Hardware & Software

dmesg | grep tty

logmein:\
        :al=your_username:sp#115200:
#ttyv5  "/usr/libexec/getty Pc"         cons25  on  secure
ttyv5   "/usr/libexec/getty logmein"    cons25  on  secure
if [ `/usr/bin/tty` = '/dev/ttyv5' ]; then
    /usr/bin/ssh-agent /usr/local/bin/startx -- -nolisten tcp
fi
 aaa new-model
 aaa authentication ppp default if-needed group radius local
 aaa authorization network default group radius 
 aaa accounting update newinfo
 aaa accounting exec default start-stop group radius
 aaa accounting network default wait-start group radius
 aaa accounting connection default start-stop group radius

 radius-server host a.b.c.d auth-port 1645 acct-port 1646
 radius-server host e.f.g.h auth-port 1645 acct-port 1646
 radius-server key YOUR-RADIUS-KEY
 
      tar  xvf  freeradius.tar.gz
      cd  freeradius
      ./configure
      make
      make install
      /usr/local/sbin/radiusd -X
      radtest username password servername port secret
 
      radtest fred wilma radius.domain.com 1645 mysecret
      Sending Access-Request of id 226 to 127.0.0.1:1645
            User-Name = 'fred'
            User-Password = '\304\2323\326B\017\376\322?K\332\350Z;}'
            NAS-IP-Address = radius.domain.com
            NAS-Port = 1645

      rad_recv : Access-Accept packet from host 127.0.0.1:1645,id=226, length=56
            Framed-IP-Address = 80.84.161.1
            Framed-Protocol = PPP
            Service-Type = Framed-User
            Framed-Compression = Van-Jacobson-TCP-IP
            Framed-IP- Netmask = 255.255.255.255
       mysql -uroot -prootpass radius < db_mysql.sql  
             sql_user_name = '%{Stripped-User-Name}'
authorise {
        preprocess
        chap
        mschap
        #counter
        #attr_filter
        #eap
        suffix  
        sql
        #files
        #etc_smbpasswd
}
 
authenticate {
        authtype PAP {
               pap
        }
        authtype CHAP {
               chap
        }
        authtype MS-CHAP{
               mschap
        }
        #pam
        #unix
        #authtype LDAP {
        #       ldap
        #}
}
 
preacct {      
        preprocess
        suffix
        #files
}
 
accounting {
        acct_unique
        detail
        #counter
        unix
        sql
        radutmp
        #sradutmp
}
 
session {
        radutmp
}

      mysql> select * from usergroup;
      +----+---------------+-----------+
      | id | UserName      | GroupName |
      +----+---------------+-----------+
      |  1 | fredf         | dynamic   |
      |  2 | barney        | static    |
      |  2 | dialrouter    | netdial   |
      +----+---------------+-----------+
      3 rows in set (0.00 sec)
 
      mysql> select * from radcheck;
      +----+----------------+----------------+------------------+------+
      | id | UserName       | Attribute      | Value            | Op   | 
      +----+----------------+----------------+------------------+------+
      |  1 | fredf          | Password       | wilma            | ==   |
      |  2 | barney         | Password       | betty            | ==   |
      |  2 | dialrouter     | Password       | dialup           | ==   |
      +----+----------------+----------------+------------------+------+
      3 rows in set (0.02 sec)
 
      mysql> select * from radgroupcheck;
 
      +----+------------+-------------------+---------------------+------+
      | id | GroupName  | Attribute         | Value               | Op   |
      +----+------------+-------------------+---------------------+------+
      |  1 | dynamic    | Auth-Type         | Local               | :=   |
      |  2 | static     | Auth-Type         | Local               | :=   |
      |  3 | netdial    | Auth-Type         | Local               | :=   |
      +----+------------+-------------------+---------------------+------+
      3 rows in set (0.01 sec)
 
      mysql> select * from radreply;
 
      +----+------------+-------------------+---------------------------------+------+
      | id | UserName   | Attribute         | Value                           | Op   |
      +----+------------+-------------------+---------------------------------+------+
      |  1 | barney     | Framed-IP-Address | 1.2.3.4                         | :=   |
      |  2 | dialrouter | Framed-IP-Address | 2.3.4.1                         | :=   |
      |  3 | dialrouter | Framed-IP-Netmask | 255.255.255.255                 | :=   |
      |  4 | dialrouter | Framed-Routing    | Broadcast-Listen                | :=   |
      |  5 | dialrouter | Framed-Route      | 2.3.4.0 255.255.255.248         | :=   |
      |  6 | dialrouter | Idle-Timeout      | 900                             | :=   |
      +----+------------+-------------------+---------------------------------+------+
      6 rows in set (0.01 sec)
 
      mysql> select * from radgroupreply;
      +----+-----------+--------------------+---------------------+------+
      | id | GroupName | Attribute          | Value               | Op   |
      +----+-----------+--------------------+---------------------+------+
      | 34 | dynamic   | Framed-Compression | Van-Jacobsen-TCP-IP | :=   |
      | 33 | dynamic   | Framed-Protocol    | PPP                 | :=   |
      | 32 | dynamic   | Service-Type       | Framed-User         | :=   |
      | 35 | dynamic   | Framed-MTU         | 1500                | :=   |
      | 37 | static    | Framed-Protocol    | PPP                 | :=   |
      | 38 | static    | Service-Type       | Framed-User         | :=   |
      | 39 | static    | Framed-Compression | Van-Jacobsen-TCP-IP | :=   |
      | 41 | netdial   | Service-Type       | Framed-User         | :=   |
      | 42 | netdial   | Framed-Protocol    | PPP                 | :=   |
      +----+-----------+--------------------+---------------------+------+
      12 rows in set (0.01 sec)
 
      mysql> 
 
  group {
    sql1 {
      fail  = 1
      notfound = return
      noop  = 2
      ok  = return
      updated = 3
      reject = return
      userlock = 4
      invalid = 5
      handled = 6
    }
    sql2 {
      fail  = 1
      notfound = return
      noop  = 2
      ok  = return
      updated = 3
      reject = return
      userlock = 4
      invalid = 5
      handled = 6
    }
  }
Patch for Qmail.
 
In many cases we dont need to scan messages for authenticated users. If user IP is in CBL or in RBL 
spamassasin increase score and the message is mark as spam or is not send. I asume all authenticated
users are clean.

Now, how do we know that the user is SMTP authenticated? Simply by checking if TCPREMOTEINFO environment variable is set.
 
The fix turned to be quite simple. It adds another debug log messages, 
skips mail scanning if TCPREMOTEINFO is set except if QS_SPAMASSASSIN 
forces scanning: 
 
-----------------------------------------------------------------------------------------------

--- qmail-scanner-queue.pl.bak      2010-05-17 11:28:21.000000000 +0300
+++ /usr/local/bin/qmail-scanner-queue.pl       2010-05-15 16:35:52.000000000 +0300
@@ -2599,11 +2605,17 @@
   #Don't bother if this is going to be quarantined
   return if ($quarantine_event);

-  #Only run SA if mail is from a "remote" SMTP client, or QS_SPAMASSASSIN
+  #Only run SA if mail is from a "remote" SMTP client which is not SMTP athenticated, or QS_SPAMASSASSIN
   #is defined via tcpserver...
-  if ($QS_RELAYCLIENT && !$ENV{'QS_SPAMASSASSIN'}) {
-    &debug("spamassassin: don't scan as RELAYCLIENT implies this was sent by a local user");
-    return;
+  if (!$ENV{'QS_SPAMASSASSIN'}) {
+       if ($QS_RELAYCLIENT){
+           &debug("spamassassin: don't scan as RELAYCLIENT implies this was sent by a local user");
+           return;
+       }
+       if ($ENV{'TCPREMOTEINFO'}){
+           &debug("spamassassin: don't scan as TCPREMOTEINFO implies this was sent by a SMTP AUTHenticated user");
+           return;
+       }
   }
   #SpamAssassin client scanner
   my ($spamassassin_found,$spamassassin_status);

# dd if=/dev/zero of=output.dat  bs=1024  count=10240
or
# dd if=/dev/zero of=output.dat  bs=1M  count=10
 
 ============================================== 
 Copy BSD Disk to another
 
 dd if=/dev/ad0 of=/dev/da0 bs=1M
 
If you not have all disk in same plece you can try to make a dump over SSH
 
dump -C16 -b64 -0uanL -h0 -f - /    | gzip -2 | ssh -c blowfish user@host.com dd of=filename.dump.gz 
 
To restore you can try:
mount first partition
mount /dev/ad1s1a /tmp/root #(ad1 is the backup disk) 
  
ssh -c blowfish usr@host.com gzcat root.dump.gz | (cd /tmp/root && restore -ruf -)
 
 ================================================
 #!/bin/bash
count=99
if [ $count -eq 100 ]
then
  echo "Count is 100"
elif [ $count -gt 100 ]
then
  echo "Count is greater than 100"
else
  echo "Count is less than 100"
fi
================================================= 
show listen port by process
 
netstat -tupln
=================================================
show linux open files
 
lsof /dev/sda1
=================================================
show port listen by process

lsof -i :22
================================================= 
Scan all ports with nmap
 
nmap -P0 -vv -sS -ff -r -n -p 1-65535 SERVER_IP_HERE
================================================= 
List apache modules

apachectl -t -D DUMP_MODULES
 
 
=================================================
 
Show open files by process
 
 watch 'lsof -u apache | sort | uniq -c | sort -n'
 watch 'lsof -u apache | awk '\''{print $2}'\'' | sort | uniq -c | sort -n'
 

Hardware & Software

Arhivă blog

sâmbătă, 18 august 2012

CentOS Auto Login

joi, 9 august 2012

Installing Xfce4 in FreeBSD with auto login

Installing X11

Installing TTF fonts

Installing Xfce4

duminică, 5 august 2012

Conexiune la Internet cu Asus WL500G si ZTE MF110

marți, 24 iulie 2012

FreeRadius With Mysql

miercuri, 25 ianuarie 2012

sâmbătă, 10 decembrie 2011

FreeBSD Qmail install

luni, 5 decembrie 2011

Linux Commands

Map