My first domain is it-lodge.com, registered on 1999. Perhaps, I have also registered websitesolution.com.my and could be even earlier, but it was all done and managed by Asia Pacific Net.

One thing I’m sure – PageRank (PR) has really nothing to do with how long a domain name was registered. The website it-lodge.com has PR1 because it was not updated for long.

The challenge of getting it-lodge.com done, mainly because I was required to setup the website and all its pointing to our own web server. It was a Xitami server installed in a Windows platform, sitting on a HP server.

It was all new to me. I used a Public DNS Service called Granite Canyon (I’m happy that I can remember the name still). There are no nice interface for me to edit the zone file in their DNS server. It was all done manually from setting A to MX records.

Then, comes the Xitami server that never seems to work. I configured it in blind. Lucky, the whole projects was funded under the research projects by my mentor, Dr. Lee Yee Loon. He is the head of research of UTHN. It was how I managed to learn all this, with his support.

The IT-Lodge project meant to be a Research Portal to bridge researchers and industrial people. We don’t have Blog those days. But, Dr. Lee’s ideas of sharing inspiring us until today.

Selinux can block your Samba connection too

During setting up, we disabled firewall but still have problem connecting from our Windows desktop to Samba server, until we find that Selinux is blocking it. Disable it and try again, it works :)

Where goes wrong then?

Forget about the page-long list of feature of those web hosting plan. Look for ‘Monthly data transfer’ and ‘No of website per server’. If you can find them, chances that you are in the right direction. Vaguely still, both offering tricky measurement which sounds to me like finding a virgin in a brothel.

It would be easier to put it this way

1) First offer allows you to stay in a hotel for X amount of days in a month. But didn’t tell you the fact that another 100 people are getting the same offer, and the hotel has just one room! – Monthly data transfer

2) Second offer limits to X amount of people who get the offer, but didn’t mention about the number of days each person will stay in this one-room hotel – No of website per server

What can I do?

Find out number of rooms. In this case, it is the dedicated bandwidth assigned to each website, not server. Remember, shared basis servers host not just your website. It makes huge differences here. A shared 1Mbps for 10 websites may be slower than single website with dedicated 256Kbps bandwidth.

Find out number of days one can stay in your second offer. In this case, check out the ‘Compute Cycles’ offered. It measures how much the processing time your application required in a server. 10,000 compute cycles are roughly equivalent to the monthly capacity of a server with a server with 1.2GHz modern processor. For example, a website with only static pages consumes less compute cycles than a website with shopping cart applications.

Is your website loading slow?

I see big corporate website paying as little as RM20 a month for their online infrastructure including email & web hosting (some with domain as well). I bet this amazing offer answer to the question above.

DNS is important. A good one log you into your server without delay, resolving your web address in your web browser quicker! Yet, our local ISPs never seem to take care of this seriously. Your router, computers, servers around you require a pair of reliable DNS servers.

Change your DNS now:

1) In your Router

Enable OpenDNS in your router so every computer benefits. The OpenDNS website is kind enough to list every model of router and guide you through the process. Stop using the famous Streamyx’s DNS servers (202.188.0.133 & 202.188.1.5).

2) In your Computer

If you’re connecting to Internet directly without a router, you can enter OpenDNS’s DNS servers into your computer, instead of using ‘obtain DNS server address automatically’. This also applies to those on Wireless broadband such as Celcom and Maxis 3G, etc.

3) In your Server

For example, if you have Linux installed in your server, include OpenDNS’s DNS servers to /etc/resolv.conf. I’m using TM’s DNS earlier and my dig and host command stop responding when TM’s DNS server decided to go teh tarik…

About OpenDNS

From the way how OpenDNS manage their website, showing the uptime of their globally loacated servers – rest assure this is the last time to change your DNS!

Ubuntu is a community developed operating system that is perfect for laptops, desktops and servers. Whether you use it at home, at school or at work Ubuntu contains all the applications you’ll ever need, from word processing and email applications, to web server software and programming tools.

Request a free CD – Request a free Ubuntu, Edubuntu or Kubuntu CD from Canonical. Delivery typically takes 6-10 weeks. You can use each CD as many times as you like – you are free to use it on as many computers as you wish and to pass on to others.

P/s, just received the CD from Ubuntu, sent from UK. Through, due to the mass production, it is wee bit outdated version, but definitely save me a lot of time than downloading and built my own CD.

List of Commands

Add New User

/usr/sbin/groupadd <groupname>
/usr/sbin/useradd <username> –g <groupname>
chown <username>.<groupname> /path/to/usernamefolder
chmod 755 /path/to/usernamefolder

Set User Password

passwd <yourusername>
<enter new password>
<enter again new password>

Check RPM Status

rpm –q <rpmname>
Eg. rpm –q imap

Extract a .tar File

tar –zxvf <filename>

Manual on a Specific Command

man <command>
Eg. man sendmail

End a Session

Ctrl + Z

./<command>

[root@kuittho /usr]# ./edquota
Specifies that the command edquota is located inside current folder /usr.

View Current Date

date

View Who’s Using Computer

who

List Name of Files in Current Directory

ls -la

Create Text File

touch <name>

View File Content

cat <filename>

Move or Rename File/Directory

mv <filename1> <filename2>

Symlink

ln –s <originalfilename> <newshortcutname>

Remove File

rm <filename>

Read Mail

mail

View Current User

who am i

Send Mail

mail <emailaddress>
subject <subject>
<message>
cc. <ccemailaddress>

To end your message, go to new line and type . and <enter>

Sort File

sort <filename>

Show User Group

groups <username>

Change User Information

chfn

List the Content of a tar File

tar -tvf <filename>

Switch to Root User

su root

Make Directory

mkdir <directoryname>

Restart Server

/sbin/shutdown –r now

Shutdown Server

/sbin/shutdown –h now

Uptime

Uptime

Show Ports Information

lsof -i

Exit from Current Shell

Ctrl + D

Start X-Window System

startx

Edit file with VI Editor

vi <filename>

Copy File

cp <filename> <targetfolder>

$bash or [user@host /directory]$

If you have no home directory on a shell, your regular login will look like:
bash$, or else, it should look like: [user@host /directory]$

Boot Linux in Single Mode

During Linux booting, press Ctrl + X to switch into Text mode.
LILO bot: linux single

Remove Whole Directory

rm –rf
** This command remove all sub-directories and contens within!

Operating System Information

uname -a

Install RPM

rpm –Uvh <rpmname>

Uninstall RPM

rpm –e <rpmname> , find rpm name using rpm –q <rpmname>

Disk Usage

du –sh /var/log /home

3.5M 		/var/log
500M		/home

du –sh *

File System Usage

df

Process Status

ps ax , process status of all processes for all users and system

Top Process

top , this command display a full screen of top processes.

System Info

procinfo

Full information about Last Boot time, Load Average, average number of jobs running, number of runnable processes, total number of processes, PID of the last process run (idem), Swap info, Memory resources, Number of disks, IRQ info, Installed modules (with the -a or -m option) and File Systems (with the -a or -m option)

Add .htpasswd

/usr/local/apache/bin/htpasswd –c <directory>/.htpasswd <login_name>
Enter password: <your_password_here>
Noted: Add –c if you are creating the .htpasswd file

| more

ls | more
ls | less

Mount CD-ROM

mount /dev/cdrom
cd /mnt/cdrom

Unmount CD-ROM

umount /dev/cdrom

SUID Root

Allows the program to run as root
chmod u+s <filename>

wget

wget –P /usr/src http://www.linux.com/filename.tar.gz

Wget Directory
wget –P <save-to-directory> -r \ ftp://<username>:<password>@host;type=<type>

<type> : a-ASCii I-Binary

Wget File
wget –P <save-to-directory> \ ftp://<username>:<password>@host/filename;type=<type>

<type> : a-ASCii I-Binary

Show Installed Perl Module Path

su <user_other_than_root>
perldoc –l Gnokii::GSM

Set Date and Time

To set the system clock
date MMDDTTTTYY

Eg. date 1203133002
sets the date to Dec 3 2002 and 1.30pm

To set the hardware clock to the current system clock
hwclock –systohc

Show Perl Module Directory

perl –le “print foreach @INC”

Yank Command in VI Editor

Marking a line

Type the letter “m” and any other letter to mark the start of line.
Eg. mt

Capture lines into the buffer

Yanks a single line (defined by current cursor position):
yy

Yanks from current cursor position to the line marked “t”
y’t

Paste yanked lines
p

Create tar File

tar options ‘Preserve attribute’ is enabled by default for root user.
tar –cf <output filename> <target file or directory>

Extract Files from a tar File

tar xf <tar file> <target file>, where target file (eg. tmp/mysql.sql) can be found by listing the content in a tar file using tar tf <tar file>

Email Lock Problem

/var/spool/mail/<username> and remove .<username>.pop

Extract Gunzip file

To extract a file compressed with gunzip, type the following:
gunzip filename_tar.gz

then if you receive no errors, type:
tar xvf filename_tar

Change the time zone at system

timeconfig

Select timezone for the system:
Example:
Asia/Kuala Lumpur
[ ] System clock uses UTC (Universal Coordinated Time)
OK

MySQL Import

mysql -u <<username>> -p<<password>> <<database_name>> <<directory_of_file.sql>>
Example:
mysql -u root -ppassword sample < /tmp/sample.sql

MySQL Export

mysqldump -u <<username>> -p -A > <<directory_of_file.sql>>
Example:
mysqldump -u root -p -A > /tmp/alldb.sql

Cron – Ignore all Stdout message of PHP

0 0 * * * /usr/bin/php /home/dbmst/web/cron/delete.php > /dev/null
Command:
> /dev/null

Cron – Ignore all Stdout and Stderr message of PHP

0 0 * * * /usr/bin/php /home/dbmst/web/cron/delete.php > /dev/null 2>&1
Command:
> /dev/null 2>&1

wc – Count the number of lines or characters

Example: Lists the number of files and directories in the directory ‘etc’
ls /etc | wc -l

Example: Lists the number of lines, words and characters in the file ‘sendmail.cf’
wc /etc/sendmail.cf

wc – Count the number of files in a directory

Example: Lists the number of files in the directory ‘etc’
ls /etc | wc -w

Example: to count the number of files in a directory and print the result in a nice message.
Here is the command (Use the ` symbol to surround commands within commands):
echo “you have `ls | wc -w` files in this directory”

cat – concatenate files

Example: Create a file named myfile and allow you to enter contents.
cat>myfile
Press Control-D to exit entry mode
WARNING: If “myfile” already existed, this command would replace the old file with the contents of the new file.

Server Release Version

cat /etc/redhat-release

CPU Model

grep “model name” /proc/cpuinfo

Ram Size

grep MemTotal /proc/meminfo

Hard Drive Size

fdisk -l

Configure Virtual Server as Zope Server

1. Download current version of Python (2.3.5 or later) from http://www.python.org/download/.

   wget –P /usr/src/ http://www.python.org/ftp/python/version/Python-version.tgz

2. Unpack and install current version of Python (2.3.5 or later). Using the instructions in README.txt.

   tar –zxvf /usr/src/Python-version.tgz

   cd /usr/src/Python-version
   ./configure
   make
   make install

3. Download current version of Zope (2.7.8 or later) from http://www.zope.org/Products.

   wget –P /usr/src/ http://www.zope.org/Products/Zope/version/Zope-version-final.tgz

4. Download current version of Zope (2.7.8 or later). Using the instructions in INSTALL.txt.

   tar –zxvf /usr/src/Zope-version-final.tgz
   cd /usr/src/Zope-version
   ./configure –-prefix=/usr/local/zope
   make
   make install

5. Create a Zope instance home
   /usr/local/zope/bin/mkzopeinstance.py

6. Insert zope instance home
   Directory: /usr/local/zope/home
   Username: <Zope admin>
   Password: <password>
   Verify Password: <password>

7. Open Zope port 8080 in firewall
   vi /etc/sysconfig/iptables
   

   -A RH-Firewall-1-INPUT -m state –state NEW -m tcp -p tcp –dport 8080 -j ACCEPT

   Restart Iptables
   /etc/rc.d/init.d/iptables restart

8. Apache Configuration
   vi /etc/httpd/conf/httpd.conf

   <VirtualHost *:80>
   
           ServerName intranet.otokoyok.ywso.com
   
           ServerAdmin support@1.com.my
           ServerSignature On
   
           <IfModule mod_rewrite.c>
           RewriteEngine On
   
           RewriteRule ^/(.*)
   \http://intranet.otokoyok.ywso.com:8080/VirtualHostBase/http/intranet.ot
   okoyok.ywso.com:80/Weso/VirtualHostRoot/$1 [L,P]
           </IfModule>
   </VirtualHost>
   

9. Add group and user for Zope application server
   groupadd zope
   useradd zope –M –g zope
   chown –R zope.zope /usr/local/zope

10. Update Zope configuration file
    vi /usr/local/zope/home/etc/zope.conf

    Change effective-user to zope
    Eg: effective-user zope

11. Update run level script for Zope server

    cd /etc/init.d
    ln –s /usr/local/zope/home/bin/zopectl zope
    cd /etc/rc.d/rc3.d
    ln –s /etc/rc.d/init.d/zope S99zope
    cd /etc/rc.d/rc5.d
    ln –s /etc/rc.d/init.d/zope S99zope

    Restart server with shutdown –r now

12. Download current version of Plone ( or later) from

    http://www.plone.org/download

    wget –P /usr/src/ <download page URL>

13. Unpack and install current version of Python (2.3.5 or later). Using the instructions in README.txt.

    tar –zxvf /usr/src/Plone-version.tgz
    mv /usr/src/Plone-version/* /usr/local/zope/home/Products/
    Restart Zope via Zope Management Interface(ZMI)
    http://<<your_host_name>>:8080/manage and login with your Zope ID and Password. At the main interface, please go to Control Panel > Restart

14. Add a Plone site from ZMI

    Click Root Folder -> Select type to add Plone Site ->click Add
    Insert Id -> click Add Plone Site
    Restart Zope via ZMI

15. Login to the new Plone site with http://<<your_host_name>>:8080/<<your_plone_site_id>>

Configure Virtual Server as Mailman Server

1. Check if python is installed
   rpm -qa | grep –I python

2. tar –zxvf mailman-version.tgz

3. Add Mailman group and user
   groupadd mailman
   useradd -c “GNU Mailman” -s /sbin/nologin -M -g mailman mailman

4. Create mailman folder in default prefix /usr/local/mailman
   mkdir /usr/local/mailman
   cd /usr/local/mailman/
   chgrp mailman .
   chmod a+rx,g+ws .

5. Install Mailman from /usr/src/mailman-version
   ./configure –with-mail-gid=mail –with-cgi-gid=apache
   make
   make install

6. Check and fix any permission error
   Check file permission, /usr/local/mailman/bin/check_perms
   Fix file permission error, /usr/local/mailman/bin/check_perms –f

7. Add the following line in httpd.conf and restart httpd
   

   <IfModule mod_alias.c>
   ScriptAlias /mailman/ “/usr/local/mailman/cgi-bin/”
   Alias /pipermail/ /usr/local/mailman/archives/public/
   </IfModule>

   NameVirtualHost *:80

   <VirtualHost *:80>

   ServerName mailman.ywso.com

   ServerAdmin support@1.com.my
   DocumentRoot “/home/admin/web”
   ErrorLog /etc/httpd/logs/admin_error_log
   CustomLog /etc/httpd/logs/admin_access_log combined
   …

8. vi /usr/local/mailman/Mailman/mm_cfg.py
   

   IMAGE_LOGOS = 0
   SMTP_MAX_RCPTS = 0

9. Create a symbolic link to Mailman’s wrapper program
   cd /etc/smrsh
   ln -s /usr/local/mailman/mail/mailman mailman

10. Start the Mailman qrunner
    cp scripts/mailman /etc/init.d/mailman
    chkconfig –add mailman
    bin/mailmanctl start

11. Create a site password
    /usr/local/mailman/bin/mmsitepass <your-site-password>

12. Create a list creator password
    /usr/local/mailman/bin/mmsitepass -c <list-creator-password>

13. Setup the following cron tasks from cron/crontab.in
    

    # At 8AM every day, mail reminders to admins as to pending requests.
    # They are less likely to ignore these reminders if they’re mailed
    # early in the morning, but of course, this is local time… ;)
    0 8 * * * /usr/bin/python -S /usr/local/mailman/cron/checkdbs
    #
    # At 9AM, send notifications to disabled members that are due to be
    # reminded to re-enable their accounts.
    0 9 * * * /usr/bin/python -S /usr/local/mailman/cron/disabled
    #
    # Noon, mail digests for lists that do periodic as well as threshhold delivery.
    0 12 * * * /usr/bin/python -S /usr/local/mailman/cron/senddigests
    #
    # 5 AM on the first of each month, mail out password reminders.
    0 5 1 * * /usr/bin/python -S /usr/local/mailman/cron/mailpasswds
    #
    # Every 5 mins, try to gate news to mail. You can comment this one out
    # if you don’t want to allow gating, or don’t have any going on right now,
    # or want to exclusively use a callback strategy instead of polling.
    0,5,10,15,20,25,30,35,40,45,50,55 * * * * /usr/bin/python -S /usr/local/mailman/cron/gate_news
    #
    # At 3:27am every night, regenerate the gzip’d archive file. Only
    # turn this on if the internal archiver is used and
    # GZIP_ARCHIVE_TXT_FILES is false in mm_cfg.py
    27 3 * * * /usr/bin/python -S /usr/local/mailman/cron/nightly_gzip

14. Create the first mailing list mailman as side-wide mailing list.

    If you want the email hostname to be different from the one looked up by the DEFAULT_EMAIL_HOST and DEFAULT_URL_HOST, you can specify them with newlist command in /usr/local/mailman/bin,

    bin/newlist –urlhost=www.mydom.ain –emailhost=mydom.ain mailman

    Eg,
    Website Solution (http://www.1.com.my) would like to setup a mailing list to send out offers to all clients. The mailing list is hosted in a mailman server (mailman.ywso.com).

    Administrator at Website Solution would like to have the From field of all outgoing email to represent their company domain, so we choose mailing.1.com.my. The mailing list info and administration page can be accessible from http://mailing.1.com.my/mailman/…

    1. Create A record for mailing.1.com.my that points to mailman server IP.

    2. Create MX record for mailing.1.com.my, most mail servers do not deliver email to hostname without valid MX record.

    3. Add mailing.1.com.my to /etc/mail/local-host-names if emailhost is different from the hostname of the mailman server.

    4. You will need to update /etc/aliases to include new aliases for all newly created mailing list. Run newaliases to update sendmail aliases database.

    To remove a list, use command bin/rmlist –a <newlist>

    You will want to run the bin/fix_url.py to change the domain of any existing lists.

15. There is a convenient template for a generic site list in the installation directory, under data/sitelist.cfg. We can apply it to the newlist created.
    bin/config_list -i data/sitelist.cfg <newlist>

    Apply these default setting into template:
    

    msg_footer = “”"
    [%(real_name)s site list]
    [%(real_name)s@%(host_name)s]
    [%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s]“”"

    digestable = 0
    advertised = 0
    private_roster = 2
    default_member_moderation = 1
    archive_private = 1

16. Using the mailman:

    Admin Interface

    http://<urlhost>/mailman/admin/<newlist>

    Subscription windows

    http://<urlhost>/mailman/listinfo/<newlist>

    Email to owner of list
    <newlist>-owner@<emailurl>

    Email to subscribe
    <newlist>-subscribe@<emailurl>

17. Backup Mailman

    Backup configuration file of a list
    bin/config_list -o <filename> <listname>

    Backup full member list with email and name
    bin/list_members –f –o <filename> <listname>

    To restore a configuration file
    bin/config_list -i <filename> <listname>

    To restore member list, please paste the content of full member list in the web admin interface.

18. remove all unwanted moderator request. Set crontab
    rm -rf /usr/local/mailman/data/heldmsg*

19. Add relay email address

    vi /etc/mail/local-hosts-names

    Add the related mailing address to new line
    Example: mailing.1.com.my

    Restart sendmail
    /etc/rc.d/init.d/sendmail restart

Configure Virtual Server as File Server

1. In the terminal, type startx to launch the Gnome interface

2. Enable run level 2, 3, 4 and 5 for Samba service using chkconfig.

   chkconfig –level 2 smb on
   chkconfig –level 3 smb on
   chkconfig –level 4 smb on
   chkconfig –level 5 smb on

3. Install samba-swat rpm that allows web-based administration of Samba service. Set swat in xinted to start automatically when server reboot. Access SWAT from http://:901. You need to login at the server with root username and password.

4. Make sure Samba is not blocked by firewall.

5. We setup lmhosts in all Windows machine. This is to eliminate the needs of drive mapping each time working on any web development projects from /home. We configure lmhosts as follow:

   Eg:
   192.168.0.2 fire #PRE
   #INCLUDE \\fire\general\conf\lmhosts\lmhosts

   A centalized copy of lmhosts file is maintained in server Fire.

   Format of lmhosts in Fire:
   192.168.0.2 asiapcb #PRE
   192.168.0.2 admin #PRE
   192.168.0.2 foster #PRE

   Run nbtstat –R after changes to lmhosts file

6. Whenever you save a file as a flat text (ASCII) file from within a Windows or DOS environment, the program that you saved it with adds what is known as a carriage return at the end of every line of the file. A carriage return is a normally hidden code that indicates that the text following it should appear on the next line. Conversely, a text file created within a UNIX environment will not have a carriage return at the end of every line. Depending on the contents of the file, this may or may not pose a problem.

   Many programs in the MS Windows environment have an option to save in “Unix format.” That means they don’t insert the extra carriage returns. In Homesite > Options > Settings > File Settings > Format when saving: UNIX

7. The following script remove all space of a filename or folder and to replace with ‘_’
   

   #!/usr/bin/perl -w
   # nospace /this/dir /that/dir /those/too

   use File::Find;
   use strict;
   die “usage: nospace dir[s]\n” unless @ARGV;

   my %ext;

   find(\&remspaces, @ARGV);

   sub remspaces {
   return if ($_ eq ‘.’);
   return if ($_ eq ‘..’);
   (my $new = $_) =~ tr/a-zA-Z0-9_.-/_/c;
   my $duplicate = ($new ne $_ and -e $new);
   my $try = $new;

   $ext{“$File::Find::dir/$try”}++ if $duplicate;

   while (my $count = $ext{“$File::Find::dir/$new”}++) {
   (my $with_num = $new) =~ s/(?=\.|$)/_$count/;
   $new = $with_num, last if not -e $with_num;
   }

   $ext{“$File::Find::dir/$try”}– if $duplicate;

   rename $_ => $new
   or warn “can’t rename $_ to $new: $!”;
   }

   Save the script as nospace.cgi in /etc. We set a crontab entry as follow:

   30 9 * * * /usr/bin/perl /etc/nospace.cgi /home /file

8. All filename and folder name are automatically adjusted to lowercase by define the setting using Samba SWAT.

9. Edit /etc/inittab and change the line id:5:initdefault: to id:3:initdefault: to boot Linux into Text mode by default, instead of X.

10. Adding a new user on Samba file server.

    1. Add a new user
       useradd <new user> -M –g site

    2. Assign a password to new user
       smbpasswd –a <new user>

    3. Restart Samba service
       /etc/rc.d/init.d/smb restart

Backup

1. We use scp to transfer backup file in each server to a centralized backup server. We need to setup quick login with ssh Client Keys.

   1. Generate a public/private key pair in the centralized backup server
      ssh-keygen –t rsa
      Just hit Enter when asked, this leave the passphrase empty.
      This created two files, ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub.

   2. Copy id_rsa.pub to the server that you wish to use quick login. Create the .ssh folder if needed.
      scp /root/.ssh/id_rsa.pub root@host:/root/.ssh/authorized_keys2

      Note: Copy the contents of id_rsa.pub and paste to “/root/.ssh/authorized_keys2” the server that you wish to quick login, when more than 1 server that would liked to use quick login to the particular server.

   3. In order to allow the server to backup itself, you can copy the content of id_rsa.pub and adding into authorized_keys2.

2. Synchronize backup file within localhost.

   rsync -zvr /file/hd1/* /backup/hd1

Monitoring

1. Nmap has the ability to test out open ports and discover what version of software is running.

   nmap -O -p 1-65535 <host>

Offline Installation

The following steps need to be done for new network environment after offline installation.

1. /etc/resolv.conf, to add in more DNS server

2. /etc/sysconfig/network
   

   NETWORKING=yes
   HOSTNAME=<hostname>

3. /etc/hosts

   127.0.0.1       	localhost.localdomain localhost
   <IP> 		<hostname> <hostname in short>
   
   Eg:
   203.115.228.142 	it-lodge.ywso.com it-lodge
   

4. /etc/sysconfig/network-scripts/ifcfg-eth0

   Remove BROADCAST=192.168.0.255 and NETWORK=192.168.0.0
   

5. /etc/sysconfig/network-scripts/ifcfg-eth1 (if any)

6. /etc/sysconfig/iptables

7. Set correct date on both system clock and hardware clock with the following command:

   Set the system clock
   date MMDDhhmmYY

   To set the hardware clock to the current system clock
   hwclock –systohc

Default Setup

1. Run crontab –e to add the following setting:
   

   MAILTO=root
   0 6 * * 5 /sbin/shutdown -r now
   0 2 1 * * /etc/rc.d/init.d/httpd stop; rm -f /etc/httpd/logs/*; /etc/rc.d/init.d/httpd start

2. Install info.php in /home/admin/web/php-bin
   touch /home/admin/web/php-bin/info.php
   vi /home/admin/web/php-bin/info.php
   

   <? phpinfo(); ?>

3. Install phpMyAdmin in /home/admin/web/php-bin/phpmyadmin
   wget –P /home/admin/web/php-bin http://<latest_phpmyadmin>
   tar –zxvf /home/admin/web/php-bin/phpMyAdmin-latest.tar.gz
   rm /home/admin/web/php-bin/phpMyAdmin-latest.tar.gz
   mv phpMyAdmin-latest phpmyadmin
   vi phpmyadmin/config.inc.php
   

   $cfg['PmaAbsoluteUri'] = ‘http://<hostname>/php-bin/phpmyadmin/’;
   $cfg['Servers'][$i]['auth_type'] = ‘http’;
   $cfg['Servers'][$i]['user'] = ”;

4. Install under construction page in /home/admin
   Please refer to http://it-lodge.ywso.com
   Basically, you need index.html and img/wesostyle.jpg only

5. If you are using phpMyAdmin 2.9.1.1 or later, the config.inc.php configuration is different from the older version, you may want to edit some general command in the file.
   

   $cfg['blowfish_secret'] = ‘cookie‘;
   $cfg['Servers'][$i]['controluser'] = ‘<Leave Blank>‘;
   $cfg['Servers'][$i]['controlpass'] = ‘<Leave Blank>‘;

LogWatch

1. Edit Logwatch configuration file at /etc/log.d/logwatch.conf

   Detail = High

Webalizer

Webalizer is a web server log file analysis program, which produces usage statistics in HTML format for viewing with a browser. The results are presented in both columnar and graphical format, which facilitates interpretation. Yearly, monthly, daily and hourly usage statistics are presented, along with the ability to display usage by site, URL, referrer, user agent, browser and country, user agent and referrer are only available if your web server produces Combined log format files. The person who write this program can be reached with Bradford L. Barrett, brad@mrunix.net.

1. Webalizer RPM is installed by default. Uninstall Webalizer
   rpm –e webalizer

2. Install GeoIP library
   

   1. tar –zxvf /usr/src/GeoIP.tar.gz
   2. cd /usr/src/GeoIP-version
   3. ./configure
   4. make
   5. make install

3. Install and patch Webalizer with geolizer
   

   1. tar –zxvf /usr/src/webalizer-2.01-10-src.tgz
   2. tar –zxvf /usr/src/geolizer_2.01-10-patch.20040216.tar.gz
   3. cd /usr/src
   4. patch –p0 < /usr/src/geolizer_2.01-10-patch/geolizer.patch
   5. rpm –Uvh /usr/src/libpng-devel-1.2.7-1.i386.rpm
   6. rpm –Uvh /usr/src/gd-devel-2.0.28-4.i386.rpm
   7. Add share libraries path /usr/lib to /etc/ld.so.conf
   8. ldconfig
   9. cd /usr/src/webalizer-2.01-10
   10. ./configure –-enable-geoip
   11. make
   12. make install

4. Webalizer configuration file webalizer.conf.sample can be found in /etc

5. Create a folder to host respective webalizer configure file for each virtual hosting, mkdir /etc/webalizer

6. mv /etc/webalizer.conf.sample
   /etc/webalizer/_webalizer.conf

7. vi /etc/webalizer/_webalizer.conf

   TopCountries    	300
   GeoIP           	yes
   GeoIPDatabase   	/usr/local/share/GeoIP/GeoIP.dat
   LogFile         	/etc/httpd/logs/<user>_access_log
   LogType clf
   OutputDir       	/home/<user>/web/stats
   HistoryName     	webalizer.hist
   Incremental     	yes
   IncrementalName webalizer.current
   ReportTitle     	Usage Statistics for
   HostName        	<Hostname>
   PageType        	cgi
   PageType        	php
   PageType        	shtml
   HTMLBody <BODY CLASS="body" BGCOLOR="#E8E8E8" LINK="#0000FF"
   VLINK="#FF0000">
   HTMLBody <STYLE type=text/css>
   HTMLBody BODY.body {font-family: Helvetica, Arial}A:hover {color:
   #4F709F}
   HTMLBody </STYLE>
   Quiet              yes
   FoldSeqErr      yes
   HideURL         *.gif
   HideURL         *.GIF
   HideURL         *.jpg
   HideURL         *.JPG
   HideURL         *.png
   HideURL         *.PNG
   HideURL         *.ra
   SearchEngine    yahoo.com       p=
   SearchEngine    altavista.com   q=
   SearchEngine    google.com      q=
   SearchEngine    eureka.com      q=
   SearchEngine    lycos.com       query=
   SearchEngine    hotbot.com      MT=
   SearchEngine    msn.com         MT=
   SearchEngine    infoseek.com    qt=
   SearchEngine    webcrawler      searchText=
   SearchEngine    excite          search=
   SearchEngine    netscape.com    search=
   SearchEngine    mamma.com       query=
   SearchEngine    alltheweb.com   query=
   SearchEngine    northernlight.com  qr
   
   

8. To update GeoIP.dat in future:
   wget -P /usr/src http://www.maxmind.com/download/geoip/database/GeoIP.dat.gz

   gunzip /usr/src/GeoIP.dat.gz

   mv /usr/src/GeoIP.dat /usr/local/share/GeoIP/GeoIP.dat

9. Run webalizer, webalizer –c /etc/webalizer/<user>_webalizer.conf
   You may want to add shared libraries path for libGeoIp into /etc/ld.so.conf
   By default, libGeoIP library is installed in /usr/local/lib. Run ldconfig after changes.

   Add a crontab entry as follow (runs everyday at 0010am):

   10 0 * * * for i in /etc/webalizer/*.conf; do /usr/local/bin/webalizer -d –c $i; done

CGIWrap

Assume we have main web root directory at /home/admin/web, and we would like to have CGIWrap transparently at the background. The cgi-bin folder is located inside web folder. Please change both the user and group in httpd.conf to apache.

1. tar -zxvf cgiwrap-version.tar.gz

2. ./configure –with-cgi-dir=web/cgi-bin –with-httpd-user=apache –with-install-dir=/home/<user>/web/cgi-bin

3. make

4. make install

5. Update the httpd.conf file with
   

   ScriptAlias /cgi-bin/ “/home/admin/web/cgi-bin/”

   RewriteEngine On
   RewriteMap lowercase int:tolower
   RewriteRule ^/cgi-bin/(.*) /cgi-bin/cgiwrap/admin/$1 [PT]

   <Directory “/home/admin/web/cgi-bin”>
   …

6. Sample of error message for CGIWrap:

   

PHP

1. PHP is a server-side, cross platform, HTML embedded scripting language. Learn more of PHP from http://www.php.net

2. You need php-mysql package to connect to a MySQL database. Download and install php-mysql-version.rpm. It is better to install a version of php-mysql that match with your native php and mysql that shipped together with your current Linux software.

3. Update /etc/php.ini
   

   error_reporting = E_ALL & ~E_NOTICE
   display_errors = On
   register_globals = On
   memory_limit = 12M
   magic_quotes_gpc = Off

4. To support GD, please install php-gd-version.rpm

5. Install mbstring module, download php-mbstring-version.rpm and install. Restart Apache after installation.

6. To support Zend Optimizer, please download from Zend Optimizer website and install. After successful installation, you will see the following line in the php.ini.

   This program makes use of the Zend Scripting Language Engine:
   Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies with Zend Extension Manager v1.0.8, Copyright (c) 2003-2005, by Zend Technologies with Zend Optimizer v2.5.10, Copyright (c) 1998-2005, by Zend Technologies

7. Restart Apache
   /etc/rc.d/init.d/httpd restart

MySQL Database Server

MySQL database server (http://www.mysql.com) is the world’s most popular open source database. With more than five million active installations, MySQL has quickly become the core of many high-volume, business-critical applications. MySQL has the capabilities to handle most corporate database application requirements with an architecture that is extremely fast and easy to use.

1. rpm -qa | grep -i mysql, shows all package with name ‘mysql’ installed. By default, mysql-server is not installed.

2. Download and install mysql-server, rpm –Uvh /usr/src/mysql-server-version.rpm

3. Start mysqld, /etc/rc.d/init.d/mysqld restart

4. By default, MySQL is not configured to start everytime the server reboot. To enable this, use chkconfig to configure the run level of this service.

   chkconfig –level 2 mysqld on
   chkconfig –level 3 mysqld on
   chkconfig –level 4 mysqld on
   chkconfig –level 5 mysqld on

5. Set the MySQL root user password
   

   shell> mysql –u root

   mysql> use mysql;

   mysql> update user set password=password(‘Your_password_here’) where user=‘root’;

   mysql> flush privileges;

   You can also change MySQL root password with,
   /usr/bin/mysqladmin -u root password ‘new-password’

6. Login as root (Noted, this root user is not Unix root user) with,
   /usr/local/mysql/bin/mysql –u root -p <enter>
   Password: <Your_password_here>

7. Open port 3306 if MySQl is blocked by the firewall.

Apache HTTP Server

The Apache HTTP Server Project (http://httpd.apache.org) is an effort to develop and maintain an open-source HTTP server for modern operating systems including UNIX and Windows NT. The goal of this project is to provide a secure, efficient and extensible server that provides HTTP services in sync with the current HTTP standards.

Apache has been the most popular web server on the Internet since April of 1996. The October 2003 Netcraft Web Server Survey found that more than 64% of the web sites on the Internet are using Apache, thus making it more widely used than all other web servers combined.

1. By default, Apache is not configured to start everytime the server reboot. To enable this, use chkconfig to configure the run level of this service.

   chkconfig –level 2 httpd on
   chkconfig –level 3 httpd on
   chkconfig –level 4 httpd on
   chkconfig –level 5 httpd on

2. Start Apache, /etc/rc.d/init.d/httpd start

3. SSL support is enabled by default. You can access the website with https:// or http://:443

4. Modify Apache configuration file /etc/httpd/conf/httpd.conf. Config file for SSL, PHP, Perl, Webalizer and default Apache welcome page can be found in /etc/httpd/conf.d.

5. Turn off default Apache welcome page by comment out all directives in /etc/httpd/conf.d/welcome.conf

6. Increase the value of LimitRequestBody to 9999999 (10MB) in /etc/httpd/conf.d/php.conf
   LimitRequestBody 9999999

Sendmail

1. The sendmail program is installed by default. Type rpm -q sendmail to view sendmail version number.

2. By default, the date for /etc/mail/*.db is not correct and therefore you need to re-make the *.db file before you can start sendmail properly.

   makemap hash /etc/mail/access < /etc/mail/access

   makemap hash /etc/mail/virtusertable < /etc/mail/virtusertable

   makemap hash /etc/mail/domaintable < /etc/mail/domaintable

   makemap hash /etc/mail/mailertable < /etc/mail/mailertable

3. sendmail.mc is a macro config file used to generate the sendmail.cf. You will have to regenerate the sendmail.cf by running this macro config through the m4 preprocessor. By default, sendmail does not accept email over the network except localhost. Comment out the line in sendmail.mc

   DAEMON_OPTIONS(‘Port=smtp,Addr=127.0.0.1, Name=MTA’)

   to

   dnl DAEMON_OPTIONS(‘Port=smtp,Addr=127.0.0.1, Name=MTA’)

4. Create the /etc/sendmail.cf file from /etc/mail/sendmail.mc after the modification. Make sure that sendmail-cf.version.rpm is installed before you can run the M4 preprocessor.

   m4 /etc/mail/sendmail.mc > /etc/sendmail.cf

5. Restart sendmail.

Mail Aliases

1. Mail alias is a powerful features that enable mail to be directed to mailboxes that are alternate names for users or processes on a destination host. For example, it is common practice to have feedback or comments relating to a World Wide Web server to be directed to “webmaster.” Often there isn’t a user known as “webmaster” on the target machine, instead it is an alias of another system user. Another common use of mail aliases is exploited by mailing list server programs in which an alias directs incoming messages to the list server program for handling.

   The /etc/aliases file is where the aliases are stored. The sendmail program consults this file when determining how to handle an incoming mail message. If it finds an entry in this file matching the target user in the mail message, it redirects the message to wherever the entry describes.

   Specifically there are three things that aliases allow to happen:

   1. They provide a shorthand or well-known name for mail to be addressed to in order to go to one or more persons.

   2. They can invoke a program with the mail message as the input to the program.

   3. They can send mail to a file.

2. Demonstrate the common types of aliases

   usenet:     daph     # alias for a person
   admin:     daph,lee,     # alias for several people
   news:     :include:/home/news     # read recipients from file
   changefeed:     |/usr/local/lib/gup     # to invokes program
   complaints:     /var/log/complaints     # alias writes mail to file

3. After modify the /etc/aliases, update the aliases file with:

   newaliases

Accepting Mail from Other Domains

1. If we wish to configure virtual email hosting, the first thing we need to do is to convince sendmail that it should also accept mail for the domains that we are hosting.

2. To stick with the default filename, if we wished to offer virtual hosting to the domain1.com.my and domain2.com, we would create a /etc/mail/local-host-names that looks like:

   domain1.com.my
   domain2.com

3. When this is done, and assuming appropriate DNS records exist that point those domain names to our host, sendmail will accept mail messages for those domains as though they were destined for our real domain name.

4. In your zone files of those new domain names, you should use real domain name’s MX mail server. Make a MX record like mail.domain1.com.my to domain1.com.my. Also, remember to make a A record for this mail.domain1.com.my to point to an IP address. Without this, sendmail (v8.9.x) will not deliver mail to the virtual domain.

Forwarding Virtual-hosted Mail

1. Add forwarding terms in /etc/mail/virtusertable

2. Possible entries in virtusertable with virtual hosting of domain1.com.my and domain2.com domains in local-host-names:

   1. User admin in virtual mail domain1.com.my to local user daph
      admin@domain1.com.my        daph

   2. User daph in virtual domains domain1.com.my to another domains:
      daph@domain1.com.my  daph@otherdomain.com

   3. Any mail to domain2.com are forwarded to daph@otherdomain.com
      @domain2.com      daph@otherdomain.com

   4. Any mail to domain2.com are forwarded to the same user in another domains otherdomain.com
      @domain2.com      $1@otherdomain.com

3. Create the virtusertable database map with:

   makemap hash /etc/mail/virtusertable < /etc/mail/virtusertable

4. In addition to the mail forwarding provided by aliases, sendmail allows individual users to define their own forwarding. The user defines her personal forwarding in the .forward file in her home directory. sendmail checks for this file after using the aliases file and before making final delivery to the user. If the .forward file exists, sendmail delivers the mail as directed by that file.

Sendmail Configuration Script

1. Alternatively, you can configure your sendmail with this sendmail-install.5.5 script.

2. tar -zxvf sendmail-install-5.5.tar.gz

3. ./install-sendmail –c

4. Follow the onscreen step by step wizard to configure your sendmail aliases, virtual user table, outgoing mail server, incoming mail server, sendmail for local network, server queue time and others.