Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| openbsd-id [2005/10/13 10:52] – bang | openbsd-id [2005/10/19 02:00] (current) – removed bang | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | [[http:// | ||
| - | ===== Pengantar ===== | ||
| - | |||
| - | ==== Sejarah Lahirnya OpenBSD ==== | ||
| - | |||
| - | <note classic> bersambung </ | ||
| - | |||
| - | ==== Apa saja yang disertakan dengan OpenBSD ==== | ||
| - | |||
| - | OpenBSD menyertakan applikasi-aplikasi yang umumnya diperlukan di setiap rilisnya. Diantaranya adalah: | ||
| - | * X.org | ||
| - | * GCC (dengan peningkatan kemampuan) | ||
| - | * Perl 5.8.6 (dengan peningkatan kemampuan) | ||
| - | * Apache 1.3.29 (peningkatan kemampuan dari segi security) | ||
| - | * OpenSSL 0.9.7d (dengan peningkatan kemampuan) | ||
| - | * Groff 1.15 | ||
| - | * Sendmail 8.13.3 mail server, with libmilter. | ||
| - | * BIND 9.3.0 DNS server. (dengan peningkatan kemampuan) | ||
| - | * Lynx 2.8.5rel.2 (peningkatan kemampuan) | ||
| - | * Sudo v1.6.8p6, allowing users to run individual commands as root. | ||
| - | * Ncurses 5.2. | ||
| - | * KAME IPv6. | ||
| - | * Heimdal 0.6rc1 (dengan peningkatan kemampuan) | ||
| - | * Arla 0.35.7 | ||
| - | * OpenSSH 4.1 | ||
| - | * gdb 6.1 | ||
| - | |||
| - | |||
| - | ===== Install ===== | ||
| - | |||
| - | ==== File ISO OpenBSD ==== | ||
| - | |||
| - | Pertanyaan yang sangat sering muncul bagi yang baru kenal dengan OpenBSD adalah : //dimana sih ngedownload file .iso nya OpenBSD ? kok di official dan mirror-mirror FTP nya gak ada.// | ||
| - | Jawabannya adalah : | ||
| - | Memang tidak ada !. | ||
| - | OpenBSD tidak menyediakan file .iso seperti yang disediakan oleh Linux, FreeBSD, NetBSD dan lainnya | ||
| - | Untuk lebih lengkapnya silahkan baca http:// | ||
| - | |||
| - | Meskipun begitu, ada beberapa pihak yang membuat file ISO OpenBSD dan tersedia untuk di download di internet. Tentu saja file-file ISO tersebut bukan berasal dari OpenBSD. Saya pribadi tidak menganjurkan untuk menggunakan file yang beredar di internet ini. Kenapa ? Alasan yang masuk akal adalah security. Apa jadinya kalau distribusi OpenBSD yang anda download iso nya itu sudah dimodifikasi oleh pihak-pihak tertentu untuk tujuan tertentu pula. | ||
| - | |||
| - | Membuat file ISO OpenBSD tidak terlalu sulit. Berikut adalah langkah-langkah (dengan menggunakan Windows) untuk membuat file ISO OpenBSD 3.7 untuk arsitektur mesin i386 (cara yang sama bisa digunakan untuk membuat file iso untuk arsitektur mesin yang lain, seperti alpha, amd64, dsb). Walaupun ada menggunakan UNIX varian untuk membuat file ISO ini, anda bisa melakukannnya dengan cara yang sama, selama di environment anda terdapat aplikasi '' | ||
| - | * Buat direktori dengan susunan berikut , misal OpenBSD/ | ||
| - | * Downloadlah semua isi ftp:// | ||
| - | 3.7/ | ||
| - | i386/ | ||
| - | bsd | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | ports.tar.gz | ||
| - | src.tar.gz | ||
| - | srcsys.tar.gz | ||
| - | |||
| - | HARDWARE | ||
| - | PACKAGES | ||
| - | PORTS | ||
| - | README | ||
| - | TRANS.TBL | ||
| - | song37.mp3 | ||
| - | </ | ||
| - | |||
| - | * Kemudian baru kita membuat iso nya dengan menggunakan program mkisofs (yang dapat di download di http:// | ||
| - | |||
| - | < | ||
| - | c: | ||
| - | -v | ||
| - | -r | ||
| - | -T | ||
| - | -J | ||
| - | -V " | ||
| - | -b C:/ | ||
| - | -c boot.catalog | ||
| - | -o C:/ | ||
| - | -x C:/ | ||
| - | | ||
| - | </ | ||
| - | |||
| - | * Tunggulah sampai proses pembuatan file ISO tersebut selesai, kalau sudah, file iso OpenBSD yang anda buat C: | ||
| - | |||
| - | Catatan : Cara yang sama dapat digunakan untuk membuat DVD-ROM OpenBSD dengan menyertakan semua file-file packages yang tersedia. Total ukurannya sekitar 2.5 GB. | ||
| - | |||
| - | ==== Instalasi ==== | ||
| - | |||
| - | Proses instalasi OpenBSD, termasuk proses instalasi yang paling cepat dibandingkan dengan Operating System yang lainnya. Perlu dicatat, bahwa instalasi OpenBSD tidak sekedar instalasi kernel. | ||
| - | |||
| - | Umumnya OpenBSD dapat diinstal melalui [[http:// | ||
| - | |||
| - | Dalam kasus ini, instalasi OpenBSD menggunakan CDROM | ||
| - | |||
| - | Booting melalui CDROM | ||
| - | |||
| - | < | ||
| - | Loading; | ||
| - | probing: pc0 com0 com1 apm mem[634K 509M 1024K a20=on] | ||
| - | disk: fd0 fd1 hd0+* | ||
| - | >> OpenBSD/ | ||
| - | boot> < | ||
| - | </ | ||
| - | |||
| - | Install: untuk menginstalasi OpenBSD ke sistem yang baru.\\ | ||
| - | Upgrade: untuk mengupgrade OpenBSD dari versi sebelumnya ke versi baru\\ | ||
| - | |||
| - | Catatan: hanya beda 1 versi, seperti 3.6 -> 3.7, atau, dari 3.7 -> 3.8, untuk perbedaan 2-3 versi, disarankan untuk membackup data & configuration, | ||
| - | Shell: untuk melakukan maintenance | ||
| - | |||
| - | < | ||
| - | rootdev=0x1100 rrootdev=0x2f00 rawdev=0x2f02 | ||
| - | erase ^?, werase ^W, kill ^U, intr ^C, status ^T | ||
| - | (I)nstall, (U)pgrade or (S)hell? i < | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | Welcome to the OpenBSD/ | ||
| - | |||
| - | This program will help you install OpenBSD in a simple and rational way. At | ||
| - | any prompt except password prompts you can run a shell command by typing | ||
| - | ' | ||
| - | and are selected by pressing RETURN. At any time you can exit this program by | ||
| - | pressing Control-C and then RETURN, but quitting during an install can leave | ||
| - | your system in an inconsistent state. | ||
| - | |||
| - | Specify terminal type: [vt220] < | ||
| - | Do you wish to select a keyboard encoding table? [no] < | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | IS YOUR DATA BACKED UP? As with anything that modifies disk contents, this | ||
| - | program can cause SIGNIFICANT data loss. | ||
| - | |||
| - | It is often helpful to have the installation notes handy. For complex disk | ||
| - | configurations, | ||
| - | |||
| - | Proceed with install? [no] y < | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | Cool! Let's get to it... | ||
| - | |||
| - | You will now initialize the disk(s) that OpenBSD will use. To enable all | ||
| - | available security features you should configure the disk(s) to allow the | ||
| - | creation of separate filesystems for /, /tmp, /var, /usr, and /home. | ||
| - | |||
| - | Available disks are: wd0. | ||
| - | Which one is the root disk? (or done) [wd0] < | ||
| - | </ | ||
| - | |||
| - | Untuk server ataupun firewall, sangat jarang menggunakan dual operating system, untuk kasus ini, semua space harddisk didedikasi untuk OpenBSD | ||
| - | |||
| - | < | ||
| - | Do you want to use *all* of wd0 for OpenBSD? [no] y < | ||
| - | </ | ||
| - | |||
| - | Partisi | ||
| - | |||
| - | < | ||
| - | Putting all of wd0 into an active OpenBSD MBR partition (type ' | ||
| - | |||
| - | You will now create an OpenBSD disklabel inside the OpenBSD MBR | ||
| - | partition. The disklabel defines how OpenBSD splits up the MBR partition | ||
| - | into OpenBSD partitions in which filesystems and swap space are created. | ||
| - | |||
| - | The offsets used in the disklabel are ABSOLUTE, i.e. relative to the | ||
| - | start of the disk, NOT the start of the OpenBSD MBR partition. | ||
| - | |||
| - | # using MBR partition 3: type A6 off 63 (0x3f) size 41929587 (0x27fcb73) | ||
| - | |||
| - | Treating sectors 63-41929650 as the OpenBSD portion of the disk. | ||
| - | You can use the ' | ||
| - | |||
| - | Initial label editor (enter '?' | ||
| - | > ? | ||
| - | Available commands: | ||
| - | ? [cmnd] | ||
| - | a [part] | ||
| - | b - set OpenBSD disk boundaries. | ||
| - | c [part] | ||
| - | D - set label to default. | ||
| - | d [part] | ||
| - | e - edit drive parameters. | ||
| - | g [b|d|u] - use [b]ios, [d]isk or [u]ser geometry. | ||
| - | M - show entire OpenBSD man page for disklabel. | ||
| - | m [part] | ||
| - | n [part] | ||
| - | p [unit] | ||
| - | q - quit and save changes. | ||
| - | r - recalculate free space. | ||
| - | s [path] | ||
| - | u - undo last change. | ||
| - | w - write label to disk. | ||
| - | X - toggle expert mode. | ||
| - | x - exit without saving changes. | ||
| - | z - zero out partition table. | ||
| - | Numeric parameters may use suffixes to indicate units: | ||
| - | ' | ||
| - | ' | ||
| - | ' | ||
| - | Non-sector units will be rounded to the nearest cylinder. | ||
| - | Entering '?' | ||
| - | > | ||
| - | |||
| - | </ | ||
| - | |||
| - | Untuk skema partisi, digunakan\\ | ||
| - | wd0a: / (root) - 128M\\ | ||
| - | wd0b: (swap) - 256M\\ | ||
| - | wd0d: /tmp - 1G\\ | ||
| - | wd0e: /var - 8G\\ | ||
| - | wd0f: /usr - 2G\\ | ||
| - | w0dg: /home - rest of the disk | ||
| - | |||
| - | < | ||
| - | > p m | ||
| - | device: /dev/rwd0c | ||
| - | type: ESDI | ||
| - | disk: ESDI/IDE disk | ||
| - | label: QUANTUM FIREBALL | ||
| - | bytes/ | ||
| - | sectors/ | ||
| - | tracks/ | ||
| - | sectors/ | ||
| - | cylinders: 16383 | ||
| - | total sectors: 20480.0M | ||
| - | free sectors: 20473.4M | ||
| - | rpm: 3600 | ||
| - | |||
| - | 16 partitions: | ||
| - | # | ||
| - | a: 20473.4M | ||
| - | c: 20480.0M | ||
| - | > d a < | ||
| - | > a a < | ||
| - | offset: [63] < | ||
| - | size: [41929587] 128M < | ||
| - | Rouding to nearest cylinder: 261702 | ||
| - | FS type: [4.2BSD] < | ||
| - | mount point: [none] / < | ||
| - | > a b < | ||
| - | offset: [261765] < | ||
| - | size: [41667885] 256M < | ||
| - | Rouding to nearest cylinder: 524475 | ||
| - | FS type: [swap] < | ||
| - | > a d < | ||
| - | offset: [786240] < | ||
| - | size: [41143410] 1G < | ||
| - | Rouding to nearest cylinder: 2096955 | ||
| - | FS typeL [4.2BSD] < | ||
| - | mount point: [none] /tmp < | ||
| - | > a e < | ||
| - | offset: [2883195] < | ||
| - | size: [39046455] 8G < | ||
| - | Rouding to nearest cyclinder: 16777530 | ||
| - | FS typeL [4.2BSD] < | ||
| - | mount point: [none] /var < | ||
| - | > a f < | ||
| - | offset: [19660725] < | ||
| - | size: [22268925] 2G < | ||
| - | Rouding to nearest cylinder: 4193910 | ||
| - | FS typeL [4.2BSD] < | ||
| - | mount point: [none] /usr < | ||
| - | > a g < | ||
| - | offset: [23854635] < | ||
| - | size: [18075015] < | ||
| - | FS typeL [4.2BSD] < | ||
| - | mount point: [none] /home < | ||
| - | > p m < | ||
| - | device: /dev/rwd0c | ||
| - | type: ESDI | ||
| - | disk: ESDI/IDE disk | ||
| - | label: QUANTUM FIREBALL | ||
| - | bytes/ | ||
| - | sectors/ | ||
| - | tracks/ | ||
| - | sectors/ | ||
| - | cylinders: 16383 | ||
| - | total sectors: 20480.0M | ||
| - | free sectors: 0.0M | ||
| - | rpm: 3600 | ||
| - | |||
| - | 16 partitions: | ||
| - | # | ||
| - | a: 127.8M | ||
| - | b: 256.1M | ||
| - | c: 20480.0M | ||
| - | d: | ||
| - | e: | ||
| - | f: | ||
| - | g: | ||
| - | > q | ||
| - | Write new label?: [y] < | ||
| - | </ | ||
| - | |||
| - | Mount point dan format system | ||
| - | |||
| - | < | ||
| - | Mount point for wd0d (size=1048477k), | ||
| - | Mount point for wd0e (size=8388765k), | ||
| - | Mount point for wd0f (size=2096955k), | ||
| - | Mount point for wd0g (size=9037507k), | ||
| - | Mount point for wd0d (size=1048477k), | ||
| - | |||
| - | No more disks to initialize. | ||
| - | |||
| - | OpenBSD filesystems: | ||
| - | wd0a / | ||
| - | wd0d /tmp | ||
| - | wd0e /var | ||
| - | wd0f /usr | ||
| - | wd0g /home | ||
| - | |||
| - | The next step *DESTROYS* all existing data on these partitions! | ||
| - | Are you really sure that you're ready to proceed? [no] y < | ||
| - | / | ||
| - | 127.8MB in 1 cyl groups (288 c/g, 132.89MB/g, 17024 i/g) | ||
| - | / | ||
| - | 1023.9MB in 7 cyl groups (320 c/g, 147.66MB/g, 18944 i/g) | ||
| - | / | ||
| - | 8192.2MB in 56 cyl groups (320 c/g, 147.66MB/g, 18944 i/g) | ||
| - | / | ||
| - | 2047.8MB in 14 cyl groups (320 c/g, 147.66MB/g, 18944 i/g) | ||
| - | / | ||
| - | 8825.7MB in 60 cyl groups (328 c/g, 147.66MB/g, 18944 i/g) | ||
| - | /dev/wd0a on /mnt type ffs (rw, asynchronous, | ||
| - | 005) | ||
| - | /dev/wd0g on /mnt/home type ffs (rw, asynchronous, | ||
| - | hu Oct 6 16:38:01 2005) | ||
| - | /dev/wd0d on /mnt/tmp type ffs (rw, asynchronous, | ||
| - | u Oct 6 16:38:01 2005) | ||
| - | /dev/wd0f on /mnt/usr type ffs (rw, asynchronous, | ||
| - | | ||
| - | /dev/wd0e on /mnt/var type ffs (rw, asynchronous, | ||
| - | u Oct 6 16:38:01 2005) | ||
| - | </ | ||
| - | |||
| - | Konfigurasi jaringan | ||
| - | |||
| - | < | ||
| - | Enter system hostname (short form, e.g. ' | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | Configure the network? [yes] < | ||
| - | Available interfaces are: sis0. | ||
| - | Which one do you wish to initialize? (or ' | ||
| - | Symbolic (host) name for sis0? [fw] Enter | ||
| - | IP address for sis0? (or ' | ||
| - | Netmask? [255.255.255.0] < | ||
| - | No more interfaces to initalize. | ||
| - | DNS domain name? (e.g. ' | ||
| - | NS nameserver? (IP address or ' | ||
| - | Use the nameserver now? [yes] < | ||
| - | Default route? (IP address, ' | ||
| - | add net default: gateway 192.168.0.1 | ||
| - | Edit hosts with ed? [no] < | ||
| - | Do you want to do any manual network configuration? | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | Password for root account? (will not echo) pAssWOrd < | ||
| - | Password for root account? (again) pAssWOrd < | ||
| - | </ | ||
| - | |||
| - | Instalasi base system dan set yang lain | ||
| - | |||
| - | < | ||
| - | You will now specify the location and names of the install sets you want to | ||
| - | load. You will be able to repeat this step until all of your sets have been | ||
| - | successfully loaded. If you are not sure what sets to install, refer to the | ||
| - | installation notes for details on the contents of each. | ||
| - | |||
| - | Sets can be located on a (m)ounted filesystem; a (c)drom, (d)isk or (t)ape | ||
| - | device; or a (f)tp, (n)fs or (h)ttp server. | ||
| - | Where are the install sets? c < | ||
| - | Available CD-ROMs are: cd0. | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | Available CD-ROMs are: cd0. | ||
| - | Which one contains the install media? (or ' | ||
| - | Pathname to the sets? (or ' | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | The following sets are available. Enter a filename, ' | ||
| - | all the sets, or ' | ||
| - | to its name. | ||
| - | |||
| - | [X] bsd | ||
| - | [X] bsd.rd | ||
| - | [ ] bsd.mp | ||
| - | [X] base37.tgz | ||
| - | [X] etc37.tgz | ||
| - | [X] misc37.tgz | ||
| - | [X] comp37.tgz | ||
| - | [X] man37.tgz | ||
| - | [X] game37.tgz | ||
| - | [ ] xbase37.tgz | ||
| - | [ ] xetc37.tgz | ||
| - | [ ] xshare37.tgz | ||
| - | [ ] xfont37.tgz | ||
| - | [ ] xserv37.tgz | ||
| - | |||
| - | File Name? (or ' | ||
| - | |||
| - | The following sets are available. Enter a filename, ' | ||
| - | all the sets, or ' | ||
| - | to its name. | ||
| - | |||
| - | [X] bsd | ||
| - | [X] bsd.rd | ||
| - | [ ] bsd.mp | ||
| - | [X] base37.tgz | ||
| - | [X] etc37.tgz | ||
| - | [X] misc37.tgz | ||
| - | [X] comp37.tgz | ||
| - | [X] man37.tgz | ||
| - | [ ] game37.tgz | ||
| - | [ ] xbase37.tgz | ||
| - | [ ] xetc37.tgz | ||
| - | [ ] xshare37.tgz | ||
| - | [ ] xfont37.tgz | ||
| - | [ ] xserv37.tgz | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | File Name? (or ' | ||
| - | Ready to install sets? [yes] < | ||
| - | Getting bsd ... | ||
| - | 100% |**************************************************| | ||
| - | Getting bsd.rd ... | ||
| - | 100% |**************************************************| | ||
| - | Getting base37.tgz ... | ||
| - | 100% |**************************************************| 34337 KB 00:43 | ||
| - | Getting etc37.tgz ... | ||
| - | 100% |**************************************************| | ||
| - | Getting misc37.tgz ... | ||
| - | 100% |**************************************************| | ||
| - | Getting comp37.tgz ... | ||
| - | 100% |**************************************************| 21606 KB 00:27 | ||
| - | Getting man37.tgz ... | ||
| - | 100% |**************************************************| | ||
| - | |||
| - | Sets can be located on a (m)ounted filesystem; a (c)drom, (d)isk or (t)ape | ||
| - | device; or a (f)tp, (n)fs or (h)ttp server. | ||
| - | Where are the install sets? (or ' | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | Start sshd(8) by default? [yes] < | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | Start ntpd(8) by default? [no] y < | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | Change the default console to com0? [no] < | ||
| - | </ | ||
| - | |||
| - | Untuk timezone dapat dicocokan dengan waktu setempat | ||
| - | |||
| - | < | ||
| - | Saving configuration files......done. | ||
| - | Generating initial host.random file ......done. | ||
| - | What timezone are you in? ('?' | ||
| - | Africa/ | ||
| - | America/ | ||
| - | Antarctica/ | ||
| - | Arctic/ | ||
| - | Asia/ EST5EDT | ||
| - | Atlantic/ | ||
| - | Australia/ | ||
| - | Brazil/ | ||
| - | CET Europe/ | ||
| - | CST6CDT | ||
| - | Canada/ | ||
| - | What timezone are you in? ('?' | ||
| - | What sub-timezone of ' | ||
| - | Aden Chungking | ||
| - | Almaty | ||
| - | Amman | ||
| - | Anadyr | ||
| - | Aqtau | ||
| - | Aqtobe | ||
| - | Ashgabat | ||
| - | Ashkhabad | ||
| - | Baghdad | ||
| - | Bahrain | ||
| - | Baku Hong_Kong | ||
| - | Bangkok | ||
| - | Beirut | ||
| - | Bishkek | ||
| - | Brunei | ||
| - | Calcutta | ||
| - | Choibalsan | ||
| - | Chongqing | ||
| - | What sub-timezone of ' | ||
| - | Setting local timezone to ' | ||
| - | </ | ||
| - | |||
| - | |||
| - | < | ||
| - | Making all device nodes...done. | ||
| - | Installing boot block... | ||
| - | boot: /mnt/boot | ||
| - | proto: / | ||
| - | device: /dev/rwd0c | ||
| - | / | ||
| - | proto bootblock size 512 | ||
| - | /mnt/boot is 3 blocks x 16384 bytes | ||
| - | fs block shift 2; part offset 63; inode block 120, offset 14248 | ||
| - | using MBR partition 3: type 166 (0xa6) offset 63 (0x3f) | ||
| - | done. | ||
| - | |||
| - | CONGRATULATIONS! Your OpenBSD install has been successfully completed! | ||
| - | To boot the new system, enter halt at the command prompt. Once the | ||
| - | system has halted, reset the machine and boot from the disk. | ||
| - | # halt < | ||
| - | syncing disks... done | ||
| - | |||
| - | The operating system has halted. | ||
| - | Please press any key to reboot. | ||
| - | </ | ||
| - | |||
| - | === Multiboot === | ||
| - | |||
| - | **Windows -> OpenBSD -> FreeBSD atau Linux** | ||
| - | |||
| - | * Jika anda ingin dualboot antara Windows dan OpenBSD, installah Windows terlebih dahulu. Baik itu Windows 9x ataupun Windows NT-based (termasuk Windows 2000, Windows XP, Windows 2003) | ||
| - | * Pastikan ukuran partisi pertama (C:\>) anda tidak lebih besar dari 7 GB. Karena partisi '' | ||
| - | * Contoh kasus ini adalah instalasi Windows XP (dengan ukuran partisi pertama - C:\> sebesar 7 GB) + OpenBSD dengan menggunakan hardisk yang berukuran 20 GB. < | ||
| - | Available disks are: sd0 sd1 wd0. | ||
| - | Which one is the root disk? (or done) [done] wd0 | ||
| - | Do you want to use *all* of wd0 for OpenBSD? [no] | ||
| - | </ | ||
| - | |||
| - | ==== Setting dan Konfigurasi ==== | ||
| - | |||
| - | / | ||
| - | |||
| - | ===== Post-Install ===== | ||
| - | |||
| - | Berikut ini adalah hal-hal yang dilakukan sesudah proses Instalasi berhasil dilakukan. | ||
| - | |||
| - | * '' | ||
| - | Bagi yang baru menggunakan OpenBSD disarankan untuk memaca manual '' | ||
| - | |||
| - | * Mengirimkan file dmesg (file yang berisi informasi hardware yang kita gunakan untuk menjalankan OpenBSD) dapat berguna bagi developer OpenBSD, baik untuk statistik maupun bugs yang mungkin ditemukan pada hardware-hardware tertentu. < | ||
| - | |||
| - | * Bagaimana caranya mengakses CDROM ? merupakan salah satu pertanyaan yang sering muncul bagi yang baru menggunakan OpenBSD. < | ||
| - | |||
| - | * Install source code OpenBSD | ||
| - | < | ||
| - | # cd /usr/src ; tar -xzvpf / | ||
| - | # cd /usr/src ; tar -xzvpf / | ||
| - | </ | ||
| - | |||
| - | * Install Ports | ||
| - | < | ||
| - | # cd /usr ; tar -xzvpf ports.tar.gz | ||
| - | </ | ||
| - | |||
| - | * '' | ||
| - | Dianjurkan untuk tidak menggunakan user '' | ||
| - | wheel: | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | %wheel | ||
| - | </ | ||
| - | |||
| - | Artinya memberikan akses superuser kepada user-user yang termasuk ke dalam group '' | ||
| - | |||
| - | ===== System ===== | ||
| - | |||
| - | ==== Versi ==== | ||
| - | |||
| - | * **Siklus pengembangan OpenBSD**< | ||
| - | |||
| - | , | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | | ||
| - | </ | ||
| - | |||
| - | |||
| - | * **CURRENT** | ||
| - | Merupakan versi terakhir dari OpenBSD. Versi -CURRENT adalah versi OpenBSD yang digunakan oleh para developer untuk menguji fitur-fitur baru, atau juga oleh para Administrator yang ingin ikut mencoba atau menguji fitur-fitur baru yang disediakan oleh OpenBSD. Jika anda tidak bisa bahasa C, Perl, Shell, tidak ingin melakukan '' | ||
| - | |||
| - | * **Snapshots** | ||
| - | Sekali dalam beberapa hari, para developer me | ||
| - | |||
| - | * **RELEASE** | ||
| - | Tiap 6 bulan, | ||
| - | |||
| - | * **STABLE** | ||
| - | Versi ini merupakan kelanjutan dari versi -RELEASE yang menyediakan perbaikan-perbaikan (jika ada), dari sisi '' | ||
| - | |||
| - | . | ||
| - | |||
| - | |||
| - | |||
| - | ==== Kernel ==== | ||
| - | |||
| - | Dimana '' | ||
| - | ''/ | ||
| - | |||
| - | ==== Ports dan Packages ==== | ||
| - | |||
| - | Ada dua metode yang disediakan untuk memudahkan proses instalasi dan pengaturan applikasi/ | ||
| - | (juga varian BSD yang lainnya) | ||
| - | |||
| - | * Packages | ||
| - | Merupakan kumpulan file binari (hasil kompilasi) yang dibuat oleh para developer OpenBSD dengan menggunakan ports sebagai dasarnya. Jika anda membeli CD official OpenBSD, di dalamnya sudah disertakan package-package yang umumnya diperlukan. Biasanya ciri dari package di OpenBSD adalah file yang berekstensi '' | ||
| - | Install package< | ||
| - | Option '' | ||
| - | Informasi package yang sudah terinstall di sistem < | ||
| - | Delete package< | ||
| - | |||
| - | Selain itu kita juga dapat menginstall packages secara langsung dari internet. | ||
| - | |||
| - | untuk csh, tcsh | ||
| - | < | ||
| - | |||
| - | untuk ksh, bash | ||
| - | < | ||
| - | |||
| - | Contoh penggunaan | ||
| - | < | ||
| - | Agar dapat menginstall GIMP, kita juga perlu menginstall package-package lain, yang diperlukan agar GIMP dapat berfungsi dengan baik. Dan karena kita sudah mendefenisikan dimana lokasi package kita dengan cara di atas, maka perintah '' | ||
| - | |||
| - | * Ports | ||
| - | < | ||
| - | # make search key=keyword | ||
| - | # make fetch | ||
| - | # make depends | ||
| - | # make build | ||
| - | # make install | ||
| - | # make package | ||
| - | # make clean | ||
| - | </ | ||
| - | |||
| - | sekaligus | ||
| - | < | ||
| - | # make install clean | ||
| - | </ | ||
| - | |||
| - | ==== Update ==== | ||
| - | |||
| - | Rata-rata pengguna BSD sudah cukup akrab untuk mengupdate sistem mereka dengan menggunakan '' | ||
| - | < | ||
| - | |||
| - | Proses update yang akan kita lakukan dalam contoh ini adalah proses update dari versi -RELEASE ke versi -STABLE. | ||
| - | |||
| - | '' | ||
| - | < | ||
| - | # Defaults that apply to all the collections | ||
| - | *default release=cvs | ||
| - | *default delete use-rel-suffix | ||
| - | *default umask=002 | ||
| - | *default host=anoncvs3.usa.openbsd.org | ||
| - | *default base=/usr | ||
| - | *default prefix=/usr | ||
| - | *default tag=OPENBSD_3_7 | ||
| - | |||
| - | #Repository yang tersedia | ||
| - | # | ||
| - | OpenBSD-src | ||
| - | OpenBSD-ports | ||
| - | # | ||
| - | # | ||
| - | # | ||
| - | </ | ||
| - | |||
| - | Perhatikan bagian '' | ||
| - | |||
| - | < | ||
| - | |||
| - | Perintah diatas akan melakukan proses update terhadap source tree '' | ||
| - | |||
| - | === Kernel === | ||
| - | |||
| - | |||
| - | Aplikasi tidak ada yang perlu di update | ||
| - | < | ||
| - | # cd /usr/ports | ||
| - | # ./ | ||
| - | Make sure your ports tree is up-to-date | ||
| - | Generating specs | ||
| - | Checking new package names | ||
| - | Recording old package names | ||
| - | Showing discrepancies | ||
| - | # | ||
| - | </ | ||
| - | |||
| - | Aplikasi ada yang perlu di update, berdasarkan susunan ports yang baru saja di fetch | ||
| - | < | ||
| - | # ./ | ||
| - | Make sure your ports tree is up-to-date | ||
| - | Generating specs | ||
| - | Checking new package names | ||
| - | Recording old package names | ||
| - | Showing discrepancies | ||
| - | --- / | ||
| - | +++ / | ||
| - | @@ -1,9 +1,9 @@ | ||
| - | -bash-3.0.16p0 | ||
| - | -cvsup-16.1g-no_x11 | ||
| - | -gettext-0.10.40p2 | ||
| - | -libiconv-1.9.2 | ||
| - | -lsof-4.69p0 | ||
| - | -pico-4.9 | ||
| - | -pine-4.62 | ||
| - | -unzip-5.51 | ||
| - | +bash-3.0.16p1 | ||
| - | +cvsup-16.1h-no_x11 | ||
| - | +gettext-0.10.40p3 | ||
| - | +libiconv-1.9.2p1 | ||
| - | +lsof-4.75 | ||
| - | +pico-4.10 | ||
| - | +pine-4.63 | ||
| - | +unzip-5.52 | ||
| - | | ||
| - | # | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | # cp /bsd /bsd.old | ||
| - | # cd / | ||
| - | </ | ||
| - | Tips : | ||
| - | Untuk membuat kernel yang spesifik dengan hardware yang ada di box tersebut, selain dengan mengedit file / | ||
| - | < | ||
| - | # cd / | ||
| - | # dmassage -s GENERIC > | ||
| - | </ | ||
| - | |||
| - | lanjutkan dengan | ||
| - | < | ||
| - | # config KERNELKU | ||
| - | Don't forget to run "make depend" | ||
| - | If config tells you to make clean, do so before running make depend. [make clean && make depend] | ||
| - | # cd / | ||
| - | # make depend && make | ||
| - | # cp / | ||
| - | </ | ||
| - | |||
| - | === Rebuilding the system === | ||
| - | < | ||
| - | # cd /usr/src | ||
| - | # find . -type l -name obj | xargs rm | ||
| - | # make cleandir | ||
| - | # rm -rf /usr/obj/* | ||
| - | # make obj | ||
| - | # cd / | ||
| - | # make DESTDIR=/ distrib-dirs | ||
| - | # cd /usr/src | ||
| - | # make build | ||
| - | </ | ||
| - | |||
| - | |||
| - | |||
| - | ===== Daemon ===== | ||
| - | |||
| - | ==== DNS ==== | ||
| - | === Bind/Named === | ||
| - | === djbdns === | ||
| - | |||
| - | http:// | ||
| - | |||
| - | ==== Mail ==== | ||
| - | === Sendmail === | ||
| - | |||
| - | ==== Apache / Webserver ==== | ||
| - | |||
| - | |||
| - | === Virtual Host === | ||
| - | |||
| - | |||
| - | === SSL === | ||
| - | |||
| - | < | ||
| - | # openssl genrsa -out / | ||
| - | # openssl req -new -key / | ||
| - | # openssl x509 -req -days 365 -in / | ||
| - | | ||
| - | </ | ||
| - | |||
| - | File rc.conf | ||
| - | < | ||
| - | httpd_flags=" | ||
| - | </ | ||
| - | |||
| - | Start Apache+SSL | ||
| - | < | ||
| - | # apachectl startssl | ||
| - | </ | ||
| - | |||
| - | === chroot === | ||
| - | Persiapan direktori untuk chroot, dengan catatan, webserver ini disiapkan untuk support PHP dan Perl | ||
| - | |||
| - | < | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # mkdir -p / | ||
| - | # chmod a+w / | ||
| - | # chmod u+t / | ||
| - | </ | ||
| - | |||
| - | === Perl === | ||
| - | |||
| - | < | ||
| - | # cp / | ||
| - | # cp / | ||
| - | # cp / | ||
| - | # cp / | ||
| - | # cp / | ||
| - | # cp / | ||
| - | # cd / | ||
| - | # cd / | ||
| - | </ | ||
| - | |||
| - | Untuk memeriksa apakah chroot berjalan dengan baik, install [[http:// | ||
| - | |||
| - | === PHP === | ||
| - | Di dalam susunan ports OpenBSD terdapat dua macam versi PHP, yaitu PHP4 dan PHP5, dan rata-rata aplikasi web yang ada di ports yang menggunakan PHP, mensyaratkan untuk menggunakan PHP5. Karena itu disini juga akan digunakan PHP5. Kemungkinan masalah yang akan timbul adalah tidak kompatibelnya aplikasi web yang akan digunakan dengan PHP5. | ||
| - | < | ||
| - | # cd / | ||
| - | </ | ||
| - | Dengan metode instalasi di atas, secara default akan terinstall dua package yaitu php5-core dan php5-extension, | ||
| - | < | ||
| - | php5-core-5.0.5 | ||
| - | php5-extensions-5.0.5p0 informational package about PHP5 extensions | ||
| - | </ | ||
| - | |||
| - | Untuk mengaktifkan PHP di webserver, lakukan hal-hal berikut, seperti terdapat di post-message nya PORTS | ||
| - | < | ||
| - | # / | ||
| - | </ | ||
| - | |||
| - | pastikan baris berikut terdapat di dalam file / | ||
| - | < | ||
| - | AddType application/ | ||
| - | </ | ||
| - | |||
| - | Kopi file konfigurasi php (php.ini) dari direktori contoh | ||
| - | < | ||
| - | # cp / | ||
| - | |||
| - | edit file php.ini pada bagian | ||
| - | session.save_path = /tmp | ||
| - | </ | ||
| - | |||
| - | Kemudian restart apache nya | ||
| - | < | ||
| - | # apachectl stop | ||
| - | # apachectl startssl | ||
| - | Catatan : karena kita menggunakan Apache dengan fitur SSL, kita tidak bisa langsung mengetikkan apachectl restart | ||
| - | </ | ||
| - | Lalu bagaimana jika seandainya kita ingin PHP nya support mysql ? | ||
| - | PHP5 yang baru saja kita install, dipisahkan dalam beberapa extension, coba perhatikan extension-extension yang sudah di build begitu kita melakukan perintah make install clean tadi | ||
| - | |||
| - | < | ||
| - | # ls / | ||
| - | php5-bz2-5.0.5p0.tgz | ||
| - | php5-core-5.0.5.tgz | ||
| - | php5-curl-5.0.5p0.tgz | ||
| - | php5-dba-5.0.5p0.tgz | ||
| - | php5-dbase-5.0.5p0.tgz | ||
| - | php5-dbx-5.0.5p0.tgz | ||
| - | php5-extensions-5.0.5p0.tgz | ||
| - | php5-filepro-5.0.5p0.tgz | ||
| - | php5-gd-5.0.5p2-no_x11.tgz | ||
| - | php5-gmp-5.0.5p0.tgz | ||
| - | php5-imap-5.0.5p1.tgz | ||
| - | php5-ldap-5.0.5p0.tgz | ||
| - | php5-mbstring-5.0.5p0.tgz | ||
| - | php5-mcrypt-5.0.5p0.tgz | ||
| - | php5-mhash-5.0.5p0.tgz | ||
| - | php5-mysql-5.0.5p0.tgz | ||
| - | php5-ncurses-5.0.5p0.tgz | ||
| - | php5-odbc-5.0.5p0.tgz | ||
| - | php5-pear-5.0.5.tgz | ||
| - | php5-pgsql-5.0.5p0.tgz | ||
| - | php5-shmop-5.0.5p0.tgz | ||
| - | php5-snmp-5.0.5p0.tgz | ||
| - | php5-soap-5.0.5p1.tgz | ||
| - | php5-sqlite-5.0.5p0.tgz | ||
| - | php5-sybase_ct-5.0.5p0.tgz | ||
| - | php5-xmlrpc-5.0.5p0.tgz | ||
| - | php5-xsl-5.0.5p1.tgz | ||
| - | </ | ||
| - | |||
| - | Jika kita ingin menambahkan ekstensi mysql, yang memungkinkan PHP5 untuk berinteraksi dengan MySQL, berarti kita harus menginstall dan mengaktifkan ekstensi PHP5-mysql | ||
| - | < | ||
| - | # pkg_add -v / | ||
| - | # / | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | bash-3.00# cp jhead / | ||
| - | bash-3.00# ldd jhead | ||
| - | jhead&# | ||
| - | Start End Type Ref Name | ||
| - | 00000000 00000000 exe | ||
| - | 03663000 2366a000 rlib 1 / | ||
| - | 08914000 2894c000 rlib 1 / | ||
| - | 0c0ec000 0c0ec000 rtld 1 / | ||
| - | bash-3.00# cp / | ||
| - | bash-3.00# cp / | ||
| - | bash-3.00# cp / | ||
| - | bash-3.00# mkdir / | ||
| - | bash-3.00# cp / | ||
| - | bash-3.00# history | grep sysctl | ||
| - | | ||
| - | | ||
| - | bash-3.00# sysctl kern.emul.freebsd=0 | ||
| - | kern.emul.freebsd: | ||
| - | bash-3.00# | ||
| - | </ | ||
| - | |||
| - | Untuk memeriksa apakah chroot berjalan dengan baik, install [[http:// | ||
| - | |||
| - | ==== Caching/ | ||
| - | === Squid === | ||
| - | |||
| - | == Transparent Proxy == | ||
| - | |||
| - | ==== FTP Server ==== | ||
| - | === Anonymous FTP === | ||
| - | < | ||
| - | # adduser | ||
| - | Use option ``-silent'' | ||
| - | |||
| - | Reading /etc/shells | ||
| - | Reading / | ||
| - | Check / | ||
| - | Check /etc/group | ||
| - | |||
| - | Ok, let's go. | ||
| - | Don't worry about mistakes. I will give you the chance later to correct any input. | ||
| - | Enter username []: ftp | ||
| - | Enter full name []: anonymous ftp | ||
| - | Enter shell csh false ksh nologin sh tcsh zsh [sh]: false | ||
| - | Uid [1002]: Enter | ||
| - | Login group ftp [ftp]: Enter | ||
| - | Login group is ``ftp'' | ||
| - | [no]: no | ||
| - | Login class auth-defaults auth-ftp-defaults daemon default staff | ||
| - | [default]: Enter | ||
| - | Enter password []: Enter | ||
| - | Set the password so that user cannot logon? (y/n) [n]: y | ||
| - | |||
| - | Name: ftp | ||
| - | Password: | ||
| - | Fullname: | ||
| - | Uid: 1002 | ||
| - | Gid: 1002 (ftp) | ||
| - | Groups: | ||
| - | Login Class: default | ||
| - | HOME: /home/ftp | ||
| - | Shell: | ||
| - | OK? (y/n) [y]: y | ||
| - | Added user ``ftp'' | ||
| - | Copy files from /etc/skel to /home/ftp | ||
| - | Add another user? (y/n) [y]: n | ||
| - | Goodbye! | ||
| - | </ | ||
| - | |||
| - | === FTP-only User === | ||
| - | Tambahkan baris berikut di file /etc/shells | ||
| - | < | ||
| - | / | ||
| - | </ | ||
| - | Gunakan / | ||
| - | |||
| - | |||
| - | ==== File & Print Services ==== | ||
| - | === Samba === | ||
| - | === NFS === | ||
| - | === AFS === | ||
| - | |||
| - | ==== Database ==== | ||
| - | |||
| - | === MySQL === | ||
| - | |||
| - | < | ||
| - | # pkg_add -v ftp:// | ||
| - | Adding ftp:// | ||
| - | Dependencies for mysql-server-4.0.20 resolve to: mysql-client-4.0.20, | ||
| - | Adding mysql-client-4.0.20 | ||
| - | Adding p5-DBD-mysql-2.9004 | ||
| - | Dependencies for p5-DBD-mysql-2.9004 resolve to: p5-DBI-1.43, | ||
| - | Adding p5-DBI-1.43 | ||
| - | Dependencies for p5-DBI-1.43 resolve to: p5-PlRPC-0.2018 (todo: p5-PlRPC-0.2018) | ||
| - | Adding p5-PlRPC-0.2018 | ||
| - | Dependencies for p5-PlRPC-0.2018 resolve to: p5-Net-Daemon-0.38 (todo: p5-Net-Daemon-0.38) | ||
| - | Adding p5-Net-Daemon-0.38 | ||
| - | ===> Creating _mysql group for MySQL | ||
| - | ===> Creating _mysql user for MySQL | ||
| - | Preparing db table | ||
| - | Preparing host table | ||
| - | Preparing user table | ||
| - | Preparing func table | ||
| - | Preparing tables_priv table | ||
| - | Preparing columns_priv table | ||
| - | Installing all prepared tables | ||
| - | 050402 6:14:07 / | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | # / | ||
| - | # / | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | # / | ||
| - | [1] 5452 | ||
| - | # Starting mysqld daemon with databases from /var/mysql | ||
| - | </ | ||
| - | |||
| - | Agar mysql bisa diakses dari aplikasi web yang menggunakan sistem chroot, perlu ditambahkan : | ||
| - | file / | ||
| - | < | ||
| - | if [ -x / | ||
| - | echo -n " mysqld" | ||
| - | / | ||
| - | sleep 4 | ||
| - | rm -f / | ||
| - | ln / | ||
| - | fi | ||
| - | </ | ||
| - | |||
| - | === PostgreSQL === | ||
| - | |||
| - | ===== X-Windows ===== | ||
| - | === KDE === | ||
| - | |||
| - | < | ||
| - | # pkg_add -v kdebase-3.4.tgz | ||
| - | </ | ||
| - | |||
| - | == KDM == | ||
| - | < | ||
| - | # / | ||
| - | </ | ||
| - | |||
| - | |||
| - | === PWM === | ||
| - | |||
| - | ===== Network ===== | ||
| - | |||
| - | ==== Firewall ==== | ||
| - | |||
| - | Contoh pf.conf from phoenix | ||
| - | |||
| - | --> phoenix-pf.conf | ||
| - | < | ||
| - | ######## needed variables & their values ####### | ||
| - | ext_if=" | ||
| - | int_if=" | ||
| - | wifi_if=" | ||
| - | ipv6_if=" | ||
| - | local_net=" | ||
| - | unroutable=' | ||
| - | tcp_services=' | ||
| - | udp_services=' | ||
| - | dns_servers=' | ||
| - | icmp_types=' | ||
| - | irc=' | ||
| - | |||
| - | # cvs.openbsd.org | ||
| - | trusted_hosts=' | ||
| - | 5.20.105.149/ | ||
| - | |||
| - | set timeout { interval 10, frag 30 } | ||
| - | set timeout { tcp.first 120, tcp.opening 30, tcp.established 86400 } | ||
| - | set timeout { tcp.closing 900, tcp.finwait 45, tcp.closed 90 } | ||
| - | set timeout { udp.first 60, udp.single 30, udp.multiple 60 } | ||
| - | set timeout { icmp.first 20, icmp.error 10 } | ||
| - | set timeout { other.first 60, other.single 30, other.multiple 60 } | ||
| - | set timeout { adaptive.start 0, adaptive.end 0 } | ||
| - | set limit { states 10000, frags 5000 } | ||
| - | set loginterface none | ||
| - | set optimization normal | ||
| - | set block-policy return | ||
| - | set require-order yes | ||
| - | set fingerprints "/ | ||
| - | |||
| - | table < | ||
| - | |||
| - | ##################################### | ||
| - | scrub in on $ext_if all fragment reassemble no-df min-ttl 24 max-mss 1492 | ||
| - | scrub out on $ext_if all fragment reassemble random-id no-df min-ttl 24 max-mss 1492 | ||
| - | |||
| - | ##################################### | ||
| - | #altq on $int_if priq bandwidth 2.5Mb queue {std_in, max_in, min_in} | ||
| - | # queue std_in priq(default) | ||
| - | # queue max_in | ||
| - | # queue min_in | ||
| - | |||
| - | #altq on $ext_if priq bandwidth 800Kb queue {std_out, max_out, med_out, min_out} | ||
| - | # queue std_out | ||
| - | # queue max_out | ||
| - | # queue med_out | ||
| - | # queue min_out | ||
| - | |||
| - | ##### Network Address Translation ####### | ||
| - | nat on $ext_if from 192.168.10.0/ | ||
| - | nat-anchor " | ||
| - | |||
| - | ## redirect ## | ||
| - | rdr pass on $int_if | ||
| - | rdr pass on $int_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | |||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | rdr on $ext_if | ||
| - | |||
| - | |||
| - | ##### FILTERING ###### | ||
| - | |||
| - | block log all | ||
| - | |||
| - | pass quick on { lo $int_if $ipv6_if } | ||
| - | pass quick on $ipv6_if inet6 | ||
| - | |||
| - | antispoof quick for { lo $int_if } | ||
| - | antispoof quick for $ext_if inet | ||
| - | |||
| - | block drop in quick on $ext_if from $unroutable to any | ||
| - | block drop out quick on $ext_if from any to $unroutable | ||
| - | |||
| - | pass in on $int_if from $int_if: | ||
| - | pass out on $int_if from any to $int_if: | ||
| - | |||
| - | pass in on $ext_if inet proto {tcp, | ||
| - | pass in on $ext_if inet proto tcp from any to any port $tcp_services flags S/SAFR keep state | ||
| - | pass in on $ext_if inet proto udp from any to any port $udp_services keep state | ||
| - | |||
| - | pass out on $ext_if inet proto tcp from $ext_if to any flags S/SA keep state | ||
| - | pass out on $ext_if inet proto {udp, icmp}from $ext_if to any keep state | ||
| - | |||
| - | anchor " | ||
| - | |||
| - | #for wifi | ||
| - | |||
| - | pass out quick on $wifi_if proto tcp from $wifi_if: | ||
| - | pass out quick on $wifi_if proto { udp, icmp } from $wifi_if: | ||
| - | |||
| - | pass in quick on $wifi_if inet proto tcp from any to any port { bootps, bootpc, ssh } flags S/SA keep state | ||
| - | pass in quick on $wifi_if inet proto udp from < | ||
| - | |||
| - | anchor " | ||
| - | anchor " | ||
| - | </ | ||
| - | |||
| - | <-- phoenix-pf.conf | ||
| - | |||
| - | ==== Bandwith Limiter ==== | ||
| - | ==== IPV6 ==== | ||
| - | |||
| - | ==== NTP (Network Time Protocl) ==== | ||
| - | |||
| - | === Server === | ||
| - | |||
| - | < | ||
| - | # vi / | ||
| - | # $OpenBSD: ntpd.conf,v 1.7 2004/07/20 17:38:35 henning Exp $ | ||
| - | # sample ntpd configuration file, see ntpd.conf(5) | ||
| - | |||
| - | # Addresses to listen on (ntpd does not listen by default) | ||
| - | #listen on * | ||
| - | listen on ::1 | ||
| - | |||
| - | # sync to a single server | ||
| - | #server ntp.example.org | ||
| - | |||
| - | # use a random selection of 8 public stratum 2 servers | ||
| - | # see http:// | ||
| - | servers pool.ntp.org | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | # vi / | ||
| - | ntpd_flags= # enabled during install | ||
| - | </ | ||
| - | |||
| - | === Unix Client === | ||
| - | |||
| - | < | ||
| - | # vi / | ||
| - | # $OpenBSD: ntpd.conf,v 1.7 2004/07/20 17:38:35 henning Exp $ | ||
| - | # sample ntpd configuration file, see ntpd.conf(5) | ||
| - | # Addresses to listen on (ntpd does not listen by default) | ||
| - | #listen on * | ||
| - | # sync to a single server | ||
| - | #server ntp.example.org | ||
| - | server 192.168.1.20 | ||
| - | # use a random selection of 8 public stratum 2 servers | ||
| - | # see http:// | ||
| - | #servers pool.ntp.org | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | # vi / | ||
| - | ntpd_flags= # enabled during install | ||
| - | </ | ||
| - | |||
| - | |||
| - | === Windows Client === | ||
| - | |||
| - | < | ||
| - | C:\>net time / | ||
| - | The command completed successfully. | ||
| - | C:\>net stop w32time | ||
| - | The Windows Time service is stopping. | ||
| - | The Windows Time service was stopped successfully. | ||
| - | C:\>net start w32time | ||
| - | The Windows Time service is starting. | ||
| - | The Windows Time service was started successfully. | ||
| - | C:\>net time /querysntp | ||
| - | The current SNTP value is: 192.168.1.20 | ||
| - | The command completed successfully. | ||
| - | </ | ||
| - | |||
| - | Check konfigurasi | ||
| - | < | ||
| - | $ grep ntpd daemon | ||
| - | May 22 17:23:15 obsd3 ntpd[29943]: | ||
| - | May 22 18:44:44 obsd3 ntpd[14662]: | ||
| - | May 22 19:42:26 obsd3 ntpd[14662]: | ||
| - | May 22 23:08:08 obsd3 ntpd[14662]: | ||
| - | May 23 00:19:29 obsd3 ntpd[14662]: | ||
| - | May 23 17:55:48 obsd3 ntpd[31680]: | ||
| - | May 23 17:59:07 obsd3 ntpd[31680]: | ||
| - | May 23 18:01:12 obsd3 ntpd[31680]: | ||
| - | etc... | ||
| - | </ | ||
| - | |||
| - | ===== Filosofi ===== | ||
| - | * **Kenapa Mailing List OpenBSD sangat tidak bersahabat/ | ||
| - | * **Kenapa OpenBSD tidak mempunyai journaling file sistem ?** | ||
| - | * **Kenapa IPF tidak ada lagi di OpenBSD ?** | ||
| - | * **Kenapa versi BIND yang disertakan di OpenBSD sangat tua ?** | ||
| - | * **Saya baru saja melakukan scanning dengan menggunakan nmap terhadap OpenBSD yang baru saja saya install, dan yang mengejutkan adalah, saya mendapatkan [apapun daemonnya] aktif !** | ||
| - | * **Kenapa OpenBSD menyertakan software-software seperti Sendmail dan BIND yang jelas-jelas diketahui tidak secure ?** | ||
| - | * **Kenapa website www.openbsd.org menggunakan Solaris ?** | ||
| - | * **Saya mempunyai usulan ! Kenapa para developer tidak mendengarkan usul saya ?** | ||
| - | |||
| - | --- // | ||