aparajita updates (RHEL 30)

2005-06-09T21:15:00.000-07:00

Server is under severe pressure with 1000+ POP / IMAP checks per day.

2004-08-15T23:04:00.000-07:00

Enabled ports 37 and 123 TCP/UDP to allow the windows 2000 Server to access the time servers.
Going to harden the system and explicitly restrict some ports:

Configuring the Mailman software for the BELTA Mailing List.

Following configuration options obtained from:

http://www.whoopis.com/howtos/mailman-howto.html

Edit /var/mailman/Mailman/mm_cfg.py and fix these lines:
DEFAULT_URL_HOST = 'www.domain.com'
DEFAULT_EMAIL_HOST = 'domain.com'

Edit /etc/httpd/conf.d/mailman.conf and uncomment/fix this line:

RedirectMatch /mailman[/]*$ http://www.domain.com/mailman/listinfo
Then restart httpd.

cd /var/mailman/bin and run "mmsitepass" to set the Mailman site password.

Create a "site-wide" mailing list. This is the one that password reminders will appear to come from.
It needs to be called "mailman." cd /var/mailman/
./newlist

Follow the prompts.
NOTE: When it asks for admin "name", enter an email address, or it'll fail.
Ignore the /etc/aliases line that it spews out at you, you don't care about messages being sent TO the "mailman" list. (Right?)
(sudo) /etc/init.d/mailman start

Now create your real mailing list(s) via the web interface.
It will tell you to paste some lines into /etc/aliases, like this: mymailinglist:

"/var/mailman/mail/mailman post mymailinglist"
mymailinglist-admin: "/var/mailman/mail/mailman admin mymailinglist"
mymailinglist-bounces: "/var/mailman/mail/mailman bounces mymailinglist"
mymailinglist-confirm: "/var/mailman/mail/mailman confirm mymailinglist"
mymailinglist-join: "/var/mailman/mail/mailman join mymailinglist"
mymailinglist-leave: "/var/mailman/mail/mailman leave mymailinglist"
mymailinglist-owner: "/var/mailman/mail/mailman owner mymailinglist"
mymailinglist-request: "/var/mailman/mail/mailman request mymailinglist"
mymailinglist-subscribe: "/var/mailman/mail/mailman subscribe mymailinglist"
mymailinglist-unsubscribe: "/var/mailman/mail/mailman unsubscribe mymailinglist"
Then run the "newaliases" command. Also, make sure that the installation of Mailman already put in two similar lines (add them if not): # Basic system aliases -- these MUST be present.
mailer-daemon: postmaster
postmaster: root
If you're using /etc/mail/virtusertable and you want to have a catchall/wildcard address, add entries like this to virtusertable: # mailman aliases
mailman@domain.com mailman
mailman-owner@domain.com mailman-owner
mymailinglist@domain.com mymailinglist
mymailinglist-admin@domain.com mymailinglist-admin
mymailinglist-bounces@domain.com mymailinglist-bounces
mymailinglist-confirm@domain.com mymailinglist-confirm
mymailinglist-join@domain.com mymailinglist-join
mymailinglist-leave@domain.com mymailinglist-leave
mymailinglist-owner@domain.com mymailinglist-owner
mymailinglist-request@domain.com mymailinglist-request
mymailinglist-subscribe@domain.com mymailinglist-subscribe
mymailinglist-unsubscribe@domain.com mymailinglist-unsubscribe
Restart sendmail.
Explanation: Because virtusertable is parsed before aliases, these lines in virtusertable hand off matches to aliases which in turn pipes them to the appropriate Mailman processors. This way you can still have a wildcard address in your virtusertable file, after the Mailman meta-aliases.
Another badly-documented task. To delete specific messages from your list archives, do the following: cd /var/mailman/archives/private # public archs are just symlinked to private
rm -rf mailinglist
cd /var/mailman/archives/private/goosepondchat.mbox
edit goosepondchat.mbox, delete the lines containing the messages you want gone
cd /var/mailman/bin
run ./arch mailinglist
The last command shown here will regenerate the database and html so that the rest of the archived messages are restored and viewable.
References:
Mailman Site Administrator documentation. http://www.list.org/site.html
Mailman & Postfix HOWTO for Debian Woody. http://homex.subnet.at/~max/mail/mailman.php#install
(a thread in a support forum.) http://www.support-forums.com/showthread.php?p=3419
Mailman INSTALL document. http://cvs.sourceforge.net/viewcvs.py/*checkout*/mailman/mailman/INSTALL?content-type=text%2Fplain&rev=2.19.2.6

2004-08-12T11:30:00.000-07:00

Trying to increase the EIDE disk access speed on Aparajita by carefully using the "hdparm" utility. Current setting are as follows:

[root@aparajita root]# hdparm /dev/hda

/dev/hda:
multcount = 16 (on)
IO_support = 0 (default 16-bit)
unmaskirq = 0 (off)
using_dma = 1 (on)
keepsettings = 0 (off)
readonly = 0 (off)
readahead = 8 (on)
geometry = 4998/255/63, sectors = 80293248, start = 0

* Changing the IO_support = 0 (default 16-bit) to IO_support = 3 (32-bit w/sync)
by issuing the command: hdparm -c3 /dev/hda

* Changing unmaskirq = 0 (off) to unmaskirq = 1 (on)
by issuing the command: hdparm -c3 -u1 /dev/hda

Have to put the entire command - hdparm -c3 -u1 -d1 -m16 /dev/hda in the /etc/rc.d/rc.local file since hdparm does not remember previous commands after reboot.

Final Settings:

hdparm /dev/hda

/dev/hda:
multcount = 16 (on)
IO_support = 3 (32-bit w/sync)
unmaskirq = 1 (on)
using_dma = 1 (on)
keepsettings = 0 (off)
readonly = 0 (off)
readahead = 8 (on)
geometry = 4998/255/63, sectors = 80293248, start = 0

Now going to optimize the "bdflush" event:

Current "bdflush" settings:

0 1000 64 256 500 3000 100 20 0

changing to:

100 1200 128 512 15 5000 500 1884 2 by issuing the following command:

echo "100 1200 128 512 15 5000 500 1884 2">/proc/sys/vm/bdflush

Original setting in /etc/sysctl.conf file on line 34: vm.bdflush=0 1000 64 256 500 3000 100

Changing to : vm.bdflush = 100 1200 128 512 15 5000 500 1884 2

Restarting network to see if this will increase performance.

2004-06-11T19:33:00.000-07:00

Updated the squid package. Recompiled the Squid 2.5 STABLE5 with the following options:

Version 2.5.STABLE5
configure options: --host=i686-pc-linux-gnu --build=i686-pc-linux-gnu --target=i386-asplinux-linux-gnu --program-prefix= --prefix=/usr --exec-prefix=/usr --bindir=/usr/local/bin --sbindir=/usr/local/sbin --sysconfdir=/etc --datadir=/usr/local/share --includedir=/usr/local/include --libdir=/usr/local/lib --libexecdir=/usr/local/libexec --localstatedir=/var --mandir=/usr/share/man --infodir=/usr/share/info --sharedstatedir=/usr/com --exec_prefix=/usr --bindir=/usr/local/sbin --libexecdir=/usr/local/lib/squid --localstatedir=/var --sysconfdir=/etc/squid --enable-poll --enable-snmp --enable-removal-policies=heap,lru --enable-storeio=aufs,coss,diskd,ufs --enable-ssl --with-openssl=/usr/kerberos --enable-linux-netfilter --with-pthreads --enable-basic-auth-helpers=LDAP,NCSA,PAM,SMB,SASL,MSNT --enable-ntlm-auth-helpers=SMB,winbind --enable-external-acl-helpers=ip_user,ldap_group,unix_group,wbinfo_group,winbind_group --enable-cache-digests --enable-useragent-log --enable-referer-log --enable-icmp --enable-gnuregex --enable-splaytree --enable-xmalloc-statistics --enable-dlmalloc --enable-kill-parent-hack --enable-err-language=English --with-dl --with-aio --enable-htcp

Updated BIND from 9.2.1 to 9.2.3 and configuring host to run to "named" process and "views" to enhance security.

Updated the apache package, which reports that it was compiled in March 2003 and is version 2.0.40 while the current version is 2.0.49! Compiled with following options:

Server version: Apache/2.0.49
Server built: Jun 11 2004 22:32:53
Compiled in modules:
core.c
mod_access.c
mod_auth.c
mod_include.c
mod_log_config.c
mod_env.c
mod_setenvif.c
prefork.c
http_core.c
mod_mime.c
mod_status.c
mod_autoindex.c
mod_asis.c
mod_cgi.c
mod_negotiation.c
mod_dir.c
mod_imap.c
mod_actions.c
mod_userdir.c
mod_alias.c
mod_so.c
Server compiled with....
-D APACHE_MPM_DIR="server/mpm/prefork"
-D APR_HAS_SENDFILE
-D APR_HAS_MMAP
-D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
-D APR_USE_PROC_PTHREAD_SERIALIZE
-D APR_USE_PTHREAD_SERIALIZE
-D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
-D APR_HAS_OTHER_CHILD
-D AP_HAVE_RELIABLE_PIPED_LOGS
-D HTTPD_ROOT="/usr/local/apache2"
-D SUEXEC_BIN="/usr/local/apache2/bin/suexec"
-D DEFAULT_PIDLOG="logs/httpd.pid"
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_LOCKFILE="logs/accept.lock"
-D DEFAULT_ERRORLOG="logs/error_log"
-D AP_TYPES_CONFIG_FILE="conf/mime.types"
-D SERVER_CONFIG_FILE="conf/httpd.conf"

Thats it for the time being, will finish up the "real" split DNS tomorrow.

2004-05-23T17:42:00.000-07:00

KOHA Install and NIC Problems:

Due to a thunderstorm last night, the Aparajita server's internet connection went down around 7:30 AM because the 3COM NIC connected to the DSL modem went dead, more than likely because of lightening or an electrical surge. Had a similar 3COM NIC as a backup and server came online again after installation, no new configuration was required.
Mr. IM Faisal called to tell me to install the KOHA library interface as the librarians were sitting idle nowadays and needed to finish up entering the the books. Starting KOHA install at 6:27PM as I did not get time all day because of FED computers.

Following the instructions on "Software / lib installs on host "mhkhan"" blog to install KOHA and its dependencies, that blog is dated February 20, 2004.

Downloading and installing the following dependencies first as they are listed in the previous install blog.

perl-Event-0.87-1.noarch.rpm 147766
perl-HTML-Template-2.6-1.noarch.rpm 53067
perl-Mail-Sendmail-0.79-1.noarch.rpm 19818
perl-MARC-Record-1.29-1.noarch.rpm 94703
perl-Net-Z3950-0.34-1.noarch.rpm

Used the following commands to install the dependencies listed above:

perl -MCPAN -e 'install "HTML::Template"'

perl -MCPAN -e 'install "MARC::Record"'

perl -MCPAN -e 'install "Mail::Sendmail"'

perl -MCPAN -e 'install "Event"'

Need to install the "yaz" libraries before installing the last Perl module as it will not install without it.

Downloading Yaz from ftp://ftp.pbone.net/mirror/ftp.nest.pld-linux.org/test/i386/yaz-2.0.15-1.i386.rpm
since the default host references in the KOHA documentation http://www.indexdata.dk/yaz is down at this time.
Getting the devel package also
ftp://ftp.pbone.net/mirror/ftp.pld-linux.org/dists/2.0/PLD/i586/PLD/RPMS/yaz-devel-2.0.4-1.i586.rpm

Installed the yaz client and devel rpm with the --nodeps sqitch as it was failing some dependencies ...

perl -MCPAN -e 'install "Net::Z3950"'

Module installed succesffuly. Installed Webmin as well to start up the MySQL Server and going to restart the KOHA library installation.

Installation compeleted, now going to test the library database on Northstar.

2004-05-17T13:23:00.000-07:00

Aparajita lost its internet connection at 8 AM due to a surge in the electrical supply which hung the modem. Resetting the modem did not help and thus the server was rebooted by Shah Alam manually by turning the switch off and then on again after I called at 8:15. It seems that this created a problem with the Apache configuration which prevented it from running after it restarted. The problem was the ssl cache file in /var/cache/mod_ssl/scache. It was not deleted due to an uclean shutdown and I had to manually delete it at which point it started to work ok again. However, it still gives the following error message - something which I'll look into at a later time after creating DISK images from Norton Ghost.

"[Mon May 17 13:19:24 2004] [error] Cannot allocate shared memory: (17)File exists
[Mon May 17 13:20:02 2004] [warn] Init: (aparajita.presidency.edu.bd:443) You configured HTTP(80) on the standard HTTPS(443) port!
[Mon May 17 13:20:02 2004] [notice] Digest: generating secret for digest authentication ...
[Mon May 17 13:20:02 2004] [notice] Digest: done
[Mon May 17 13:20:03 2004] [warn] Init: (aparajita.presidency.edu.bd:443) You configured HTTP(80) on the standard HTTPS(443) port!"

2004-05-12T17:53:00.000-07:00

The 40GB Hard Disk Drive on Aparajita has completely failed with the HD showing up as Mactor AXIS C64A as the hd on the BIOS. The Maxtor website and google search showed that when this is displayed by a maxtor drive, it means that the firmware is corrupted and the HD platter damamged due to high temperature. Had backups of the /var/mail/spool, /etc, /var/www, DNS files and BELTA website backup.

Installed ASPLinux 9.0 and starting on rebuilding the entire server.

Issues that need to be addressed immediately:

a) Upgrade SquirrelMail from version 1.2 to the latest version as the configuration file from the production version is 1.4 and is not working with the older version.

b) Configure Postfix to receieve email from the domain
c) Configure the firewall with firestarter and fine tune the squid proxy server again.

Downloaded the latest version(0.9.3) of firestarter from http://firestarter.sourceforge.net/ Installing with the following command:

rpm -Uvh firestarter*rpm

rpm -Uvh firestarter-0.9.3-1.i386.rpm
Preparing... ########################################### [100%]
1:firestarter ########################################### [100%]

Had moved the customized configs to firestarter-original, now deleteing the newly installed ones and putting the customized ones back.

Installed successfully and working now.

Now going to download and install the latest version of the squirrelmail webmail interface.
Installing / upgrading to squirrelmail-1.4.2-1.noarch.rpm since this is the latest one in FC1 RPM format. Installing via the webmin interface on Aparajita. Cannot install, no package for ASPLinux. Downloading the source and doing a rpmbuild -rebuild to rebuild the rpm package so that it can be installed.
Rebuilt Squirrelmail 1.4.2 rpm for ASP Linux and now installing.
Failed dependency, reuires aspell, installing from
ftp://ftp.pbone.net/mirror/ftp.nest.pld-linux.org/test/i386/aspell-0.50.5-1.i386.rpm
RPM packages were not working, manually downloaded aspell 0.50-3 from the GNU website, configure, compiled and installed in /usr/local/bin
Downloaded, compiled and installed the english dictionaries for aspell.
Going on to installing squirrelmail now!
Also upgrading webmin to the latest version while the squirrelmail package is built

2004-05-04T11:16:00.000-07:00

Updating the aparajita host DNS Server with faculty SMTP/IMAP/POP access names to classify emails generated by Presidency Faculty.

2004-05-04T10:35:00.000-07:00

Securing the aparajita.presidency.edu.bd server from hints at faqs.org/docs/securing.

Will have to run this command on many files, just storing for the time being,

chattr +i /etc/inetd.conf

This will prevent any changes accidental or otherwise to the inetd.conf file. A file with the immutable attribute set i cannot be modified, deleted or renamed, no link can be created to this file and no data can be written to it. The only person that can set or clear this attribute is the super-user root. If you wish later to modify the inetd.conf file you will need to unset the immutable flag: To unset the immutable flag, simply execute the following command:

chattr -i /etc/inetd.conf

# Lookup names via DNS first then fall back to /etc/hosts.
order bind,hosts
# We have machines with multiple IP addresses.
multi on
# Check for IP address spoofing.
nospoof on

Did chattr +i /etc/services to make this file immutable.

Updated the /etc/securetty file to minimize the avaialble terminals for root to login.

Deleted the following user/groups as they are not required for proper system functioning:

[mhkhan@aparajita]# userdel adm
[mhkhan@aparajita]# userdel lp
[mhkhan@aparajita]# userdel sync
[mhkhan@aparajita]# userdel news
[mhkhan@aparajita]# userdel uucp
[mhkhan@aparajita]# userdel gopher
[mhkhan@aparajita]# userdel operator
[mhkhan@aparajita]# groupdel adm
[mhkhan@aparajita]# groupdel lp
[mhkhan@aparajita]# groupdel news
[mhkhan@aparajita]# groupdel uucp
[mhkhan@aparajita]# groupdel dip
[mhkhan@aparajita]# groupdel pppusers
[mhkhan@aparajita]# groupdel slipusers

Adding the following lines in /etc/pam.d/su to restrict the use of "su" to particular users.

# Added by mhkhan on May 04, 2004 to strengthen and restrict su usage and access to root

auth sufficient /lib/security/pam_rootok.so debug
auth required /lib/security/pam_wheel.so group=wheel

# ** end modification - mhkhan

password required /lib/security/pam_cracklib.so

Have to install sXid from ftp://marcus.seva.net/pub/sxid/, going to install on equinox as a test first.

Wrote some scripts to find security holes and mail automatic reports
Updated the /etc/sysctl file to reflect optimisations of the bdflush service, default values saved in text file

2004-04-12T14:27:00.000-07:00

Installed the following package successfully on aparajita:

Description: squidGuard is a combined filter, redirector and access controller
plugin for squid. squidGuard can be used to limit or block access
users to a list of webservers, based on keywords.

Version 1.2.0-1.rhfc1.dag
Vendor Dag Apt Repository
http://dag.wieers.com/apt/
Architecture i386
Installed 12/Apr/2004 14:28

Trying to setup the configuration after backup up /etc/squid/squidguard.conf. Installing the webmin module to configure squidguard.

SquidGuard in /usr/libexec/webmin/squidguard (520 kB) under category Servers

2004-03-23T18:43:00.000-08:00

Installing knetfilter KDE IPtables mgmt software after successful test run on host "mhkhan". Also installing kmyfirewall GUI for iptables. Looks like a robust software.

Package knetfilter was installed successfully
Package knetfilter Version 3.1.1-1 Installed 23/Mar/2004 18:45

Package kmyfirewall was installed successfully.

Installed OpenWebMail WebMIN Module.

Running install of the "OpenProtect" Email / Virus Scanner package which uses clamav as the virus scanner.
Installed successfully and enables OpenProtect after initially uninstalling because of a confusion with the installation of MailScanner and an older version of clamAV

2004-03-20T20:15:00.000-08:00

Started installation of KOHA Library software after successfully testing it out on host "mhkhan".

Utarred and unzipped Koha 2.0 source as user mhkhan
Not installing KOHA 2.0 since it is a release candidate and is not bugfree. Deleting directory and restarting with KOHA 1.2 release
Went back to KOHA v2.0 since displays the same warning on 1.2!
Have to install missing perl modules as described in last install notes.
Succesful install at 9:07PM

2004-03-16T11:16:00.000-08:00

Created "SMTPs" SSL certificate for local sendmail

2004-03-11T18:44:00.000-08:00

Settings:
Transfer Mode: Default
Sector Count 8
Write Caching: Off
Keep Settings Over Reset: Off
Standby Timeout: 0
32bit I/O Support: Disable
Sector count for multiple sector I/O: 16
Using DMA: On
Use Read LookAhead: On
Interrupt unmask: Off
Keep features over reset:Off
Reprogram best PIO:Off
Result: Buffer cache: 662.00 MB/sec
Buffered: 32.56 MB/sec

Settings:

Sector count for multiple sector I/O: 32 (Slower Buffered Result)
Result: Buffer cache: 662.00 MB/sec
Buffered: 23.68 MB/sec

Added options to /squif partition -> LABEL=/squid /squid ext3 defaults,noatime,data=writeback 1 2 and cleared and rebuilt cache. rebooting system

2004-02-28T19:51:00.000-08:00

NetMRG Error msg ->

/usr/bin/netmrg_cron.sh: line 31: 10809 Segmentation fault $netmrg >$output 2>$error

Found resolution at the NetMRG BB.
Old line: Code: sprintf(temp, "%s", input);

Replace with this:
Code: snprintf(temp, 1023, "%s", input);
Cannot find the file since it was installed from RPM package. Found the file in src directory of untarred netmrg-0.13, but that file already had the correct line.
Posted a note to this effect on the NetMRG BB.

Mailman Manager in /usr/libexec/webmin/mailman (56 kB) under category Servers

vsftpd in /usr/libexec/webmin/vsftpd (112 kB) under category Servers installed on "mhkhan" for pre-install Aparajita testing.

** Installing OpenWebMail **

Checking to see if dependencies are installed.

CGI.pm-2.74 -> Version 3 already installed by default on FC1
MIME-Base64-2.20 -> Version 2.29 already installed
libnet-1.0901 -> Already installed by default
Text-Iconv-1.2 -> Installed successfully

Moved Directory structure to /var/www/cgi-bin/openwebmail and /var/www/html/openwebmail
Modifying

1) /var/www/cgi-bin/openwebmail/openwebail.conf.default
2) /var/www/cgi-bin/openwebmail/openwebail.conf

and new version seems to have a new file called /var/www/cgi-bin/openwebmail/dbm.conf.default
to edit the Database settings, unlike the previous version and unlike what is written in the HOWTO

**** Transfer the following to host "mhkhan" Blog

Installing Qmail - Toaster on host "mhkhan" for testing and final upgrading of production server aparajita.

1) Ran wget http://www.askdavis.com/qmailtoaster/toasterscripts-current.tgz
to get current scripts.

2) Type: sh checkdeps.sh

** Installed but has problems, will work on it later on ****

2004-02-28T19:01:00.000-08:00

Preparing the dependencies to install and configure "Net-MRG" monitoring software on Aparajita after succussful testing on host "mhkhan".

a) "mysql-devel-3.23.58-4.i386.rpm" package -> Reports "Already Installed"
b) "net-snmp-devel-5.0.9-2.i386.rpm" package -> Reports "Already Installed"

Manually configured and compiled rrd-tool, but installs in /usr/local/rrdtool folder. De-Installed rrd-tool and re-installed again from RPM.

Installed "rrdtool-devel-1.0.46-1.fr.i386.rpm"
Installed "php-rrdtool-1.0.46-1.fr.i386.rpm"

Going back to manual compile of NetMRG. "./configured and "make" did fine" but installed from RPM file -> Package netmrg was installed successfully

Following installation procedure from NetMRG Website

1) mysqladmin create netmrg

Had to go to the root "/monitoring/mrtg/netmrg-0.13" directory and execute the following command since the location of the file from the rpminstall needs to be searched. Searched and found that file -> "/usr/share/netmrg/db/netmrg.mysql". Using the file supplied by the RPM installation.

2) mysql -u root -p netmrg < netmrg.mysql

from /usr/share/netmrg/db directory

3) mysql -u root -p

4) grant all on netmrg.* to netmrguser@localhost identified by 'netmrgpass';
Result: Query OK, 0 rows affected (0.00 sec)

changed the default pass to "abhi79"

The first is to alias /netmrg to the installed web directory ( /var/www/netmrg/webfiles).
in /etc/httpd/conf/httpd.conf file -> Alias /netmrg "/var/www/netmrg/webfiles"

Edited "/etc/netmrg.xml" file and changed password from default.

Executed the following commands as per the installation instructions.

useradd netmrg <- was not required as the RPM package automatically added the user
chown netmrg:netmrg /var/log/netmrg <- was not required as the RPM package automatically did this
chown netmrg:netmrg /var/lib/netmrg/rrd <- was not required as the RPM package automatically did this

Edit the master crontab -> edit /etc/crontab and add a line similar to this:

*/5 * * * * netmrg /usr/bin/netmrg_cron.sh

Successful install, going to restart SMNPD and see what the results are! Current time 9:15 PM

Check out "wordtrans" translater program on aparajita and enable the dictionaries

2004-02-21T19:50:00.000-08:00

Started Testing out WebMIN Modules again on system "mhkhan" so that the useful ones can be installed on Aparajita.

Backup in /usr/libexec/webmin/backup (108 kB) under category System

Failed to install module from /home/soft/public_html/webmin/add-on_modules/system/require_deps/du.wbm.gz : Module du requires Perl module GD.
Installed.
Failed to install module from /home/soft/public_html/webmin/add-on_modules/system/require_deps/du.wbm.gz : Module du requires Perl module Filesys::Df.

Disk Usage in /usr/libexec/webmin/du (44 kB) under category Information

KOHA works fine with name based virtual hosting on mhkhan.
Going to find a mySQL GUI and work on setting up MRTG.

2004-02-20T17:05:00.000-08:00

Started working on Aparajita at 4:PM on a Friday

Going to install "Koha Library Software" on MHKhan and document the modules and dependancies, test it on the system and do a clean install afterwards on Aparajita.

The following modules have been successfully deleted from your Webmin installation :

Fetchmail Mail Retrieval in /usr/libexec/webmin/fetchmail (260 kB)

LDAP Users and Groups in /usr/libexec/webmin/ldap-useradmin (196 kB)

NFS Exports in /usr/libexec/webmin/exports (752 kB)

NIS Client and Server in /usr/libexec/webmin/nis (648 kB)

OpenSLP Server in /usr/libexec/webmin/openslp (196 kB)

Postfix Configuration in /usr/libexec/webmin/postfix (3560 kB)

2004-02-19T22:55:00.000-08:00

February 19th, 2003:10:55AM

Updated "mhkhan.net and farjana.net " to presidency.edu.bd to see if the name servers become registered.

2004-02-18T08:35:00.000-08:00

* Installed WebMIN 1.130 on Aparajita.presidency.edu.bd
* Deleted following modules:

- ADSL Client Control
- Linux Firewall from "Networking" Linux Firewall in /usr/libexec/webmin/firewall (256 kB)

* Installed the following modules:

1) system/backup_1.01.wbm - Backup System in /usr/libexec/webmin/backup (72 kB) under category System
2)

dir-etc-backup.tar.gz
Restore /export/sysback/2004/feb/dir-etc-backup.tar.gz --> /tmp done!

Restored:

/etc/dhcpd.conf
renamed aliases to aliases.orig
/etc/aliases -> ran newaliases

dir-root-backup.tar.gz
Restore /export/sysback/2004/feb/dir-root-backup.tar.gz --> /tmp done!

Copied /etc/squid.conf and edited files to change hostnames and directory paths.
had to change permissions of /squid from root/root to squid/squid
Initialized cache directory

9:24AM
Backup /etc --> /export/sysback/2004/feb/fresh-system-backup/dir-etc.tar.gz done!

Restoring BIND/named config files and restoring root direrctory

replacing /etc/group and /etc/group- and /etc/passwd /etc/passwd- /etc/shadow /etc/shadow- /etc/gshadow and /etc/gshadow-

copying pico binary / changed permission from 777 to 755

replaced /etc/hosts

Restore /export/sysback/2004/feb/dir-var-named-backup.tar.gz --> /tmp done!

Updating /var/named/presidency.edu.bd zone file

updating /var/named/chroot/var/named.presidencyuniversity.org.zone file which was last updated on 23/01/2004:10:05 AM . Reducing TTL to match ns1.mydomain.com TTL value

Restore /export/sysback/2004/feb/dir-squirrelmail-production.tar.gz --> /tmp done!

Was having problems with ./conf.pl with squirrelmail, finally found out that it was a color problem in the terminal so that I could not see the actual configuration!!!

The following modules have been successfully deleted from your Webmin installation :

Jabber IM Server in /usr/libexec/webmin/jabber (368 kB)

MON Service Monitor in /usr/libexec/webmin/mon (440 kB)

Majordomo List Manager in /usr/libexec/webmin/majordomo (496 kB)

Security Sentries in /usr/libexec/webmin/sentry (260 kB)

The following modules have been successfully deleted from your Webmin installation :

CVS Server in /usr/libexec/webmin/pserver (292 kB)

IPsec VPN Configuration in /usr/libexec/webmin/ipsec (220 kB)

PPP Dialin Server in /usr/libexec/webmin/pap (336 kB)

PPP Dialup Client in /usr/libexec/webmin/ppp-client (104 kB)

PPTP VPN Client in /usr/libexec/webmin/pptp-client (124 kB)

PPTP VPN Server in /usr/libexec/webmin/pptp-server (216 kB)

ProFTPD Server in /usr/libexec/webmin/proftpd (664 kB)

WU-FTP Server in /usr/libexec/webmin/wuftpd (860 kB)
The following modules have been successfully deleted from your Webmin installation :

Linux Bootup Configuration in /usr/libexec/webmin/lilo (220 kB)

Printer Administration in /usr/libexec/webmin/lpadmin (780 kB)

Restore /export/sysback/2004/feb/dir-var-www-html-backup.tar.gz --> /tmp done!

Restore /export/sysback/2004/feb/dir-var-www-cgi-bin-openwebmail-backup.tar.gz --> /tmp done!

2004-02-16T18:19:00.000-08:00

** Deleting Operating System on Aparajita.presidencyuniversity.org **

Saved backups of /etc /root /usr/share/squirrelmail
/var and /export are mounted seperately, therefore no backups are required!!