Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| openbsd-id [2005/10/11 19:06] – created hky | openbsd-id [2005/10/19 02:00] (current) – removed bang | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | [[http:// | ||
| - | ===== Pengantar ===== | ||
| - | |||
| - | ==== Sejarah Lahirnya OpenBSD ==== | ||
| - | |||
| - | ==== Apa saja yang disertakan dengan OpenBSD ==== | ||
| - | |||
| - | OpenBSD menyertakan applikasi-aplikasi yang umumnya diperlukan di setiap rilisnya. Diantaranya adalah: | ||
| - | * X.org | ||
| - | * GCC (dengan peningkatan kemampuan) | ||
| - | * Perl 5.8.6 (dengan peningkatan kemampuan) | ||
| - | * Apache 1.3.29 (peningkatan kemampuan dari segi security) | ||
| - | * OpenSSL 0.9.7d (dengan peningkatan kemampuan) | ||
| - | * Groff 1.15 | ||
| - | * Sendmail 8.13.3 mail server, with libmilter. | ||
| - | * BIND 9.3.0 DNS server. (dengan peningkatan kemampuan) | ||
| - | * Lynx 2.8.5rel.2 (peningkatan kemampuan) | ||
| - | * Sudo v1.6.8p6, allowing users to run individual commands as root. | ||
| - | * Ncurses 5.2. | ||
| - | * KAME IPv6. | ||
| - | * Heimdal 0.6rc1 (dengan peningkatan kemampuan) | ||
| - | * Arla 0.35.7 | ||
| - | * OpenSSH 4.1 | ||
| - | * gdb 6.1 | ||
| - | |||
| - | |||
| - | ===== Install ===== | ||
| - | |||
| - | ==== File ISO OpenBSD ==== | ||
| - | |||
| - | Pertanyaan yang sangat sering muncul bagi yang baru kenal dengan OpenBSD adalah : //dimana sih ngedownload file .iso nya OpenBSD ? kok di official dan mirror-mirror FTP nya gak ada.// | ||
| - | Jawabannya adalah : | ||
| - | Memang tidak ada !. | ||
| - | OpenBSD tidak menyediakan file .iso seperti yang disediakan oleh Linux, FreeBSD, NetBSD dan lainnya | ||
| - | Untuk lebih lengkapnya silahkan baca http:// | ||
| - | |||
| - | Meskipun begitu, ada beberapa pihak yang membuat file ISO OpenBSD dan tersedia untuk di download di internet. Tentu saja file-file ISO tersebut bukan berasal dari OpenBSD. Saya pribadi tidak menganjurkan untuk menggunakan file yang beredar di internet ini. Kenapa ? Alasan yang masuk akal adalah security. Apa jadinya kalau distribusi OpenBSD yang anda download iso nya itu sudah dimodifikasi oleh pihak-pihak tertentu untuk tujuan tertentu pula. | ||
| - | |||
| - | Membuat file ISO OpenBSD tidak terlalu sulit. Berikut adalah langkah-langkah (dengan menggunakan Windows) untuk membuat file ISO OpenBSD 3.7 untuk arsitektur mesin i386 (cara yang sama bisa digunakan untuk membuat file iso untuk arsitektur mesin yang lain, seperti alpha, amd64, dsb): | ||
| - | * Buat direktori dengan susunan berikut , misal OpenBSD/ | ||
| - | * Downloadlah semua isi ftp:// | ||
| - | 3.7/ | ||
| - | i386/ | ||
| - | bsd | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | ports.tar.gz | ||
| - | src.tar.gz | ||
| - | srcsys.tar.gz | ||
| - | |||
| - | HARDWARE | ||
| - | PACKAGES | ||
| - | PORTS | ||
| - | README | ||
| - | TRANS.TBL | ||
| - | song37.mp3 | ||
| - | </ | ||
| - | |||
| - | * Kemudian baru kita membuat iso nya dengan menggunakan program mkisofs (yang dapat di download di http:// | ||
| - | |||
| - | < | ||
| - | c: | ||
| - | -v | ||
| - | -r | ||
| - | -T | ||
| - | -J | ||
| - | -V " | ||
| - | -b C:/ | ||
| - | -c boot.catalog | ||
| - | -o C:/ | ||
| - | -x C:/ | ||
| - | | ||
| - | </ | ||
| - | |||
| - | * Tunggulah sampai proses pembuatan file ISO tersebut selesai, kalau sudah, file iso OpenBSD yang anda buat C: | ||
| - | |||
| - | Catatan : Cara yang sama dapat digunakan untuk membuat DVD-ROM OpenBSD dengan menyertakan semua file-file packages yang tersedia. Total ukurannya sekitar 2.5 GB. | ||
| - | |||
| - | ==== Instalasi ==== | ||
| - | |||
| - | Proses instalasi OpenBSD, termasuk proses instalasi yang paling cepat dibandingkan dengan Operating System yang lainnya. Perlu dicatat, bahwa instalasi OpenBSD tidak sekedar instalasi kernel. | ||
| - | |||
| - | |||
| - | === Multiboot === | ||
| - | |||
| - | **Windows -> OpenBSD -> FreeBSD atau Linux** | ||
| - | |||
| - | * Jika anda ingin dualboot antara Windows dan OpenBSD, installah Windows terlebih dahulu. Baik itu Windows 9x ataupun Windows NT-based (termasuk Windows 2000, Windows XP, Windows 2003) | ||
| - | * Pastikan ukuran partisi pertama (C:\>) anda tidak lebih besar dari 7 GB. Karena partisi '' | ||
| - | * Contoh kasus ini adalah instalasi Windows XP (dengan ukuran partisi pertama - C:\> sebesar 7 GB) + OpenBSD di dalam hardisk yang berukuran 20 GB. < | ||
| - | Available disks are: sd0 sd1 wd0. | ||
| - | Which one is the root disk? (or done) [done] wd0 | ||
| - | Do you want to use *all* of wd0 for OpenBSD? [no] | ||
| - | </ | ||
| - | |||
| - | ==== Setting dan Konfigurasi ==== | ||
| - | |||
| - | / | ||
| - | |||
| - | ===== Post-Install ===== | ||
| - | |||
| - | Berikut ini adalah hal-hal yang dilakukan sesudah proses Instalasi berhasil dilakukan. | ||
| - | |||
| - | * '' | ||
| - | Bagi yang baru menggunakan OpenBSD disarankan untuk memaca manual '' | ||
| - | |||
| - | * Mengirimkan file dmesg (file yang berisi informasi hardware yang kita gunakan untuk menjalankan OpenBSD) dapat berguna bagi developer OpenBSD, baik untuk statistik maupun bugs yang mungkin ditemukan pada hardware-hardware tertentu. < | ||
| - | |||
| - | * Bagaimana caranya mengakses CDROM ? merupakan salah satu pertanyaan yang sering muncul bagi yang baru menggunakan OpenBSD. < | ||
| - | |||
| - | * Install source code OpenBSD < | ||
| - | # cd /usr/src ; tar -xzvpf / | ||
| - | # cd /usr/src ; tar -xzvpf / | ||
| - | </ | ||
| - | |||
| - | * Install Ports < | ||
| - | # cd /usr ; tar -xzvpf ports.tar.gz | ||
| - | </ | ||
| - | |||
| - | * '' | ||
| - | Dianjurkan untuk tidak menggunakan user '' | ||
| - | wheel: | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | %wheel | ||
| - | </ | ||
| - | |||
| - | Artinya memberikan akses superuser kepada user-user yang termasuk ke dalam group '' | ||
| - | |||
| - | ===== System ===== | ||
| - | |||
| - | ==== Versi ==== | ||
| - | |||
| - | * **Siklus pengembangan OpenBSD** | ||
| - | |||
| - | |||
| - | * **CURRENT** | ||
| - | Merupakan versi terakhir dari OpenBSD. Versi -CURRENT adalah versi OpenBSD yang digunakan oleh para developer untuk menguji fitur-fitur baru, atau juga oleh para Administrator yang ingin ikut mencoba atau menguji fitur-fitur baru yang disediakan oleh OpenBSD. Jika anda tidak bisa bahasa C, Perl, Shell, tidak ingin melakukan '' | ||
| - | |||
| - | * **Snapshots** | ||
| - | Sekali dalam beberapa hari, para developer me | ||
| - | |||
| - | * **RELEASE** | ||
| - | Tiap 6 bulan, | ||
| - | |||
| - | * **STABLE** | ||
| - | Versi ini merupakan kelanjutan dari versi -RELEASE yang menyediakan perbaikan-perbaikan (jika ada), dari sisi '' | ||
| - | |||
| - | |||
| - | |||
| - | ==== Kernel ==== | ||
| - | |||
| - | Dimana '' | ||
| - | ''/ | ||
| - | |||
| - | ==== Ports dan Packages ==== | ||
| - | |||
| - | Ada dua metode yang disediakan untuk memudahkan proses instalasi dan pengaturan applikasi/ | ||
| - | (juga varian BSD yang lainnya) | ||
| - | |||
| - | * Packages | ||
| - | Merupakan kumpulan file binari (hasil kompilasi) yang dibuat oleh para developer OpenBSD dengan menggunakan ports sebagai dasarnya. Jika anda membeli CD official OpenBSD, di dalamnya sudah disertakan package-package yang umumnya diperlukan. Biasanya ciri dari package di OpenBSD adalah file yang berekstensi '' | ||
| - | Install package< | ||
| - | Option '' | ||
| - | Informasi package yang sudah terinstall di sistem < | ||
| - | Delete package< | ||
| - | |||
| - | Selain itu kita juga dapat menginstall packages secara langsung dari internet. | ||
| - | |||
| - | untuk csh, tcsh | ||
| - | < | ||
| - | |||
| - | untuk ksh, bash | ||
| - | < | ||
| - | |||
| - | Contoh penggunaan | ||
| - | < | ||
| - | Agar dapat menginstall GIMP, kita juga perlu menginstall package-package lain, yang diperlukan agar GIMP dapat berfungsi dengan baik. Dan karena kita sudah mendefenisikan dimana lokasi package kita dengan cara di atas, maka perintah '' | ||
| - | |||
| - | * Ports | ||
| - | < | ||
| - | # make search key=keyword | ||
| - | # make fetch | ||
| - | # make depends | ||
| - | # make build | ||
| - | # make install | ||
| - | # make package | ||
| - | # make clean | ||
| - | </ | ||
| - | |||
| - | sekaligus | ||
| - | < | ||
| - | # make install clean | ||
| - | </ | ||
| - | |||
| - | ==== Update ==== | ||
| - | |||
| - | Rata-rata pengguna BSD sudah cukup akrab untuk mengupdate sistem mereka dengan menggunakan '' | ||
| - | < | ||
| - | |||
| - | Proses update yang akan kita lakukan dalam contoh ini adalah proses update dari versi -RELEASE ke versi -STABLE. | ||
| - | |||
| - | '' | ||
| - | < | ||
| - | # Defaults that apply to all the collections | ||
| - | *default release=cvs | ||
| - | *default delete use-rel-suffix | ||
| - | *default umask=002 | ||
| - | *default host=anoncvs3.usa.openbsd.org | ||
| - | *default base=/usr | ||
| - | *default prefix=/usr | ||
| - | *default tag=OPENBSD_3_7 | ||
| - | |||
| - | #Repository yang tersedia | ||
| - | # | ||
| - | OpenBSD-src | ||
| - | OpenBSD-ports | ||
| - | # | ||
| - | # | ||
| - | # | ||
| - | </ | ||
| - | |||
| - | Perhatikan bagian '' | ||
| - | |||
| - | < | ||
| - | |||
| - | Perintah diatas akan melakukan proses update terhadap source tree '' | ||
| - | |||
| - | === Kernel === | ||
| - | |||
| - | |||
| - | Aplikasi tidak ada yang perlu di update | ||
| - | < | ||
| - | # cd /usr/ports | ||
| - | # ./ | ||
| - | Make sure your ports tree is up-to-date | ||
| - | Generating specs | ||
| - | Checking new package names | ||
| - | Recording old package names | ||
| - | Showing discrepancies | ||
| - | # | ||
| - | </ | ||
| - | |||
| - | Aplikasi ada yang perlu di update, berdasarkan susunan ports yang baru saja di fetch | ||
| - | < | ||
| - | # ./ | ||
| - | Make sure your ports tree is up-to-date | ||
| - | Generating specs | ||
| - | Checking new package names | ||
| - | Recording old package names | ||
| - | Showing discrepancies | ||
| - | --- / | ||
| - | +++ / | ||
| - | @@ -1,9 +1,9 @@ | ||
| - | -bash-3.0.16p0 | ||
| - | -cvsup-16.1g-no_x11 | ||
| - | -gettext-0.10.40p2 | ||
| - | -libiconv-1.9.2 | ||
| - | -lsof-4.69p0 | ||
| - | -pico-4.9 | ||
| - | -pine-4.62 | ||
| - | -unzip-5.51 | ||
| - | +bash-3.0.16p1 | ||
| - | +cvsup-16.1h-no_x11 | ||
| - | +gettext-0.10.40p3 | ||
| - | +libiconv-1.9.2p1 | ||
| - | +lsof-4.75 | ||
| - | +pico-4.10 | ||
| - | +pine-4.63 | ||
| - | +unzip-5.52 | ||
| - | | ||
| - | # | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | # cp /bsd /bsd.old | ||
| - | # cd / | ||
| - | </ | ||
| - | Tips : | ||
| - | Untuk membuat kernel yang spesifik dengan hardware yang ada di box tersebut, selain dengan mengedit file / | ||
| - | < | ||
| - | # cd / | ||
| - | # dmassage -s GENERIC > | ||
| - | </ | ||
| - | |||
| - | lanjutkan dengan | ||
| - | < | ||
| - | # config KERNELKU | ||
| - | Don't forget to run "make depend" | ||
| - | If config tells you to make clean, do so before running make depend. [make clean && make depend] | ||
| - | # cd / | ||
| - | # make depend && make | ||
| - | # cp / | ||
| - | </ | ||
| - | |||
| - | === Rebuilding the system === | ||
| - | < | ||
| - | # cd /usr/src | ||
| - | # find . -type l -name obj | xargs rm | ||
| - | # make cleandir | ||
| - | # rm -rf /usr/obj/* | ||
| - | # make obj | ||
| - | # cd / | ||
| - | # make DESTDIR=/ distrib-dirs | ||
| - | # cd /usr/src | ||
| - | # make build | ||
| - | </ | ||
| - | |||
| - | |||
| - | |||
| - | ===== Daemon ===== | ||
| - | |||
| - | ==== DNS ==== | ||
| - | === Bind/Named === | ||
| - | === djbdns === | ||
| - | |||
| - | http:// | ||
| - | |||
| - | ==== Mail ==== | ||
| - | === Sendmail === | ||
| - | |||
| - | ==== Apache / Webserver ==== | ||
| - | |||
| - | |||
| - | === Virtual Host === | ||
| - | |||
| - | |||
| - | === SSL === | ||
| - | |||
| - | < | ||
| - | # openssl genrsa -out / | ||
| - | # openssl req -new -key / | ||
| - | # openssl x509 -req -days 365 -in / | ||
| - | | ||
| - | </ | ||
| - | |||
| - | File rc.conf | ||
| - | < | ||
| - | httpd_flags=" | ||
| - | </ | ||
| - | |||
| - | Start Apache+SSL | ||
| - | < | ||
| - | # apachectl startssl | ||
| - | </ | ||
| - | |||
| - | === chroot === | ||
| - | Persiapan direktori untuk chroot, dengan catatan, webserver ini disiapkan untuk support PHP dan Perl | ||
| - | |||
| - | < | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # chmod a+w / | ||
| - | # chmod u+t / | ||
| - | </ | ||
| - | |||
| - | === Perl === | ||
| - | |||
| - | < | ||
| - | # cp / | ||
| - | # cp / | ||
| - | # cp / | ||
| - | # cp / | ||
| - | # cp / | ||
| - | # cp / | ||
| - | # cd / | ||
| - | # cd / | ||
| - | </ | ||
| - | |||
| - | Untuk memeriksa apakah chroot berjalan dengan baik, install [[http:// | ||
| - | |||
| - | === PHP === | ||
| - | Di dalam susunan ports OpenBSD terdapat dua macam versi PHP, yaitu PHP4 dan PHP5, dan rata-rata aplikasi web yang ada di ports yang menggunakan PHP, mensyaratkan untuk menggunakan PHP5. Karena itu disini juga akan digunakan PHP5. Kemungkinan masalah yang akan timbul adalah tidak kompatibelnya aplikasi web yang akan digunakan dengan PHP5. | ||
| - | < | ||
| - | # cd / | ||
| - | </ | ||
| - | Dengan metode instalasi di atas, secara default akan terinstall dua package yaitu php5-core dan php5-extension, | ||
| - | < | ||
| - | php5-core-5.0.5 | ||
| - | php5-extensions-5.0.5p0 informational package about PHP5 extensions | ||
| - | </ | ||
| - | |||
| - | Untuk mengaktifkan PHP di webserver, lakukan hal-hal berikut, seperti terdapat di post-message nya PORTS | ||
| - | < | ||
| - | # / | ||
| - | </ | ||
| - | |||
| - | pastikan baris berikut terdapat di dalam file / | ||
| - | < | ||
| - | AddType application/ | ||
| - | </ | ||
| - | |||
| - | Kopi file konfigurasi php (php.ini) dari direktori contoh | ||
| - | < | ||
| - | # cp / | ||
| - | |||
| - | edit file php.ini pada bagian | ||
| - | session.save_path = /tmp | ||
| - | </ | ||
| - | |||
| - | Kemudian restart apache nya | ||
| - | < | ||
| - | # apachectl stop | ||
| - | # apachectl startssl | ||
| - | Catatan : karena kita menggunakan Apache dengan fitur SSL, kita tidak bisa langsung mengetikkan apachectl restart | ||
| - | </ | ||
| - | Lalu bagaimana jika seandainya kita ingin PHP nya support mysql ? | ||
| - | PHP5 yang baru saja kita install, dipisahkan dalam beberapa extension, coba perhatikan extension-extension yang sudah di build begitu kita melakukan perintah make install clean tadi | ||
| - | |||
| - | < | ||
| - | # ls / | ||
| - | php5-bz2-5.0.5p0.tgz | ||
| - | php5-core-5.0.5.tgz | ||
| - | php5-curl-5.0.5p0.tgz | ||
| - | php5-dba-5.0.5p0.tgz | ||
| - | php5-dbase-5.0.5p0.tgz | ||
| - | php5-dbx-5.0.5p0.tgz | ||
| - | php5-extensions-5.0.5p0.tgz | ||
| - | php5-filepro-5.0.5p0.tgz | ||
| - | php5-gd-5.0.5p2-no_x11.tgz | ||
| - | php5-gmp-5.0.5p0.tgz | ||
| - | php5-imap-5.0.5p1.tgz | ||
| - | php5-ldap-5.0.5p0.tgz | ||
| - | php5-mbstring-5.0.5p0.tgz | ||
| - | php5-mcrypt-5.0.5p0.tgz | ||
| - | php5-mhash-5.0.5p0.tgz | ||
| - | php5-mysql-5.0.5p0.tgz | ||
| - | php5-ncurses-5.0.5p0.tgz | ||
| - | php5-odbc-5.0.5p0.tgz | ||
| - | php5-pear-5.0.5.tgz | ||
| - | php5-pgsql-5.0.5p0.tgz | ||
| - | php5-shmop-5.0.5p0.tgz | ||
| - | php5-snmp-5.0.5p0.tgz | ||
| - | php5-soap-5.0.5p1.tgz | ||
| - | php5-sqlite-5.0.5p0.tgz | ||
| - | php5-sybase_ct-5.0.5p0.tgz | ||
| - | php5-xmlrpc-5.0.5p0.tgz | ||
| - | php5-xsl-5.0.5p1.tgz | ||
| - | </ | ||
| - | |||
| - | Jika kita ingin menambahkan ekstensi mysql, yang memungkinkan PHP5 untuk berinteraksi dengan MySQL, berarti kita harus menginstall dan mengaktifkan ekstensi PHP5-mysql | ||
| - | < | ||
| - | # pkg_add -v / | ||
| - | # / | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | bash-3.00# cp jhead / | ||
| - | bash-3.00# ldd jhead | ||
| - | jhead&# | ||
| - | Start End Type Ref Name | ||
| - | 00000000 00000000 exe | ||
| - | 03663000 2366a000 rlib 1 / | ||
| - | 08914000 2894c000 rlib 1 / | ||
| - | 0c0ec000 0c0ec000 rtld 1 / | ||
| - | bash-3.00# cp / | ||
| - | bash-3.00# cp / | ||
| - | bash-3.00# cp / | ||
| - | bash-3.00# mkdir / | ||
| - | bash-3.00# cp / | ||
| - | bash-3.00# history | grep sysctl | ||
| - | | ||
| - | | ||
| - | bash-3.00# sysctl kern.emul.freebsd=0 | ||
| - | kern.emul.freebsd&# | ||
| - | bash-3.00# | ||
| - | </ | ||
| - | |||
| - | Untuk memeriksa apakah chroot berjalan dengan baik, install [[http:// | ||
| - | |||
| - | ==== Caching/ | ||
| - | === Squid === | ||
| - | |||
| - | == Transparent Proxy == | ||
| - | |||
| - | ==== FTP Server ==== | ||
| - | === Anonymous FTP === | ||
| - | < | ||
| - | # adduser | ||
| - | Use option ``-silent'' | ||
| - | |||
| - | Reading /etc/shells | ||
| - | Reading / | ||
| - | Check / | ||
| - | Check /etc/group | ||
| - | |||
| - | Ok, let's go. | ||
| - | Don't worry about mistakes. I will give you the chance later to correct any input. | ||
| - | Enter username []: ftp | ||
| - | Enter full name []: anonymous ftp | ||
| - | Enter shell csh false ksh nologin sh tcsh zsh [sh]: false | ||
| - | Uid [1002]: Enter | ||
| - | Login group ftp [ftp]: Enter | ||
| - | Login group is ``ftp'' | ||
| - | [no]: no | ||
| - | Login class auth-defaults auth-ftp-defaults daemon default staff | ||
| - | [default]: Enter | ||
| - | Enter password []: Enter | ||
| - | Set the password so that user cannot logon? (y/n) [n]: y | ||
| - | |||
| - | Name: ftp | ||
| - | Password: | ||
| - | Fullname: | ||
| - | Uid: 1002 | ||
| - | Gid: 1002 (ftp) | ||
| - | Groups: | ||
| - | Login Class: default | ||
| - | HOME: /home/ftp | ||
| - | Shell: | ||
| - | OK? (y/n) [y]: y | ||
| - | Added user ``ftp'' | ||
| - | Copy files from /etc/skel to /home/ftp | ||
| - | Add another user? (y/n) [y]: n | ||
| - | Goodbye! | ||
| - | </ | ||
| - | |||
| - | === FTP-only User === | ||
| - | Tambahkan baris berikut di file /etc/shells | ||
| - | < | ||
| - | / | ||
| - | </ | ||
| - | Gunakan / | ||
| - | |||
| - | |||
| - | ==== File & Print Services ==== | ||
| - | === Samba === | ||
| - | === NFS === | ||
| - | === AFS === | ||
| - | |||
| - | ==== Database ==== | ||
| - | |||
| - | === MySQL === | ||
| - | |||
| - | < | ||
| - | # pkg_add -v ftp:// | ||
| - | Adding ftp:// | ||
| - | Dependencies for mysql-server-4.0.20 resolve to: mysql-client-4.0.20, | ||
| - | Adding mysql-client-4.0.20 | ||
| - | Adding p5-DBD-mysql-2.9004 | ||
| - | Dependencies for p5-DBD-mysql-2.9004 resolve to: p5-DBI-1.43, | ||
| - | Adding p5-DBI-1.43 | ||
| - | Dependencies for p5-DBI-1.43 resolve to: p5-PlRPC-0.2018 (todo: p5-PlRPC-0.2018) | ||
| - | Adding p5-PlRPC-0.2018 | ||
| - | Dependencies for p5-PlRPC-0.2018 resolve to: p5-Net-Daemon-0.38 (todo: p5-Net-Daemon-0.38) | ||
| - | Adding p5-Net-Daemon-0.38 | ||
| - | ===> Creating _mysql group for MySQL | ||
| - | ===> Creating _mysql user for MySQL | ||
| - | Preparing db table | ||
| - | Preparing host table | ||
| - | Preparing user table | ||
| - | Preparing func table | ||
| - | Preparing tables_priv table | ||
| - | Preparing columns_priv table | ||
| - | Installing all prepared tables | ||
| - | 050402 6:14:07 / | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | # / | ||
| - | # / | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | # / | ||
| - | [1] 5452 | ||
| - | # Starting mysqld daemon with databases from /var/mysql | ||
| - | </ | ||
| - | |||
| - | Agar mysql bisa diakses dari aplikasi web yang menggunakan sistem chroot, perlu ditambahkan : | ||
| - | file / | ||
| - | < | ||
| - | if [ -x / | ||
| - | echo -n " mysqld" | ||
| - | / | ||
| - | sleep 4 | ||
| - | rm -f / | ||
| - | ln / | ||
| - | fi | ||
| - | </ | ||
| - | |||
| - | === PostgreSQL === | ||
| - | |||
| - | ===== X-Windows ===== | ||
| - | === KDE === | ||
| - | |||
| - | < | ||
| - | # pkg_add -v kdebase-3.4.tgz | ||
| - | </ | ||
| - | |||
| - | == KDM == | ||
| - | < | ||
| - | # / | ||
| - | </ | ||
| - | |||
| - | |||
| - | === PWM === | ||
| - | |||
| - | ===== Network ===== | ||
| - | |||
| - | ==== Firewall ==== | ||
| - | |||
| - | Contoh pf.conf from phoenix | ||
| - | |||
| - | --> phoenix-pf.conf | ||
| - | < | ||
| - | ######## needed variables & their values ####### | ||
| - | ext_if=" | ||
| - | int_if=" | ||
| - | wifi_if=" | ||
| - | ipv6_if=" | ||
| - | local_net=" | ||
| - | unroutable=' | ||
| - | tcp_services=' | ||
| - | udp_services=' | ||
| - | dns_servers=' | ||
| - | icmp_types=' | ||
| - | irc=' | ||
| - | |||
| - | # cvs.openbsd.org | ||
| - | trusted_hosts=' | ||
| - | 5.20.105.149/ | ||
| - | |||
| - | set timeout { interval 10, frag 30 } | ||
| - | set timeout { tcp.first 120, tcp.opening 30, tcp.established 86400 } | ||
| - | set timeout { tcp.closing 900, tcp.finwait 45, tcp.closed 90 } | ||
| - | set timeout { udp.first 60, udp.single 30, udp.multiple 60 } | ||
| - | set timeout { icmp.first 20, icmp.error 10 } | ||
| - | set timeout { other.first 60, other.single 30, other.multiple 60 } | ||
| - | set timeout { adaptive.start 0, adaptive.end 0 } | ||
| - | set limit { states 10000, frags 5000 } | ||
| - | set loginterface none | ||
| - | set optimization normal | ||
| - | set block-policy return | ||
| - | set require-order yes | ||
| - | set fingerprints "/ | ||
| - | |||
| - | table < | ||
| - | |||
| - | ##################################### | ||
| - | scrub in on $ext_if all fragment reassemble no-df min-ttl 24 max-mss 1492 | ||
| - | scrub out on $ext_if all fragment reassemble random-id no-df min-ttl 24 max-mss 1492 | ||
| - | |||
| - | ##################################### | ||
| - | #altq on $int_if priq bandwidth 2.5Mb queue {std_in, max_in, min_in} | ||
| - | # queue std_in priq(default) | ||
| - | # queue max_in | ||
| - | # queue min_in | ||
| - | |||
| - | #altq on $ext_if priq bandwidth 800Kb queue {std_out, max_out, med_out, min_out} | ||
| - | # queue std_out | ||
| - | # queue max_out | ||
| - | # queue med_out | ||
| - | # queue min_out | ||
| - | |||
| - | ##### Network Address Translation ####### | ||
| - | nat on $ext_if from 192.168.10.0/ | ||
| - | nat-anchor " | ||
| - | |||
| - | ## redirect ## | ||
| - | rdr pass on $int_if | ||
| - | rdr pass on $int_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | |||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | |||
| - | |||
| - | ##### FILTERING ###### | ||
| - | |||
| - | block log all | ||
| - | |||
| - | pass quick on { lo $int_if $ipv6_if } | ||
| - | pass quick on $ipv6_if inet6 | ||
| - | |||
| - | antispoof quick for { lo $int_if } | ||
| - | antispoof quick for $ext_if inet | ||
| - | |||
| - | block drop in quick on $ext_if from $unroutable to any | ||
| - | block drop out quick on $ext_if from any to $unroutable | ||
| - | |||
| - | pass in on $int_if from $int_if: | ||
| - | pass out on $int_if from any to $int_if: | ||
| - | |||
| - | pass in on $ext_if inet proto {tcp, | ||
| - | pass in on $ext_if inet proto tcp from any to any port $tcp_services flags S/SAFR keep state | ||
| - | pass in on $ext_if inet proto udp from any to any port $udp_services keep state | ||
| - | |||
| - | pass out on $ext_if inet proto tcp from $ext_if to any flags S/SA keep state | ||
| - | pass out on $ext_if inet proto {udp, icmp}from $ext_if to any keep state | ||
| - | |||
| - | anchor " | ||
| - | |||
| - | #for wifi | ||
| - | |||
| - | pass out quick on $wifi_if proto tcp from $wifi_if: | ||
| - | pass out quick on $wifi_if proto { udp, icmp } from $wifi_if: | ||
| - | |||
| - | pass in quick on $wifi_if inet proto tcp from any to any port { bootps, bootpc, ssh } flags S/SA keep state | ||
| - | pass in quick on $wifi_if inet proto udp from < | ||
| - | |||
| - | anchor " | ||
| - | anchor " | ||
| - | </ | ||
| - | |||
| - | <-- phoenix-pf.conf | ||
| - | |||
| - | ==== Bandwith Limiter ==== | ||
| - | ==== IPV6 ==== | ||
| - | |||
| - | ==== NTP (Network Time Protocl) ==== | ||
| - | |||
| - | === Server === | ||
| - | |||
| - | < | ||
| - | # vi / | ||
| - | # $OpenBSD: ntpd.conf,v 1.7 2004/07/20 17:38:35 henning Exp $ | ||
| - | # sample ntpd configuration file, see ntpd.conf(5) | ||
| - | |||
| - | # Addresses to listen on (ntpd does not listen by default) | ||
| - | #listen on * | ||
| - | listen on ::1 | ||
| - | |||
| - | # sync to a single server | ||
| - | #server ntp.example.org | ||
| - | |||
| - | # use a random selection of 8 public stratum 2 servers | ||
| - | # see http:// | ||
| - | servers pool.ntp.org | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | # vi / | ||
| - | ntpd_flags= # enabled during install | ||
| - | </ | ||
| - | |||
| - | === Unix Client === | ||
| - | |||
| - | < | ||
| - | # vi / | ||
| - | # $OpenBSD: ntpd.conf,v 1.7 2004/07/20 17:38:35 henning Exp $ | ||
| - | # sample ntpd configuration file, see ntpd.conf(5) | ||
| - | # Addresses to listen on (ntpd does not listen by default) | ||
| - | #listen on * | ||
| - | # sync to a single server | ||
| - | #server ntp.example.org | ||
| - | server 192.168.1.20 | ||
| - | # use a random selection of 8 public stratum 2 servers | ||
| - | # see http:// | ||
| - | #servers pool.ntp.org | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | # vi / | ||
| - | ntpd_flags= # enabled during install | ||
| - | </ | ||
| - | |||
| - | |||
| - | === Windows Client === | ||
| - | |||
| - | < | ||
| - | C:\>net time / | ||
| - | The command completed successfully. | ||
| - | C:\>net stop w32time | ||
| - | The Windows Time service is stopping. | ||
| - | The Windows Time service was stopped successfully. | ||
| - | C:\>net start w32time | ||
| - | The Windows Time service is starting. | ||
| - | The Windows Time service was started successfully. | ||
| - | C:\>net time /querysntp | ||
| - | The current SNTP value is: 192.168.1.20 | ||
| - | The command completed successfully. | ||
| - | </ | ||
| - | |||
| - | Check konfigurasi | ||
| - | < | ||
| - | $ grep ntpd daemon | ||
| - | May 22 17:23:15 obsd3 ntpd[29943]: | ||
| - | May 22 18:44:44 obsd3 ntpd[14662]: | ||
| - | May 22 19:42:26 obsd3 ntpd[14662]: | ||
| - | May 22 23:08:08 obsd3 ntpd[14662]: | ||
| - | May 23 00:19:29 obsd3 ntpd[14662]: | ||
| - | May 23 17:55:48 obsd3 ntpd[31680]: | ||
| - | May 23 17:59:07 obsd3 ntpd[31680]: | ||
| - | May 23 18:01:12 obsd3 ntpd[31680]: | ||
| - | etc... | ||
| - | </ | ||
| - | |||
| - | ===== Filosofi ===== | ||
| - | * **Kenapa Mailing List OpenBSD sangat tidak bersahabat/ | ||
| - | * **Kenapa OpenBSD tidak mempunyai journaling file sistem ?** | ||
| - | * **Kenapa IPF tidak ada lagi di OpenBSD ?** | ||
| - | * **Kenapa versi BIND yang disertakan di OpenBSD sangat tua ?** | ||
| - | * **Saya baru saja melakukan scanning dengan menggunakan nmap terhadap OpenBSD yang baru saja saya install, dan yang mengejutkan adalah, saya mendapatkan [apapun daemonnya] aktif !** | ||
| - | * **Kenapa OpenBSD menyertakan software-software seperti Sendmail dan BIND yang jelas-jelas diketahui tidak secure ?** | ||
| - | * **Kenapa website www.openbsd.org menggunakan Solaris ?** | ||
| - | * **Saya mempunyai usulan ! Kenapa para developer tidak mendengarkan usul saya ?** | ||
| - | |||
| - | --- // | ||