Routers : Linux System And Network Admnistration

IPCop Port Forward

Forward port 80 to LAN WebServer , this is to have home webserver
can be used for others port also

Very Simple, here is the image, click to enlarge

MySQL Create db

[root@db-svr ~]# mysql -u root -p
Enter password:
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 2
Server version: 5.0.45 Source distribution

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> CREATE DATABASE linux_db;
Query OK, 1 row affected (0.03 sec)

mysql> GRANT SELECT,INSERT,UPDATE,DELETE
-> ON linux_db.*
-> TO linux@localhost
-> IDENTIFIED BY 'linuxdbpaswd';
Query OK, 0 rows affected (0.00 sec)

mysql> flush privileges;
Query OK, 0 rows affected (0.00 sec)

mysql> SHOW DATABASES;
+--------------------+
| Database
+--------------------+
| information_schema
| linux_db
| mysql
+--------------------+
3 rows in set (0.00 sec)

mysql> \q
Bye
[root@db-svr ~]#

MySQL Network Security

By Default MySQL server will answer any incoming telnet to
the machine from outside, so we need to disable this

(Add entry at my.cnf)
[root@noc ~]# nano -w /etc/my.cnf

[mysqld]
bind-address=127.0.0.1

(Restart MySQL)
[root@noc ~]# /sbin/service mysqld restart
Stopping MySQL: [ OK ]
Starting MySQL: [ OK ]
[root@noc ~]#

(From Now any scan to that port from outside will not be answered)

MySQL Clean Up

MySQL need to clean up for security reason after first installation
Do as following :-

[root@svr ~]# mysql -u root -p
Enter password:
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 2 to server version: 5.0.22

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> drop database test;
Query OK, 0 rows affected (0.02 sec)

mysql> use mysql;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed
mysql> delete from db;
Query OK, 2 rows affected (0.00 sec)

mysql> delete from user where not (host="localhost" and user="root");
Query OK, 3 rows affected (0.02 sec)

mysql> flush privileges;
Query OK, 0 rows affected (0.00 sec)

mysql> \q
Bye

MySQL Tunnel

From Linux Laptop

ssh -f -L 3000:localhost:3306 root@db-server.net sleep 2d

Now open MySQL Administrator make connection

click Connect and there you go

FYI, dont worry server status shown down, its local in laptop is down
but the server you maintain remote is alive ,

happy backup :)

YUM Tunnel IDC

This tutorial suitable for user/admin who got/own/rent server in IDC
for them to full utilize their DSL connection in the local
office linux o/s update

setup as following

======IDC Server side Setup============
# yum install privoxy
# service privoxy start
========================================

======Client Local Office Setup=========
-nothing to install actually

# echo 'http_proxy=http://localhost:4222' >> /etc/yum.conf
# echo 'export http_proxy=localhost:4222' >> /etc/rc.local
( info: run # export http_proxy=localhost:4222 to activate w/o reboot)
( check run # echo $http_proxy if correct you will get "http://localhost:4222")

# ssh -f -L 4222:localhost:8118 root@idc-server-ip sleep 2d
( info: once you enter the command, its forked to the background )
============done============================

now you can do yum update in local office computer and feel the diffrent
btw this also work for web proxy just go to browser proxy setup
put localhost port 4222 and google for showip

Linux ADD IP

login as root in konsole

First Way
----------
(Add IP)
#/sbin/ifconfig eth0 192.168.1.10 netmask 255.255.255.0 broadcast 192.168.1.255
To view execute /sbin/ifconfig eth0

(Add Route)
#/sbin/route add default gw 192.168.1.1
To view execute /sbin/route -n
----------

Second Way
----------
(If you have a lot of IP to add, consider use range)

#nano -w /etc/sysconfig/network-scripts/ifcfg-eth0-range0
(add as following)

IPADDR_START=192.168.1.10
IPADDR_END=192.168.1.20
CLONENUM_START=0

(save it and restart network)
---------

Mount Remote Drive

To make remote drive available to your local hardisk
First need to install fuse-sshfs into your local linux system

(Create Mount Point Folder , mkdir /path/mount-place)

# mkdir /export/remotedisk-isp1
# sshfs -o follow_symlinks user@remotedisk-isp1.net: /export/remotedisk-isp1

Done. and to see your drive
# df -h
# cd /export/remotedisk-isp1

All remote file will be available as your local drive

have fun :)

IPCop tunnel IDC

---------IDC Server--------------------
root@idcserver.net yum install privoxy
root@idcserver.net /sbin/service privoxy start

----------local office ----------------
install openssh47p1.tar.gz to inside ipcop box
get from http://www.ipadd.de/binary.html
wich command cd openssh ./install -l

root@fw:~ # tar xvfz openssh47p1.tar.gz
root@fw:~ # cd openssh47p1
root@fw:~/openssh47p1 # ./install -i

Installing now ...
Successfully done!

root@fw:~ # ssh -f -L 4222:localhost:8118 root@idcserver.net sleep 365d
---------
now to web ipcop under proxy set

Enabled on Green:
Transparent on Green:

hostport:port ======= localhost:4222
u/user========= empty
u/pass========= empty
proxy port = 80

see sample (click for large image)

save it
---------------------------------

from now all your workstation will have ip from idcserver.net
automatically once start browsing the net, and dsl speed will
be increased

good luck :)

Mylinux

[Wed Feb 4 2009] [16:04:57] ping 192.168.1.1
[Wed Feb 4 2009] [16:05:06] aduh
[Wed Feb 4 2009] [16:05:07] dari centos ping .1.1
[Wed Feb 4 2009] [16:05:21] oke
[Wed Feb 4 2009] [16:05:24] jap
[Wed Feb 4 2009] [16:05:38] centos tu dah ada ip tak
[Wed Feb 4 2009] [16:05:56] network is unreachable
[Wed Feb 4 2009] [16:06:01] kalau takde ip then u kena buat kan '
[Wed Feb 4 2009] [16:06:08] mcam mna nk buatkan
[Wed Feb 4 2009] [16:06:20] Nick Buntal is now known as fazli.
[Wed Feb 4 2009] [16:07:09] /sbin/ifconfig eth0 192.168.1.10 netmask 255.255.255.0 broadcast 192.168.1.255
[Wed Feb 4 2009] [16:08:42] dah ?
[Wed Feb 4 2009] [16:08:48] lum
[Wed Feb 4 2009] [16:08:51] ngah taip ni
[Wed Feb 4 2009] [16:08:54] sory slow
[Wed Feb 4 2009] [16:09:17] oo keyboard rosak tu , beli keyboard baru
[Wed Feb 4 2009] [16:09:59] oke
[Wed Feb 4 2009] [16:10:06] dh
[Wed Feb 4 2009] [16:10:09] rasa nyer
[Wed Feb 4 2009] [16:10:17] lepas tekan tu
[Wed Feb 4 2009] [16:10:17] /sbin/ifconfig eth0
[Wed Feb 4 2009] [16:11:32] i net addr : 192.168.1.10 bcast: 192.168.1.255 mask: 255.255.255.0
[Wed Feb 4 2009] [16:11:41] oke
[Wed Feb 4 2009] [16:11:47] ping -c 4 192.168.1.1
[Wed Feb 4 2009] [16:13:20] host unreachable
[Wed Feb 4 2009] [16:13:28] :)
[Wed Feb 4 2009] [16:13:33] apo tu
[Wed Feb 4 2009] [16:14:02] /sbin/route add default gw 192.168.1.1
[Wed Feb 4 2009] [16:15:12] oke dh
[Wed Feb 4 2009] [16:15:16] ping -c 4 192.168.1.1