마님네 http://blog.jinbo.net/manim/ ko 마님(mailto:) Wed, 20 Aug 2008 10:04:40 +0900 마님네 http://blog.jinbo.net/files2/4/manim/common/my_picture http://blog.jinbo.net/manim/ 80 60 http://blog.jinbo.net/manim/?pid=29 jsp 설정 http://blog.jinbo.net/manim/?pid=29 1. server.xml

<Server port="8005" shutdown="SHUTDOWN">

  <!-- Comment these entries out to disable JMX MBeans support used for the
       administration web application -->
  <Listener className="org.apache.catalina.core.AprLifecycleListener" />
  <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener" />
  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
  <Listener className="org.apache.catalina.storeconfig.StoreConfigLifecycleListener"/>

--------------------------------------------------------------------------------

  <Listener className="org.apache.jk.config.ApacheConfig" modJk="/usr/local/httpd/modules/mod_jk.so" workersConfig="/usr/local/httpd/conf/workers.properties" />

---------------------------------------------------------------------------------


  <!-- Global JNDI resources -->
  <GlobalNamingResources>


2. httpd.conf

Include /usr/local/tomcat/conf/auto/mod_jk.conf
JkShmFile /usr/local/httpd/logs/jk-runtime-status
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
JkRequestLogFormat "%w %V %T"

<LocationMatch '.*WEB-INF.*'>
    AllowOverride None
    deny from all
</LocationMatch> ]]> 마님 심히 걱정된다 Wed, 20 Aug 2008 10:04:28 +0900 http://blog.jinbo.net/manim/?pid=28 메일서버가 젤힘들다. http://blog.jinbo.net/manim/?pid=28 Qmail 설치

참고 사이트 : qmail.org

preinstall

yum install gcc gcc-c++ mysql-devel openssl-devel

===================================================================================

1 설치준비

mkdir /downloads
cd /downloads
wget http://www.qmailrocks.org/downloads/qmailrocks.tar.gz
tar zxvf qmailrocks.tar.gz

===================================================================================

2. 큐메일 인스톨

2-1. 큐메일설치

/downloads/qmailrocks/scripts/install/qmr_install_linux-s1.script
/downloads/qmailrocks/scripts/util/qmail_big_patches.script  
cd /usr/src/qmail/qmail-1.03
make man && make setup check
./config-fast mail.webpis.net
make cert

-----------------------------------------------------------------------------
Country Name (2 letter code) [GB]:KR
State or Province Name (full name) [Berkshire]:ROK
Locality Name (eg, city) [Newbury]:Seoul
Organization Name (eg, company) [My Company Ltd]:MAIL
Organizational Unit Name (eg, section) []:HOSTING
Common Name (eg, your name or your server's hostname) []:mail.webpis.net
Email Address []:admin@webpis.net
-----------------------------------------------------------------------------

chown -R vpopmail:qmail /var/qmail/control/clientcert.pem /var/qmail/control/servercert.pem

2-2. ucspi-tcp 설치

cd /usr/src/qmail/ucspi-tcp-0.88/
patch < /downloads/qmailrocks/patches/ucspi-tcp-0.88.errno.patch
make && make setup check

2-3. daemontools 설치

cd /package/admin/daemontools-0.76/src
patch < /downloads/qmailrocks/patches/daemontools-0.76.errno.patch
cd ../
package/install

===================================================================================

3.EZmlm 설치

cd /downloads/qmailrocks/
tar zxvf ezmlm-0.53-idx-0.41.tar.gz
cd ezmlm-0.53-idx-0.41
make && make setup

===================================================================================

4. Autoresponder 설치

cd /downloads/qmailrocks
tar zxvf autorespond-2.0.5.tar.gz
cd autorespond-2.0.5
make && make install

===================================================================================

5. Vpopmail 설치 ( MySQL 연동)

mkdir ~vpopmail/etc
chown vpopmail:vchkpw ~vpopmail/etc
echo "dbserver|0|vpopmail|vpop1q2w3e|vpopmail" > ~vpopmail/etc/vpopmail.mysql
chown vpopmail:vchkpw ~vpopmail/etc/vpopmail.mysql
chmod 640 ~vpopmail/etc/vpopmail.mysql

5-1.DB서버에 접근하여 vpopmail이 사용할 DB와 사용자 계정을 생성

/etc/hosts 파일에 dbserver IP 등록
------------------------------------------------

61.32.177.164    dbserver.localdomain    dbserver

------------------------------------------------


/etc/my.cnf 에 등록
---------------------

[client]
host = dbserver
port = 3306

---------------------

mysql -uroot -p

mysql> create database vpopmail;
mysql> grant select,insert,update,delete,create,drop on vpopmail.* to 'vpopmail'@'%' identified by 'vpop1q2w3e';
mysql>flush privileges;


5-2. vpopmail 계정으로 DB서버에 접속가능한지 테스트

mysql -uvpopmail -p vpopmail
Enter password:


5-3. vpopmail 패키지 설치

cd /downloads/qmailrocks
tar zxvf vpopmail-5.4.13.tar.gz
cd vpopmail-5.4.13

./configure --enable-logging=p --enable-auth-module=mysql --disable-passwd -enable-clear-passwd --disable-many-domains --enable-auth-logging --enable-sql-logging --enable-valias --disable-mysql-limits --enable-roaming-users

make && make install-strip

===================================================================================

6. vqadmin 설치


cd /downloads/qmailrocks
tar zxvf vqadmin-2.3.6.tar.gz
cd vqadmin-2.3.6

./configure --enable-cgibindir=/var/www/cgi-bin --enable-htmldir=/var/www/html

make && make install-strip

6-1. /etc/httpd/conf/httpd.conf 에 다음 내용을 추가

---------------------------------------------------

<Directory "/var/www/cgi-bin/vqadmin">
    deny from all
    Options ExecCGI
    AllowOverride AuthConfig
    Order deny,allow
</Directory>

----------------------------------------------------

6-2. 아파치 인증파일 설치

vi /var/www/cgi-bin/vqadmin/.htaccess

-----------------------------------------------------

AuthType Basic
AuthUserFile /var/www/vqadmin.passwd
AuthName vQadmin
require valid-user
satisfy any

------------------------------------------------------

chown apache.apache /var/www/cgi-bin/vqadmin/.htaccess

htpasswd -bc /var/www/vqadmin.passwd admin ansflqj(패스워드)

chmod 644 /var/www/vqadmin.passwd


===================================================================================

7. Maildrop 설치

cd /downloads/qmailrocks

tar zxvf maildrop-1.6.3.tar.gz

cd maildrop-1.6.3

./configure --prefix=/usr/local --exec-prefix=/usr/local --enable-maildrop-uid=root --enable-maildrop-gid=vchkpw --enable-maildirquota

make && make install-strip && make install-man


===================================================================================

8. qamiladmin 설치


cd /downloads/qmailrocks

tar zxvf qmailadmin-1.2.9.tar.gz

cd qmailadmin-1.2.9

./configure --enable-cgibindir=/var/www/cgi-bin --enable-htmldir=/var/www/html

make && make install-strip

===================================================================================

9. 마무리

9-1. 마무리 스크립트 실행

/downloads/qmailrocks/scripts/finalize/linux/finalize_linux.script


9-2. run 파일에 호스트명 지정

vi /var/qmail/supervise/qmail-pop3d/run
-----------------------------------------------------------------

#!/bin/sh
PATH=/var/qmail/bin:/usr/local/bin:/usr/bin:/bin
export PATH
exec tcpserver -H -R -v -c100 0 110 qmail-popup mail.webpis.net \
/home/vpopmail/bin/vchkpw qmail-pop3d Maildir 2>&1

-----------------------------------------------------------------

vi /var/qmail/supervise/qmail-smtpd/run

-----------------------------------------------------------------

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
LOCAL=`head -1 /var/qmail/control/me`
if [ -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z "$LOCAL" ]; then
echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in
echo /var/qmail/supervise/qmail-smtpd/run
exit 1
fi
if [ ! -f /var/qmail/control/rcpthosts ]; then
echo "No /var/qmail/control/rcpthosts!"
echo "Refusing to start SMTP listener because it'll create an open relay"
exit 1
fi
exec /usr/local/bin/softlimit -m 30000000 \
/usr/local/bin/tcpserver -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
/var/qmail/bin/qmail-smtpd mail.example.com \
/home/vpopmail/bin/vchkpw /usr/bin/true 2>&1


-----------------------------------------------------------------

9-3. tcp.smtp 파일생성

qmailctl stop

echo '127.:allow,RELAYCLIENT=""' >> /etc/tcp.smtp

qmailctl cdb

9-4. 관리자 메일 등록

echo admin@webpis.net > /var/qmail/alias/.qmail-root
echo admin@webpis.net > /var/qmail/alias/.qmail-postmaster
echo admin@webpis.net > /var/qmail/alias/.qmail-mailer-daemon
ln -s /var/qmail/alias/.qmail-root /var/qmail/alias/.qmail-anonymous
chmod 644 /var/qmail/alias/.qmail*

===================================================================================

10. 센드메일 제거


yum remove sendmail
ln -s /var/qmail/bin/sendmail /usr/lib/sendmail
ln -s /var/qmail/bin/sendmail /usr/sbin/sendmail


===================================================================================

11. 큐메일 시작 및 테스트

downloads/qmailrocks/scripts/util/qmr_inst_check

--> Congratulations, your Qmailrocks.org Qmail installation looks good! 확인

qmailctl stop
qmailctl start
qmailctl stat

[root@mail ~]# qmailctl stat
/service/qmail-send: up (pid 18512) 3 seconds
/service/qmail-send/log: up (pid 18517) 3 seconds
/service/qmail-smtpd: up (pid 18520) 3 seconds
/service/qmail-smtpd/log: up (pid 18525) 3 seconds
/service/qmail-pop3d: up (pid 18528) 3 seconds
/service/qmail-pop3d/log: up (pid 18529) 3 seconds
messages in queue: 0
messages in queue but not yet preprocessed: 0

telnet localhost 110

[root@mail ~]# telnet localhost 110
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
+OK <18560.1216241697@mail.webpis.net>


telnet localhost 25


[root@mail ~]# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
220 mail.webpis.net ESMTP



===================================================================================

12. Clam Antivirus & SpamAssassin 설치

12-1. 펄모듈체크


/downloads/qmailrocks/scripts/util/check_perlmods.script

12-2. Parse::Syslog 설치

cd /usr/local/src

wget http://search.cpan.org/CPAN/authors/id/D/DS/DSCHWEI/Parse-Syslog-1.10.tar.gz

tar -zxvf Parse-Syslog-1.10.tar.gz
cd Parse-Syslog-1.10
perl Makefile.PL
make
make install


12-3. Statistics::Distributions 설치

cd /usr/local/src
wget http://search.cpan.org/CPAN/authors/id/M/MI/MIKEK/Statistics-Distributions-1.02.tar.gz

tar -zxvf Statistics-Distributions-1.02.tar.gz
cd Statistics-Distributions-1.02
perl Makefile.PL
make
make install

12-4. 펄모듈 다시 체크

/downloads/qmailrocks/scripts/util/check_perlmods.script

-------------------------------------------------------------------------
QMR check_perlmods v1.1

Checking for the existence of needed perl modules...

checking for Time::HiRes...
/usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pm

checking for Net::DNS...
/usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/Net/DNS.pm

checking for Digest::SHA1...
/usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/Digest/SHA1.pm

checking for Digest::HMAC...
/usr/lib/perl5/vendor_perl/5.8.8/Digest/HMAC.pm

checking for HTML::Tagset...
/usr/lib/perl5/vendor_perl/5.8.8/HTML/Tagset.pm

checking for HTML::Parser...
/usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/HTML/Parser.pm

checking for Mail::SpamAssassin...
/usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin.pm

checking for Pod::Usage...
/usr/lib/perl5/5.8.8/Pod/Usage.pm

checking for Parse::Syslog...
/usr/lib/perl5/site_perl/5.8.8/Parse/Syslog.pm

checking for Statistics::Distributions...
/usr/lib/perl5/site_perl/5.8.8/Statistics/Distributions.pm

Check Complete. <<-- check OK

-----------------------------------------------------------------------------


12-4. clamAV 설치

cd /usr/local/src

wget http://nchc.dl.sourceforge.net/sourceforge/clamav/clamav-0.93.3.tar.gz

useradd -c "Qmail-Scanner Account" -s /bin/false qscand

tar -zxvf clamav-0.93.3.tar.gz

cd clamav-0.93.3

./configure --prefix=/usr/local/clamav --with-user=qscand --with-group=qscand --enable-milter

make

make install

mkdir /var/log/clamav

chown qscand:qscand /var/log/clamav

/usr/local/clamav/bin/freshclam

crontab -e
-----------------------------------------------------------------------------------
*/30 * * * * rdate -s time.bora.net

25 1 * * * /usr/local/clamav/bin/freshclam --quiet -l /var/log/clamav/freshclam.log

-----------------------------------------------------------------------------------



12-5. 스팸어세신 설치 확인

yum install spamassassin

service spamassassin start




===================================================================================

13. 큐메일 스캐너 설치

cd /downloads/qmailrocks

tar zxvf qmail-scanner-1.25.tgz

tar -zxvf qms-analog-0.4.2.tar.gz

cd qms-analog-0.4.2

make all


cd /downloads/qmailrocks/qmail-scanner-1.25

patch -p1 < ..qms-analog-0.4.2/qmail-scanner-1.25-st-qms-20050618.patch

cd contrib

make install

cd ../

vi qms-config-cwrapper

맨 아래쪽을 다음과 같이 수정 (domain, local-domains)
-----------------------------------------------------------------------------------

./configure    --domain webpis.net \
               --admin postmaster \
               --local-domains "webpis.net" \
               --add-dscr-hdrs yes \
               --dscr-hdrs-text "X-Antivirus-MYDOMAIN" \
               --ignore-eol-check yes \
               --sa-quarantine 0 \
               --sa-delete 0 \
               --sa-reject no \
               --sa-subject ":SPAM:" \
               --sa-alt yes \
               --sa-debug no \
               --notify admin \
               --redundant yes \
               --qms-monitor no \
               "$INSTALL"

-----------------------------------------------------------------------------------

chmod 755 qms-config-cwrapper

./qms-config-cwrapper

./qms-config-cwrapper install

chmod 0755 /var/qmail/bin/qmail-scanner-queue.pl

setuidgid qscand /var/qmail/bin/qmail-scanner-queue -z

setuidgid qscnad /var/qmail/bin/qmail-scanner-queue -g

chown -R qscand:qscand /var/spool/qmailscan

vi /var/qmail/supervise/qmail-smtpd/run
-----------------------------------------------------------------------------------

#!/bin/sh
QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue" ; export QMAILQUEUE
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
LOCAL=`head -1 /var/qmail/control/me`
if [ -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z "$LOCAL" ]; then
echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in
echo /var/qmail/supervise/qmail-smtpd/run
exit 1
fi
if [ ! -f /var/qmail/control/rcpthosts ]; then
echo "No /var/qmail/control/rcpthosts!"
echo "Refusing to start SMTP listener because it'll create an open relay"
exit 1
fi
exec /usr/local/bin/softlimit -m 40000000 \
/usr/local/bin/tcpserver -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
/var/qmail/bin/qmail-smtpd mail.webpis.net \
/home/vpopmail/bin/vchkpw /usr/bin/true 2>&1

-----------------------------------------------------------------------------------
큐메일 재가동


qmailctl stop
qmailctl start
qmailctl stat


바이러스+스팸 테스트


cd /downloads/qmailrocks/qmail-scanner-1.25/contrib
chmod 755 test_installation.sh
./test_installation.sh -doit



http://61.32.177.167/cgi-bin/vqadmin/vqadmin.cgi <= 전체관리자
http://61.32.177.167/cgi-bin/qmailadmin <= 도메인별 관리자 ]]> 마님 심히 걱정된다 Wed, 20 Aug 2008 10:03:18 +0900 http://blog.jinbo.net/manim/?pid=27 시스코 장비 설치 초기화 http://blog.jinbo.net/manim/?pid=27 장비 초기화

Switch#conf t
Switch#erase startup-config
Switch#write erase                :config 설정 전체 초기화
Switch#reload                       :재부팅
장비 기본 셋팅
Switch>en
Switch#conf t
Switch(config)#clock timezone KST 9
Switch(config)#ntp server 203.248.240.103
Switch(config)#hostname 2950_A                           :호스트네임설정
2950_A(config)#enable secret 비번                         :enable 비번설정
2950_A(config)#service password-encryption           :모든 암호를 MD5 로 암호화.
2950_A(config)#line console 0                               :콘솔연결설정
2950_A(config-line)#password 비번                        :콘솔연결비번설정
2950_A(config-line)#login                                     :콘솔연결시 비번 묻는 설정
2950_A(config-line)#logging synchronous                :명령어 입력중 시스템메세지가 뜨면 자동으로 줄을
                                                                        바꾸어 입력중인 명령어를 다시표시
2950_A(config-line)#exec-timeout 0 0                   :콘솔접속시 타임아웃 없음으로 설정
2950_A(config)#exit
2950_A(config)#access-list 23 permit 1.1.1.1         :텔넷 접속 제한을 위한 acl
2950_A(config)#access-list 23 deny any
2950_A(config)#line vty 0 4
2950_A(config-line)#exec-timeout 1 0                  :텔넷접속후 1분동안 아무 입력없으면 세션 종료.
2950_A(config-line)#transport input telnet            :telnet protocol 만 허용.
2950_A(config-line)#password 비번                    :텔넷연결비번설정
2950_A(config-line)#login
2950_A(config-line)#access-class 23 in             :acl 23번 적용
2950_A(config-line)#logging synchronous
2950_A(config)#exit
2950_A(config)#interface vlan 1
2950_A(config-if)#ip address 211.233.5.75 255.255.255.240     :스위치 접속 아이피 셋팅 ,아이피대역 해당
                                                                                 서브넷마스크
2950_A(config-if)#no shutdown
2950_A(config-if)#exit
2950_A(config)#ip default-gateway 211.xxx.xxx.xxx             :Switch에서 외부와 통신이 필요한 경우
                                                                                Default-Gateway 할당하기

2950_A(config)#access-list 12 permit 211.xxx.xxx.xxx         :acl 12번에 열어줄 아이피 셋팅
2950_A(config)#access-list 12 deny any
2950_A(config)#snmp-server community nforce ro 12          :스위치snmp서버 셋팅 커뮤니티,
                                                                               ro(read only),acl 12번적용.

불필요 서비스 제거
    . 웹서비스(http) 제거
    . tcp-small service 제거
    . udp-small service 제거
    . finger, pad, source-route, bootp, domain-lookup, redirects, unreachable,
      directed-broadcast, proxy-arp, mask-rely, tftp 제거
2950_A(config)#no service tcp-small-servers
2950_A(config)#no service udp-small-servers
2950_A(config)#no service finger
2950_A(config)#no service pad
2950_A(config)#no ip source-route
2950_A(config)#no ip bootp server
2950_A(config)#no ip domain-lookup
2950_A(config)#no ip http server
2950_A(config-if)#no ip redirects
2950_A(config-if)#no ip unreachables
2950_A(config-if)#no ip directed-broadcast
2950_A(config-if)#no ip proxy-arp
2950_A(config-if)#no ip mask-relay
 
2950_A(config)#no cdp run
:원격의 시스코 장비에 대한 정보를 확인할 수 있는 CDP(Cisco Discovery Protocol)는 사용하지 않는다면 off
차후 Vlan 사용 시 Native vlan missmatch 발생 소지가 있음.
 
 
설정 자동- 복사해서 콘솔에 그냥 붙여넣기만하세요~ 비번이랑 아이피만 설정하시구요 (SecureCRT 에서)
--------------------------------------------------------------------------------------------------
en
conf t
clock timezone KST 9
ntp server 203.248.240.103
hostname C2950
enable secret 비번
service password-encryption         
line console 0                            
password 비번                      
login                                   
logging synchronous               
exec-timeout 0 0
exit 
access-list 20 permit xxx.xxx.xxx.xxx      
line vty 0 4
exec-timeout 5 0              
transport input telnet          
password 비번                  
login
access-class 20 in           
logging synchronous
exit
interface vlan 1
ip address xxx.xxx.xxx.xxx 255.255.255.0   
no shutdown
exit
ip default-gateway xxx.xxx.xxx.xxx         
access-list 30 permit xxx.xxx.xxx.xxx       
snmp-server community nforce ro 30       
no service tcp-small-servers
no service udp-small-servers
no service finger
no service pad
no ip source-route
no ip domain-lookup
no ip http server
exit
wr
----------------------------------------------------------------------------------------------
  ]]> 마님 심히 걱정된다 Wed, 20 Aug 2008 10:02:04 +0900 http://blog.jinbo.net/manim/?pid=26 LVS 구성 http://blog.jinbo.net/manim/?pid=26 LVS Setup
===============================================================================
http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/index.html 참고
http://www.linuxvirtualserver.org/VS-DRouting.html 참고


                      ┌--------┐
                      │ client │ (local or on internet)
              └--------┘
                           CIP
                           │
                        (router)
                           DGW
                           │ outside network
                           │
                           VIP
                           │
             ┌----┴----┐   
                     │ director │(director can have 1 or 2 NICs)
             └----------┘    
                      DIP (and PIP)
                           │
                           │ DRIP network
          ┌---------------┼------------------┐
          │               │                  │
          │               │                  │
         RIP1             RIP2                RIP3
    ┌------------┐ ┌------------┐ ┌------------┐
    │ realserver │ │ realserver │ │ realserver │
    └------------┘ └------------┘ └------------┘

===============================================================================

┌---------------------------------------------------------------------------┐
│Director 설정                                                              │
└---------------------------------------------------------------------------┘

1. yum install ipvsadm

2. 패킷포워딩 ON

vi /etc/sysctl.conf
-----------------------------------------------------
# Controls IP packet forwarding
net.ipv4.ip_forward = 1
-----------------------------------------------------
sysctl -p

3. VIP 세팅

ifconfig eth0:0 61.32.177.160 netmask 255.255.255.128

4. LVS 세팅

VIP:61.32.177.160 / Port:80 /스캐줄링:wlc / Gate방식
------------------------------------------------------
ipvsadm -C
ipvsadm -A -t 61.32.177.160:80 -s wlc
ipvsadm -a -t 61.32.177.160:80 -r 61.32.177.162:80 -g
ipvsadm -a -t 61.32.177.160:80 -r 61.32.177.163:80 -g
------------------------------------------------------

5. 서버리부팅시 IP 설정을 위하여 /root/ip.sh 로 저장
   ---------------------------------------------------
#!bin/sh
ifconfig eth0:0 61.32.177.160 netmask 255.255.255.128
------------------------------------------------------
vi /etc/rc.d/rc.local
------------------------------------------------------
/root/ip.sh 추가


================================================================================

┌----------------------------------------------------------------------------┐
│realserver 1  setup                                                         │
└----------------------------------------------------------------------------┘

1. yum install arptables_jf

2. arptalbes 세팅

arptables -A IN -j DROP -d 61.32.177.160
arptables -A OUT -j mangle -o eth0 -s 61.32.177.160 --mangle-ip-s 61.32.177.162

service arptalbes_jf save ==> /etc/sysconfig/arptables 에 저장

---------------------------------------------------------------------------------
# Generated by arptables-save v0.0.8 on Mon Jul 14 14:03:44 2008
*filter
:IN ACCEPT [2:56]
:OUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
[0:0] -A IN -d 61.32.177.160 -j DROP
[0:0] -A OUT -s 61.32.177.160 -o eth0 -j mangle --mangle-ip-s 61.32.177.162
COMMIT
# Completed on Mon Jul 14 14:03:44 2008
---------------------------------------------------------------------------------

3. VIP 세팅

ifconfig lo:0 61.32.177.160 netmask 255.255.255.255 broadcast 61.32.177.160 up
route add -host 61.32.177.160 dev lo:0

4. 서버리부팅시 IP 설정을 위하여 /root/ip.sh 로 저장
---------------------------------------------------------------------------------
#!bin/sh
ifconfig lo:0 61.32.177.160 netmask 255.255.255.255 broadcast 61.32.177.160 up
route add -host 61.32.177.160 dev lo:0
---------------------------------------------------------------------------------
vi /etc/rc.d/rc.local
------------------------------------------------------------------------------
/root/ip.sh 추가


=================================================================================

┌-----------------------------------------------------------------------------┐
│realserver 2  setup                                                          │
└-----------------------------------------------------------------------------┘

1. yum install arptables_jf

2. arptalbes 세팅

arptables -A IN -j DROP -d 61.32.177.160
arptables -A OUT -j mangle -o eth0 -s 61.32.177.160 --mangle-ip-s 61.32.177.163

service arptalbes_jf save ==> /etc/sysconfig/arptables 에 저장

----------------------------------------------------------------------------------
# Generated by arptables-save v0.0.8 on Mon Jul 14 14:03:44 2008
*filter
:IN ACCEPT [2:56]
:OUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
[0:0] -A IN -d 61.32.177.160 -j DROP
[0:0] -A OUT -s 61.32.177.160 -o eth0 -j mangle --mangle-ip-s 61.32.177.163
COMMIT
# Completed on Mon Jul 14 14:03:44 2008
----------------------------------------------------------------------------------

3. VIP 세팅

ifconfig lo:0 61.32.177.160 netmask 255.255.255.255 broadcast 61.32.177.160 up
route add -host 61.32.177.160 dev lo:0


4. 서버리부팅시 IP 설정을 위하여 /root/ip.sh 로 저장
----------------------------------------------------------------------------------
#!bin/sh
ifconfig lo:0 61.32.177.160 netmask 255.255.255.255 broadcast 61.32.177.160 up
route add -host 61.32.177.160 dev lo:0
----------------------------------------------------------------------------------
vi /etc/rc.d/rc.local
----------------------------------------------------------------------------------
/root/ip.sh 추가


================================================================================END ]]> 마님 심히 걱정된다 Wed, 20 Aug 2008 10:00:38 +0900 http://blog.jinbo.net/manim/?pid=25 mod_vhost 죽이는기능이다. http://blog.jinbo.net/manim/?pid=25 ## 컴파일시 필요 구성 패키지
yum install libdbi libdbi-devel libdbi-dbd-mysql libdib-dbd-mysql
yum install gcc-c++

## mod_dbi_pool 먼저 설치

wget http://www.outoforder.cc/downloads/mod_dbi_pool/mod_dbi_pool-0.4.0.tar.bz2

tar xvfpj mod_dbi_pool-0.4.0.tar.bz2

./configure --with-apxs=/usr/local/httpd/bin/apxs

make make install


## mod_dbi_pool 설치가 안됐을시 컴파일 에러 발생

wget http://www.outoforder.cc/downloads/mod_vhost_dbi/mod_vhost_dbi-0.1.0.tar.bz2

tar xvfpj mod_vhost_dbi-0.1.0.tar.bz2

cd mod_vhost_dbi-0.1.0

./configure --with-apxs=/usr/local/httpd/bin/apxs

make make install



## httpd.conf 추가 할 사항
LoadModule dbi_pool_module      modules/mod_dbi_pool.so
LoadModule vhost_dbi_module    modules/mod_vhost_dbi.so

PoolDbiDriver         VHOST  mysql
PoolDbiHost           VHOST  dbserver
PoolDbiUsername       VHOST  hosting
PoolDbiPassword       VHOST  my1q2w3e
PoolDbiDBName         VHOST  hosting
PoolDbiConnMin        VHOST  1
PoolDbiConnSoftMax    VHOST  1
PoolDbiConnHardMax    VHOST  5
PoolDbiConnTTL        VHOST  30
 
<VirtualHost *:80>
  VhostDbiEnabled On
  VhostDbiConnName VHOST
  VhostDbiQuery "SELECT ServerName, DocumentRoot, Username  \
                        FROM vhosts WHERE ServerName = &{RequestHostname} AND active ='on'"
</VirtualHost>

테이블 생성

CREATE TABLE IF NOT EXISTS `vhosts` (
  `active` varchar(3) default NULL,
  `ServerName` varchar(255) NOT NULL default '',
  `DocumentRoot` varchar(255) default NULL,
  `Username` varchar(255) default NULL,
  PRIMARY KEY  (`ServerName`),
  KEY `active` (`active`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1; ]]> 마님 심히 걱정된다 Wed, 20 Aug 2008 10:00:13 +0900 http://blog.jinbo.net/manim/?pid=24 mrtg 설치 http://blog.jinbo.net/manim/?pid=24 yum install net-snmp

vi /etc/snmp/snmpd.conf

com2sec local  localnet       public

group   MyROGroup       v1           localnet
group   MyROGroup       v2c          localnet
group   MyROGroup       usm          localnet

view    all             included        .1 80
view    system          included        .iso.org.dod.internet.mgmt.mib-2.system

access MyROSystem "" any noauth exact system none none
access MyROGroup "" any noauth exact all none none
access MyRWGroup "" any noauth exact all all none


cfgmaker --global 'WorkDir:/var/www/mrtg' --global 'Options[_]:bits,growright' --output /etc/mrtg/mrtg161.cfg public@61.32.177.161

LANG=C LC_ALL=C /usr/bin/mrtg /etc/mrtg/mrtg162.cfg --lock-file /var/lock/mrtg/mrtg162_l --confcache-file /var/lib/mrtg/mrtg162.ok ]]> 마님 심히 걱정된다 Wed, 20 Aug 2008 09:59:29 +0900 http://blog.jinbo.net/manim/?pid=23 snmp 참고 http://blog.jinbo.net/manim/?pid=23 What is net-snmp ?

Simple Network Management Protocol (SNMP) is a widely used protocol for monitoring the health and welfare of network equipment (eg. routers), computer equipment and even devices like UPSs. Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3 using both IPv4 and IPv6.

Net-SNMP Tutorials

http://www.net-snmp.org/tutorial/tutorial-5/

Download Net-SNMP

http://www.net-snmp.org/download.html

Net-SNMP Documentation

http://www.net-snmp.org/docs/readmefiles.html

Installing SNMP Server in Debian

If you want to install snmp server in debian you need to install snmpd package using the following command

#apt-get install snmpd

This will complete the installation process.

Configuring SNMP Server in Debian

Default Configuration files are located at /etc/snmp directory this contains the following files.

snmpd.conf snmptrapd.conf

/etc/snmp/snmpd.conf - configuration file for the Net-SNMP SNMP agent.

/etc/snmp/snmptrapd.conf - configuration file for the Net-SNMP trap daemon.

Now we need to concentrate on snmpd.conf file for our configuration. If you want to see the default snmpd.conf file.

Before doing any changes to your /etc/snmp/snmpd.conf file take a copy of original file using the following command

#cp /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.orig

Set up the snmp server to allow read access from the other machines in your network for this you need to open the file /etc/snmp/snmpd.conf change the following Configuration and save the file.

 first step

# sec.name           source  community
   com2sec paranoid default public
#com2sec readonly default public
#com2sec readwrite default private

to

#com2sec paranoid default public
   com2sec local   localhost public
   com2sec localNet 192.168.0.0 /24 public
#com2sec readwrite default private

you can define the source whichever way you want like only allow from local machine for that you need to add 127.0.0.1 under source and you can define your community in this case we are using public as our community.

Second Step

####
# Second, map the security names into group names:

# sec.model sec.name
group MyROSystem v1 paranoid
group MyROSystem v2c paranoid
group MyROSystem usm paranoid
group MyROGroup v1 readonly
group MyROGroup v2c readonly
group MyROGroup usm readonly
group MyRWGroup v1 readwrite
group MyRWGroup v2c readwrite
group MyRWGroup usm readwrite

to

group MyROSystem v1 local
group MyROSystem v2c local
group MyROSystem usm local
group MyROGroup v1 localnet
group MyROGroup v2c localnet
group MyROGroup usm localnet
group MyRWGroup v1 local
group MyRWGroup v2c local
group MyRWGroup usm local

Third Step

####
# Third, create a view for us to let the groups have rights to:

# incl/excl subtree mask
view all included .1 80
view system included .iso.org.dod.internet.mgmt.mib-2.system

Don't chnage anything here leave this one as default setting

Final Step

####
# Finally, grant the 2 groups access to the 1 view with different
# write permissions:

# context sec.model sec.level match read write notif
access MyROSystem "" any noauth exact system none none
access MyROGroup "" any noauth exact all none none
access MyRWGroup "" any noauth exact all all none

Don't chnage anything here leave this one as default setting.

Optional Configuration

# System contact information

syslocation Unknown (configure /etc/snmp/snmpd.local.conf)
syscontact Root <root@localhost> (configure /etc/snmp/snmpd.local.conf)

to

syslocation MainDatacenter
syscontact webmaster@debianhelp.co.uk

Now the above configuration able to access local and 192.168.0.0 /24 network machines to use full functionality of MIB's this is very important if you want to collect the information from existing machines in above network.

Now you need to restart the snmp services using the following command

#/etc/init.d/snmpd restart

Now the SNMP server configuration is active and running.

Testing your Configuration

#snmpwalk localhost -c public -v1

SNMPv2-MIB::sysDescr.0 = STRING: Linux sritest 2.4.27-2-386 #1 Wed Aug 17 09:33:35 UTC 2005 i686
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
SNMPv2-MIB::sysUpTime.0 = Timeticks: (656698) 1:49:26.98
SNMPv2-MIB::sysContact.0 = STRING: webmaster@debianhelp.co.uk
SNMPv2-MIB::sysName.0 = STRING: debiantest
SNMPv2-MIB::sysLocation.0 = STRING: Maindatacenter
SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORID.1 = OID: IF-MIB::ifMIB
SNMPv2-MIB::sysORID.2 = OID: SNMPv2-MIB::snmpMIB
SNMPv2-MIB::sysORID.3 = OID: TCP-MIB::tcpMIB
SNMPv2-MIB::sysORID.4 = OID: IP-MIB::ip
SNMPv2-MIB::sysORID.5 = OID: UDP-MIB::udpMIB
SNMPv2-MIB::sysORID.6 = OID: SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroup
SNMPv2-MIB::sysORID.7 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance
SNMPv2-MIB::sysORID.8 = OID: SNMP-MPD-MIB::snmpMPDCompliance
SNMPv2-MIB::sysORID.9 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance

If you want more options and how to use snmpd.conf file you need to check snmpd.conf man page

If you want to monitor your server or desktop machine resources like disk capacity,load,process check here

SNMP Client installation in debian

Now we have seen how to configure SNMP server in above section now we need to install client in other machines for this you need to install snmp or scli packages

#apt-get install snmp scli tkmib

This will complete the snmp client installation.

Configuration

The system wide configuration file is /etc/snmp/snmp.conf check the community name is same as server if not you need to change the community name and you need to restart the snmp service.Edit the /etc/snmp/snmp.conf file and change the following settings and save the file

com2sec paranoid default public
#com2sec readonly default public
#com2sec readwrite default private
to:

#com2sec paranoid default public
com2sec readonly 127.0.0.1 public
#com2sec readwrite default private

Now you need to restart the snmp service using the following command

#/etc/init.d/snmp restart

Testing your Configuration

#snmpwalk -v 2c -c public remotemachineipaddress system

SNMPv2-MIB::sysDescr.0 = STRING: Linux sritest 2.4.27-2-386 #1 Wed Aug 17 09:33:35 UTC 2005 i686
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
SNMPv2-MIB::sysUpTime.0 = Timeticks: (168871) 0:28:08.71
SNMPv2-MIB::sysContact.0 = STRING: webmaster@debianhelp.co.uk
SNMPv2-MIB::sysName.0 = STRING: debiantest
SNMPv2-MIB::sysLocation.0 = STRING: maindatacenter
SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORID.1 = OID: IF-MIB::ifMIB
SNMPv2-MIB::sysORID.2 = OID: SNMPv2-MIB::snmpMIB
SNMPv2-MIB::sysORID.3 = OID: TCP-MIB::tcpMIB
SNMPv2-MIB::sysORID.4 = OID: IP-MIB::ip
SNMPv2-MIB::sysORID.5 = OID: UDP-MIB::udpMIB
SNMPv2-MIB::sysORID.6 = OID: SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroup
SNMPv2-MIB::sysORID.7 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance
SNMPv2-MIB::sysORID.8 = OID: SNMP-MPD-MIB::snmpMPDCompliance
SNMPv2-MIB::sysORID.9 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance
SNMPv2-MIB::sysORDescr.1 = STRING: The MIB module to describe generic objects for network interface sub-layers
SNMPv2-MIB::sysORDescr.2 = STRING: The MIB module for SNMPv2 entities
SNMPv2-MIB::sysORDescr.3 = STRING: The MIB module for managing TCP implementations
SNMPv2-MIB::sysORDescr.4 = STRING: The MIB module for managing IP and ICMP implementations
SNMPv2-MIB::sysORDescr.5 = STRING: The MIB module for managing UDP implementations
SNMPv2-MIB::sysORDescr.6 = STRING: View-based Access Control Model for SNMP.

Alternately, you can use scli,
#scli localhost

 and then type in show or monitor.

This will confirm the SNMP service is active and working properly. ]]> 마님 심히 걱정된다 Wed, 20 Aug 2008 09:59:03 +0900 http://blog.jinbo.net/manim/?pid=22 디비서버 http://blog.jinbo.net/manim/?pid=22 DB Setup
OS : CentOS 5.2 Default Setup
IP : 61.32.177.164 / 192.168.30.4

------------------------------------------------------------------------------------------
Pre Install

yum install gcc gcc-c++ ncurses-devel

------------------------------------------------------------------------------------------
MySQL 5.0 설치

   RPM 디폴트 설치

1. yum install mysql-server
2. service mysqld start
3. service mysqld stop
4. mv /var/lib/mysql /data/mysql50
5. ln -s /data/mysql50 /var/lib/mysql
6. mv /etc/my.cnf /var/lib/mysql
7. service mysqld start


------------------------------------------------------------------------------------------
MySQL 4.0 설치

   소켓의 위치와 서비스 포트를 변경

1. mysql-4.0.27.tar.gz 다운로드

2. 컨피규레이션

./configure --prefix=/usr/local/mysql40 --with-client-ldflags=-all-static --with-mysqld-ldflags=-all-static --with-charset=euc_kr --without-debug --enable-assembler --with-innodb --with-berkeley-db --enable-local-infile --with-pthread --with-named-thread-lib=-lpthread --with-readline--with-unix-socket-path=/tmp/mysql40.sock --with-tcp-port=3307


에러시 확인할 사항

/usr/include/pthread.h 마지막 라인에 /* Linuxthreads */ 추가

3. make

4. make install

5. /usr/local/mysql40/bin/mysql_install_db
   디비초기화

6. mv /usr/local/mysql40/var /data/mysql40; ln -s /data/mysql40 /usr/local/mysql40/var
   물리적 데이터 저장위치 이동 후 심볼릭 링크

7. chown -R mysql.mysql /data/mysql40
   소유권 이동

8. vi /data/mysql40/my.cnf
   mysql40 환경설정 파일작성

--------------------------------------------------------------------------------
[client]
port            = 3307
socket          = /tmp/mysql40.sock

[mysqld]
port            = 3307
socket          = /tmp/mysql40.sock
skip-locking
key_buffer = 256M
max_allowed_packet = 1M
table_cache = 256
sort_buffer_size = 1M
read_buffer_size = 1M
myisam_sort_buffer_size = 64M
thread_cache = 8
query_cache_size= 16M
thread_concurrency = 8
default-character-set = euc_kr
log-bin
server-id       = 1

[mysqldump]
quick
max_allowed_packet = 16M

[mysql]
no-auto-rehash

[isamchk]
key_buffer = 128M
sort_buffer_size = 128M
read_buffer = 2M
write_buffer = 2M

[myisamchk]
key_buffer = 128M
sort_buffer_size = 128M
read_buffer = 2M
write_buffer = 2M

[mysqlhotcopy]
interactive-timeout
-------------------------------------------------------------------------------------

9. vi /etc/rc.d/rc.local
   시스템 시작 시 자동실행

   /usr/local/mysql40/bin/mysqld_safe &

10. /usr/local/mysql40/bin/mysqld_safe &
   데몬 실행

11. /usr/local/mysql40/bin/mysql
   접속 확인

12. netstat -an
   
   3306 포트와 3307 포트 리슨 확인 ]]> 마님 심히 걱정된다 Wed, 20 Aug 2008 09:58:13 +0900 http://blog.jinbo.net/manim/?pid=21 로그서버 http://blog.jinbo.net/manim/?pid=21 로그서버 세팅
================================================================================

1. 외부 서버에서 보내는 로그를 받기 위해
   /etc/sysconfig/syslog 열고 다음과 같이 수정

# Options to syslogd
# -m 0 disables 'MARK' messages.
# -r enables logging from remote machines
# -x disables DNS lookups on messages recieved with -r
# See syslogd(8) for more details
SYSLOGD_OPTIONS="-m 0 -r"  <<-- -r 옵션 추가
# Options to klogd
# -2 prints all kernel oops messages twice; once for klogd to decode, and
#    once for processing with 'ksymoops'
# -x disables all klogd processing of oops messages entirely
# See klogd(8) for more details
KLOGD_OPTIONS="-x"
#
SYSLOG_UMASK=077
# set this to a umask value to use for all log files as in umask(1).
# By default, all permissions are removed for "group" and "other".
================================================================================

2. 로그서비스 재시작

service syslogd restart



================================================================================

3. 방화벽에서 로그서비스로 들어오는 UDP/154 포트 오픈

# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 514 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT

=================================================================================

4. iptables 재시작

service iptables restart

=================================================================================

5. 각각의 호스트에 로그서버 지정

vi /etc/syslog.conf

*.*        @61.32.177.166 <-- 추가

service syslogd restart

==================================================================================

6. 로그서버 모니터링


]]> 마님 심히 걱정된다 Wed, 20 Aug 2008 09:57:43 +0900 http://blog.jinbo.net/manim/?pid=20 ftp 설치 http://blog.jinbo.net/manim/?pid=20 1. cd /usr/local/src;wget http://download.pureftpd.org/pub/pure-ftpd/releases/pure-ftpd-1.0.21.tar.gz
2. tar -zxvf pure-ftpd-1.0.21.tar.gz
3. cd pure-ftpd-1.0.21
4. ./configure --prefix=/usr/local/pureftp --with-mysql --with-cookie --with-throttling --with-ratios --with-rfc2640 --with-quotas --with-altlog
4. make
5. make install
6. mysql 로 접근후
   creat database hosting;
   GRANT ALL PRIVILEGES ON hosting.* TO hosting@localhost IDENTIFIED BY 'my1q2w3e' WITH GRANT OPTION;
   flush privileges;

7. mysql -hdbserver -uhosting -p hosting
   Enter password:

  CREATE TABLE users (
  User VARCHAR(16) BINARY NOT NULL,
  Password VARCHAR(64) BINARY NOT NULL,
  Uid INT(11) NOT NULL default '-1',
  Gid INT(11) NOT NULL default '-1',
  Dir VARCHAR(128) BINARY NOT NULL,
  PRIMARY KEY  (user)
);
]]> 마님 심히 걱정된다 Wed, 20 Aug 2008 09:57:03 +0900 http://blog.jinbo.net/manim/?pid=19 apache + php http://blog.jinbo.net/manim/?pid=19 Apache + PHP

yum install gcc autoconf libtool-ltdl-devel mysql-devel libxml2-devel openssl-devel gdbm-devel libjpeg-devel libpng-devel freetype-devel libmcrypt-devel freetds-devel


다운로드

1. cd /usr/local/src
2. wget wget http://apache.tt.co.kr/httpd/httpd-2.0.63.tar.gz
3. wget http://kr2.php.net/get/php-5.2.6.tar.gz/from/this/mirror
--------------------------------------------------------------------------------

아파치 설치

1. tar -zxvf httpd-2.0.63.tar.gz
2. cd httpd-2.0.63

3. vi server/mpm/prefork/prefork.c
   #define DEFAULT_SERVER_LIMIT 256 -> 1024로 수정 (메모리 1기가 기준)

4. ./configure --enable-so --prefix=/usr/local/httpd --enable-rewrite
5. make
6. make install
--------------------------------------------------------------------------------

PHP설치

1. tar -zxvf php-5.2.6.tar.gz
2. cd php-5.2.6
3. ./configure --prefix=/usr/local/php --with-apxs2=/usr/local/httpd/bin/apxs --with-config-file-path=/usr/local/httpd/conf --with-mysql=/usr --enable-sockets --with-openssl=/usr --with-dbm --with-gd --with-jpeg-dir=/usr --with-png-dir=/usr --with-pcre-regex --enable-session --enable-mbstring --with-mcrypt --enable-sigchild --enable-bcmath --with-freetype-dir=/usr --with-zlib-dir=/usr --enable-ftp --enable-gd-native-ttf --with-gettext --with-mssql --enable-mbedded-mysqli

4. make
5. make install
6. cp php.ini-dist /usr/local/httpd/conf/php.ini
7. vi /usr/local/httpd/conf/httpd.conf

DirectoryIndex 에 index.php 추가

타입추가

AddType application/x-httpd-php .php .phtml .php3 .html .htm
AddType application/x-httpd-php-source .phps
--------------------------------------------------------------------------------

한글파일 지원을 위해 mod_url 설치

1. wget http://kldp.net/frs/download.php/4237/mod_url-apache2-1.12.tar.bz2
2. tar -jxvf mod_url-apache2-1.12.tar.bz2
3. cd mod_url-apache2-1.12
4. /usr/local/httpd/bin/apxs -i -c mod_url.c
5. vi /usr/local/httpd/conf/httpd.conf

#모듈추가
LoadModule redurl_module      modules/mod_url.so

#URL체크 ON
CheckURL On
ServerEncoding EUC-KR
ClientEncoding UTF-8
--------------------------------------------------------------------------------

보안을 위해 수호신 설치

1. wget http://download.suhosin.org/suhosin-0.9.24.tgz
2. tar -zxvf suhosin-0.9.24.tgz
3. cd suhosin-0.9.24
4. /usr/local/php/bin/phpize
5. ./configure --with-php-config=/usr/local/php/bin/php-config
6.make
7.make install

8. /usr/local/httpd/conf/php.ini 파일을 열고
extension_dir=/usr/local/php/lib/php/extensions 로 수정 후
extension=suhosin.so 를 등록

9. ln -s /usr/local/php/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so /usr/local/php/lib/php/extensions/suhosin.so

10.  아파치 확인
/usr/local/httpd/htdocs/index.php
<?phpinfo()?>


--------------------------------------------------------------------------------
ZendOptimizer 설치

1. http://www.zend.com/en/products/guard/downloads 에서 다운로드


--------------------------------------------------------------------------------
eaccelerator 설치

1. wget http://nchc.dl.sourceforge.net/sourceforge/eaccelerator/eaccelerator-0.9.5.2.tar.bz2
   tar -jxvf eaccelerator-0.9.5.2.tar.bz2
   cd eaccelerator-0.9.5.2
   /usr/local/php/bin/phpize

  ./configure --enable-eaccelerator=shared --with-php-config=/usr/local/php/bin/php-config

  make

  make install


2. PHP 익스텐션에 링크 후 php.ini 에 eaccelerator 적용

cd /usr/local/php/lib/php/extensions/
ln -s no-debug-non-zts-20060613/eaccelerator.so .
  
vi /usr/local/httpd/conf/php.ini

------------------------------------------------------
extension="eaccelerator.so"
eaccelerator.shm_size="16"
eaccelerator.cache_dir="/tmp/eaccelerator"
eaccelerator.enable="1"
eaccelerator.optimizer="1"
eaccelerator.check_mtime="1"
eaccelerator.debug="0"
eaccelerator.filter=""
eaccelerator.shm_max="0"
eaccelerator.shm_ttl="0"
eaccelerator.shm_prune_period="0"
eaccelerator.shm_only="0"
eaccelerator.compress="1"
eaccelerator.compress_level="9"
-------------------------------------------------------

3. 옵션에 적용한 디렉토리 생성 후 권한설정

mkdir /tmp/eaccelerator
chmod 0777 /tmp/eaccelerator

]]> 마님 심히 걱정된다 apm linux Wed, 20 Aug 2008 09:55:41 +0900 http://blog.jinbo.net/manim/?pid=18 bind-9.3.4 설치 http://blog.jinbo.net/manim/?pid=18

1. 프로그램 설치
  -> yum -y install bind*
  -> yum -y install caching-name*

2. named 파일 생성 (기존에 파일없슴, 메뉴얼에 생성해주라함)
  -> cp /usr/share/doc/bind-9.3.4/sample/etc/* /var/named/chroot/etc/
  -> cp /usr/share/doc/bind-9.3.4/sample/var/named/* /var/named/chroot/var/named/

3. named.conf 편집
  -> cd /var/named/chroot/etc/
  -> view "external" 에서 
 수정
 match-clients         { any; };
        match-destinations    { any; };
        recursion yes;
  -> 도메인 설정 view (internal, external) 에서
 zone "example.co.kr.zone" { 
                type master;
                file "data/example.co.kr.zone";
        };

4. name 서버 파일 편집
  -> cd /var/named/chroot/var/named
  -> cp localdomain.zone data/example.co.kr.zone
  -> vim data/example.co.kr.zone

$TTL    86400
@               IN SOA  @       root (
                                        42              ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS           ns
                IN mx 10        mail
@               IN A            192.168.0.90
ns              IN A            192.168.0.90
www             IN A            192.168.0.90
ftp             IN A            192.168.0.90
mail            IN A            192.168.0.90

5. 심볼릭 링크 (/etc/named.conf 심볼릭링크)
  -> cd /etc
  -> ln -s /var/named/chroot/etc/named.conf .

6. 서비스 추가
  -> ntsysv // named 서비스 추가

7. 네트워크 DNS 서버 설정
  -> vi /etc/resolv.conf
  -> 192.168.0.90 자기자신 IP로 변경

8. service network restart

9. service named start

10. ping yahoo.co.kr (DNS 서버가 제역할을 하는지 확인)

11. dig example.co.kr

12. nslookup example.co.kr ]]> 마님 역시나 걱정된다 Mon, 28 Jul 2008 17:57:12 +0900 http://blog.jinbo.net/manim/?pid=17 리눅스 데몬들 http://blog.jinbo.net/manim/?pid=17 NetworkManager : 자동으로 최대 사용가능한 연결에 네트워크 연결을 스위칭한다.

acpi : 커널로부터 ACPI 이벤트들을 받아서 처리한다.

anacron : downtime까지 남겨진 cron 작업들을 실행한다.

apmd : 베터리 상태를 모니터링하고 기록(syslog(8))한다. 고급 전원 관리기능을 하는 데몬

arptables_jf : 자동으로 arptables로 패킷 필터링을 하는 방화벽 데몬

atd : 백그라운드 작업을 수행하거나 예약 명령을 처리한다.

autofs : 서버의 파일을 읽을 때 자동으로 마운트하도록 해주는 데몬

bluetooth : 서비스 검색과 인증 서비스를 위한 데몬

chargen : 케릭터를 발생시키는 내부적인 xinetd 서비스 데몬(tcp버전)

chargen-utp : 9번과 동일 utp버전이다.

cpuspeed : 동적인 cpu speed 데몬

crond : 리눅스에 등록된 명령어들을 정기적으로 수행하는 데몬

cups : 프린터 데몬

cups-config-deamon : D-BUS를 통한 프린터 환경설정 데몬

cups-lpd : cups와 통신하는 레거시 lpd 프로토콜 데몬

daytime : 현재 시스템 시간을 가져와 프린트해주는 내부 xinetd 데몬 (tcp버전)

daytime-udp : 현재 시스템 시간을 가져와 프린트해주는 내부 xinetd 데몬(udp버전)

diskdump : 시스템 충돌이나 diskdump모듈이 초기화되면 덤프파일을 저장

echo : echo의 케릭터들을 클라이언트로 뿌려주는 xinetd데몬 (tcp)

echo-udp : (udp) version

eklogin : 케베로스 5를 가지고 암호화시키는 데몬

gpm : 텍스트기반의 리눅스 어플리케이션에 마우스를 서포트하는 데몬

gssftp : kerberized ftp 서버 케베로스 5를 가지고 암호화

haldeamon : 소스로부터 하드웨어에 대한 정보를 모으고 유지하는 데몬

iiim : 중요한 IIIMSF 요소

iptables : 방화벽 설정 데몬(iptables)

dirda : (infrared Data Association) wireless를 위한 표준 협회

irqbalance : 프린터 작업 분배 담당

idsn : ISDN 서비스 설정 데몬

klogin : 케베로스 5 인증, dsd 타입, rlogin 세션을 설정하는 데몬

krbs-telnet : 케베로스 5 인증, 보통의 텔넷 세션

kshell : 케베로스 5 인증, rshell 인증

kudzu : 하드웨어 검색 데몬 이 서비스를 중지시키면 새로 장착하는 하드웨어가 없는 한 부팅시간을 단축시킨다. 보통의
경우엔 꺼두는 것이 좋다.

Im-sensors : 메인보드 센서값을 모니터링한다.

mdmonitor : RAID 모니터링과 관리 담당 데몬

mdmpd : 다중 경로 디바이트 모니터링과 관리

messagebus : 시스템 이벤트나 다른 메시지를 알려줌

microcode-ctl : cpu 마이크로코드를 지원하는 스크립트

netdump : netconsol과 netcrashdump 요소들을 초기화시키는 데몬

netfs : NFS, SMB/CIFS, NCP등을 마운트 또는 언마운트 시키는 데몬

예를 들어 NFS서비스를 사용하고자 할때는 미리 이 데몬을 띄어 놓아야 한다.

netplugd : non-static 네트워크 인터페이스를 관리하는 데몬

network : 부팅시 모드 설정된 네트워크 인터페이스를 활성화 또는 비활성화시키는 데몬

nfs : tcp에서 파일 공유 데몬, 리눅스에서 nfs서버를 운영할 때 쓴다.

nfslock : nfs서버를 운영할 때 다수 사용자들의 접근을 방지할 때 쓴다.

nscd : 느린 DNS서비스나 NIS, LDAP를 쓰면 이 데몬을 띄어 주어야 한다.

NTPD : ntpV4 데몬, 시간 동기화를 맞춰 주는 데몬

pcmcia : 이더넷 데몬 노트북에서 주로 사용하는 데몬이다.

portmap : RPC 연결 관리 데몬(NFS, NIS)

psacct : 프로세스에 대한 설명을 시작하거나 중지할때 쓰는 데몬

rawdevices : raw디바이스를 블록 디바이트에 맵핑시켜주는 스크립트

readahead : startup 퍼포먼스를 증가시킨다.

readahead-early : 위와 같다.

rhnsd : 서비스 레벨에 따라 시스템 모니터링 작업 수행과 업데이트 등을 위해서 연결된 작업을 레드햇 네트워크 서버에
핸들링한다.

rpcgssd : 유저레벨 데몬 시작, NFSv4 클라이언트를 위해서 RPCSEC 관리

rpcidmapd : 유저레벨 데몬, 유저 uid와 gid값을 매핑시켜준다.

rpcsucgssd : 유저레벨 데몬

rsync : crc check summring, 동기화 데몬

rwhod : finger와 비슷하다. 원격 유저가 유저 리스트를 얻을 수 있다.

saslauthd : 인증된 요청을 핸들링하는 서버 프로세스

sendmail : 메일 서버 데몬

smartd : 자기 모니터링과 리포틍

snmpd : 단순 네트워크 관리 프로토콜 ㄷ몬

snmptrapd : snmpd trap 데몬

sshd : 오픈 ssh 서버 데몬

syslog : 로그 데몬

telnet : 텔넷 서버 데몬

time : RFC 868타임 서버 데몬 (TCP버전)

time-udp : time 데몬과 같다. (udp버전)

uncserver : uncserver를 설정

vsftpd : ftp 데몬

winbind : 삼바 win bind 데몬

xfs : X-window 폰트 데몬

xinetd : 슈퍼 데몬 각종 서비스를 관리 한다. (telnet, ftp, rlogin 등)

ypbind : NIS 데몬

]]> 마님 심히 걱정된다 Tue, 01 Jul 2008 10:09:07 +0900 http://blog.jinbo.net/manim/?pid=16 이클립스 단축키 http://blog.jinbo.net/manim/?pid=16

Java Editor 단축키
Ctrl + Shift + M : 특정 클래스 Import 시키기
Ctrl + Shift + O : 자동으로 Import 시키기
Ctrl + Shift + F : 코드 자동 정리
Ctrl + Shift + G : 특정 메써드나 필드를 Reference하고 있는 곳을 찾는다.
Ctrl + 1 : Quick Fix. 에러가 발생했을 경우 Quick Fix를 통해 쉽게 해결이 가능하다.
Ctrl + Shift + / : 블럭 주석 설정
Alt + Shift + UP : 커서를 기준으로 토큰단위 블럭지정
Alt + Shift + DOWN : 커서를 기준으로 토큰단위 블럭해제
CTRL + L : 특정 줄번호로 가기
Alt + Shift + J : 자동으로 주석 달기 (메소드나 멤버변수에 포커스 두고 실행)

Window 이동
F10 : 메뉴창을 활성화
Ctrl + F8 : 다음 Perspective로 이동
Ctrl + N : 새로운 파일 및 프로젝트 생성.
Ctrl + Shift + Down : Java Editor에서 다음 member로 이동.
Ctrl + F7 : 다음 View로 이동.
Ctrl + Shift + F7 : 이전 View로 이동.
Alt + <- : 이전 작업 화면
Alt + -> : 다음 작업 화면
F12 : 컴파일 중 에러등으로 포커스가 다른데로 갔을 때 Editor 로 커서 이동
Ctrl + 1 : 컴파일 에러가 발생한 곳에서 Ctrl + 1을 누를 경우 컴파일 에러에 대한 해결책을 제시

디버깅 단축키
CTRL + Shift + B : 현 커서의 위치에 브레이크 포인터 설정/해제
F11 : 디버깅 시작
F8 : 디버깅 계속
F6 : 한줄씩 실행(Step Over)
F5 : 한줄씩 실행하되 함수일 경우 그 함수 내부로 들어감(Step Into)
CTRL + R : 현재 라인까지 실행(Run to Line)

Refactoring 단축키
Shift + ALT + 알파벳 : Refactoring을 위한 단축키 임.

RUN 단축키
Ctrl + F11 : 이전에 실행되었던 Run파일 실행.

Java Editor 단축키
Ctrl + Shift + M : 특정 클래스 Import 시키기
Ctrl + Shift + O : 자동으로 Import 시키기
Ctrl + Shift + F : 코드 자동 정리
Ctrl + Shift + G : 특정 메써드나 필드를 Reference하고 있는 곳을 찾는다.
Ctrl + 1 : Quick Fix. 에러가 발생했을 경우 Quick Fix를 통해 쉽게 해결이 가능하다.
Ctrl + Shift + / : 블럭 주석 설정
Alt + Shift + UP : 커서를 기준으로 토큰단위 블럭지정
Alt + Shift + DOWN : 커서를 기준으로 토큰단위 블럭해제
CTRL + L : 특정 줄번호로 가기
Alt + Shift + J : 자동으로 주석 달기 (메소드나 멤버변수에 포커스 두고 실행)

Window 이동
F10 : 메뉴창을 활성화
Ctrl + F8 : 다음 Perspective로 이동
Ctrl + N : 새로운 파일 및 프로젝트 생성.
Ctrl + Shift + Down : Java Editor에서 다음 member로 이동.
Ctrl + F7 : 다음 View로 이동.
Ctrl + Shift + F7 : 이전 View로 이동.
Alt + <- : 이전 작업 화면
Alt + -> : 다음 작업 화면
F12 : 컴파일 중 에러등으로 포커스가 다른데로 갔을 때 Editor 로 커서 이동
Ctrl + 1 : 컴파일 에러가 발생한 곳에서 Ctrl + 1을 누를 경우 컴파일 에러에 대한 해결책을 제시

디버깅 단축키
CTRL + Shift + B : 현 커서의 위치에 브레이크 포인터 설정/해제
F11 : 디버깅 시작
F8 : 디버깅 계속
F6 : 한줄씩 실행(Step Over)
F5 : 한줄씩 실행하되 함수일 경우 그 함수 내부로 들어감(Step Into)
CTRL + R : 현재 라인까지 실행(Run to Line)

Refactoring 단축키
Shift + ALT + 알파벳 : Refactoring을 위한 단축키 임.

RUN 단축키
Ctrl + F11 : 이전에 실행되었던 Run파일 실행.

Ctrl + Shift + L : 단축키 보기 (한 번 더 누르면 키 설정메뉴로 들어감)
Ctrl + Shift + T : 클래스 찾기
Ctrl+Y:이전 작업 실행

Ctrl + Shift + R : 자원열기(귀찮게 폴더를 안찮아보고 파일명으로 열수 있다)


]]> 마님 잡기장 Thu, 29 May 2008 16:18:32 +0900 http://blog.jinbo.net/manim/?pid=15 이맥스 단축키 모음 http://blog.jinbo.net/manim/?pid=15

입력키      행동
-----------------------------------
C-p         한줄 위로
C-n         한줄 아래로
C-f         한글자 앞으로
C-b         한글자 뒤로
C-a         줄의 시작으로       
C-e         줄의 끝으로
C-v         한페이지 밑으로
M-v         한페이지 위로
M-f         한단어 앞으로
M-b         한단어 뒤로
M-<         버퍼의 처음으로
M->         버퍼의 끝으로
C-g         현재 명령종료
-----------------------------------

단축키      함수               설명
-------------------------------------------------------------------
C-x C-s     save-buffer        현재 버퍼를 디스크에 저장한다.
C-x u       undo               마지막 명령을 취소한다.
C-c C-f     find-file          디스크에서 파일을 연다.
C-s         isearch-forward    단어를 순차적으로 찾는다.
C-r         isearch-backward   단어를 역순으로 찾는다.
            replace-string     단어를 찾아 교체한다.
            replace-regexp     정규표현식을 이용한 찾기와 교체
C-h t       help-with-tutorial 안내서 사용
C-h f       describe-function  함수에 대한 안내문보기
C-h v       describe-variable  변수에 대한 안내문보기
C-h x       describe-key       키 순서에 대해 보기
C-h a       apropos            단어나 정규표현에 대한 안내문 찾기
C-h F       view-emacs-FAQ     이멕스 FAQ 표시
C-h i       info               info 문서 읽기
C-x r m     bookmark-set       북마크표시
C-x r b     bookmark-jump      북마크로 가기
-------------------------------------------------------------------

]]> 마님 심히 걱정된다 Tue, 27 May 2008 11:51:25 +0900