Skip to main content

Posts

Lighttpd and Simple Virtual Hosts Configuration.

I manage some websites for car clubs I belong to. They had been paying for web hosting and had some volunteers who knew not quite enough about maintaining and administrating the sites. Having some prior experience with similar small club sites, I volunteered to host them and admin them. With the first site, the pages were a train wreck of PHP and making even a small change on the existing pages caused the site to crash. Way back around the turn of the last century, I had a few Linux user’s groups that wanted a website, so I worked with Cynthia Manuel of Flamingo Internet Navigators to make a template for a web site that would be easy to maintain and easy to add static content. She developed templates that relied on Server Side Includes (SSI) and Cascading Style Sheets (CSS) to make administration and content additions simple and easy, so I ported all the content over to that template and hosted the site myself. Later, another car club needed the same assistance and I ported it ov...

Using FreeDOS to admin computer hardware

FreeDOS just released version 1.2, a small upgrade in functionality, mostly to be compatible with modern hardware. ArchLinux has an excellent Wiki that is easily applied to other Linux distros. Here is their discussion on using FreeDOS to flash a system BIOS and, interestingly, creating bootable DOS images that are bigger than standard floppy disk sizes. It offers step-by-step instructions on how to create a bootable CD using your FreeDOS image. There's no need to repeat the wiki article here. I'll add more info if I develop more sources. If you need an updated DOS memory extender, check this out . DOSBox-X is a cross-platform DOS emulator based on the DOSBox project. WARP v2.31 is a fast ANSI.SYS replacement if you need one. RESOURCES FOSS DOS for 21st Century Hardware FreeDOS ArchLinux and FreeDOS DOS4GW.EXE Version 2.01a and Alternative DOS Extenders

Upgrade Mageia5 to Mageia6

Back in the early days of Linux, the changes to the operating system were so dramatic that even when updating withing the same distro, in-place point release updates were problematic enough and it was always recommended that a major version release be done from scratch. There were just too many major changes to the underlying subsystems and package naming conventions. Doing an in-place update was just asking for trouble. Modern distros have matured quite a bit even though there are occasionally some major subsystem changes being made. Yet it's never been easier to do an in-place major version upgrade. I just did the upgrade on several Mageia5 systems and the results were consistent and satisfactory, not to mention simple. Step 0. Always backup critical information. Have a Mageia5 recovery disc on hand. Read the Release Notes , the Documentation and the Errata for Mageia 6. Other than updated applications, the biggest changes are support for UEFI and the move to GRUB2....

Here's the Linux Fix to disable WPAD ATTACKS

Do you use the internet? This Linux flaw could open you up to attack . Study Highlights Serious Security Threat to Many Internet Users "RIVERSIDE, Calif. (www.ucr.edu) — Researchers at the University of California, Riverside have identified a weakness in the Transmission Control Protocol (TCP) of all Linux operating systems since late 2012 that enables attackers to hijack users’ internet communications completely remotely." tl;dr The FIX Edit /etc/sysctl.conf to include this line: net.ipv4.tcp_challenge_ack_limit = 999999999 Then execute this command as root to apply the fix. # sysctl -p If you need the Windows Fix: How to Turn Off (Disable) Web Proxy Auto Discovery (WPAD) in Windows Server 2008 R2

Bootable USB device for Mageia 5

If you Google "create a bootable USB drive in Linux" most of the returns you get will tell you to use Rufus for Windows or for Linux. The problem is that Mageia no longer provides unetbootin and instead provides their own tool, IsoDumper . Still in development, IsoDumper can only save a disk image of the existing files, write an image file to the USB device, or format the USB device with a FAT, NTFS or EXT filesystem. It would be nice if Mageia provided a bootable FreeDOS image for you so that you could easily do BIOS and firmware updates since Linux has yet to produce a usable tool for that. It's always good to know how to do that from the command line if the GUI tools are not available, so that's what we will do. FREEDOS You can get a USB image containing FreeDOS from this site . There are three different images depending on the size of your USB stick. Mine is 2GB, so I could choose either of the first two. I chose the second image. NOTE: That site ...

Adding a Spellchecker to Leafpad

Leafpad is the text editor for the LXDE desktop environment. It does well for editing basic text files, but it lacks a spellchecker. This is a hack to use the default-installed Hunspell to spell-check your text file. To accomplish this, you need to save the text file, open it in Hunspell, close Hunspell and re-open the document in Leafpad. This is accomplished by a script added to your .bashrc. I found this script in a recent Knoppix thread . Add this to .bashrc: lpad() { # uses leafpad to edit $1; on closing leafpad, # # # hunspell checks  spelling;  #on closing hunspell, leafpad shows corrected copy. leafpad $1; aspell $1; leafpad $1 & } NOTE: You can also use this with ispell, but you'll need to invoke "ispell  -c". NOTE: I found the command line at the bottom of Hunspell to be misleading. For example, it says that pressing "I" is "Insert". It actually means "Accept  the  word,  capitalized as it is in the file, and ...

Using a Blocklist File With Iptables

I read an interesting piece about securing servers written by Greg Bledsoe in LinuxJournal . I thought I would try it out and it turns out that it needed a few massages to make it run on my Mageia5 system. There are two parts to his approach, a short script that runs as rc.local , which file does not exist in Mageia, but will be properly run if you create it in /etc/rc.d/rc.local . #!/bin/sh #/etc/rc.d/rc.local #REF: http://www.linuxjournal.com/content/server-hardening?page=0,2 #create iptables blocklist rule and ipset hash /usr/sbin/ipset create blocklist hash:net /usr/sbin/iptables -I INPUT 1 -m set --match-set blocklist  ↪src -j DROP This file owner should be root with 700 permissions. Once you create it, you should execute it manually because that needs to be done before you run the script to collect the blocklists. I put the blocklist collection script in /usr/local/bin . You will need to create the directory /usr/local/bin/tmp because the script wa...