Monday, March 06, 2006

What I have been doing.

What I have accomplished Today:
1. I know how to change linux hostname /etc/sysconfig/network

2. linux hosts file is /etc/hosts

3. installing rarlinux-3.5.1.tar.gz requires compat-libstdc++-33-3.2.3-47.fc4.i386.rpm

4. installing ie4linux from www.tatanka.com.br/ie4linux (farsi major problems)

5. installing apache,php,mysql,phpmyadmin (using fedora core default installations is enough no manipulations required)

6. DO NOT use zip with GUI neither should you unzip with that as the result will be that your files will not be accessible via the web (the files unzipped to the web shared folder) tar xvf had the same problem, USE MC TO UNZIP and the COMMAND LINE to zip

7. Farsi fonts have all been rpm packaged: bfonts, farsiweb, un_beed_fonts and mscorefonts

8. I can connect with samba (gui and smbclient command), create samba mount points using fstab like this: /192.168.0.100/C$ /media/SERVERC smbfs username=user,password=pass 0 0

9. Samba server has to be installed and run and users must be allowed to pass through the iptables hole like this:

iptables -I INPUT 1 -p tcp --source 10.0.0.1/255.255.255.0 --dport 137:139 -j ACCEPT
iptables -I INPUT 1 -p udp --source 10.0.0.1/255.255.255.0 --dport 137:139 -j ACCEPT
iptables-save > /etc/sysconfig/iptables
10.0.0.1/255.255.255.0 is my computer ip

****. DO NOT USE THE SAMBA SERVER SETTINGS IN system settings->server settings->samba
Right Click on the folders and share them instead
Samba users may be a subset of linux users using sampasswd -a -U user to add users

10. Compiling and installing almost any source in linux may be done as below:
./configure
make
make install
make clean

11. Running/Stopping service in RPM packages after rpm package installation is done in
System Settings->Server Settings->Services

12. knetstats the KDE network monitor installation from source requires MANY already distributed with linux packages including Qt which is spelled qt in the DVD rpm folder
ps: find /media/cdrecorder/Fedora/RPMS/ -name "*qt*.*"

13. Autorunning non KDE service like application may be done using
cd /root/.kde/Autostart/
knetstats.desktop is the file that has to be copied in this folder after finishing knetstats installation
Look at the file format for inspirations to make other similar ones
PS: kinit application_name did the same for me

14. IPtables and firewal settings I'm using the minimal one at
http://danieldegraaf.afraid.org/info/iptables/

A minimal clinet friendly config
# Generated by iptables-save v1.2.11 on Tue May 10 08:06:58 2005
*filter
:INPUT ACCEPT [5:952]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1192099:595387635]



# accept all from localhost
-A INPUT -s 127.0.0.1 -j ACCEPT

# accept all previously established connections
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

# ssh
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT

# ftp / webserver related
-A INPUT -p tcp -m state --state NEW -m tcp --dport 20 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT

# Windows / Samba
-A INPUT -p tcp -m state --state NEW -m tcp --dport 137:139 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 426 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 445 -j ACCEPT

# up to 5 Bit-torrent connections
-A INPUT -p tcp -m state --state NEW -m tcp --dport 6881:6886 -j ACCEPT

# reject everything else
-A INPUT -j REJECT --reject-with icmp-port-unreachable

COMMIT
# Completed on Tue May 10 08:06:58 2005

WHAT I HAVE TO WORK ON THIS WEEK:

1. installation of a reliable linux internet server including the following:
a. domain controller
b. firewall
c. DHCP server
d. DNS
e. router/NAT server
g. cache server

I have almost all i require on en-bank's USB Flash

2. I have to work on the single floppy linux routers like http://bakskuru.se/fredrik/freesco/
and the more serious ones like http://www.clarkconnect.com/downloads/ and smoothwall-2.0.iso on the USB

3. I have to work on Open Source ERPs like ERP5 and that german one

4. Have to wrap up the Dr's project tonight.

5. I have to work on ipwireless installation by the rodent, hopefully if this works I can continue with #1.
PS: and man! look at these smart hardworking people and move that huge butt of yours you !@#$%^&