SysAdminGear

eAccelerator description:
"eAccelerator is a free open-source PHP accelerator, optimizer, and dynamic content cache. It increases the performance of PHP scripts by caching them in their compiled state, so that the overhead of compiling is almost completely eliminated. It also optimizes scripts to speed up their execution. eAccelerator typically reduces server load and increases the speed of your PHP code by 1-10 times." (Font: eAccelerator )

eAccelerator auto installer should work perfectly on any cPanel server, there are lots of sanity checks built in to prevent any possible issue or destruction.

Download and run eAccelerator autoinstaller:
# wget http://tutorials.medialayer.com/cPanel/eaccelerator.sh
# chmod 700 eaccelerator.sh
# ./eaccelerator.sh

Note: The php.ini gets backed up before it is modified, you can get it back..

Description:
When you run this Perl script, it will then run an netstat command check how many times each IP is connected and if there are more then the number of connections you specified then it will automatically run a command in APF for the IP to be banned.

Installing:
wget http://www.inetbase.com/scripts/ddos/install.sh
chmod 0700 install.sh
./install.sh

Uninstalling:
wget http://www.inetbase.com/scripts/ddos/uninstall.ddos
chmod 0700 uninstall.ddos
./uninstall.ddos

Also read: How TO install APF Firewall

These are some useful Exim commands

--------> REMOVE MAILS BY ID -------->
# /usr/sbin/exim -v -Mrm (MAIL ID HERE)

--------> LIST QUEDED MAILS -------->
# /usr/sbin/exim -bp

--------> OUTPUT NUMBER OF QUEDED MAILS -------->
# /usr/sbin/exim -bpc

--------> DELETE FROZEN MAILS -------->
# /usr/sbin/exim -bp | awk '$6~"frozen" { print $3 }' | xargs exim -Mrm

--------> DELIVER FORCEFULLY EMAILS -------->
# /usr/sbin/exim -qff -v -C /etc/exim.conf &

--------> FREEZE MAILS FROM SENDER -------->
# /usr/sbin/exiqgrep -i -f (MAIL ADDRESS HERE) | xargs exim -Mf

--------> REMOVE MAILS FROM SENDER -------->
# /usr/sbin/exiqgrep -i -f (MAIL ADDRESS HERE) | xargs exim -Mrm

If you need IonCube loader in order to encode scripts. You will need to install IonCube loadar on your box.

Login to your server as root and download the loaderfor your server: http://www.ioncube.com/loader_download.php
# tar -zxvf ioncube_loaders.tar.gz
# cd ioncube

Copy ioncube-install-assistant.php file to a www diretory
# cp ioncube-install-assistant.php /home/username_here/www

Go to: http://www.somedomain.com/ioncube-install-assistant.php

You sould see something like this:

PHP Version 4.3.3
Operating System Linux
Threaded PHP No
php.ini file /usr/local/lib/php.ini
Required Loader ioncube_loader_lin_4.3.so

Change to the folder where you extracted the ioncube
# mv ioncube /usr/local

Edit php.ini file:
# nano /usr/local/lib/php.ini
under [zend] put this line:

zend_extension = /usr/local/ioncube/ioncube_loader_lin_4.3.so

Save and Exit

Restart the server by typing:
# /etc/init.d/httpd restart

It should be fine!

Login to WHM on your server as root:

https://SERVERIP:2087

Under Domains
Prevent users from parking/adding on common internet domains. (ie hotmail.com, aol.com)

On "Server Setup" --------> "Tweak Settings"
- Check the following items...

On "Mail" section:
- Attempt to prevent pop3 connection floods
Default catch-all/default address behavior for new accounts - blackhole
(according to ELIX - set this to FAIL, which is what I am going to do to reduce server load)

"System" section:
Use jailshell as the default shell for all new accounts and modified accounts

On "Server Setup" --------> "Tweak Security"
- Enable php open_basedir Protection
- Enable mod_userdir Protection
- Disabled Compilers for unprivileged users.

"Server Setup" --------> "Manage Wheel Group Users"
- Remove all users except for root and your main account from the wheel group.

"Server Setup" --------> "Shell Fork Bomb Protection"
- Enable Shell Fork Bomb/Memory Protection

"Resellers" --------> "Reseller Center"
Privileges should be always disabled. Allow Creation of Packages with Shell Access and enable Never allow creation of accounts with shell access; under Root Access disable All Features.

"Service Configuration" --------> "FTP Configuration"
- Disable Anonymous FTP

"Account Functions" --------> "Manage Shell Access"
- Disable Shell Access for all users (except yourself)

"Mysql" section --------> "MySQL Root Password"
- Change root password for MySQL

A funny song that sings the praises of System Administrators. Written by Wes Borg of Three Dead Trolls in a Baggie.

Funny :)

"In computing, Subversion (SVN) is a version control system (VCS) (...). It allows users to keep track of changes made to any type of electronic data, typically source code, web pages or design documents." (Source: Wikipedia)

Here is a good Tutorial for SVN:
SVN Tutorial

What is Wammu?

Wammu is mobile phone manager running on Linux, Windows and possibly other platforms. The communication is made by Gammu library.

Wammu Features:
- complete support (can read/edit/delete/copy) for contacts, todo, calendar
- can read/create/save/send/backup smses
- sending files to phone (OBEX and Sony Ericsson phones only)
- sms composer for multi part smses (currently only text and predefined bitmap/sound can be edited)
- display message including pictures and ringtones playback
- support for backup and import in various formats (vCard, vCalendar, vTodo, iCalendar, gammu own backup,...)
- export messages to mail (IMAP4, maildir and mailbox storages are supported)
- searching for phone
- translated into several languages
- rated as best on many software servers

Download Wammu

Wammu Screen Shots:

Wuammu phones supported:

Nokia DCT3 (3210, 3310, 3330, 3390, 3410, 5110, 5110i, 5130, 5190, 5210, 5510, 6110, 6130, 6150, 6190, 8210, 8250, 8290, 8850, 8855, 8890 6210, 6250, 7110, 9110) and compatible
DCT4 (3510, 3510i, 3530, 5100, 6100, 6310, 6310i, 6510, 6610, 7210, 8310, 8910) and compatible

Siemens M20, MC35, SL45

Alcatel One Touch 501, 701, 715, 535, 735

Sony Ericsson phones

Hi folks, today i have nothing to share with you..

I just would like to tell you that "Chocli" is the best dog i know :)

1. Find your yum.conf file:
# find yum.conf

2. Verify your yum.conf file:
# nano /etc/yum.conf
"Exclude" line should be something like this:
exclude=courier* apache* mod_ssl* httpd* perl mysql* php* spamassassin* exim*
Note:kernel* should not be excluded on "exclude" line

3. Upgrade kernel using:
- If you have 1 proc:
# yum upgrade kernel
- For dual proc use:
# yum upgrade kernel-smp

When upgrade is complete,
Set "default" to 0 in /etc/grub.conf
Rebbot your server:

Rebbot your server:
# shutdown -r now

Related Posts:
How to install YUM on centOS

Change to the path where you have your video files:
cd /path/where/is/the/video

Run ffmpeg command with -i for input and output.avi is the output file in avi or mpg:
# ffmpeg -i input.flv output.avi

Check for FFmpeg documentation

What is FFmpeg?
"FFmpeg is a collection of software libraries that can record, convert and stream digital audio and video in numerous formats. It includes libavcodec, an audio/video codec library used by several other projects, and libavformat, an audio/video container mux and demux library."

Login to your server as root and you can use this command to turn on bind query logs:
# rndc querylog

To check if querylog is now On you can use this command:
# rndc status

You can list the packages that are installed on a RedHat or CentOS system, running one of this commands:

# rpm -aq
# yum list installed

You should remove packages you dont use for security reasons..

Windows XP SP3 pre-release comes with the "Windows vista SP1 update hack" again. So this should improve stability and OS preformance but you have to considere the hack..

You can Download Windows XP SP3 hack. After that, extract, execute the file and update your Windows XP, is should run fine now.

Funny :)

Office Platoon



Punish Your Microsoft Developer: Share the pain. THE PAIN! PAIN!!!!!!


The First Recorder IT Professional Seen at Work

You can check this on: /proc/PID/cwd directory or you can use pwdx command to report the current working directory of a process or processes.

Using pwdx:
# pwdx 1234

Output:
1234: /folder/

Usign /proc/PID/cwd:
# nano /proc/1234/cwd

This is a good way to check if someone is running processes on hiden folders.




SSHMenu Features:
- Allows to add key so that you can run rest of the all session without a problem and password.
- Every connection will use the terminal profile you’ve selected, to set the color scheme, terminal font and other settings.
- Open all connection at a time

What is SSHMenu?
"SSHMenu is a GNOME panel applet* that keeps all your regular SSH connections within a single mouse click (...) Each menu option will open an SSH session in a new terminal window. You can organise groups of hosts with separator bars or sub-menus. You can even open all the connections on a submenu (in separate windows or tabs) with one click.
Here's a killer feature: imagine if every time you connected to a production server the terminal window had a red-tinted background, to remind you to tread carefully. Using terminal profiles, SSHMenu allows you to specify colours, fonts, transparency and a variety of other settings on a per-connection basis. You can even set window size and position."
Via: SSHMENU

Download SSHMenu

This programs will search-and-destroy the rootkits that may be hiding in your Windows PC/Server. Check this list of free Rootkit Detectors for Windows:

Rootkit Unhooker
Web: www.rku.xell.ru/?l=e.mspx
Price: Free
Summary: Summary: A Russian-authored tool that's the most comprehensive and powerful of those tested here.

F-Secure BlackLight
Web: www.f-secure.com
Price: Free
Summary: A time-limited program that may soon be discontinued and folded into F-Secure Internet Security 2006, BlackLight nonetheless scans carefully and attempts to clean offending files from the system.

IceSword
Web: www.blogcn.com/user17/pjf/index.html
Price: Free
Summary: Summary: A bit difficult to find due to its authorship, but a remarkably thorough and continually updated tool with some excellent pro-level features.

RKDetector
Web: www.rkdetector.com
Price: Free
Summary: Composed of two separate applications that scan the file system and running processes, respectively, RKDetector suffers from not having the flexibility and breadth of features of the other programs here.

Trend Micro RootkitBuster
Web: www.trendmicro.com
Price: Free
Summary: A spin-off / standalone version of the rootkit scanning technology from one of Trend Micro's commercial programs, which actually works quite well on its own.

RootkitRevealer
Web: www.microsoft.com/technet/sysinternals/utilities/RootkitRevealer.mspx
Price: Free
Summary: Summary: One of the first rootkit detectors, it's now overshadowed a bit by some of the other programs here but can still do some decent work.

Font

Intalling CSF:
# wget http://www.configserver.com/free/csf.tgz
# tar zxf csf.tgz
# cd csf
# sh install.sh
Note: If you are running APF you should disable it. You can do it with this script (inclued on csf.tgz):
# sh disable_apf_bfd.sh

You can modify config option directly on WHM or if you prefer edit /etc/csf/:
# nano /etc/csf

CSF includes:

• Straight-forward SPI iptables firewall script
• Daemon process that checks for login authentication failures for:
  • courier imap and pop3
  • ssh
  • non-ssl cpanel / whm / webmail (cPanel servers only)
  • pure-pftd
  • password protected web pages (htpasswd)
  • mod_security failures
• POP3/IMAP login tracking to enforce logins per hour
• SSH login notification
• SU login notification
• Excessive connection blocking
• WHM configuration interface (cPanel servers only) or through Webmin
• WHM iptables report log (cPanel servers only)
• Easy upgrade between versions from within WHM (cPanel servers only) or through Webmin
• Easy upgrade between versions from shell
• A standard Webmin Module to configure csf is included in the distribution ready to install into Webmin - csfwebmin.tgz
• Pre-configured to work on a cPanel server with all the standard cPanel ports open (cPanel servers only)
• Auto-configures the SSH port if it's non-standard on installation
• Block traffic on unused server IP addresses - helps reduce the risk to your server
• Alert when end-user scripts sending excessive emails per hour - for identifying spamming scripts
• Suspicious process reporting - reports potential exploits running on the server
• Excessive user processes reporting
• Excessive user process usage reporting and optional termination
• Suspicious file reporting - reports potential exploit files in /tmp and similar directories
• Directory and file watching - reports if a watched directory or a file changes
• Block traffic on the DShield Block List and the Spamhaus DROP List
• Pre-configured settings for Low, Medium or High firewall security (cPanel servers only)
• Works with multiple ethernet devices
• Server Security Check - Performs a basic security and settings check on the server (cPanel servers only)
• Allow Dynamic DNS IP addresses - always allow your IP address even if it changes whenever you connect to the internet
• Alert sent if server load average remains high for a specified length of time
• mod_security log reporting (if installed)
• Email relay tracking - tracks all email sent through the server and issues alerts for excessive usage (cPanel servers only)
• IDS (Intrusion Detection System) - the last line of detection alerts you to changes to system and application binaries

Supported and Tested Operating Systems
- RedHat v7.3, v8.0, v9.0
- openSUSE v10
- RedHat Enterprise v3, v4, v5 Debian v3.1 (sarge)
- CentOS v3, v4, v5 Unbuntu v6.06 LTS
- Fedora Core v1, v2, v3, v4, v5, v6
- Tested on cPanel (except FCv6)