FreeBSD - The Infinite

PHP - Different between 2 date

2011-10-23T22:32:00.000-07:00

$date1 = new DateTime($created2[0]);
$date2 = new DateTime("now");

$interval = $date1->diff($date2);
echo $interval->format('%R%a days');

NEW Google Android 4.0 | Samsung Galaxy Nexus

2011-10-18T21:24:00.000-07:00

Google baru je melancarkan Android 4.0 dengan code name Ice Cream Sandwich. Samsung juga tidak ketinggalan melancarkan smartphone yang terbaru iaitu Samsung Galaxy Nexus

Ada duit sila lah sambar satu ? bila nak masuk malaysia ntah.. :P

Zenclouds October Promotion - Malaysia VPS Hosting

2011-10-02T18:01:00.000-07:00

For those who are not familiar with what Zenclouds.com is , check this out :

Zenclouds subsidiary of Art In Software Sdn Bhd is an industry-leading, privately virtual private server hosting and software services provider with headquarters in Malaysia. Since 2003, the company has provided businesses worldwide with reliable, high-capacity networks to host websites, email, business applications, video and other modern, rich-media content.

Zenclouds evolve in one year of research and development mainly focus on Control Panel for managing virtual private server. Zenclouds integrate between Xen technologies and our own Control Panel to ease our customer managing multiple server with different Data Center with one control panel. Zenclouds integrates the industry's best technologies for each customer's specific need and delivers it as a service via the company's commitment and support.

For this upcoming October you can win and own a brand new iPod Shuffle, Nano and Touch when you subscribe any Zenclouds.com package for a year!

Limited time offer! Zenclouds.com go and subscribe now!
http://goo.gl/sCS8y

Galaxy 5 rooted dengan Android 2.2

2011-09-30T02:34:00.001-07:00

Al kisah aku baru je selesai flash phone Galaxy 5 GT-I5503 dari Android 2.1 Esclair ke Android 2.2 Froyo.. Mula-mula memang agak kelam kabut sebab dah salah flash.Maklum la baru 1st time buat ni. Refer sana sini pon masih ada silap lagi :P

So far so good rasa lebih laju sikit. Mungkin kena upgrade sdcard aku dari 2GB ke 4GB ke.. rasa macam tak muat plak dah..

Projek Baru

2011-09-01T21:37:00.000-07:00

Tak terlambat rasanya aku nak ucapkan Selamat Hari Raya buat umat Islam sedunia walaupun hari ini ada yang sudah mula bekerja :)

as the title projek sebelum ni aku buat gateway kat satu cc di kawasan aku. Apa yang aku implement ada seperti berikut :

- Firewall (PF)
- Squid
- DHCP

Cyber cafe complain kena nak main game slow, surf internet pun slow. Masalah kat sini ialah takde line 2mbps keatas.. agak solok la kan :P

so aku dah up kan squid, ada improvement kat surf internet, content web cepat loading..

untuk game aku cadangkan apply lagi satu line streamyx. so ada 2 line 1 mbps. Dengan adanya 2 line ni aku boleh setup gateway untuk route gamers pc ke line 1 dan surf internet ke line 2..

yatta~

FreeBSD : VSFTPD FTP-PROXY

2011-08-16T08:38:00.000-07:00

Vsftpd name come from "Very Secure FTP Daemon". I don't look what is very secure unless the installation is work for me is fine :)

Now we will installing Vsftpd in FreeBSD 8.2. On my network there's a firewall (PF) which using single interface ($ext_if) and with a public IP.

Let start with a Vsftpd installation.
1) If you're unfamiliar with FreeBSD ports style, you can try to search for the path of the vsftpd. Basically in /usr/ports/ftp

# cd /usr/ports
# make search name=vsftpd
Port: vsftpd-2.3.2
Path: /usr/ports/ftp/vsftpd
Info: A FTP daemon that aims to be "very secure"
Maint: dinoex@FreeBSD.org
B-deps:
R-deps:
WWW: http://vsftpd.beasts.org/

2) Install Vsftpd
# cd /usr/ports/ftp/vsftpd
# make install clean

Binary File : /usr/local/libexec/vsftpd &

Sample Configuration File : /usr/local/etc/vsftpd.conf

# Example config file /usr/local/etc/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
#
# READ THIS: This example file is NOT an exhaustive list of vsftpd options.
# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's
# capabilities.
#
# Allow anonymous FTP? (Beware - allowed by default if you comment this out).
#anonymous_enable=YES
#
# Uncomment this to allow local users to log in.
local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
pasv_promiscuous=YES
dirlist_enable=YES
write_enable=YES
#
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
local_umask=022
#
# Uncomment this to allow the anonymous FTP user to upload files. This only
# has an effect if the above global write enable is activated. Also, you will
# obviously need to create a directory writable by the FTP user.
#anon_upload_enable=YES
#
# Uncomment this if you want the anonymous FTP user to be able to create
# new directories.
#anon_mkdir_write_enable=YES
#
# Activate directory messages - messages given to remote users when they
# go into a certain directory.
dirmessage_enable=YES
#

# Activate logging of uploads/downloads.

xferlog_enable=YES

# Make sure PORT transfer connections originate from port 20 (ftp-data).

connect_from_port_20=YES

# If you want, you can arrange for uploaded anonymous files to be owned by

# a different user. Note! Using "root" for uploaded files is not

# recommended!

#chown_uploads=YES

#chown_username=whoever

# You may override where the log file goes if you like. The default is shown

# below.

xferlog_file=/var/log/vsftpd.log

# If you want, you can have your log file in standard ftpd xferlog format.

# Note that the default log file location is /var/log/xferlog in this case.

#xferlog_std_format=YES

# You may change the default value for timing out an idle session.

#idle_session_timeout=600

# You may change the default value for timing out a data connection.

#data_connection_timeout=120

# It is recommended that you define on your system a unique user which the

# ftp server can use as a totally isolated and unprivileged user.

#nopriv_user=ftpsecure

# Enable this and the server will recognise asynchronous ABOR requests. Not

# recommended for security (the code is non-trivial). Not enabling it,

# however, may confuse older FTP clients.

#async_abor_enable=YES

# By default the server will pretend to allow ASCII mode but in fact ignore

# the request. Turn on the below options to have the server actually do ASCII

# mangling on files when in ASCII mode.

# Beware that on some FTP servers, ASCII support allows a denial of service

# attack (DoS) via the command "SIZE /big/file" in ASCII mode. vsftpd

# predicted this attack and has always been safe, reporting the size of the

# raw file.

# ASCII mangling is a horrible feature of the protocol.

#ascii_upload_enable=YES

#ascii_download_enable=YES

# You may fully customise the login banner string:

ftpd_banner=FTP SERVER

# You may specify a file of disallowed anonymous e-mail addresses. Apparently

# useful for combatting certain DoS attacks.

#deny_email_enable=YES

# (default follows)

#banned_email_file=/etc/vsftpd.banned_emails

# You may specify an explicit list of local users to chroot() to their home

# directory. If chroot_local_user is YES, then this list becomes a list of

# users to NOT chroot().

#chroot_local_user=YES

#chroot_list_enable=YES

# (default follows)

#chroot_list_file=/etc/vsftpd.chroot_list

# You may activate the "-R" option to the builtin ls. This is disabled by

# default to avoid remote users being able to cause excessive I/O on large

# sites. However, some broken FTP clients such as "ncftp" and "mirror" assume

# the presence of the "-R" option, so there is a strong case for enabling it.

ls_recurse_enable=YES

# When "listen" directive is enabled, vsftpd runs in standalone mode and

# listens on IPv4 sockets. This directive cannot be used in conjunction

# with the listen_ipv6 directive.

listen=YES

# This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6

# sockets, you must run two copies of vsftpd with two configuration files.

# Make sure, that one of the listen options is commented !!

#listen_ipv6=YES

secure_chroot_dir=/usr/local/share/vsftpd/empty

# If using vsftpd in standalone mode, uncomment the next two lines:

# listen=YES

# background=YES

Installing ftp-proxy

ftp.proxy is a proxy server for a subset of the file tran

       fer protocol described in RFC 959.   It  forwards  traffic

       between  a client and a server without looking too much if

       both hosts do real FTP.  The  FTP  server  can  be  either

       given on the command line or supplied by the client.

# cd /usr/ports

# make search name=ftpproxy

Port: ftpproxy-1.2.3_1

Path: /usr/ports/ftp/ftpproxy

Info: A ftp proxy

Maint: philippe@le-berre.com

B-deps: gettext-0.18.1.1 gmake-3.81_4 libiconv-1.13.1_1

R-deps:

WWW: http://www.ftpproxy.org/

Binary file : /usr/local/sbin/ftp-proxy

Listen port : 8021

Firewall (PF) Packet Filter Rules

Add this rule in your /etc/pf.conf

rdr-anchor "ftp-proxy/*"

rdr pass on $EXT proto tcp from any to any port ftp -> 127.0.0.1 port 8021

Done

Samsung Galaxy S II

2011-06-08T11:23:00.000-07:00

Samsung Mobile baru sahaja mengeluarkan versi terbaru untuk keluaran gadget mobile iaitu Samsung Galaxy S II yang menggunakan processor dual core dari Exynos

Ini antara spec yang terdapat dalam phone baru Galaxy S II

Network: HSPA+ 21Mbps/ HSUPA 5.76Mbps EDGE/ GPRS Class 12 Quad band GSM 850/900/1800/1900 Quad band UMTS 850/900/1900/2100
AP
Samsung Dual Core Application Processor*
Dimensions: 125.3X66.1X8.49mm
Display: 4.3" WVGA SUPER AMOLED Plus *
Memory: 1GB RAM, 16GB/32GB MicroSD (up to 32GB)
Camera: 8MP AF with LED Flash + 2MP Front
Connectivity: Wi-Fi a/b/g/n BT v3.0+HS USB 2.0 OTG
Connectors: MicroUSB, 3.5mm Ear Jack

* May not be applicable in some regions.
* Display: "4.27" in actual measurement

Battery: 1650mAh
OS: Android OS Gingerbread
Message: SMS/MMS (OMA v1.2) Email (POP3/IMAP/SMTP, SSL/TLS) Exchange ActiveSync Email
Audio: MP3, OGG, AAC, AAC+, eAAC+, AMR-NB AMR-WB, WMA, WAV, MID, AC3, IMY, FLAC, XMF
Video: MPEG4, H.264, H.263, WMV, DivX, Xvid, VC-1 Recording & Playback 1080@30fps
Image: JPEG, PNG, GIF, WBMP, BMP, AGIF
GPS: A-GPS
Convergence: Easy Set-up (WPS PIN/PBC, Wi-Fi Direct) AllShare (DLNA1.5) Samsung Kies 2.0, Samsung Kies air

4 Hubs: Social Hub / Readers Hub / Music Hub / Game Hub
Others: TouchWiz Google Mobile Services

Jika dibandingkan phone keluaran dari Google iaitu Google Nexus S, nampak Samsung Galaxy S II lagi mantap dan lebih fresh!

Kita nantikan berapa harga untuk pasaran Malaysia.

Rumah Pertama - Macam-macam...

2011-04-24T19:09:00.000-07:00

Ok, lama jugak aku tak celoteh lagi pasal rumah ni ye. Lately banyak kerja sikit dengan training, projek juta2 lagi :P . Ok yang lepas dah setel bayar duit lawyer. Sebulan yang lepas aku dah dapat kunci rumah, so dah boleh usha ape yang patut pasal rumah tu. Parent and parent in law pon dah masuk rumah.

Everything ok la setakat ni cuma ada plaster sikit kat dinding yang crack. Aku tanya kenapa ada crack, sebab semua rumah kat situ ada crack sikit kat bahagian dinding kat hall dan dapur sikit. Pemaju cakap mungkin masa tu pasir terlebih so ada crack sikit (bahagian plaster). So lepas ni isi borang dan hantar kat pemaju apa yang tak betul, power point tak idup ke ape ke.. so ni take time dalam 1 bulan jugak.

2 minggu yang lepas aku dah kemas kan bahagian depan rumah yang ada tanah sikit kat bahagian porch kereta tu sebab dah naik rumput. So bergotong-royong lah kami kat situ.

Tak lupa juga 2 3 minggu yang lepas aku dah pasang api dan air. Total kos untuk pasang api air nanti akan diupdate sebab resit semua kat rumah tak bawak kat opis nih.

Dan lagi 2 3 minggu yang lepas aku dah tempah grill rumah. Ini part yang paling penting sekali lepas pasang api dan air kat rumah tu. Sebelum aku start pasang lampu dan lain2 kena secure kan dulu hehe.. sebab planning memang lambat lagi nak masuk rumah. Maklum la wife pon dah nak bersalin lagi 2 3 bulan. So kena prepare apa yang patut dulu :)

lagi nanti akan diupdate. Pada yang baru nak beli rumah tu boleh la usha kat sini untuk review and planning sikit2 :)

yatta~

FreeBSD - 7.2 -> 8.2 PHP upgrade issue

2011-04-23T02:51:00.000-07:00

If you are upgrading from 7.x to 8.2-RELEASE you may encounter some issue regarding PHP. So I suggest to read /usr/ports/UPDATING for more information

There will be some errors regarding pcre,ming,and spl extension for PHP

- php5-dbase
- php5-ncurses
- php5-pcre
- php5-spl
- php5-ming
- php5-mhash

Quick solutions is by forcing deinstall the package above by using pkg_delete

#pkg_delete -f package_name_version

User pkg_version -l for more specific package name.

Yatta!~

FreeBSD - Upgrade Punya Cerita

2011-04-22T21:22:00.000-07:00

Sebab malas nak pegi data center kat Jaring tu, aku buat remote upgrade je kat box putera.com. Orang lain takde expertise nak buat, geng teknikal putera.com pon tak berapa nak menyerlah. Semua dah pegi tempat lain..

Aku start upgrade malam tadi. Sebab kadang tu ada hal lain so aku guna screen je lah biar session tu ada je so senang aku nak resume / kalau ada error nanti. Kang aku terminate mampus kena buat balik..

Sape2 yang tunggu forum putera.com up balik, harap bersabar lah ye, aku memang tengah berusaha dengan keras nih :)

FreeBSD - 7.2 -> 8.2 Upgrade Problem

2011-04-22T18:50:00.000-07:00

One of our box at data center using FreeBSD 7.2-p6 and after that we don't have any plan to upgrade the FreeBSD since everything works well without errors. Our implementation using Jails is perfect and work like a load balancing inside the FreeBSD. PF work as the firewall and load balancer with Apache.

Using freebsd-update upgrade is easy, once your enter the command everything will work with order and you can relax and take a cup of coffee while waiting the process upgrade.

1) Suddenly we got some problem when tried to upgrade the 3rd party package with portupgrade when at the end some error appeared.

/libexec/ld-elf.so.1: Shared object "libcrypt.so.4" not found, required by "httpd"
[: -eq: argument expected

Searching around found some solution to install compat7x from /usr/ports/misc
http://goo.gl/wwxpq

2) Once the libs problem solved, another problem came up. pkgdb.db is not recognized!

/var/db/pkg/pkgdb.db: unexpected file type or format

Google around I found some convincing solutions that can be implemented :)

http://goo.gl/83M0R noted that the date is sort of outdated. But still reasonable.

Iklan dan seksi

2011-04-17T08:20:00.000-07:00

Satu-satu produk itu memang perlukan iklan dalam memasarkan produk mereka. Tiada salahnya mengiklankan produk kita itu dengan hasil karya teknologi canggih dengan kesan multimedia yang memukau.

Tapi perlukah iklan itu dikaitkan dengan segala macam jenis perempuan yang seksi dan seksa untuk melihatnya ?

Apa kaitan perempuan seksi dengan iklan / produk ?

Tengok macam Google, masih berjaya dengan produk meraka yang canggih. Tapi tak perlu nak tonjollkan perempuan yang seksi..

Mozilla.. lebih kepada kartun dalam pemasaran produk mereka..

Apa nak jadi dengan Malaysia..

Kerja Punya Cerita

2011-02-01T06:51:00.000-08:00

Salam,

Hari ni nak cerita sikit pasal kerja ni, Alhamdulillah aku sekarang dah dapat kerja yang stabil dan boss yang memahami. Kerja jangan tension, relek dan cool janji siappp! haha..

Sekarang ni memang susah cari kerja, walaupun kerajaan war-warkan ekonomi kita kukuh, takda masalah apa semua, tapi hakikatnya rakyat menderita. Bayangkan tawaran kerja tak seberapa, tapi graduan yang keluar dari universiti tu beribu tiap-tiap tahun. Yang pasti mereka ni semua nak kan kerja.

Harap pihak kerajaan dapat buat sesuatu la untuk tarik para pelabur atau berikan galakkan untuk usahawan-usahawan kita ni berikan peluang pekerjaan yang mencukupi untuk para pencari kerja..

Rumah Pertama - Lawyer Fee

2011-01-23T20:50:00.000-08:00

ok lah aku dah lama tak berceloteh pasal isu beli rumah ni.. tiba-tiba rasa nak menulis pula :) . Anyway minggu lepas aku baru je lepas bayar bayaran untuk laywer untuk rumah baru kami ni di Melaka Raya. Nak dikira-kira jumlah bayaran lawyer ni boleh tahan juga tapi apa kan daya.. hanya mampu tengok duit tu terbang je haha!~

Sebelum tu kami dah tanya dengan pemaju pasal sambungan api dan air. Wakil pemaju tu pun bagitau kami yang bila kami setel kan bayaran lawyer tu, baru bank akan bayar dekat pemaju. Once dah setel, barulah kami dapat kunci rumah. Punya la lama proses nak beli rumah ni ye, maklum la ni pun pengalaman kami yang pertama pasal beli rumah ni so memang agak teruja dan sangat-sangat takde ilmu pasal proses semua ni.

Aku and wife mula terpikir, sebelum ni banyak kes-kes pasal pembeli kena bayar duit rumah, tapi rumah tak siap-siap lagi. Ada kes tu pasal takde Certificate of Fitness ( CF ). Memang rasa serabut la, kita dok bayar duit rumah nak duduk tapi sampai 4 5 tahun bayar pon tak dapat duduk lagi.. mau tak tensionnn!~

Sebelum kami beli rumah pon sedara mara ada bagitau, nak beli rumah sekarang biar beli rumah yang dah siap. Selidik dulu pasal pemaju yang buat rumah tu. Tengok rumah-rumah yang dah siap diaorg buat dulu and kalau ada internet tu boleh la buat research sikit kat google :)

ah.. lupa nak bagitau kos bayaran lawyer tu sekitar RM3k++ banyak kan ? kalau beli barang-barang rumah mau complete tu hehe.. siap lampu yang cun2 lagi.. Lepas aku bayar kat lawyer, aku tanya ada apa-apa lagi tak yang saya kena bayar lepas ni. Staff tu pon bagitau, dah takde ape lagi nak bayar dah, tunggu bank clear kan dengan pemaju..

sambung lain kali...

yatta~

CentOS | crontab editor

2011-01-18T21:35:00.000-08:00

Just got my new xen image from Stacklet.org. Everything goes fine except when I try to add some cron activity, something strange appear :

bash# crontab -e
no crontab for root - using an empty one
/bin/sh: /bin/vi: No such file or directory
crontab: "/bin/vi" exited with status 127

what? no vi with a defautl install ? hmm.. I wonder why they strip off the vi editor. Never mind. Googling around and I found some work around to make this happen.

Put a file in your ~.

bash# touch ~/.bashrc

add with your prefered editor.

export VISUAL=nano

refresh

bash# source ~/.bashrc

PHP - It is not safe to rely on the system's timezone settings

2011-01-16T21:24:00.000-08:00

If you ever face this problem, then you should set in your php.ini for the proper timezone.

edit php.ini and add this line :

date.timezone = "Asia/Kuala_Lumpur"

restart your webserver and success!!

CakePHP - Update fields with conditions

2010-12-06T01:40:00.000-08:00

Kita boleh update field database berdasarkan conditions seperti berikut :

$this->Model->updateAll(
            array('Model.backup'=>'1'),
            array('Model.name'=>$a)
            );
        $this->redirect(array('controller'=>'Controller', 'action'=>'Action'));

Nginx PhpMyAdmin PHP - Cannot Start Session Without Errors

2010-11-17T16:26:00.000-08:00

PhpMyAdmin should work properly with normal PHP installation with Nginx as the web server. Unfortunately there's an error regarding session error. Default PHP installation will configure the session path owner to Apache. This isn't right for the nginx and to store the session. More investigation from the php.ini will show you the path for the session. Take a note :

session.save_path = "/var/lib/php/session"

Solutions :

1) Change the owner for the /var/lib/php/session

From :

bash# ls -l /var/lib/php
total 4
drwxrwx--- 2 root apache 4096 Nov 13 2009 session

To :

# ls -l /var/lib/php
total 4
drwxrwx--- 2 root www-data 4096 Nov 18 03:18 session

Finally restart your Nginx and try to browse your phpmyadmin. This should work for now :)

Yatta~

CentOS 5.5 - PHP 5.1.x to PHP 5.2.x

2010-11-12T19:02:00.000-08:00

Secara default CentOS akan membekalkan versi PHP yang stable iaitu PHP 5.1 didalam repos. Tetapi ada beberapa aplikasi web contohnya PhpMyAdmin yang memerlukan versi PHP yang terkini. Untuk itu kita kena edit di bahagian yum repos untuk memasukkan PHP terkini dari repos testing.

Sebelum

bash#php -v
PHP 5.1.6 (cli) (built: Mar 31 2010 02:39:17)
Copyright (c) 1997-2006 The PHP Group
Zend Engine v2.1.0, Copyright (c) 1998-2006 Zend Technologies

1. Edit /etc/yum.repos.d/CentOS-Testing.repo
Masukkan code dibawah dalam file tersebut.

# CentOS-Testing:
# !!!! CAUTION !!!!
# This repository is a proving grounds for packages on their way to CentOSPlus and CentOS Extras.
# They may or may not replace core CentOS packages, and are not guaranteed to function properly.
# These packages build and install, but are waiting for feedback from testers as to
# functionality and stability. Packages in this repository will come and go during the
# development period, so it should not be left enabled or used on production systems without due

# consideration.

[c5-testing]
name=CentOS-5 Testing
baseurl=http://dev.centos.org/centos/$releasever/testing/$basearch/
enabled=1
gpgcheck=1
gpgkey=http://dev.centos.org/centos/RPM-GPG-KEY-CentOS-testing
includepkgs=php*

2. Update

bash#yum update

Dependencies Resolved

=============================================================================================================================================================
 Package                             Arch                            Version                                       Repository                           Size
=============================================================================================================================================================
Updating:
 php                                 x86_64                          5.2.10-1.el5.centos                           c5-testing                          1.2 M
 php-cli                             x86_64                          5.2.10-1.el5.centos                           c5-testing                          2.4 M
 php-common                          x86_64                          5.2.10-1.el5.centos                           c5-testing                          242 k
 php-devel                           x86_64                          5.2.10-1.el5.centos                           c5-testing                          549 k
 php-gd                              x86_64                          5.2.10-1.el5.centos                           c5-testing                          114 k
 php-imap                            x86_64                          5.2.10-1.el5.centos                           c5-testing                           50 k
 php-mcrypt                          x86_64                          5.2.9-2.el5.centos.3                          c5-testing                           16 k
 php-mhash                           x86_64                          5.2.9-2.el5.centos.3                          c5-testing                          8.5 k
 php-mysql                           x86_64                          5.2.10-1.el5.centos                           c5-testing                           83 k
 php-pdo                             x86_64                          5.2.10-1.el5.centos                           c5-testing                           63 k
 php-pear                            noarch                          1:1.8.1-2.el5.centos                          c5-testing                          419 k
 php-snmp                            x86_64                          5.2.10-1.el5.centos                           c5-testing                           25 k
 php-tidy                            x86_64                          5.2.9-2.el5.centos.3                          c5-testing                           20 k
 php-xml                             x86_64                          5.2.10-1.el5.centos                           c5-testing                          103 k
 php-xmlrpc                          x86_64                          5.2.10-1.el5.centos                           c5-testing                           52 k

Install       0 Package(s)
Upgrade      15 Package(s)

Total download size: 5.3 M
Is this ok [y/N]: y

Update seperti biasa.. dan.. wohoooo~

Selepas

bash# php -v
PHP 5.2.10 (cli) (built: Nov 13 2009 11:44:05) 
Copyright (c) 1997-2009 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2009 Zend Technologies

Rumah Pertama

2010-10-24T19:03:00.000-07:00

Assalamualaikum,

Seminggu yang lepas aku dan isteri usha-usha rumah baru kitaorg. Yang pasti rumah dekat melaka :). Well, ini adalah pengalaman pertama kitaorg beli rumah sendiri. Memang rasa janggal dan tak reti juga, tapi kena belajar macam mana nak deal dengan pemaju.

Antara taman yang menjadi idaman aku dan isteri ialah Taman Tun Kudu dekat area Bukit Katil, Melaka. Kawasan ni kira ok juga, dekat dengan bandar Melaka, Masjid, klinik, sekolah dan kawasan kedai-kedai. Kitaorg pon memang sangat-sangat berkenan area rumah tu. Yang penting sekali senang nak ke tempat kerja hehe..

Jumaat lepas aku dan wife pergi ke pejabat pemaju tu dekat Melaka Raya. Antara yang kitaorg bincang :

- Harga rumah
- Pinjaman (full loan / 10% deposit )
- Hak milik kekal
- Free gift ada ke tak :P

Itu antara yang kitaorg bincang setakat tu, 2 hari lepas tu kitaorg terus booking rumah tu sebab memang dah berkenan sangat!

yatta~

Grant remote user to database

2010-09-28T20:18:00.000-07:00

The following command will grant an access to your remote server to connect to your preferred database server.

shell>mysql -u root -p
mysql>grant all on mydb.* to user@'ip.add.re.ss' identified by 'p455w0rd';

Selamat Hari Raya | Maaf Zahir Batin

2010-09-08T01:37:00.000-07:00

Dikesempatan ini aku sekeluarga ingin mengucapkan Selamat Hari Raya buat pengunjung maya blog aku dah juga rakan-rakan yang sempat membaca entri ini. Setelah kita berpuasa sebulan kini tiba masanya untuk hari kemenangan perjuangan dan pengorbanan kita kepada Allah.

Semoga ibadah yang kita lakukan pada bulan Ramadhan diterima oleh Allah, Insyallah.

Tidak lupa kepada ibu bapa di Muar dan juga mertua di Melaka, Selamat Hari Raya Maaf Zahir Batin :)

p/s:pada yang pulang ke kampung, diharap berhati-hati di jalan raya dan pandu dengan cermat :)

Ajaxterm-0.10 patch for Firefox 3.6

2010-09-02T17:03:00.000-07:00

Last night just got an idea for my project to use ajaxenterm for my vps web console and other things that need to be done for. When I testing to use the ajaxenterm, everything is fine for Chrome except Firefox 3.6 that doesn't show the terminal box (I don't have IE to test on this issue :P )

Searching around I found interesting discussion and thanks to open source and the person that made the patch for this issue ( https://bugs.launchpad.net/silva/+bug/512236 )

Download the patch and patch the file immediately :)

bash> patch -p1 sarissa.js.patch

Ubuntu - Restore toolbar

2010-08-10T00:01:00.000-07:00

If you've messing up the toolbar and want to restore to the default setting you can do like this :

bash> rm -rf ~/.gnonf/apps/panel
bash> killall gnome-panel

the toolbar will restore to the default value and you can configure it back :)

Ubuntu - Enable mod_rewrite

2010-08-05T01:28:00.000-07:00

Enabling mod_rewrite for cakephp 1.3 in 3 easy steps :

1) Enable the module
bash>sudo a2enmode rewrite

2) Make a soft link
bash>sudo ln -s /etc/apache2/mods-available/rewrite.load /etc/apache2/mods-enabled/

3) Restart the apache server
bash> sudo /etc/init.d/apache2 restart

p/s:Check in your phpinfo() if mod_rewrite is enable :)

Python - How to check active domain

2010-07-20T20:58:00.000-07:00

This is python and libvirt related post, beware!!

Ok now I want to check from my script, let's say :

bash> xencheck.py nameofvps

So I want the script to check if the vps name is available and active. This is what I done :

#!/usr/bin/python -u

import libvirt
import sys
import os

def Startup():
if not os.access("/proc/xen", os.R_OK):
   print "System is not running Xen kernel!"
   sys.exit(1)

#connect to hypervisor
conn = libvirt.open("xen:///default")

if conn == None:
   print 'Failed to connect to hypervisor'
   sys.exit(1)

dom0 = conn.listDomainsID()
for id in dom0:
dom1 = conn.lookupByID(id)
if dom1.name() == sys.argv[1]:
  print dom1.name()

#main function to execute
def main():
Startup()

if __name__ == "__main__":
main()

Installing Nginx on FreeBSD 8.0

2010-05-21T08:46:00.000-07:00

Nginx (engine-X) is a light and fast web server to serve a static & dynamic web content. It has many features that can be enable from the modules. Witha lower memory consumption, it is the choice for a busy web server. Nginx can be configured to replace the popular Apache web server next time :)

we are going to install Nginx with a basic configuration on FreeBSD 8.0.

1) Update your ports

shell> cvsup -g -L 2 ports-supfile

2) Install from ports

shell> cd /usr/ports/www/nginx
shell> make configure
shell> make install distclean

Make sure you install modules that you required to use.

3) Enable at boot

shell> nano /etc/rc.conf

add :

nginx_enable="YES"

To start the nginx simply run this command :

shell> /usr/local/etc/rc.d/nginx start

Configuration file :

/usr/local/etc/nginx/nginx.conf

Log file :

/var/log/nginx-error.log
/var/log/nginx-access.log

Document root :

/usr/local/www/nginx

yatta~

PAM SSH Failed

2010-05-20T00:19:00.000-07:00

The problem occur today when I'm installing ShellinaBox for our project purporse. As you can see it said that tty 'pts/2' is not secure.
so what to do?

May 20 19:41:35 localhost login: pam_securetty(remote:auth): access denied: tty 'pts/2' is not secure !
May 20 19:41:39 localhost login: FAILED LOGIN 1 FROM 192.168.1.110 FOR root, Authentication failure

1) Edit your /etc/securetty

default:
console
vc/1
vc/2
vc/3
vc/4
vc/5
vc/6
vc/7
vc/8
vc/9
vc/10
vc/11
tty1
tty2
tty3
tty4
tty5
tty6
tty7
tty8
tty9
tty10
tty11

2) Just add the pts/2 in the list

console
vc/1
vc/2
vc/3
vc/4
vc/5
vc/6
vc/7
vc/8
vc/9
vc/10
vc/11
tty1
tty2
tty3
tty4
tty5
tty6
tty7
tty8
tty9
tty10
tty11
pts/2

Run back the ShellinaBox, and you are good to go..

yatta~~

Install Django on Ubuntu

2010-05-17T05:48:00.000-07:00

If you are geek then this post is not for your level.. :)

1)Download django
2)Extract and install

shell> tar xzvf Django-1.1.1.tar.gz
shell> mv Django-1.1.1 django
shell> cd django
shell> sudo python setup.py install

Then test on your console :

django$ python
Python 2.6.4 (r264:75706, Dec 7 2009, 18:45:15)
[GCC 4.4.1] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import django
>>>

If no error, then you are good to go!

yatta~

MySQL Enterprise Monitor browser not supported

2010-05-05T17:49:00.001-07:00

The MySQL Enterprise Dashboard is known not to work within the following browser environments:

Microsoft Internet Explorer 6.x
Opera
Google Chrome

MySQL Enterprise thingy

2010-05-05T08:31:00.000-07:00

It's been a weird thing when you install MySQL server especially the one that is 'enterprise' version is not working with your PHP. That is the problem that my friend and I facing today. Since PHP require php-mysql extension to connect to MySQL server but php-mysql is only work with mysql-server from the Repos (Redhat/Centos).

1) Remove default mysql-server/php-mysql
2) Install MySQL Enterprise
3) Dependencies conflict occur + headache + install php-mysql

shell> yum install php-mysql
Loaded plugins: rhnplugin, security
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package php-mysql.x86_64 0:5.1.6-27.el5 set to be updated
--> Processing Dependency: libmysqlclient.so.15(libmysqlclient_15)(64bit) for package: php-mysql--> Processing Dependency: libmysqlclient.so.15()(64bit) for package: php-mysql
--> Running transaction check
---> Package mysql.x86_64 0:5.0.77-4.el5_4.2 set to be updated
--> Processing Conflict: mysql conflicts MySQL
--> Finished Dependency Resolution
mysql-5.0.77-4.el5_4.2.x86_64 from rhel-x86_64-server-5 has depsolving problems
--> mysql conflicts with MySQL-server-advanced-gpl
Error: mysql conflicts with MySQL-server-advanced-gpl
You could try using --skip-broken to work around the problem
You could try running: package-cleanup --problems
package-cleanup --dupes
rpm -Va --nofiles --nodigest

Googling around really takes my time.. but fortunately found one that might help me from the error that I bold above. I assume after installing mysql-client-enterprise(not a real name) should have libmysqlclient that php-mysql looking for..but I'm totally wrong. The libmysqlclient reside in one of the file that I download from the mysql enterprise but in mysql-share-compat-enterprise (not really complete name)

http://bugs.mysql.com/bug.php?id=46057

1) Install mysql-server-enterprise
2) Install mysql-client-enterprise
3) Install mysql-share-compat-enterprise

That should save your time and your penny! :)

yatta~

Python - Xen and libvirt

2010-05-03T01:32:00.001-07:00

more function can be found in python dir libvirtclass.txt

shell> find / -name libvirtclass.txt

Generated Classes for libvir-python

#
# Global functions of the module
#

# functions from module libvirt
open()
openReadOnly()
virEventRegisterImpl()
virInitialize()

# functions from module virterror
virGetLastError()
virResetLastError()

#
# Set of classes of the module
#

Class virDomain()

    # functions from module libvirt
    ID()
    OSType()
    XMLDesc()
    attachDevice()
    blockPeek()
    connect()
    coreDump()
    create()
    destroy()
    detachDevice()
    maxMemory()
    maxVcpus()
    memoryPeek()
migrate()
    name()
    reboot()
    ref()
    resume()
    save()
    setAutostart()
    setMaxMemory()
    setMemory()
    setVcpus()
    shutdown()
    suspend()
    undefine()

    # functions from module python
    UUID()
    UUIDString()
    autostart()
    blockStats()
    info()
    interfaceStats()
    pinVcpu()
    schedulerParameters()
    schedulerType()
    setSchedulerParameters()
    vcpus()
Class virNetwork()

    # functions from module libvirt
    XMLDesc()
    bridgeName()
    connect()
    create()
    destroy()
    name()
    ref()
    setAutostart()
    undefine()
# functions from module python
    UUID()
    UUIDString()
    autostart()
    networkLookupByUUID()
Class virStoragePool()

    # functions from module libvirt
    XMLDesc()
    build()
    connect()
    create()
    createXML()
    delete()
    destroy()
    name()
    numOfVolumes()
    ref()
    refresh()
    setAutostart()
    storageVolLookupByName()
    undefine()

    # functions from module python
    UUID()
    UUIDString()
    autostart()
    info()
    listVolumes()
Class virStorageVol()

    # functions from module libvirt
    XMLDesc()
    connect()
    delete()
    key()
    name()
path()
    ref()
    storagePoolLookupByVolume()

    # functions from module python
    info()
Class virConnect()

    # functions from module libvirt
    close()
    createLinux()
    createXML()
    createXML()
    defineXML()
    findStoragePoolSources()
    getCapabilities()
    getFreeMemory()
    getHostname()
    getMaxVcpus()
    getType()
    getURI()
    lookupByID()
    lookupByName()
    lookupByUUIDString()
    migrate()
    networkCreateXML()
    networkDefineXML()
    networkLookupByName()
    networkLookupByUUIDString()
    nodeDeviceLookupByName()
    numOfDefinedDomains()
    numOfDefinedNetworks()
    numOfDefinedStoragePools()
    numOfDevices()
    numOfDomains()
    numOfNetworks()
    numOfStoragePools()
    ref()
restore()
    storagePoolCreateXML()
    storagePoolDefineXML()
    storagePoolLookupByName()
    storagePoolLookupByUUID()
    storagePoolLookupByUUIDString()
    storageVolLookupByKey()
    storageVolLookupByPath()

    # functions from module python
    getCellsFreeMemory()
    getInfo()
    listDefinedDomains()
    listDefinedNetworks()
    listDefinedStoragePools()
    listDevices()
    listDomainsID()
    listNetworks()
    listStoragePools()
    lookupByUUID()

    # functions from module virterror
    virConnGetLastError()
    virConnResetLastError()
Class virNodeDevice()

    # functions from module libvirt
    XMLDesc()
    destroy()
    dettach()
    name()
    numOfCaps()
    parent()
    reAttach()
    ref()
    reset()

    # functions from module python
# functions from module virterror
    virConnGetLastError()
    virConnResetLastError()
Class virNodeDevice()

    # functions from module libvirt
    XMLDesc()
    destroy()
    dettach()
    name()
    numOfCaps()
    parent()
    reAttach()
    ref()
    reset()

    # functions from module python
    listCaps()

Functions skipped:
    virConnectListDomains
    virConnSetErrorFunc
    virGetVersion
    virDomainGetSecurityLabel
    virConnectDomainEventDeregister
    virConnectGetVersion
    virSetErrorFunc
    virConnectListDomains
    virConnCopyLastError
    virConnectOpenAuth
    virCopyLastError
    virNodeGetSecurityModel
    virFreeError
    virDefaultErrorFunc
    virResetError
    virSaveLastError
    virConnectDomainEventRegister

Python - Xen and libvirt

2010-05-02T23:30:00.000-07:00

basic python script with libvirt

#!/usr/bin/python -u

import libvirt
import sys
import os

if not os.access("/proc/xen", os.R_OK):
    print 'System is not running a Xen kernel'
    sys.exit(1)

conn = libvirt.openReadOnly(None)

if conn == None:
    print 'Failed to open connection to the hypervisor'
    sys.exit(1)

# print conn

for id in conn.listDomainsID():
    dom0 = conn.lookupByID(id)

    print "Dom %s State %s" % ( dom0.name(), dom0.info()[0])

Some example :

python# ./script1.py
Please choose :

1) Show VPS

2) test 2
1
Domain Domain-0 ID 0 State 1 OS linux (Active Domain)
Domain zenvps2 ID 3 State 2 OS linux (Active Domain)
Domain zenvps ID 4 State 2 OS linux (Active Domain)

Centos x86_64 subversion conflict

2010-04-29T19:16:00.000-07:00

We are on testing stage for our new x86_64 Centos OS, where we currently fixing the 32GB RAM problem..

so after finish the installation, we try to update the OS and there's some error complaining about subversion. As googling around I found that on this 64bit OS it's include also with 32bit package, so that is why some conflict occur.

file /usr/share/xemacs/site-packages/lisp/psvn.el
from install of subversion-1.5.5-0.1.el5.rf
conflicts with file from package subversion-1.4.2-2.el5

Solutions :

1) we have to remove the subversion.i386

2) update the x86_64 subversion

shell> yum erase subversion.i386

shell> yum update subversion

yattta!~

Malaysia CentOS Mirror

2010-04-26T23:09:00.000-07:00

Yeah yet another CentOS mirror and this is from Malaysia.

URL : http://centos.maulvi.net

Thanks to my old friend Maulvi :)

Red Hat License

2010-04-20T07:32:00.000-07:00

Today our task is to install and configure the OpenLDAP in one of our Red Hat server at our client data centre. We thought they already order the license for the Red Hat installation, but sad to say,they just bought only 1 license, which they believe 1 license can be install and used with other Red Hat server.

1 server license is almost RM6,000 or more with premium support.

Wonder how much you need to spend for 14 servers in the data center ? :)

fsck headache

2010-04-06T08:14:00.000-07:00

today I got a call from one of my client that they cannot access to the internet and told me that the gateway got some problem. Since the error makes the server inaccessible from the net, then I might got to the site to fix it. Further checking found that there's some power cut few days before and the server is not properly shutdown.

SOFT UPDATE INCONSISTENCY

The error prompted will give you 1 choice to enter to single mode and fix the problem. Either you reboot or fscking :)

How to fix it?

shell> fsck -y

* -y will answer yes for all of the question given.

Warning Nuffnanger's!

2010-04-01T20:57:00.001-07:00

Dear Nuffnangers,

As you might already know, there are 2 different types of campaigns from Nuffnang: Metered (mCPM) Campaigns , which pay according to the number of visitors who see the ads; and Cost-Per-Click (CPC) campaigns, which pay bloggers based on the number of clicks generated on the ads.

It has come to our attention that certain groups have been committing click fraud, which is defined as clicking on CPC advertisements intentionally just to generate earnings for a blog's owner. Do note that this act is an abuse of our Terms & Conditions under Section 6.

Banner ads are only supposed to be clicked on if the viewer is interested to find out more about the advertising campaign, and not for the intention of earning extra money. Should this situation worsen, the frequency of ad campaigns might be significantly reduced as we'll only be able to sell ad spaces on blogs with no click fraud record.

Our system is capable of tracking these illegal actions which are documented and if necessary, be used as evidence for any legal purposes. In the past, Nuffnang has suspended and banned various individuals and groups for committing this offence. However, as the number of bloggers who commit this selfish act has been growing in an alarming rate within our community, we're forced to be more vigilant and will take necessary action to ensure our other members of the community who do not engage in such act to suffer in the long run.

If you are aware of any of your friends or anyone who have been engaging in such acts, we would appreciate it if you could kindly advise them to refrain from doing so, as bloggers who are caught engaging in click fraud activities will be punished severely, either by suspension or termination.

Thank you for your attention.

Cheers
Blogger Relations Department
Nuffnang Sdn Bhd

Windows 2003 - Failed to copy, folder or file name is too long

2010-03-28T07:08:00.000-07:00

Although this blog is about FreeBSD, but at my office we still maintain 2 server that installed with Windows Server 2003 which I believe it is outdated for now.. but the management still want to use it..

Couple years back, so of the staff created an index file, something like this :

1.0 data1
2.0 data2/2.1 data2_1/2.1.1 Data2 time date.xls

This is a big problem when you tried to copied the entire folder to other folder (external hard disk). So I googling around the net and found this useful tools that can do the copied job using the command line

Windows Server 2003 Resource Kit Tools

so what we can do to solve this problem is to open your cmd, and check if ROBOCOPY is installed in your batch.

C:/ROBOCOPY /?

Copy tools :

C:/ROBOCOPY [SOURCE] [DESTINATION]

Example :

C:/ROBOCOPY "H:/YOUR FILE" "I:/YOUR 2ND FOLDER" /S

Note : /S is to create subfolder

Yatttaaa~

FreeBSD - Custom Kernel

2010-03-21T22:26:00.000-07:00

Our previous FreeBSD installation may lack of options like ALTQ for PF (Packet Filter). So we have to compile our kernel to a new kernel with some option enable. Prepare yourself..

• Make sure you are on i386 architecture machine
• Copy the original GENERIC kernel to a new one.
• Bare in mind, you are not allowed to make any changes to the original kernel. Since we will use that for our 'work in hand' kernel if anything goes wrong.

shell>cd /usr/src/sys/i386/conf
shell>cp GENERIC MYKERNEL

• Edit MYKERNEL using your prefered editor. Mine prefer nano :)

shell>nano MYKERNEL

• For this tutorial we will enable ALTQ for PF

#options for pf (packet filter) ALTQ
options ALTQ
options ALTQ_CBQ
options ALTQ_RED
options ALTQ_RIO
options ALTQ_HFSC
options ALTQ_PRIQ
options ALTQ_NOPCC

#pf (packet filter)
device pf
device pflog
device pfsync

• Save and let's build them up!

shell> cd /usr/src
shell>make buildkernel KERNCONF=MYKERNEL

• Install the new kernel

shell>make installkernel KERNCONF=MYKERNEL

• When finished, the output will look like this :

--------------------------------------------------------------
>>> Kernel build for MYKERNEL completed on Tue Dec 29 20:18:53 MYT 2009
--------------------------------------------------------------

• Reboot your machine and make sure you are using the custom kernel

shell>uname -a
FreeBSD web.domain.com 7.2-RELEASE-p5 FreeBSD 7.2-RELEASE-p5 #0: Tue Dec 29 20:10:31 MYT 2009 root@web.domain.com:/usr/obj/usr/src/sys/MYKERNEL i386

BSDMag - Online Issue

2010-03-21T08:56:00.000-07:00

New issue already out to download.

FreeBSD - SSHGuard

2010-03-21T03:23:00.001-07:00

http://www.sshguard.net/

SSHGuard adalah salah satu tools yang ada di ports untuk melindungi ssh servis anda dari diserang secara bruteforce. Ia menggunakan sistem log dari syslog untuk mengesan IP yang gagal untuk login ke server.

- Install dari ports

proxy# /usr/ports/security/sshguard-pf
proxy# make install clean

- Konfigurasi PF
shell> nano /etc/pf.conf

#di bahagian table
table "" persist #sila buang "", <> tak boleh :P

#bahagian block rules
block in quick on $ext_if proto tcp from to any port 22 label "ssh bruteforce"

- Aktifkan rules pf yang baru
shell> pfctl -ef /etc/pf.conf

- Edit /etc/syslog.conf
uncomment line yang berkenaan sshguard

proxy# nano /etc/syslog.conf

GNU nano 2.0.9 File: /etc/syslog.conf

# $FreeBSD: src/etc/syslog.conf,v 1.28.20.1 2009/04/15 03:14:26 kensmith Exp $
#
# Spaces ARE valid field separators in this file. However,
# other *nix-like systems still insist on using tabs as field
# separators. If you are sharing this file between systems, you
# may want to use only tabs as field separators here.
# Consult the syslog.conf(5) manpage.
auth.info;authpriv.info |exec /usr/local/sbin/sshguard
*.err;kern.warning;auth.notice;mail.crit /dev/console
*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
security.* /var/log/security
auth.info;authpriv.info /var/log/auth.log
mail.info /var/log/maillog
lpr.info /var/log/lpd-errs
ftp.info /var/log/xferlog
cron.* /var/log/cron
*.=debug /var/log/debug.log
*.emerg *
# uncomment this to log all writes to /dev/console to /var/log/console.log
#console.info /var/log/console.log
# uncomment this to enable logging of all log messages to /var/log/all.log
# touch /var/log/all.log and chmod it to mode 600 before it will work
#*.* /var/log/all.log
# uncomment this to enable logging to a remote loghost named loghost
#*.* @loghost
# uncomment these if you're running inn
# news.crit /var/log/news/news.crit
# news.err /var/log/news/news.err
# news.notice /var/log/news/news.notice
!startslip
*.* /var/log/slip.log
!ppp
*.* /var/log/ppp.log

- Aktifkan konfigurasi syslog yang baru

shell> /etc/rc.d/syslogd reload

- Untuk mencuba sila login dengan username yang salah secara berturut menggunakan host yang berlainan dari pc anda yang remote secara terus ke server, ia bagi mengelakkan pc anda di block terus dan tidak dapat diakses sama sekali.

- Untuk melihat table PF bagi IP yang sudah di block, boleh menggunakan pfctl

shell> pfctl -Ts how -t sshguard
No ALTQ support in kernel
ALTQ related functions disabled
200.200.200.199

- Untuk delete IP yang diblock boleh juga menggunakan pfctl

shell> pfctl -t sshguard -T delete 200.200.200.119

FreeBSD - DHCP Server

2010-03-21T02:13:00.000-07:00

DHCP - adalah singkatan kepada "Dynamic Host Configuration Protocol". Servis ini adalah untuk memberikan IP kepada client di network kita. Dengan adanya servis DHCP ini, kita tidak perlulah menggunakan cara manual untuk menetapkan IP di setiap komputer yang terdapat di network kita.

Bahan :
- isc-dhcp30-server
- Editor (nano,vi,vim,ee)
- Secawan kopi

Cara-Cara :

- Install servis dhcp server seperti dibawah :

shell> cd /usr/ports/net/isc-dhcp30-server
shell> make config (disable chroot)
shell> make install clean

- Contoh file konfigurasi dhcpd.conf

shell> ee /usr/local/etc/dhcpd.conf

# dhcpd.conf
#
# Sample configuration file for ISC dhcpd
#

# option definitions common to all supported networks...
# set kan domain,DNS server
option domain-name "gateway.domain.local";
option domain-name-servers 192.168.2.1;
option subnet-mask 255.255.255.0;

default-lease-time 600;
max-lease-time 7200;

# If this DHCP server is the official DHCP server for the local
# network, the authoritative directive should be uncommented.
authoritative;

# ad-hoc DNS update scheme - set to "none" to disable dynamic DNS updates.
ddns-update-style none;

# Use this to send dhcp log messages to a different log file (you also
# have to hack syslog.conf to complete the redirection).
log-facility local7;

# set kan subnet untuk network kita

subnet 192.168.2.0 netmask 255.255.255.0 {
range 192.168.2.2 192.168.2.50;
option routers 192.168.2.1;
}

- Selepas selesai, kita akan mulakan servis dhcp dan tambah di file rc.conf

shell> ee /etc/rc.conf

dhcpd_enable="YES"
# network interface yang akan memberikan IP kepada network kita
dhcpd_ifaces="nfe0"

- Reboot

FAMPP - Installing PhpMyAdmin

2010-03-20T23:19:00.003-07:00

Now we have already install apache,mysql and also PHP in our box.. so what next? I myself feel hard to manage my database using CLI :P and the solutions is using PhpMyAdmin

lets begin..

as root

#cd /usr/ports/databases/phpmy
admin
#make config
#make install clean

Once done the compiling session it will install to /usr/local/www/PhpMyAdmin

next we have to configure the config.inc.php to make phpmyadmin can talk with mysql

#cd /usr/local/www/phpmyadmin
#cp config.sample.inc.php config.inc.php

Now we will edit the file

#ee config.inc.php

/* set your secret password */

$cfg['blowfish_secret'] = 'password';

/* uncomment the following line and put your mysql login */

$cfg['Servers'][$i]['controluser'] = 'root';
$cfg['Servers'][$i]['controlpass'] = 'password';

Save!

Then we have to configure httpd.conf to treat phpmyadmin as one of the aliases

#ee /usr/local/etc/apache22/httpd.conf

add the following line

Alias /phpmyadmin/ "/usr/local/www/phpMyAdmin/"

Options none
AllowOverride Limit
Order Deny,Allow
Allow from all

Save!

Restart apache and try browse using your browser http://[ip]/phpmyadmin/

If prompt with login then you are done!

FAMPP - Installing PHP 5

2010-03-20T23:19:00.001-07:00

this time we will build from source and compile :)

#cd /usr/ports/lang/php5
#make config

*choose apache module
*choose mysql module and others that suite for you

#make install clean

Now we will install other common module for web server such as :

mysql database

#cd /usr/ports/databases/php5-
mysql
#make install clean

once done a message will appear :

The following line has been added to your /usr/local/etc/php/extensions.ini
configuration file to automatically load the installed extension:

extension=mysql.so

This will enable PHP to interact with mysql database

Session
#cd /usr/ports/www/php5-session
#make install clean

once done a message will appear :

The following line has been added to your /usr/local/etc/php/extensions.ini
configuration file to automatically load the installed extension:

extension=session.so

Graphic library

#cd /usr/ports/graphics/php5-gd

Once done a message will appear :

The following line has been added to your /usr/local/etc/php/extensions.ini
configuration file to automatically load the installed extension:

extension=gd.so

Ok now some of the module has been install and we will continue to edit httpd.conf in order apache to recognize that php is install

Add the following line in httpd.conf in /usr/local/etc/apache22/httpd.conf

DirectoryIndex index.php index.php3 index.html

DirectoryIndex index.php3 index.html

DirectoryIndex index.php index.html index.htm

DirectoryIndex index.html

and the following line at the top

AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps

Restart apache and try create 1 test.php file in /usr/local/www/apache22/data

save and try browse from the web

it should display the information about your php version and etc.

FAMPP - Installing MySQL Server

2010-03-20T23:18:00.001-07:00

simpler command :)

#pkg_add -r mysql51-server

from this command it will install mysql server and also mysql client for the server

once done we can enable it on boot up by editing rc.conf

#ee /etc/rc.conf

add this following line

mysql_enable="YES"

After that we can start the service by this command :

#sh /usr/local/etc/rc.d/mysql-
server.sh start

Then we have to configure our root login for mysql which is by default it is blank. By using a password for the root login it will be more safe to outsider :)

#mysql -u root
#SET PASSWORD FOR 'root'@'localhost' = PASSWORD('urpasswordhere');

once done try to login using root user

#mysql -u root -p
Enter password:

If that appear then you have successfully configuring your mysql server :)

FAMPP - FreeBSD, Apache, MySQL, PHP, PhpMyAdmin

2010-03-20T23:17:00.000-07:00

FAMPP adalah idea daripada (FreeBSD,Apache,MySQL,PHP,PhpMyAdmin) , Tutorial ini akan membangunkan basic web server bersama-sama FreeBSD 7.2

FreeBSD 7.2 : Install Apache2.2

Ada dua cara untuk install aplikasi di FreeBSD
- ports
- pre-compiled pakej

kali ini kita akan gunakan cara yang mudah iaitu menggunakan pre-compiled pakej

#pkg_add -r apache22

edit /etc/rc.conf to start apache at boot

apache22_enable="YES"

Reboot and try to start.

#apachectl -k start

if got error something like this :

Syntax error on line 151 of /usr/local/etc/apache22/ht
tpd.conf:
DocumentRoot must be a directory

Edit your httpd.conf and make sure your folder "data" is created in /usr/local/www/apache22/

Try to start again,

#apachectl -k start

if got warning something like this :

[Mon Jan 01 08:31:17 2007] [warn] (2)No such file or directory: Failed to enable the 'httpready' Accept Filter

It is because some module are not loaded for filtering the packet

Load it as temporarily :

#kldload accf_http

or you want to load it at boot up edit the loader.conf

#ee /boot/loader.conf

add this line

accf_http_load="YES"

reboot :)

then try start apache service. it should be start normally without error :)

Some note for apachectl command :

# apachectl start
# apachectl restart
# apachectl graceful
# apachectl stop
# apachectl configtest

Configuration file :
/usr/local/etc/apache22/httpd.conf

Radix Fried Chicken

2010-03-18T08:07:00.000-07:00

(Credit to www.radixfriedchicken.com.my)
Hari ini setelah mengidam nak makan RFC (Radix Fried Chicken) di MyDin MITC Melaka, akhirnya tercapai jua bersama tunang :). Walaupun berkunjung pada waktu selepas kerja namun masih dapat menikmati kesedapan RFC ni. Pada sapa yang tak tahu apa tu RFC, RFC ialah singkatan daripada ayat Radix Fried Chicken. Ia adalah salah satu produk keluaran HPA.

Menu yang diorder ialah
- Spicy burger
- Radix Delight A

Yang nak usha harga sebelum beli tu boleh tengok di web rasmi RFC

Komen :
- 1st entry dalam market fast food boleh dikatakan berjaya.
- Harga yang tidak terlalu mahal.
- Menu yang pelbagai, terutama ada pilihan untuk kanak2 (ala2 McD dan KFC)
- Pekerja yang sopan, dan mesra pelanggan.
- 4 bintang untuk RFC!!

Modul OpenOffice Bahasa Melayu

2010-03-16T21:31:00.000-07:00

Hari ini salah sorang rakan aku encik Psychox telah menyiapkan modul ringkas untuk aplikasi OpenOffice. Pada sapa yang tak tahu pasal OpenOffice ni boleh rujuk sini . Dengan kata mudah OpenOffice (OOo) adalah mirip kepada aplikasi M$ Office yang biasa kita guna. Cuma bezanya aplikasi OOo ni adalah percuma dan opensource.

Yang paling penting OOo versi 3 adalah compatible kalau kita ingin buka file dari format XP,2003,2007 dan seangkatan dengannya. Tak perlu install compatibility pack :)

Boleh download modul OOo di sini

FreeBSD 7.2-RELEASE EOF

2010-03-11T07:20:00.000-08:00

I just 'freebsd-update' on one of my firewall, and got this message

FreeBSD 7.2-RELEASE-p4 is approaching its End-of-Life date.
It is strongly recommended that you upgrade to a newer
release within the next 2 month

and as per security.freebsd.org

The new 7.3-RELEASE is still on RC-ing and when the release come out, for a better system we should upgrade to the new one :)

FreeBSD stability

2010-03-04T19:17:00.000-08:00

Recently I just configured our office PC which is Pentium III with 667Mhz speed. Can it be install with Windows XP or Windows 7 maybe ? :)

I installed with a FreeBSD 7.2 and updated to 7.2-p6 to become one of our greatest firewall (hope so) and running for about :

$ uname -a;uptime;date
FreeBSD firewall.sm.local 7.2-RELEASE-p6 FreeBSD 7.2-RELEASE-p6 #2: Tue Jan 26 08:46:49 MYT 2010 root@firewall.sm.local:/usr/obj/usr/src/sys/SMKERNEL i386
2:58AM up 33 days, 16:26, 1 user, load averages: 0.00, 0.00, 0.00
Fri Mar 5 02:58:02 MYT 2010

without any failure and need to be restart. For now the box act as our firewall and also our NAT for about 50 people in our office. Before this we are using Dir-300 which i don't it can perform well and customized with what I need to protect my network.

my future needs is to install Ntop for network monitoring..

Sendmail problem

2010-01-13T09:03:00.000-08:00

I got my Jails running 3 web server with sendmail enable. This is to enable my web server to send an email using the PHP mail() function. After a while the server is in testing period, I encounter a slowness when trying to post/insert into the database(that's also one of the jail). Further investigation, I found that in my web server log (/var/log/messages) with the following warning (even the sendmail is still functioning) :

Jan 13 16:25:44 httpd-2-server sendmail[46097]: unable to qualify my own domain name (httpd-2-server) -- using short name

Jan 13 16:25:49 httpd-2-server sm-mta[46118]: o0DGPi16046116: SYSERR(root): hash map "Alias0": missing map file /etc/mail/aliases.db: No such file or directory

For the "unable to qualify my own domain name (httpd-2-server) -- using short name", I resolve through setting up the /etc/hosts with something like this :

::1 localhost httpd-2-server.local
127.0.0.1 localhost httpd-2-server.local
192.168.1.3 httpd-2-putera httpd-2-putera.local

and for the ""Alias0": missing map file /etc/mail/aliases.db: No such file or directory", I resolve by issue this command :

shell>sendmail -bi
/etc/mail/aliases: 27 aliases, longest 10 bytes, 275 bytes total

If you wondering what the -bi is, I get this from the man pages

-bi Initialize the alias database.

and yes, the issue is resolve :)

Ubuntu Karmic - Installing Google Chrome

2009-10-15T08:19:00.000-07:00

Google Chrome is a new browser developed by Google. Google as we know is the popular search engine for now :) and their new product is Google Chrome Browser. We will install Chrome in Ubuntu based distro's

- Edit your sources.list (/etc/apt/sources.list)

# sudo gedit /etc/apt/sources.list

- Add the following code in your sources.list

(For Jaunty)
deb http://ppa.launchpad.net/chromium-daily/ppa/ubuntu jaunty main
deb-src http://ppa.launchpad.net/chromium-daily/ppa/ubuntu jaunty main

(For Karmic)
deb http://ppa.launchpad.net/chromium-daily/ppa/ubuntu karmic main
deb-src http://ppa.launchpad.net/chromium-daily/ppa/ubuntu karmic main

- Save, add a key, and update

# sudo apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 0xfbef0d696de1c72ba5a835fe5a9bf3bb4e5e17b5
# sudo apt-get update
# sudo apt-get install chromium-browser

Done!

Microsoft Updates for Multiple Vulnerabilities

2009-10-13T17:40:00.000-07:00

Microsoft Updates for Multiple Vulnerabilities

Original release date:
Last revised: --
Source: US-CERT

Systems Affected

* Microsoft Windows and Windows Server
* Microsoft Internet Explorer
* Microsoft Office
* Microsoft .NET Framework
* Microsoft Silverlight
* Microsoft SQL Server
* Microsoft Developer Tools
* Microsoft Forefront

Overview

Microsoft has released updates to address vulnerabilities in
Microsoft Windows and Windows Server, Internet Explorer, Office,
.NET Framework, Silverlight, SQL Server, Developer Tools, and
Forefront.

I. Description

Microsoft has released multiple security bulletins for critical
vulnerabilities in Microsoft Windows and Windows Server, Internet
Explorer, Office, .NET Framework, Silverlight, SQL Server,
Developer Tools, and Forefront. These bulletins are described in
the Microsoft Security Bulletin Summary for October 2009.

II. Impact

A remote, unauthenticated attacker could execute arbitrary code,
gain elevated privileges, or cause a vulnerable application to
crash.

III. Solution

Apply updates from Microsoft

Microsoft has provided updates for these vulnerabilities in the
Microsoft Security Bulletin Summary for October 2009. The security
bulletin describes any known issues related to the updates.
Administrators are encouraged to note these issues and test for any
potentially adverse effects. Administrators should consider using
an automated update distribution system such as Windows Server
Update Services (WSUS).

IV. References

* Microsoft Security Bulletin Summary for October 2009 -
<http://www.microsoft.com/technet/security/bulletin/ms09-oct.mspx>

* Microsoft Windows Server Update Services -
<http://technet.microsoft.com/en-us/wsus/default.aspx>

Microsoft Updates for Multiple Vulnerabilities

2009-10-13T15:54:00.000-07:00

Microsoft Updates for Multiple Vulnerabilities

Original release date:
Last revised: --
Source: US-CERT

Systems Affected

* Microsoft Windows
* Microsoft Internet Explorer
* Microsoft Office

Overview

Microsoft has released updates to address vulnerabilities in
Microsoft Windows, Internet Explorer, and Microsoft Office.

Solution

Install updates

The updates to address these vulnerabilities are available on the
Microsoft Update site (requires Internet Explorer). We recommend
enabling Automatic Updates.

Description

Microsoft has released multiple security bulletins for critical
vulnerabilities in Windows. These bulletins are described in the
Microsoft Security Bulletin Summary for October 2009. These
vulnerabilities may allow an attacker to gain control of your
computer or cause it to crash.

References

* Microsoft Security Bulletin Summary for October 2009 [ Link ]

* Microsoft Windows Server Update Services [ Link ]

Adsense die hard fan ?

2009-10-12T10:24:00.000-07:00

Yeah.. we all know about Adsense and how we can make money with Google Adsense. Now let's read more about what Adsense can give you :)

Google Adsense Blog

Apache Infrastructure

2009-10-12T10:19:00.000-07:00

Nice article from Apache Team and If you want to know more about Apache you really want to read this :

https://blogs.apache.org/infra/

As we all know, even the oldest application like Apache can be compromised, how about us ? :)

Samba - getpeername failed

2009-10-12T01:06:00.000-07:00

I facing this error message in my samba server which serve 20 Windows XP user that store their file in the server daily. I setup a FreeBSD 7.2 samba server on my machine. So far it working good :)
But the error that I get is so annoying but since the samba server is working fine, it's no big deal for me to check for more details.

Oct 12 09:51:02 opigateway smbd[1239]: [2009/10/12 09:51:02, 0] lib/util_sock.c:get_peer_addr_internal(1676)
Oct 12 09:51:02 opigateway smbd[1239]: getpeername failed. Error was Socket is not connected
Oct 12 09:51:02 opigateway smbd[1239]: [2009/10/12 09:51:02, 0] lib/util_sock.c:write_data(1136)
Oct 12 09:51:02 opigateway smbd[1239]: [2009/10/12 09:51:02, 0] lib/util_sock.c:get_peer_addr_internal(1676)

As I'm searching on the net, I found one of the web site mention regarding getpeername error which is this site.

So we have to add a new option in our global configuration

smb ports = 139

Restart the samba service and monitor your messages logs if you encounter any error regarding getpeername. Good luck!

Microsoft Security Updates

2009-10-08T18:47:00.001-07:00

Microsoft Releases Advance Notification for October Security Bulletin

Original release date: October 8, 2009 at 4:59 pm
Last revised: October 8, 2009 at 4:59 pm

Microsoft has issued a Security Bulletin Advance Notification
indicating that its October release cycle will contain thirteen
bulletins, eight of which will have a severity rating of Critical. The
notification states that these Critical bulletins are for Microsoft
Windows, Internet Explorer, Office, Silverlight, SQL Server, Developer
Tools, and Forefront. There will also be five important bulletins for
Microsoft Windows. Release of these bulletins is scheduled for
Tuesday, October 13.

US-CERT will provide additional information as it becomes available.

Relevant Url(s):
http://www.microsoft.com/technet/security/bulletin/ms09-oct.mspx

Adobe Security Updates

2009-10-08T18:46:00.001-07:00

Adobe Releases Security Bulletin for Critical Vulnerability

Original release date: October 8, 2009 at 4:59 pm
Last revised: October 8, 2009 at 4:59 pm

Adobe has released security bulletin APSB09-15 to alert users of a
critical vulnerability in Adobe Reader and Acrobat. Adobe indicates
that it has received reports of active exploitation of this
vulnerability. Release of an update for this vulnerability is
scheduled for Tuesday, October 13.

US-CERT encourages users and administrators to take the following
actions to help mitigate the risks:
* Review Adobe Security Bulletin APSB09-15.
* Disable JavaScript in Adobe Reader and Acrobat. Acrobat JavaScript
can be disabled in the General preferences dialog (Edit,
Preferences, JavaScript, and un-check "Enable Acrobat
JavaScript").

Relevant Url(s):
http://www.adobe.com/support/security/bulletins/apsb09-15.html

FreeBSD - Add new slices

2009-10-05T19:49:00.000-07:00

Let say we have a disk with 40GB space, and allocated 10GB for the system, and have another 30GB free space. We want to configure a samba services and want to allocate the free space for the samba share.

1st we fdisk-ing the free space 1st, and then label the slice. For now we will using CLI. So to add new slices to the system, we issue this command :

#bsdlabel -w /dev/ad0s2
#newfs -U /dev/ad0s2
#mount /dev/ad0s2 /share1

If done, Add the entry in your /etc/fstab

If you encounter any error said the device is busy or no swap partition, issue this command :

#sysctl kern.geom.debugflags=16

reboot and everything is done! :)

FreeBSD Security Advisory

2009-10-02T16:56:00.000-07:00

New security advisory has been released by FreeBSD Security Team.

Topic: Devfs / VFS NULL pointer race condition

Category: core
Module: kern
Announced: 2009-10-02
Credits: Przemyslaw Frasunek
Affects: FreeBSD 6.x and 7.x
Corrected: 2009-05-18 10:41:59 UTC (RELENG_7, 7.2-STABLE)
2009-10-02 18:09:56 UTC (RELENG_7_2, 7.2-RELEASE-p4)
2009-10-02 18:09:56 UTC (RELENG_7_1, 7.1-RELEASE-p8)
2009-10-02 18:09:56 UTC (RELENG_6, 6.4-STABLE)
2009-10-02 18:09:56 UTC (RELENG_6_4, 6.4-RELEASE-p7)
2009-10-02 18:09:56 UTC (RELENG_6_3, 6.3-RELEASE-p13)

For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit http://security.FreeBSD.org/>.

I. Background

The device file system (devfs) provides access to system devices, such as
storage devices and serial ports, via the file system namespace.

VFS is the Virtual File System, which abstracts file system operations in
the kernel from the actual underlying file system.

II. Problem Description

Due to the interaction between devfs and VFS, a race condition exists
where the kernel might dereference a NULL pointer.

III. Impact

Successful exploitation of the race condition can lead to local kernel
privilege escalation, kernel data corruption and/or crash.

To exploit this vulnerability, an attacker must be able to run code with user
privileges on the target system.

IV. Workaround

An errata note, FreeBSD-EN-09:05.null has been released simultaneously to
this advisory, and contains a kernel patch implementing a workaround for a
more broad class of vulnerabilities. However, prior to those changes, no
workaround is available.

V. Solution

Perform one of the following:

1) Upgrade your vulnerable system to 6-STABLE, or 7-STABLE, or to the
RELENG_7_2, RELENG_7_1, RELENG_6_4, or RELENG_6_3 security branch
dated after the correction date.

2) To patch your present system:

The following patches have been verified to apply to FreeBSD 6.3, 6.4,
7.1, and 7.2 systems.

a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.

[FreeBSD 6.x]
# fetch http://security.FreeBSD.org/patches/SA-09:14/devfs6.patch
# fetch http://security.FreeBSD.org/patches/SA-09:14/devfs6.patch.asc

[FreeBSD 7.x]
# fetch http://security.FreeBSD.org/patches/SA-09:14/devfs7.patch
# fetch http://security.FreeBSD.org/patches/SA-09:14/devfs7.patch.asc

b) Apply the patch.

# cd /usr/src
# patch < /path/to/patch

c) Recompile your kernel as described in
http://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the
system.

--

You can update your system using freebsd-update

gateway# freebsd-update fetch
Looking up update.FreeBSD.org mirrors... 3 mirrors found.
Fetching metadata signature for 7.2-RELEASE from update5.FreeBSD.org... done.
Fetching metadata index... done.
Fetching 2 metadata patches.. done.
Applying metadata patches... done.
Inspecting system... done.
Preparing to download files... done.
Fetching 5 patches... done.
Applying patches... done.

The following files will be updated as part of updating to 7.2-RELEASE-p4:
/boot/kernel/kernel
/boot/kernel/kernel.symbols
/usr/src/sys/conf/newvers.sh
/usr/src/sys/fs/devfs/devfs_vnops.c
/usr/src/sys/kern/kern_exec.c
gateway# freebsd-update install
Installing updates... done.

gateway# uname -a
FreeBSD gateway.local 7.2-RELEASE-p2 FreeBSD 7.2-RELEASE-p2 #0: Wed Jun 24 00:57:44 UTC 2009 root@i386-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC i386

Reboot

gateway# uname -a
FreeBSD gateway.local 7.2-RELEASE-p4 FreeBSD 7.2-RELEASE-p4 #0: Fri Oct 2 12:21:39 UTC 2009 root@i386-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC i386

Selamat Hari Raya & Maaf Zahir Batin 2009

2009-09-18T23:35:00.000-07:00

Salam untuk rakan-rakan seperjuangan terutama rakan di office yang berjuang pada hari raya kelak, kerana raya ini adalah yang pertama dan terakhir aku di GCM, mungkin tak dapat sambut lagi dengan korang lepas ni.. :(

Mohon kemaafan sekiranya terdapat salah laku, salah silap harap dimaafkan..

SELAMAT HARI RAYA & MAAF ZAHIR BATIN

FreeBSD 7 - keep your system update with security patch

2009-09-18T15:34:00.000-07:00

Keep your system up-to-date with security patch is the most important, and keep save from malicious attack that cam compromise your system except attack coming from your web application :)

The old way in FreeBSD, we have to buildworld which is time consuming and great news is, FreeBSD team has come out with a tool called freebsd-update. Lets get started !

Step :
# freebsd-update fetch
# freebsd-update install
# reboot

Output :

gateway# freebsd-update fetch
Looking up update.FreeBSD.org mirrors... 3 mirrors found.
Fetching public key from update4.FreeBSD.org... done.
Fetching metadata signature for 7.2-RELEASE from update4.FreeBSD.org... done.
Fetching metadata index... done.
Fetching 2 metadata files... done.
Inspecting system... done.
Preparing to download files... done.
Fetching 35 patches...

Done :

gateway# freebsd-update install
Installing updates... done.

gateway# uname -a;uptime;date
FreeBSD gateway.domain.local 7.2-RELEASE FreeBSD 7.2-RELEASE #0: Fri May 1 08:49:13 UTC 2009 root@walker.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386
12:00PM up 14 mins, 1 user, load averages: 0.14, 0.14, 0.08
Thu Aug 27 12:00:13 MYT 2009

gateway# reboot

If the update is successful, then your system should look like this :

$ uname -a
FreeBSD gateway.domainlocal 7.2-RELEASE-p2 FreeBSD 7.2-RELEASE-p2 #0: Wed Jun 24 00:57:44 UTC 2009 root@i386-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC i386

VPS crash I'm moving in to blogspot

2009-09-18T07:24:00.000-07:00

2 days ago, i noticed my vps becomes slow and have some error in log file so I inform my provider and they said the server disk got some error... and today I got a bad news that the disk is totally corrupted and my data........ totally lost..

So to put some of my setup I realised that I already have this account and I just continue my notes here :)

nothnig much I can do, since I have my valuable data and post for my last blog site (myinfinityx.com), yeah.. got a few configuration that I already setup like DNS, mail server, web server ( got a few of my friend host their site with me) and etc..

so.. the journey continued here.. have fun!!