SMEOnffLine: Instalasi Beberapa Batch File Bermanfaat - Revision history

Onnowpurbo at 01:58, 25 January 2010

2010-01-25T01:58:51Z

← Older revision		Revision as of 01:58, 25 January 2010
Line 215:		Line 215:
	/sbin/iptables -t nat -F POSTROUTING		/sbin/iptables -t nat -F POSTROUTING
	fi		fi


			==Set IP Statik==

			vi /usr/local/bin/setipstatik.sh

			cp /etc/rc.local.ip.statik /etc/rc.local

			==Set IP Dinamik==

			vi /usr/local/bin/setipdinamik.sh

			cp /etc/rc.local.ip.dinamik /etc/rc.local

	==Set Executable==		==Set Executable==

	chmod -Rf 777 /usr/local/bin/		chmod -Rf 777 /usr/local/bin/



	==Pranala Menarik==		==Pranala Menarik==

Onnowpurbo at 01:53, 25 January 2010

2010-01-25T01:53:24Z

← Older revision		Revision as of 01:53, 25 January 2010
Line 215:		Line 215:
	/sbin/iptables -t nat -F POSTROUTING		/sbin/iptables -t nat -F POSTROUTING
	fi		fi

			==Set Executable==

			chmod -Rf 777 /usr/local/bin/

Onnowpurbo at 01:00, 25 January 2010

2010-01-25T01:00:26Z

← Older revision		Revision as of 01:00, 25 January 2010
Line 1:		Line 1:
	==mirrorbuild.sh==		==mirrorbuild.sh==

			apt-get install debmirror
	mkdir /var/data/mirrorkeyring		mkdir /var/data/mirrorkeyring
	gpg --no-default-keyring --keyring /var/data/mirrorkeyring/trustedkeys.gpg --import /usr/share/keyrings/ubuntu-archive-keyring.gpg		gpg --no-default-keyring --keyring /var/data/mirrorkeyring/trustedkeys.gpg --import /usr/share/keyrings/ubuntu-archive-keyring.gpg

Onnowpurbo at 00:59, 25 January 2010

2010-01-25T00:59:43Z

← Older revision		Revision as of 00:59, 25 January 2010
Line 1:		Line 1:
	==mirrorbuild.sh==		==mirrorbuild.sh==

			mkdir /var/data/mirrorkeyring
			gpg --no-default-keyring --keyring /var/data/mirrorkeyring/trustedkeys.gpg --import /usr/share/keyrings/ubuntu-archive-keyring.gpg
	vi /usr/local/bin/mirrorbuild.sh		vi /usr/local/bin/mirrorbuild.sh

Onnowpurbo at 00:52, 25 January 2010

2010-01-25T00:52:20Z

← Older revision		Revision as of 00:52, 25 January 2010
Line 73:		Line 73:
	#### End script to automate building of Ubuntu mirror ####		#### End script to automate building of Ubuntu mirror ####

			==updatewiki.sh==

			vi /usr/local/bin/updatewiki.sh

			rm -Rf /var/data/library/datawiki/*
			rm -Rf /usr/local/src/var
			rm -Rf /usr/local/src/wikidb*
			wget http://125.160.17.21/speedyorari/view.php?file=datawiki/wikidb.sql.gz -O /var/data/library/datawiki/wikidb.sql.gz
			wget http://125.160.17.21/speedyorari/view.php?file=datawiki/images.tar.gz -O /var/data/library/datawiki/images.tar.gz
			cp -Rf /var/data/library/datawiki/* /usr/local/src
			cd /usr/local/src
			tar zxvf images.tar.gz
			gunzip wikidb.sql.gz
			cp -Rf /usr/local/src/var/www/html/wiki/images /var/www/wiki/
			chown -Rf www-data.www-data /var/www/wiki
			/etc/init.d/mysql restart
			mysqladmin --user=root --password=123456 --force drop mediawiki
			mysqladmin --user=root --password=123456 create mediawiki
			mysql -u mediawiki -pmediawiki mediawiki < /var/www/wiki/maintenance/tables.sql
			mysql -u mediawiki -pmediawiki mediawiki < /usr/local/src/wikidb.sql
			/etc/init.d/mysql restart
			cd /var/www/wiki/maintenance
			php update.php
			/etc/init.d/mysql restart
			chown -Rf nobody.nogroup /var/data &
			chmod -Rf 777 /var/data &

			==nobody.sh==

			vi /usr/local/bin/nobody.sh

			chown -Rf nobody.nogroup /var/data &
			chmod -Rf 777 /var/data &

			==aktifkanproxy.sh==

			vi /usr/local/bin/aktifkanproxy.sh

			#!/bin/bash

			# From: AHK <akuhon@kompas.com>
			# To: linux-admin@linux.or.id

			# Save this file and activate through # file_name start
			# and de-activate through # file_name stop

			# This firewall-script can be used for workstation, laptop, router
			# or server that are not running network service (such as web server, ftp
			# server etc)

			# change the parameter UPLINK with Interface device to the Internet.
			# In our case WLAN router with NIC wlan0 connected to the Internet
			# and LAN connection with eth0.
			# if you use dial-up modem, you might use ppp0 as your UPLINK

			UPLINK="eth1"

			# if you run the gateway as router and forward IP packet between eth devices
			# please fill .yes., if not, please fill .no.

			ROUTER="yes"

			# Please change 202.150.10.45 to your static IP address of UPLINK device.
			# For those who use dial-up or dynamic IP, please enter .dynamic.

			# NAT="192.168.1.100"

			NAT="dynamic"

			# please list all network interfaces including eth devices
			# as well as dial-up interface such as ppp0

			INTERFACES="lo eth0 eth1 eth2"

			if [ "$1" = "start" ]
			then
			echo "Activate Firewall ..... "
			/sbin/iptables -F
			/sbin/iptables -P INPUT DROP
			/sbin/iptables -A INPUT -p tcp -i eth0 --destination-port 25 -s ! 192.168.0.1 -j DROP
			/sbin/iptables -A INPUT -p tcp -i eth1 --destination-port 25 -s ! 192.168.0.1 -j DROP

			/sbin/iptables -A INPUT -i ! ${UPLINK} -j ACCEPT
			/sbin/iptables -A INPUT -i ${UPLINK} -p tcp -s 0/0 --dport 25 -j ACCEPT
			/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
			/sbin/iptables -A INPUT -p tcp -i ${UPLINK} -j REJECT --reject-with tcp-reset
			/sbin/iptables -A INPUT -p udp -i ${UPLINK} -j REJECT --reject-with icmp-port-unreachable

			/sbin/iptables -A FORWARD -p tcp --destination-port 25 -s ! 192.168.0.1 -j DROP

			# block bad sites

			/sbin/iptables -I INPUT -s 68.178.211.34 -j DROP
			/sbin/iptables -I INPUT -d 68.178.211.34 -j DROP

			/sbin/iptables -I INPUT -s 64.27.5.168 -j DROP
			/sbin/iptables -I INPUT -d 64.27.5.168 -j DROP

			# turn off packet spoofing in all interfaces
			for x in ${INTERFACES}
			do
			echo 1 > /proc/sys/net/ipv4/conf/${x}/rp_filter
			done

			if [ "$ROUTER" = "yes" ]
			then
			# Activate IP forwarding at router
			echo 1 > /proc/sys/net/ipv4/ip_forward
			if [ "$NAT" = "dynamic" ]
			then
			# Dynamic IP address, activate Masquerading
			echo "Activate Masquerading (Dynamic IP) ...."
			/sbin/iptables -t nat -A POSTROUTING -o ${UPLINK} -j MASQUERADE
			elif [ "$NAT" != "" ]
			then
			# Static IP address use source NAT
			echo "Activate SNAT (static IP) ...."
			/sbin/iptables -t nat -A POSTROUTING -o ${UPLINK} -j SNAT --to ${NAT}
			fi

			# echo "Activate Port Forwarding .."
			# /sbin/iptables -t nat -A PREROUTING -i ${UPLINK} -m multiport -p tcp \
			# --dport 25 -d ${NAT} -j DNAT --to 192.168.0.1:25
			# /sbin/iptables -A FORWARD -i ${UPLINK} -m multiport -p tcp -d 192.168.0.1 \
			# --dport 25 -j ACCEPT

			fi
			elif [ "$1" = "stop" ]
			then
			echo "Deactivate Firewall ..."
			/sbin/iptables -F INPUT
			/sbin/iptables -P INPUT ACCEPT
			/sbin/iptables -F FORWARD
			/sbin/iptables -P FORWARD ACCEPT
			/sbin/iptables -F OUTPUT
			/sbin/iptables -P OUTPUT ACCEPT
			# Turn off NAT or MASQUERADING
			/sbin/iptables -t nat -F POSTROUTING
			fi

Onnowpurbo at 00:43, 25 January 2010

2010-01-25T00:43:38Z

← Older revision		Revision as of 00:43, 25 January 2010
Line 1:		Line 1:
			==mirrorbuild.sh==

	vi /usr/local/bin/mirrorbuild.sh		vi /usr/local/bin/mirrorbuild.sh

Onnowpurbo at 00:43, 25 January 2010

2010-01-25T00:43:12Z

← Older revision	Revision as of 00:43, 25 January 2010
Line 1:	Line 1:
		vi /usr/local/bin/mirrorbuild.sh

		#### Start script to automate building of Ubuntu mirror #####
		## THE NEXT LINE IS NEEDED THE REST OF THE LINES STARTING WITH A # CAN BE DELETED

		#!/bin/bash

		## Setting variables with explanations.

		#
		# Don't touch the user's keyring, have our own instead
		#
		export GNUPGHOME=/var/data/mirrorkeyring

		# Arch= -a # Architecture. For Ubuntu can be i386, powerpc or amd64.
		# sparc, only starts in dapper, it is only the later models of sparc.
		#
		arch=i386

		# Minimum Ubuntu system requires main, restricted
		# Section= -s # Section (One of the following - main/restricted/universe/multiverse).
		# You can add extra file with $Section/debian-installer. ex: main/debian-installer,universe/debian-installer,multiverse/debian-installer,restricted/debian-installer
		#
		section=main,restricted,universe,multiverse

		# Release= -d # Release of the system (Dapper, Edgy, Feisty, Gutsy, Hardy, Intrepid), and the -updates and -security ( -backports can be added if desired)
		#
		# release=jaunty,jaunty-security,jaunty-updates
		# release=karmic
		# release=karmic,karmic-security,karmic-updates
		release=karmic,karmic-security,karmic-updates,karmic-backports,karmic-proposed

		# Server= -h # Server name, minus the protocol and the path at the end
		# CHANGE "*" to equal the mirror you want to create your mirror from. au. in Australia ca. in Canada.
		# This can be found in your own /etc/apt/sources.list file, assuming you have Ubuntu installed.
		#
		# server=opensource.telkomspeedy.com:5432
		# server=dl2.foss-id.web.id
		server=125.160.17.22

		# Dir= -r # Path from the main server, so http://my.web.server/$dir, Server dependant
		#
		inPath=ubuntu

		# Proto= -e # Protocol to use for transfer (http, ftp, hftp, rsync)
		# Choose one - http is most usual the service, and the service must be avaialbe on the server you point at.
		#
		proto=http

		# Outpath= # Directory to store the mirror in
		# Make this a full path to where you want to mirror the material.
		#
		outPath=/var/www/ubuntu

		# The --nosource option only downloads debs and not deb-src's
		# The --progress option shows files as they are downloaded
		# --source \ in the place of --no-source \ if you want sources also.
		# --nocleanup Do not clean up the local mirror after mirroring is complete. Use this option to keep older repository
		# Start script
		#
		debmirror -a $arch \
		--no-source \
		-s $section \
		-h $server \
		-d $release \
		-r $inPath \
		--progress \
		-e $proto \
		$outPath

		#### End script to automate building of Ubuntu mirror ####

Onnowpurbo: New page: ==Pranala Menarik== * SMEOnffLine: Server Berbasis Sabily * SMEOnffLine: Server Berbasis Ubuntu

2010-01-25T00:40:34Z

New page: ==Pranala Menarik== * SMEOnffLine: Server Berbasis Sabily * SMEOnffLine: Server Berbasis Ubuntu

New page

==Pranala Menarik==

* [[SMEOnffLine: Server Berbasis Sabily]]
* [[SMEOnffLine: Server Berbasis Ubuntu]]