Bank » ad-hoc-Meldung vom 15.07.2005: Gebhard Bank weist ... - [ Translate this page ]
www.gebhardbank.de/contentserv/3.1/gebhardbank.de/index.php?StoryID=2291 - Similar pages
[ More results from www.gebhardbank.de ]

next step taip jer tambahan (yg diceritakan dalam packetstorm itu) kelihatan spt ini
http://www.gebhardbank.de/contentserv/3.1/..../etc/passwd%00

dah boleh baca /etc/passwd nyer ker.. hehehehe

okaylah next step, mungkin kita boleh pakai reverse telnet

nota sendiri:
reverse telnet adalah salah satu teknik untuk attacker memasuki ruang sistem dengan memberi arahan kepada sistem yang hendak dimasuki (contohnya oleh en. suki) membuat telnet ke atas sistem attacker yang di pasang tool untuk reverse telnet ini. contoh tool utk reverse telnet ini ialah netcat (nc)

Exploit Compiling (on C language)

2005-09-27T14:08:00.000+08:00

1. get the exploit
(eg. http://www.packetstormsecurity.org/0509-ex.../snortrigger.c)

2. run gcc on ur linux (or whatever c-compiler)
[root@kambing]# gcc snortrigger.c

3. redi tu yus
[root@kambing]# ./a.out
Usage: ./a.out [spoofed srcip]
Default srcip = 200.31.33.70

Idea - Building a new Distro

2005-08-11T01:28:00.000+08:00

in Bahasa:

google taip keyword distro

rupa2nya beratus dan beribu distro linux (or bsd) yang dihasilkan...
tengok list kat distrowatch.com pun mak ai.. macam2 nama yang ada...

katakanlah kita dah configure linux dengan memasukkan elemen2 yang penting sahaja iaitu yang sesuai dengan tugasan kita.
contohnya, kalau linux utk security, kita akan letak banyak tool, script yang siap dicompile serta xploit2 yang kita amik dari kebanyakkan homepage dan yang terkini (spt. packetstormsecurity.org).. adakah anda tahu cemmana nak hasilkan installer cd bagi linux tsbt???

kita boleh namakan dengan distro kita sendiri dan simpan dalam bentuk iso.
so kalau nak pakai atau nak backup kita just run dari pada cd yang dah ada iso tersebut.

persoalannya..
adakah anda tahu cemmana nak buat cd tersebut???
anda tahu atau tak tahu??
kalau tahu bagaimanakah caranya???

aku ada baca 2 artikel... [link1] [link2]

satu dari distro maker... dia mengambil setahun setengah utk membina distro utk companynya....

dua dari knoppix remasterer.. dia bagi tahu, hanya dua hingga lima jam sahaja utk remaster knoppix nih...

pastu aku baca how to remaster knoppix kat knoppix site..
mmg dia bagitau step by step..