D@N!L()'s Blog

quarta-feira, 22 de fevereiro de 2012

Medindo a velocidade do hd em shell script

Comando em shell script para medir a velocidade de seu hd

#time (dd if=/dev/zero of=zerofile bs=1M count=500;sync);rm zerofile

Ex. 1

root@server01:~# time (dd if=/dev/zero of=zerofile bs=1M count=500;sync);rm zerofile
500+0 registros de entrada
500+0 registros de saída
524288000 bytes (524 MB) copiados, 3,88141 s, 135 MB/s

real 0m6.179s
user 0m0.008s
sys 0m2.408s

Ex. 2

root@server02:~# time (dd if=/dev/zero of=zerofile bs=1M count=500;sync);rm zerofile
500+0 registros de entrada
500+0 registros de saída
524288000 bytes (524 MB) copiados, 8,40747 s, 62,4 MB/s

real 0m11.878s
user 0m0.000s
sys 0m0.876s

terça-feira, 6 de dezembro de 2011

Configurando o OpenSWan no Debian para criar uma conexao vpn com um cisco

Ambiente:

                        Matriz                                                              Filial
(Debian Squeeze)      (IP da SimNet)   (GW da SimNet)     (Internet)   (GW da Speedy)   (IP da Speedy)     (Cisco RV042)
192.168.0.0/24 <--> 200.148.x.x <--> 200.148.x.1 ------------------ 200.204.x.1 <--> 201.92.x.x <--> 192.168.200.0/24

# apt-get install openswan

Nao é preciso criar a chave x509

Os 2 principais arquivos sao:
/etc/ipsec.conf
/etc/ipsec.secrets

Primeiro faça um backup e depois troque todo o conteudo:
cp /etc/ipsec.conf /etc/ipsec.conf.old

vim /etc/ipsec.conf

-----Inicio------

version 2.0

config setup

        nat_traversal=yes
        interfaces="ipsec0=eth1"
        klipsdebug=none
        plutodebug=none

conn cisco
                type= tunnel
                authby= secret

                left=200.148.x.x
                leftsubnet=192.168.0.0/24
                leftsourceip=192.168.0.1

                right=201.92.x.x
                rightsubnet=192.168.200.0/24
        leftsourceip=192.168.0.1

                auto=start

-----Fim------

Editar o ipsec.secrets

vim /etc/ipsec.secrets

e acrescente a seguinte linha:

201.92.x.x 200.148.x.x: PSK "1234567890"

# ipsec verify

Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path                                 [OK]
Linux Openswan U2.4.6rc3/K2.6.16-1.2115_FC4 (netkey)
Checking for IPsec support in kernel                            [OK]
NETKEY detected, testing for disabled ICMP send_redirects       [FAILED]

Please disable /proc/sys/net/ipv4/conf/*/send_redirects
or NETKEY will cause the sending of bogus ICMP redirects!

NETKEY detected, testing for disabled ICMP accept_redirects     [FAILED]

Please disable /proc/sys/net/ipv4/conf/*/accept_redirects
or NETKEY will accept bogus ICMP redirects!

Checking for RSA private key (/etc/ipsec.secrets)               [OK]
Checking that pluto is running                                  [OK]
Two or more interfaces found, checking IP forwarding            [FAILED]
Checking for 'ip' command                                       [OK]
Checking for 'iptables' command                                 [OK]
Opportunistic Encryption Support                                [DISABLED]

# for f in /proc/sys/net/ipv4/conf/*/accept_redirects; do echo 0 > $f; done
# for f in /proc/sys/net/ipv4/conf/*/send_redirects; do echo 0 > $f; done

# ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path                                 [OK]
Linux Openswan U2.6.28/K2.6.32-5-686 (netkey)
Checking for IPsec support in kernel                            [OK]
NETKEY detected, testing for disabled ICMP send_redirects       [OK]
NETKEY detected, testing for disabled ICMP accept_redirects     [OK]
Checking that pluto is running                                  [OK]
Pluto listening for IKE on udp 500                              [OK]
Pluto listening for NAT-T on udp 4500                           [OK]
Two or more interfaces found, checking IP forwarding            [OK]
Checking NAT and MASQUERADEing
Checking for 'ip' command                                       [OK]
Checking for 'iptables' command                                 [OK]
Opportunistic Encryption Support                                [DISABLED]

Troque de:
iptables -D POSTROUTING -t nat -o eth1 -s 192.168.0.0/24 -j MASQUERADE
iptables -A POSTROUTING -t nat -o eth1 -s 192.168.0.0/24 ! -d 192.168.200.0/24 -j MASQUERADE

Reinicie o serviço:
/etc/init.d/ipsec restart

Subindo a vpn e ja criando a rota:
ipsec auto --up cisco
route add -net 192.168.200.0 netmask 255.255.255.0 dev eth1

Instalando MSN-PROXY

instalar apache php mysql

#apt-get update
#apt-get install apache2 php5 php5-mysql php5-gd php5-imagick mysql-server g++ libmysqlclient15-dev

vim /etc/php5/apache2/php.ini

altere as propriedades

#safe_mode = On
#safe_mode_gid = On
#register_globals = On
#display_errors = On

instalar libevent

# wget http://monkey.org/~provos/libevent-1.4.12-stable.tar.gz
# tar -vxzf libevent-1.4.12-stable.tar.gz
# cd libevent-1.4.12-stable
# ./configure
# make && make install
# cd /usr/lib/
# ln -s /usr/local/lib/libevent-1.4.so.2

Instalar MSN-Proxy

# wget http://ufpr.dl.sourceforge.net/project/msn-proxy/msn-proxy/msn-proxy-0.7/msn-proxy-0.7.tar.gz
# tar -vxzf msn-proxy-0.7.tar.gz
# cd msn-proxy-0.7
# vim Makefile

Comente as duas linhas referentes ao FreeBSD e descomente as do Linux, como abaixo:

MYSQLINC=/usr/lib/mysql
MYSQLLIB=/var/lib/mysql/mysql

# make && make install

# mkdir /var/www/msn-proxy
# cp -R php/* /var/www/msn-proxy

# vim /var/www/msn-proxy/mysql.inc.php

Altere como abaixo:

$host = "localhost";
$user = "msn-proxy";
$pass = "1234567890";
$db = "msn-proxy";
$port = 3306;

# vim /usr/local/etc/msn-proxy/mysql/conf

localhost|3306|msn-proxy|1234567890|msn-proxy

criar a base de dados

# mysql -u root -p

mysql> CREATE DATABASE `msn-proxy`;
mysql> grant all privileges on `msn-proxy`.* to `msn-proxy`@localhost identified by "1234567890";
mysql> flush privileges;
mysql> exit;

# chmod 600 /usr/local/etc/msn-proxy/mysql/conf
# vim /usr/local/etc/msn-proxy/msn-proxy.conf

Altere como abaixo:

max_clients=200

Vamos iniciar o msn-proxy para que o programa crie as tabelas no banco vazio que criamos:

# msn-proxy

Será apresentado um erro. Vamos inserir um conteúdo na tabela:

# mysql -u root -p

mysql> use msn-proxy;
mysql> show tables;
mysql> insert into `defaults`(`internal_host`) values ("192.168.0.11");
mysql> exit;

# iptables -t nat -I PREROUTING -i eth0 -p tcp --dport 1863 -j REDIRECT --to-port 1863

Para iniciar manualmente o msn-proxy, execute um dos comandos abaixo:

# msn-proxy & (roda em background)
ou
# msn-proxy -d & (-d para ver os logs e & para rodar em background)

* lembrando que vc tem que transferir todo o trafego da sua rede para essa maquina

é so colocar no gw das maquianas o ip 192.168.0.11

e ativar o roteamento no seu servidor

# vim /etc/sysctl.conf

e alterar para:
net.ipv4.ip_forward=1

ou

echo 1 > /proc/sys/net/ipv4/ip_forward

Gerenciando o VirtualBox pela Web

#Adicione no
/etc/apt/sources.list

deb http://download.virtualbox.org/virtualbox/debian squeeze contrib non-free

wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | apt-key add -

apt-get update

apt-get install virtualbox-4.1

wget http://download.virtualbox.org/virtualbox/4.1.4/Oracle_VM_VirtualBox_Extension_Pack-4.1.4.vbox-extpack

vboxmanage extpack install Oracle_VM_VirtualBox_Extension_Pack-4.1.4.vbox-extpack

adduser vbox

touch /etc/default/virtualbox

vim /etc/default/virtualbox

VBOXWEB_USER=vbox
VBOXWEB_HOST=127.0.0.1
VBOXWEB_PORT=18083
INSTALL_DIR=/usr/bin/virtualbox

/etc/init.d/vboxweb-service start

apt-get install apache2 php5 unzip

a2enmod php5

cd /etc/apache2/sites-available
cp default phpvirtualbox

vim phpvirtualbox

DocumentRoot /var/www/phpvirtualbox
Directory /var/www/phpvirtualbox>

a2ensite phpvirtualbox

wget http://phpvirtualbox.googlecode.com/files/phpvirtualbox-4.1-4.zip
cp phpvirtualbox-4.1-4.zip /var/www
cd /var/www
unzip phpvirtualbox-4.1-4.zip
mv phpvirtualbox-4.1-4 phpvirtualbox
cd phpvirtualbox

cp config.php-example config.php

vim config.php

/* Username / Password for system user that runs VirtualBox */
var $username = 'vbox';
var $password = 'pass';

*/
var $language = 'pt_br';

apachectl restart

http://192.168.0.8/phpvirtualbox/

admin
admin

Instalar NO-IP no Debian

apt-get update
apt-get install make gcc

mkdir noip && cd noip
wget http://www.no-ip.com/client/linux/noip-duc-linux.tar.gz
tar -zvxf noip-duc-linux.tar.gz
cd noip-2.1.9-1/
make && make install

# Colocar endereço de email: xxxxxxx@xxxxxxx.com
# Colocar senha: ******
# Colocar tempo de atualização do no-ip: 10
# n

cp debian.noip2.sh /etc/init.d/
chmod +x /etc/init.d/debian.noip2.sh
ln -s /etc/init.d/debian.noip2.sh /etc/rc2.d/S20noip

Montando Compartilhamento do Windows no Linux

apt-get install smbfs

mount -t smbfs -o username=Administrador,password=p@ssw0rd //192.168.0.100/Backup/ /Backup/

-t tipo

-o opcoes

username = usuario do windows
password = senha do windows

//192.168.0.100/Backup/ = compartilhamento do windows

/Backup/ = pasta onde vai ser montado o compartilhamento

Ingressando um computador com debian em um dominio Windows

#Sincronizar a hora com a do AD
apt-get install ntpdate
ntpdate 192.168.0.1

#Baixar a versao do likewise para o debian
wget http://www.beyondtrust.com/Technical-Support/Downloads/files/PBISO/6.0/8398/LikewiseOpen-6.0.0.8398-linux-i386-deb.sh
#Deixar ele como executavel
chmod +x LikewiseOpen-6.0.0.8398-linux-i386-deb.sh
#Instalar
./LikewiseOpen-6.0.0.8398-linux-i386-deb.sh install
#Ingressar no dominio
domainjoin-cli join mk2ks.local administrador

#Reinicie a maquina