03 October 2013

transparent proxy

squid dan iptable(REDIRECT(same host) atau DNAT(different ip))



squid config
http_port 3128 transparent
http_port 80 vhost
ref http://www.cyberciti.biz/tips/linux-setup-transparent-proxy-squid-howto.html




IPTABLES
  /sbin/iptables -t nat -A PREROUTING  -p tcp --dport 80 -j DNAT --to $squid_server:$squid_port

  # nat perlu jika gw dan squid berlainan host.
  /sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

*maklumat tambahan*
DNAT akan tukar dst ip dari gw ke squid, tapi src ip tetap dari client(browser). 
Jadi masalah, kerana bila squid reply sync ack, alamat packet adalah kepada client. 
Client tak tahu menahu, so tcp handshake tak berjaya.

vSphere, ESXi, vCenter

vSphere adalah suite(kombinasi pelbagai software). Macam Microsoft Suite, yg dalamnya ada word, excel, powerpoint etc.

ESX adalah server utk virtualization, boleh store vmImage

vSphere Client adalah console utk connect dan control ESX

vCenter server is similar to vSphere client but it’s a server with more power.
(contohnya nak cloning image)


ref:

02 October 2013

vpn with .ovpn file

sudo openvpn --config vpn-config.ovpn 




converting .p12 -> seperate cert

Ok, it seems that we have to update network-manager-openvpn package to the latest version so it can understand p12 files. But there is a fairly simple way to generate the 3 .pem files needed at the old version using the original .p12 file:

openssl pkcs12 -nocerts -in file.p12 -out priv_key.pem

openssl pkcs12 -nokeys -clcerts -in file.p12 -out user_cert.pem

openssl pkcs12 -nokeys -cacerts -in file.p12 -out ca_cert.pem


Then use these 3 files at the OpenVPN configuration, mine is working fine now. I do not know if openssl is installed by default at Lucid, but it is in the repositories.

otrs erd

12 September 2013

truecrypt

http://ubuntuhandbook.org/index.php/2013/08/install-truecrypt-with-indicator-ubuntu-1304/

INSTALL
1) sudo add-apt-repository ppa:stefansundin/truecrypt
2) sudo apt-get update; sudo apt-get install truecrypt




REMOVE
sudo apt-get remove truecrypt 
sudo apt-add-repository --remove ppa:stefansundin/truecrypt 
sudo apt-get update

ubuntu hidden menu @applet

windows+alt + mouse right click

in case nak tambah/remove applet

29 August 2013

linux jadi wifi

http://dashohoxha.blogspot.com/2013/06/how-to-setup-wifi-access-point-on-ubuntu.html

test hostapd:
# hostapd -dd /etc/hostapd/hostapd.conf

above more better than below

http://blog.peacon.co.uk/ubuntu-13-04-server-wireless-access-point-hostapd-howto/