Hoofdpagina: verschil tussen versies
(→Linux) |
|||
Regel 26: | Regel 26: | ||
May 11 11:20:23 localhost automount[18777]: >> /dev/disk/by-id/usb-WD_My_Book_575532553130303331333730-part1 has been mounted 35 times without being checked, check forced. | May 11 11:20:23 localhost automount[18777]: >> /dev/disk/by-id/usb-WD_My_Book_575532553130303331333730-part1 has been mounted 35 times without being checked, check forced. | ||
</pre> | </pre> | ||
+ | |||
+ | == SFTP chroot == | ||
+ | |||
+ | We needed a user account to be able to receive files through SFTP. Since our port is opened at 2222 for the outside world. It seems that there is a CHROOT option in OpenSSH server nowadays. This needs to be changed in /etc/ssh/sshd_config: | ||
+ | |||
+ | <source lang="bash"> | ||
+ | Subsystem sftp internal-sftp | ||
+ | |||
+ | Match group sftponly | ||
+ | ChrootDirectory /home/%u | ||
+ | X11Forwarding no | ||
+ | AllowTcpForwarding no | ||
+ | ForceCommand internal-sftp | ||
+ | </source> | ||
+ | |||
+ | Then create a user like this: | ||
+ | |||
+ | <source lang="bash"> | ||
+ | adduser --ingroup sftponly --shell /bin/false <username> | ||
+ | </source> | ||
Regel 83: | Regel 103: | ||
See the number of connections to port 80 by ip: | See the number of connections to port 80 by ip: | ||
<source lang="bash">netstat -pan|grep :80|sed 's/:/ /g'|awk '{print $6}'|sort|uniq -c</source> | <source lang="bash">netstat -pan|grep :80|sed 's/:/ /g'|awk '{print $6}'|sort|uniq -c</source> | ||
− | |||
− | |||
= Meer hulp over MediaWiki = | = Meer hulp over MediaWiki = |
Versie van 13 jul 2010 om 14:04
Rolandow's wiki
Vergaarbak van allerlei informatie die ik in de loop der tijd heb verzameld, en niet mag vergeten.
Inhoud
PHP
PHP Trics: preg_split, SimpleXML attributes, CDATA with dom document
Linux
Passive FTP
Als passive FTP niet werkt, dan moeten er modules geactiveerd worden. In /etc/modules toevoegen ip_conntrack_ftp en ip_nat_ftp.
Disable periodical fsck check's
The backup disk on jukebox was forcing a periocal fsck. This can be turned off with tune2fs.
tune2fs -c 0 -i 0d /dev/disk/by-id/usb-WD_My_Book_575532553130303331333730-part1
This should stop this message from syslog:
May 11 11:20:23 localhost automount[18777]: >> /dev/disk/by-id/usb-WD_My_Book_575532553130303331333730-part1 has been mounted 35 times without being checked, check forced.
SFTP chroot
We needed a user account to be able to receive files through SFTP. Since our port is opened at 2222 for the outside world. It seems that there is a CHROOT option in OpenSSH server nowadays. This needs to be changed in /etc/ssh/sshd_config:
Subsystem sftp internal-sftp
Match group sftponly
ChrootDirectory /home/%u
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp
Then create a user like this:
adduser --ingroup sftponly --shell /bin/false <username>
Linux trics
Create snoop file of a port:
tcpdump -nvv -s 0 -w snoopport10295.snoop port 10295
Check the number of hits per IP, in the Apache access logs:
cat logs/access_log|grep 05/Feb/2007:14|awk '{print $1}'|sort|uniq -c
See what a process is doing:
lsof -p #PID
Last file in a directory:
ls -ltr|tail -n1
Partially extract a tarbal:
tar xvfz backup.tar.gz home/www/login.mobilebridges.com --exclude=*.log --exclude=*.xml
Use the t parameter instead of x to test tar.
tar tvfz backup.tar.gz home/www/login.mobilebridges.com --exclude=*.log --exclude=*.xml
Format your server:
dd if=/dev/zero of=/dev/hda bs=1M
This writes zero's to /dev/hda, so it will erase all data.
Format disk, using fat32:
1. Use fdisk to create the filesystem: fdisk /dev/hda - follow the prompts 2. Format it using mkfs.vfat -F 32 /dev/hda6 3. Add it to fstab
Add user:
adduser --gid 1010 --shell /usr/bin/false --home /home/www/peru charly
The GID should be the same for dutch and peru users. The home directory is different though.
Delete files older than 5 days:
find /home/www/login.mobilebridges.com/htdocs/Delivery/Error/ -mtime +5 -exec rm {} \;
Rename *.11.csv to *.csv:
rename 's/\.11\.csv$/\.csv/' *.csv
The ereg takes care of the rename action... the *.csv after that just selects the files that need to be renamed with this ereg.
Check projectsize Peru on developement:
/home/www/peru# du --max-depth=1 -h
Check if PING's are reaching the server:
tcpdump host 85.146.37.248 and icmp
85.146.37.248 is the source address.
See the number of connections to port 80 by ip:
netstat -pan|grep :80|sed 's/:/ /g'|awk '{print $6}'|sort|uniq -c