The post Updating Droplet from Ubuntu 14.04 to 16.04 with ispconfig installed on it appeared first on DemonPenguins Brain.

/usr/local/ispconfig/interface/web/sites/form/web_domain.tform.php

find and replace

'default' => 'webalizer',

with

'default' => 'awstats',

do the same with

'default' => 'fast-cgi',

to

'default' => 'php-fpm',

The post ISP-Config 3 default settings appeared first on DemonPenguins Brain.

apt-get install build-essential
apt-get build-dep mysql-server

cd /tmp
dpkg --list | grep mysql-server

ii  mysql-server                        5.5.43-0ubuntu0.14.04.1             all          MySQL database server (metapackage depending on the latest version)
ii  mysql-server-5.5                    5.5.43-0ubuntu0.14.04.1             amd64        MySQL database server binaries and system database setup
ii  mysql-server-core-5.5               5.5.43-0ubuntu0.14.04.1             amd64        MySQL database server binaries

wget 'http://mysql.mirrors.hoobly.com/Downloads/MySQL-5.5/mysql-5.5.43.tar.gz'

wget 'http://sphinxsearch.com/files/sphinx-2.2.9-release.tar.gz'

tar xvfz mysql-5.5.43.tar.gz 
tar xvfz sphinx-2.2.9-release.tar.gz

cp -R sphinx-2.2.9-release/mysqlse/ mysql-5.5.43/storage/sphinx

cd mysql-5.5.43
./BUILD/autorun.sh
./configure
make

cp storage/sphinx/ha_sphinx.* /usr/lib/mysql/plugin/

mysql -uroot -p mysql
mysql> INSTALL PLUGIN sphinx SONAME 'ha_sphinx.so';
mysql> show engines;
+--------------------+---------+----------------------------------------------------------------+--------------+------+------------+
| Engine             | Support | Comment                                                        | Transactions | XA   | Savepoints |
+--------------------+---------+----------------------------------------------------------------+--------------+------+------------+
| PERFORMANCE_SCHEMA | YES     | Performance Schema                                             | NO           | NO   | NO         |
| MRG_MYISAM         | YES     | Collection of identical MyISAM tables                          | NO           | NO   | NO         |
| MEMORY             | YES     | Hash based, stored in memory, useful for temporary tables      | NO           | NO   | NO         |
| BLACKHOLE          | YES     | /dev/null storage engine (anything you write to it disappears) | NO           | NO   | NO         |
| MyISAM             | YES     | MyISAM storage engine                                          | NO           | NO   | NO         |
| SPHINX             | YES     | Sphinx storage engine 2.2.9-release                            | NO           | NO   | NO         |
| CSV                | YES     | CSV storage engine                                             | NO           | NO   | NO         |
| ARCHIVE            | YES     | Archive storage engine                                         | NO           | NO   | NO         |
| FEDERATED          | NO      | Federated MySQL storage engine                                 | NULL         | NULL | NULL       |
| InnoDB             | DEFAULT | Supports transactions, row-level locking, and foreign keys     | YES          | YES  | YES        |
+--------------------+---------+----------------------------------------------------------------+--------------+------+------------+
10 rows in set (0.00 sec)

 mysql> UNINSTALL PLUGIN sphinx; 

The post Adding SphinxSE to MySQL on ubuntu server appeared first on DemonPenguins Brain.

Install vmware tools

Reboot

Setup networking

Setup fqdn in host file

• My Computer -> C Drive -> windows -> system32 -> drivers -> etc -> hosts
• add line with ip address and short and long host names

Change network from public to private:

• Server Manager -> Tools -> Local Security Policy
• Network List Manager Policies
• Open The Network you are using (Network 2 in this case)
• Give it a Name
• select the network location tab and set location type to private

Turn on Remote Desktop

• Server Manager -> Local Server
• Click Disabled next to Remote Desktop
• select Allow remote connections to this computer

Reboot

On Remina client

• Add a new connection
• enter the normal details with RDP as protocol
• select advanced tab
• make sure security is set to negotiate
• if there was a previous server on that ip address you may need to remove the keys in ~/.freerdp/known_hosts

Probably a good time to turn on the automatic updates

you’ll need to add .NET Framework 3.5 Features

• Server Manager -> Local Server -> Manage -> Add Roles and Features
• Follow through the wizard then select Features and scroll to .NET Framework 3.5 Features
• apply

add active directory lightweight services

Install extra components for flash to work

• Server Manager -> Local Server -> Manage -> Add Roles and Features
• Follow through wizard then select features
• expand User Interfaces and Infrastructure
• check Desktop Experience

Install Ms SQL Server

http://vknowledge.net/2012/08/22/how-to-setup-ms-sql-2008-r2-for-vmware-vcenter/ as a guide

Install vsphere 5.5

• Autorun the CD
• Select Simple install

Not complete I know…but I thought I’d get it out

The post Building a vsphere system on windows server 2012 appeared first on DemonPenguins Brain.

To start off we have to log failed connection attempts and this is done without using the general log and by adding:

log_warnings = 2

to the my.cnf file which on an ubuntu server is in /etc/mysql. You will also need to make sure that the error log is enabled. I have changed mine to be:

log_error = /var/log/mysql/error.log

in the same file.

Now we need to look at a failed login to see what is logged. Here is an example:

140501 11:18:05 [Warning] Access denied for user 'root'@'xxx.xxx.xxx.xxx' (using password: YES)

Now that we have a format we can start writing our Fail2ban filter.

# Fail2Ban configuration file
#
# Author: Andy Lear
#
# $Revision$
#

[Definition]

# Option: failregex
# Notes.: regex to match the password failures messages in the logfile. The
#          host must be matched by a group named "host". The tag "" can
#          be used for standard IP/hostname matching and is only an alias for
#          (?:::f{4,6}:)?(?P[\w\-.^_]+)
# Values: TEXT
#
failregex = Access denied for user .*@''.*$ 

# Option:  ignoreregex
# Notes.:  regex to ignore. If this regex matches, the line is ignored.
# Values:  TEXT
#
ignoreregex = 

and save it to:

/etc/fail2ban/filter.d/mysql.conf

Now we need to add to the jail.local in /etc/fail2ban to activate the filter:

[mysql]
enabled  = true
port     = 3306
filter   = mysql
logpath  = /var/log/mysql/error.log
maxretry = 3

When we restart fail2ban and look at the debug log we’ll see something like this:

2014-05-01 11:04:59,522 fail2ban.filter : DEBUG  Found a match for '140501 11:04:59 [Warning] Access denied for user 'root'@'xxx.xxx.xxx.xxx' (using password: YES)
' but no valid date/time found for '140501 11:04:59 [Warning] Access denied for user 'root'@'xxx.xxx.xxx.xxx' (using password: YES)
'. Please contact the author in order to get support for this format

So doing a little digging I found that the date/time format is parsed in:

/usr/share/fail2ban/server/datedetector.py

A touch more googling and I was able to add a new template to that file. you will see near the top that a class DateDetector is created.  Scroll down the file until you get to finally:  and insert the following before it.

# MySQL date detector
template = DateStrptime()
template.setName("YearMonthDay Hour:Minute:Second")
template.setRegex("\d{2}\d{2}\d{2} {1,2}\d{1,2}:\d{2}:\d{2}")
template.setPattern("{0485a2dee41ac5bc19be369b86ade435390b5d2f09c107e6e6935a4e65879846}y{0485a2dee41ac5bc19be369b86ade435390b5d2f09c107e6e6935a4e65879846}m{0485a2dee41ac5bc19be369b86ade435390b5d2f09c107e6e6935a4e65879846}d {0485a2dee41ac5bc19be369b86ade435390b5d2f09c107e6e6935a4e65879846}H:{0485a2dee41ac5bc19be369b86ade435390b5d2f09c107e6e6935a4e65879846}M:{0485a2dee41ac5bc19be369b86ade435390b5d2f09c107e6e6935a4e65879846}S")
self.__templates.append(template)

At this point we can restart Fail2Ban again and now you should see that the log file is picking up everything as we want it to:

2014-05-01 11:53:24,728 fail2ban.filter : DEBUG  Got event: 1 for /var/log/mysql/error.log
2014-05-01 11:53:24,728 fail2ban.filter : DEBUG  File changed: /var/log/mysql/error.log
2014-05-01 11:53:24,777 fail2ban.filter : DEBUG  Processing line with time:1398941602.0 and ip:xxx.xxx.xxx.xxx
2014-05-01 11:53:24,777 fail2ban.filter : DEBUG  Found xxx.xxx.xxx.xxx
2014-05-01 11:53:24,777 fail2ban.filter : DEBUG  Currently have failures from 1 IPs: ['xxx.xxx.xxx.xxx']

After a few more attempts we then get:

2014-05-01 11:54:44,770 fail2ban.actions: WARNING [mysql] Ban xxx.xxx.xxx.xxx
2014-05-01 11:54:44,778 fail2ban.actions.action: DEBUG  iptables -I fail2ban-mysql 1 -s xxx.xxx.xxx.xxx -j DROP
2014-05-01 11:54:44,783 fail2ban.actions.action: DEBUG  iptables -I fail2ban-mysql 1 -s xxx.xxx.xxx.xxx -j DROP returned successfully
2014-05-01 11:54:44,786 fail2ban.actions.action: DEBUG  printf {0485a2dee41ac5bc19be369b86ade435390b5d2f09c107e6e6935a4e65879846}b "Subject: [Fail2Ban] mysql: banned xxx.xxx.xxx.xxx
The IP xxx.xxx.xxx.xxx has just been banned by Fail2Ban after

There we go Fail2Ban blocking failed logins to MySQL!

The post Fail2Ban monitoring MySQL appeared first on DemonPenguins Brain.

I was hunting around the web the other day – as I do on occasion 🙂 – when I came across this thread.

“A-ha!” I thinks to me-self! So the TeraStation Pro is essentially the same hardware with different software on it! Not only that the Pro has nfs on it properly!

I duly went and downloaded the latest pro version of the firmware, unzipped it and edited the ini file to:

[Application]
Title = BUFFALO TS-HTGL Updater Ver.1.33
WaitReboot = 360
WaitFormat = 300
[Target]
ProductID = 0x00002006
Name = HS-DHTGL

[Flags]
VersionCheck = 0

[SpecialFlags]
Debug=1

Now run the firmware update! (Note to self, do not have any web sessions open, or be logged in via ssh or telnet whilst doing this or it will be slow and will fail!) This worked a charm, had to turn the machine back on a couple of times as the firmware updated. I logged back into the web front end and went about setting up the nfs options, then mounted them on one of the linux boxes. Have a poke around – yup all my files are visible, but hang-on a sec, what’s this? The file owners were all over the place, not what I was expecting.

OK

chown blah:blah *

Permission denied! Damn! Time to crack the box again!

java -jar acp_commander.jar -t 192.168.0.100 -o

followed by a telnet into the box. Have a look at

/etc/exports

and see that the options on the shares are:

rw,sync,all_squash,anonuid=99,anongid=99,no_subtree_check

well, that’s not what I want! SO I edit the options to

rw,sync,no_root_squash,no_subtree_check

and

exportfs -ra

remount the share, and all works as expected!

Well sort of. As soon as any change is made on the web fronted the nfs server is restarted and the options magically change back to their defaults!

Damn!

OK time to find where the file is being generated from! So looking at

/etc/init.d/nfs.sh

we see the usual startup type stuff and lo and behold there is a line that reads

nas_configgen -c nfs

Right well I’ll change that I thought, should only be a script file, but alas it is a binary, so one small change in the script after the offending line:

perl -pi -w -e \
's/rw,sync,all_squash,anonuid=99,anongid=99,\
no_subtree_check/rw,sync,no_root_squash, \
no_subtree_check/g;' /etc/exports

– thanks to “The Book of Pete” means that the changes I want are applied to the

/etc/exports

file after it is written to the system, and root can go mad with permissions and I can at last start running some backup scripts that will maintain ownership of files as I want it to! After all the box is only for my use on my LAN and not available to the public at large!

The post There be Buffalo here… appeared first on DemonPenguins Brain.

“I have tested different to-do lists/project tracking systems

I want a web-based one, and would like it to communicate with an iPhone app. but a decent web app would do for starters.”

I had previously been looking for a nice open source, web-based, collaborative  package, and some of those offered certain aspects of what I was after, however I found many of these were overly complex or just too plain basic, and having spoken to CodeNinja I decided to have a look at one of the packages he had looked at previously.

Enter “dotProject”

“dotProject is a volunteer supported Project Management application. There is no ‘company’ behind this project, it is managed, maintained, developed and supported by a volunteer group and by the users themselves.”

Exactly the sort of product I like to use.

After a very simple install (download, unzip, create a database, sort out couple of permissions and run the install page) I was up and running, not only that with in another couple of minutes I had the basis of my first project going.  After a few minutes more I started to really like the package.  Not only was it providing me with the to-do part I was after, but also dependencies, child to-do’s file attachments, which could be checked in and out.  It also provides “Gantt” charts of the project along with progress monitoring of each to-do.

The product goes further than that though, it is a full multi-user product with budgeting, resource allocation, calendars, file management, contact management and a ticketing system to-boot!

All in all I am thoroughly happy with this product and look forward to making it one of the tools I use on a daily basis. I only hope that it will not be a tool that I get side tracked by!

The post Projects R Us appeared first on DemonPenguins Brain.