Free google mail for your domain is the convenient way to connect your domain with a mail-Server. Up to 10 email-adresses are in the free edition of google apps.
You can register for the service here: https://www.google.com/a/cpanel/domain/new
Thursday, April 28, 2011
Saturday, April 23, 2011
Basic Software installation on a new PC
Wednesday, April 20, 2011
Make your own share this script
Maintain control about your share options with this open source software.
You can use it as standalone or as word press plugin.
Features of the Share script include:
Ability to save pages to social sites like Facebook, Digg, Delicious, Google, Yahoo, and more
You can use it as standalone or as word press plugin.
Features of the Share script include:
Ability to save pages to social sites like Facebook, Digg, Delicious, Google, Yahoo, and more
- Ability to email your friends
- Ability to save the page as a PDF or Word doc
- Ability to print the page
- Fully extensible with a plugin system. Add any social site you want. You can even add IM, SMS, and more!
- Complete stat tracking - see what pages are being shared, how they are being shared, over any time period
Tuesday, April 19, 2011
Accessing SSH on a non-standard port via the command line
vento> ssh -p 6896 targetserver
or special directory:
vento> ssh -p 6896 user@targetserver
Sunday, April 17, 2011
Howto disable recursive DNS queries
To disable Recursive DNS follow the steps:
1) SSH server as root and edit file /etc/named.conf
root@server[~]#vi /etc/named.conf
2) add line recursion no; in options clause and it will look something like.
options {directory “/var/named”;dump-file “/var/named/data/cache_dump.db”;statistics-file “/var/named/data/named_stats.txt”;/** If there is a firewall between you and nameservers you want* to talk to, you might need to uncomment the query-source* directive below. Previous versions of BIND always asked* questions using port 53, but BIND 8.1 uses an unprivileged* port by default.*/// query-source address * port 53;recursion no;};
3) Now restart or reload named service.
root@server[~]#/etc/init.d/named reload
Google Chrome: about: und chrome: Befehle im Browser
Die Befehle im Einzelnen:
Neben den about-Aufrufen gibt es spezielle chrome-Seiten, die Sie auch über die Menüs erreichen:
Über chrome-Seiten sind auch einige about-Befehle zu erreichen, wie chrome://about/sync/
- about:memory liefert Informationen rund um den verwendeten Speicher, sortiert nach einzelnen Tabs und Plugins.
- about:dns zeigt die zwischengespeicherten DNS-Einträge.
- about:histograms zeigt Chrome-interne Messungen.
- about:cache zeigt die im Cache gespeicherten URLs.
- about:plugins listet die installierten Plug-ins, diese können an dieser Stelle auch deaktiviert werden.
- about:version zeigt die aktuelle Version von Chrome, Webkit und der JavaScript-Engine V8 an, zudem wird der User-Agent im Detail aufgelistet.
- about:net-internals zeigt einen Dump der Informationen des Netzwerk-Stacks an.
- about:crash lässt den aktuelle Tab zu Testzwecken "abstürzen"
- about:credits listet die verschiedenen Bibliotheken und Techniken auf, die in Chrome zum Einsatz kommen
- about:terms zeigt die Nutzungsbedingungen von Google Chrome
- about:about listet (fast) alle about-Befehle auf, die die verwendete Version von Google Chrome unterstützt
- about:sync zeigt eine Zusammenfassung zur letzten Chrome-Synchronisation
- about:tcmalloc listet detailliert den angeforderten Speicher für den letzten Seitenaufruf
- about:gpu gibt Informationen zur Grafikkarte aus. Die Anzeige ist erst relevant, wenn Chrome die Grafik-Hardware zum Rendern nutzt.
- about:net-internals zeigt für Debugging-Zwecke in Reitern ausführliche Informationen zu Proxys, Requests, DNS-Abrufen, Sockets, HTTP-Cache und Testmöglichkeiten für anzugebende URLs an.
Neben den about-Aufrufen gibt es spezielle chrome-Seiten, die Sie auch über die Menüs erreichen:
- chrome://downloads/ zeigt eine Seite mit allen durchgeführten Downloads an
- chrome://history listet den Browser-Verlauf auf, also die zuletzt besuchten Webseiten
- chrome://extensions zeigt alle installierten Browser-Erweiterungen inklusive Zugriff auf Deinstallieren, Deaktivieren und Optionen der Plugins
- chrome://bookmarks aktiviert den Lesezeichen-Manager von Google Chrome
- chrome://newtab/ öffnet die vorgegebene Startseite (nicht etwa einen neuen Tab)
Über chrome-Seiten sind auch einige about-Befehle zu erreichen, wie chrome://about/sync/
Thursday, April 7, 2011
Secure your Kloxo Installation with your Firewall/IPTABLES
Stop iptables service:
/etc/init.d/iptables stop
Disable iptables service:
chkconfig iptables off
Copy this code to /etc/init.d/firewall (Reminder: Disable "word wrap" in your text editor. Ex.: nano -w /etc/init.d/firewall)
#!/bin/sh
# firewall
# chkconfig: 3 21 91
# description: Starts, stops iptables firewall
case "$1" in
start)
# Clear rules
iptables -t filter -F
iptables -t filter -X
echo - Clear rules : [OK]
# SSH In
iptables -t filter -A INPUT -p tcp --dport 22 -j ACCEPT
echo - SSH : [OK]
# Don't break established connections
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
echo - established connections : [OK]
# Block all connections by default
iptables -t filter -P INPUT DROP
iptables -t filter -P FORWARD DROP
iptables -t filter -P OUTPUT DROP
echo - Block all connections : [OK]
# Loopback
iptables -t filter -A INPUT -i lo -j ACCEPT
iptables -t filter -A OUTPUT -o lo -j ACCEPT
echo - Loopback : [OK]
# ICMP (Ping)
iptables -t filter -A INPUT -p icmp -j ACCEPT
iptables -t filter -A OUTPUT -p icmp -j ACCEPT
echo - PING : [OK]
# DNS In/Out
iptables -t filter -A OUTPUT -p tcp --dport 53 -j ACCEPT
iptables -t filter -A OUTPUT -p udp --dport 53 -j ACCEPT
iptables -t filter -A INPUT -p tcp --dport 53 -j ACCEPT
iptables -t filter -A INPUT -p udp --dport 53 -j ACCEPT
echo - DNS : [OK]
# NTP Out
iptables -t filter -A OUTPUT -p udp --dport 123 -j ACCEPT
echo - NTP : [OK]
# FTP Out
iptables -t filter -A OUTPUT -p tcp --dport 20:21 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 30000:50000 -j ACCEPT
# FTP In
iptables -t filter -A INPUT -p tcp --dport 20:21 -j ACCEPT
iptables -t filter -A INPUT -p tcp --dport 30000:50000 -j ACCEPT
iptables -t filter -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
echo - FTP : [OK]
# HTTP + HTTPS Out
iptables -t filter -A OUTPUT -p tcp --dport 80 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 443 -j ACCEPT
# HTTP + HTTPS In
iptables -t filter -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -t filter -A INPUT -p tcp --dport 443 -j ACCEPT
echo - HTTP/HTTPS : [OK]
# Mail SMTP:25
iptables -t filter -A INPUT -p tcp --dport 25 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 25 -j ACCEPT
echo - SMTP : [OK]
# Mail POP3:110
iptables -t filter -A INPUT -p tcp --dport 110 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 110 -j ACCEPT
echo - POP : [OK]
# Mail IMAP:143
iptables -t filter -A INPUT -p tcp --dport 143 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 143 -j ACCEPT
echo - IMAP : [OK]
# Kloxo
iptables -t filter -A INPUT -p tcp --dport 7777:7778 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 7777:7778 -j ACCEPT
echo - Kloxo : [OK]
echo - Firewall [OK]
exit 0
;;
stop)
echo "Stopping Firewall: "
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -t filter -F
exit 0
;;
*)
echo "Usage: /etc/init.d/firewall {start|stop}"
exit 1
;;
esac
Enable/Start Firewall Service
chmod 700 /etc/init.d/firewall
add firewall service:
chkconfig -–add firewall
auto start firewall:
chkconfig -–level 2345 firewall on
start firewall:
/etc/init.d/firewall start
If you have slave server, add this on the master
iptables -t filter -A INPUT -p tcp -s SLAVE_IP --dport 7779 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp -d SLAVE_IP --dport 7779 -j ACCEPT
Note: replace SLAVE_IP with your Slave server IP.
Add this on slave server
iptables -t filter -A INPUT -p tcp -s MASTER_IP --dport 7779 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp -d MASTER_IP --dport 7779 -j ACCEPT
Note: replace MASTER_IP with your Master server IP.
After all always a good idea
/sbin/service httpd restart
/etc/init.d/iptables stop
Disable iptables service:
chkconfig iptables off
Copy this code to /etc/init.d/firewall (Reminder: Disable "word wrap" in your text editor. Ex.: nano -w /etc/init.d/firewall)
#!/bin/sh
# firewall
# chkconfig: 3 21 91
# description: Starts, stops iptables firewall
case "$1" in
start)
# Clear rules
iptables -t filter -F
iptables -t filter -X
echo - Clear rules : [OK]
# SSH In
iptables -t filter -A INPUT -p tcp --dport 22 -j ACCEPT
echo - SSH : [OK]
# Don't break established connections
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
echo - established connections : [OK]
# Block all connections by default
iptables -t filter -P INPUT DROP
iptables -t filter -P FORWARD DROP
iptables -t filter -P OUTPUT DROP
echo - Block all connections : [OK]
# Loopback
iptables -t filter -A INPUT -i lo -j ACCEPT
iptables -t filter -A OUTPUT -o lo -j ACCEPT
echo - Loopback : [OK]
# ICMP (Ping)
iptables -t filter -A INPUT -p icmp -j ACCEPT
iptables -t filter -A OUTPUT -p icmp -j ACCEPT
echo - PING : [OK]
# DNS In/Out
iptables -t filter -A OUTPUT -p tcp --dport 53 -j ACCEPT
iptables -t filter -A OUTPUT -p udp --dport 53 -j ACCEPT
iptables -t filter -A INPUT -p tcp --dport 53 -j ACCEPT
iptables -t filter -A INPUT -p udp --dport 53 -j ACCEPT
echo - DNS : [OK]
# NTP Out
iptables -t filter -A OUTPUT -p udp --dport 123 -j ACCEPT
echo - NTP : [OK]
# FTP Out
iptables -t filter -A OUTPUT -p tcp --dport 20:21 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 30000:50000 -j ACCEPT
# FTP In
iptables -t filter -A INPUT -p tcp --dport 20:21 -j ACCEPT
iptables -t filter -A INPUT -p tcp --dport 30000:50000 -j ACCEPT
iptables -t filter -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
echo - FTP : [OK]
# HTTP + HTTPS Out
iptables -t filter -A OUTPUT -p tcp --dport 80 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 443 -j ACCEPT
# HTTP + HTTPS In
iptables -t filter -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -t filter -A INPUT -p tcp --dport 443 -j ACCEPT
echo - HTTP/HTTPS : [OK]
# Mail SMTP:25
iptables -t filter -A INPUT -p tcp --dport 25 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 25 -j ACCEPT
echo - SMTP : [OK]
# Mail POP3:110
iptables -t filter -A INPUT -p tcp --dport 110 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 110 -j ACCEPT
echo - POP : [OK]
# Mail IMAP:143
iptables -t filter -A INPUT -p tcp --dport 143 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 143 -j ACCEPT
echo - IMAP : [OK]
# Kloxo
iptables -t filter -A INPUT -p tcp --dport 7777:7778 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 7777:7778 -j ACCEPT
echo - Kloxo : [OK]
echo - Firewall [OK]
exit 0
;;
stop)
echo "Stopping Firewall: "
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -t filter -F
exit 0
;;
*)
echo "Usage: /etc/init.d/firewall {start|stop}"
exit 1
;;
esac
Enable/Start Firewall Service
chmod 700 /etc/init.d/firewall
add firewall service:
chkconfig -–add firewall
auto start firewall:
chkconfig -–level 2345 firewall on
start firewall:
/etc/init.d/firewall start
If you have slave server, add this on the master
iptables -t filter -A INPUT -p tcp -s SLAVE_IP --dport 7779 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp -d SLAVE_IP --dport 7779 -j ACCEPT
Note: replace SLAVE_IP with your Slave server IP.
Add this on slave server
iptables -t filter -A INPUT -p tcp -s MASTER_IP --dport 7779 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp -d MASTER_IP --dport 7779 -j ACCEPT
Note: replace MASTER_IP with your Master server IP.
After all always a good idea
/sbin/service httpd restart
Subscribe to:
Posts (Atom)

