<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>NamHuy &#187; Linux</title>
	<atom:link href="http://namhuy.org/blog/tag/linux/feed/" rel="self" type="application/rss+xml" />
	<link>http://namhuy.org/blog</link>
	<description>Linux tips and tricks</description>
	<lastBuildDate>Fri, 23 Jul 2010 08:41:35 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>MySQL Change root Password</title>
		<link>http://namhuy.org/blog/2010/07/23/mysql-change-root-password/</link>
		<comments>http://namhuy.org/blog/2010/07/23/mysql-change-root-password/#comments</comments>
		<pubDate>Fri, 23 Jul 2010 08:39:11 +0000</pubDate>
		<dc:creator>Huy Tran</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[MySQL]]></category>
		<category><![CDATA[database]]></category>
		<category><![CDATA[freebsb]]></category>
		<category><![CDATA[mysql]]></category>
		<category><![CDATA[password]]></category>
		<category><![CDATA[root]]></category>
		<category><![CDATA[ssh]]></category>
		<category><![CDATA[telnet]]></category>
		<category><![CDATA[unix]]></category>

		<guid isPermaLink="false">http://namhuy.org/blog/?p=100</guid>
		<description><![CDATA[How do I change MySQL root password under Linux, FreeBSD, OpenBSD and UNIX like operating system over ssh / telnet session? Setting up mysql password is one of the essential tasks. By default root user is MySQL admin account. Please &#8230; <a href="http://namhuy.org/blog/2010/07/23/mysql-change-root-password/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>How do I change MySQL root password under Linux, FreeBSD, OpenBSD and UNIX like operating system over ssh / telnet session?</p>
<p>Setting up mysql password is one of the essential tasks. By default root user is MySQL admin account. Please note that the Linux / UNIX login root account for your operating system and MySQL root are different. They are separate and nothing to do with each other (indeed some admin removes root account and setup admin as mysql super user).<br />
mysqladmin command to change root password</p>
<p>If you have never set a root password for MySQL, the server does not require a password at all for connecting as root. To setup root password for first time, use mysqladmin command at shell prompt as follows:</p>
<p>$ mysqladmin -u root password NEWPASSWORD</p>
<p>However, if you want to change (or update) a root password, then you need to use following command</p>
<p>$ mysqladmin -u root -p&#8217;oldpassword&#8217; password newpass</p>
<p>For example, If old password is abc, and set new password to 123456, enter:</p>
<p>$ mysqladmin -u root -p&#8217;abc&#8217; password &#8217;123456&#8242;</p>
<p>Change MySQL password for other user</p>
<p>To change a normal user password you need to type (let us assume you would like to change password for vivek):</p>
<p>$ mysqladmin -u vivek -p oldpassword password newpass</p>
<p>Changing MySQL root user password using MySQL sql command</p>
<p>This is another method. MySQL stores username and passwords in user table inside MySQL database. You can directly update password using the following method to update or change password for user vivek:</p>
<p>1) Login to mysql server, type following command at shell prompt:</p>
<p>$ mysql -u root -p</p>
<p>2) Use mysql database (type command at mysql&gt; prompt):</p>
<p>mysql&gt; use mysql;</p>
<p>3) Change password for user vivek:</p>
<p>mysql&gt; update user set password=PASSWORD(&#8220;NEWPASSWORD&#8221;) where User=&#8217;vivek&#8217;;</p>
<p>4) Reload privileges:</p>
<p>mysql&gt; flush privileges;<br />
mysql&gt; quit</p>
<p>This method you need to use while using PHP or Perl scripting.</p>
]]></content:encoded>
			<wfw:commentRss>http://namhuy.org/blog/2010/07/23/mysql-change-root-password/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ubuntu Karmik and Eclipse Galileo</title>
		<link>http://namhuy.org/blog/2010/01/11/ubuntu-karmik-and-eclipse-galileo/</link>
		<comments>http://namhuy.org/blog/2010/01/11/ubuntu-karmik-and-eclipse-galileo/#comments</comments>
		<pubDate>Mon, 11 Jan 2010 21:46:45 +0000</pubDate>
		<dc:creator>Huy Tran</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[debian]]></category>
		<category><![CDATA[java]]></category>
		<category><![CDATA[programming]]></category>

		<guid isPermaLink="false">http://namhuy.org/blog/?p=83</guid>
		<description><![CDATA[The great Ubuntu Karmik is just around the corner. If you happen to use Eclipse from the official eclipse webpage and you see that some eclipse buttons do not work, then apply the following hack. Make yourself a one line &#8230; <a href="http://namhuy.org/blog/2010/01/11/ubuntu-karmik-and-eclipse-galileo/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>The great Ubuntu Karmik is just around the corner. If you happen to use Eclipse from the official eclipse webpage and you see that some eclipse buttons do not work, then apply the following hack. Make yourself a one line script to execute eclipse like follows:</p>
<blockquote><p>#!/bin/bash</p>
<p>export GDK_NATIVE_WINDOWS=1<br />
./eclipse</p></blockquote>
<p>and it will work again. For tptp (the profiling tools for eclipse) you’ll need libstdc++5 package from debian.</p>
]]></content:encoded>
			<wfw:commentRss>http://namhuy.org/blog/2010/01/11/ubuntu-karmik-and-eclipse-galileo/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Linux Security Hole Goes Back Eight Years</title>
		<link>http://namhuy.org/blog/2009/08/23/linux-security-hole-goes-back-eight-years/</link>
		<comments>http://namhuy.org/blog/2009/08/23/linux-security-hole-goes-back-eight-years/#comments</comments>
		<pubDate>Sun, 23 Aug 2009 23:20:07 +0000</pubDate>
		<dc:creator>Huy Tran</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[debain]]></category>
		<category><![CDATA[fedora]]></category>
		<category><![CDATA[kernel]]></category>
		<category><![CDATA[redhat]]></category>
		<category><![CDATA[security hole]]></category>
		<category><![CDATA[Ubuntu]]></category>

		<guid isPermaLink="false">http://namhuy.org/blog/2009/08/23/linux-security-hole-goes-back-eight-years/</guid>
		<description><![CDATA[Here’s another deep chink in the armor of the braindead zealots who claim Linux is inherently more secure than Windows. Julien Tinnes and Tavis Ormandy have found what could be the widest ranging vulnerability yet discovered in the Linux kernel. &#8230; <a href="http://namhuy.org/blog/2009/08/23/linux-security-hole-goes-back-eight-years/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>Here’s another deep chink in the armor of the braindead zealots who claim Linux is inherently more secure than Windows. <a href="http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html">Julien Tinnes</a> and <a href="http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0174.html">Tavis Ormandy</a> have found what could be the widest ranging vulnerability yet discovered in the Linux kernel.</p>
<p>Affected versions include all Linux 2.4 and2.6 versions since May 2001. This spans 2.4.4 up to and including 2.4.37.4 in the 2.4 kernel and every iteration of 2.6 from 2.6.0 up to and including 2.6.30.4.</p>
<p>What is this vulnerability all about? Functions in certain kernel routines are left uninitialized, so pointers aren’t validated before dereferencing. This allows local execution of code (sample POC available in both articles linked above) which compromises the machine. Compromise? Yes, pwnt.</p>
<p>These are known affected modules according to <a href="https://bugzilla.redhat.com/show_bug.cgi?id=516949">Redhat’s bugzilla</a>:<br />
ipx.ko<br />
irda.ko<br />
x25.ko<br />
ax25.ko<br />
bluetooth.ko<br />
sctp.ko<br />
pppoe.ko<br />
pppox.ko<br />
appletalk.ko</p>
<p>That thread offers mitigation possibilities (and some commenters — see <a href="https://bugzilla.redhat.com/show_bug.cgi?id=516949#c32">#32</a> and <a href="https://bugzilla.redhat.com/show_bug.cgi?id=516949#c48">#48</a> — explain why those steps won’t work). According to <a href="https://bugzilla.redhat.com/show_bug.cgi?id=516949#c27">post #27</a> in that thread, the exploit is already being used (as of about a week ago as I write this) to attack machines: “They entered the system through a web application exploit and then used the exploit to gain a root shell.”</p>
<p>This gets to the bigger problems of security. If you think of Linux as only the kernel or even the kernel plus the utilities that make it a functioning operating system, you’re seeing only one layer of vulnerability. Add another layer of complexity with various software and you’re adding more complexity and, accordingly exponentially more layers of vulnerability. If someone can get in through one door, he can often find “keys” to open other doors. That in a nutshell is what happens in cases like #27 in the Redhat bugzilla thread.</p>
<p>Fedora, Debian, and Ubuntu have reportedly already patched for this kernel issue.</p>
]]></content:encoded>
			<wfw:commentRss>http://namhuy.org/blog/2009/08/23/linux-security-hole-goes-back-eight-years/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ubuntu 9.04 (Jaunty Jackalope) Final</title>
		<link>http://namhuy.org/blog/2009/04/23/ubuntu-904-jaunty-jackalope-final/</link>
		<comments>http://namhuy.org/blog/2009/04/23/ubuntu-904-jaunty-jackalope-final/#comments</comments>
		<pubDate>Fri, 24 Apr 2009 02:45:10 +0000</pubDate>
		<dc:creator>Huy Tran</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[Jaunty Jackalope]]></category>

		<guid isPermaLink="false">http://namhuy.org/blog/?p=76</guid>
		<description><![CDATA[Ubuntu is a community developed, linux-based operating system that is perfect for laptops, desktops and servers. It contains all the applications you need &#8211; a web browser, presentation, document and spreadsheet software, instant messaging and much more. Ubuntu is free &#8230; <a href="http://namhuy.org/blog/2009/04/23/ubuntu-904-jaunty-jackalope-final/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>Ubuntu is a community developed, linux-based operating system that is perfect for laptops, desktops and servers. It contains all the applications you need &#8211; a web browser, presentation, document and spreadsheet software, instant messaging and much more. Ubuntu is free software. Whether you use it at home, at school or at work Ubuntu contains all the applications you&#8217;ll ever need, from word processing and email applications, to web server software and programming tools.</p>
<p>Ubuntu is and always will be free of charge. You do not pay any licensing fees. You can download, use and share Ubuntu with your friends, family, school or business for absolutely nothing. We issue a new desktop and server release every six months. That means you&#8217;ll always have the the latest and greatest applications that the open source world has to offer. Everything you need on one CD, which provides a complete working environment. Additional software is available online.</p>
<p>Ubuntu comes with full commercial support from Canonical and hundreds of companies around the world. Ubuntu includes the very best translations and accessibility infrastructure that the free software community has to offer. Ubuntu CDs contain only free software applications; we encourage you to use free and open source software, improve it and pass it on.</p>
<p>With Ubuntu Desktop Edition you can surf the web, read email, create documents and spreadsheets, edit images and much more. Ubuntu has a fast and easy graphical installer right on the Desktop CD. On a typical computer the installation should take you less than 25 minutes. The graphical installer enables you to get up and running quickly and easily. On the desktop you have a full set of productivity, internet, drawing and graphics applications, and games.</p>
<p>The Server Edition &#8211; built on the solid foundation of Debian which is known for its robust server installations — has a strong heritage for reliable performance and predictable evolution. As your business grows, so does your network. More applications need to be deployed and more servers are required. Ubuntu Server Edition offers support for several common configurations, and simplifies common Linux server deployment processes. It provides a well-integrated platform enabling you to quickly and easily deploy a new server with any of the standard internet services: mail, web, DNS, file serving or database management. A key lesson from its Debian heritage is that of security by default. The Ubuntu Server has no open ports after the installation and contains only the essential software needed to build a secure server.</p>
<p>Link : <a title="Ubuntu" href="http://releases.ubuntu.com/9.04/">Ubuntu 9.04 (Jaunty Jackalope) Final </a></p>
]]></content:encoded>
			<wfw:commentRss>http://namhuy.org/blog/2009/04/23/ubuntu-904-jaunty-jackalope-final/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Terminal or shell command to shutdown or reboot Ubuntu Linux</title>
		<link>http://namhuy.org/blog/2008/02/09/terminal-or-shell-command-to-shutdown-or-reboot-ubuntu-linux/</link>
		<comments>http://namhuy.org/blog/2008/02/09/terminal-or-shell-command-to-shutdown-or-reboot-ubuntu-linux/#comments</comments>
		<pubDate>Sat, 09 Feb 2008 11:48:55 +0000</pubDate>
		<dc:creator>Huy Tran</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[command]]></category>
		<category><![CDATA[reboot]]></category>
		<category><![CDATA[shell]]></category>
		<category><![CDATA[shutdown]]></category>
		<category><![CDATA[terminal]]></category>

		<guid isPermaLink="false">http://namhuy.org/blog/2008/02/09/terminal-or-shell-command-to-shutdown-or-reboot-ubuntu-linux/</guid>
		<description><![CDATA[So how do you shutdown or reboot Ubuntu Linux from a terminal or a shell prompt? If GUI is working you can always click on a Quit button. If GUI is not working or if you are working remotely over &#8230; <a href="http://namhuy.org/blog/2008/02/09/terminal-or-shell-command-to-shutdown-or-reboot-ubuntu-linux/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>So how do you shutdown or reboot Ubuntu Linux from a terminal or a shell prompt? If GUI is working you can always click on a Quit button. If GUI is not working or if you are working remotely over ssh type the following command:</p>
<p><strong><br />
To shutdown / poweroff Ubuntu Linux</strong></p>
<p>Type the command:</p>
<blockquote><p>sudo halt</p></blockquote>
<p>OR</p>
<blockquote><p>sudo shutdown -h now</p></blockquote>
<p>OR</p>
<blockquote><p>sudo shutdown -r now</p></blockquote>
<p>OR</p>
<blockquote><p>sudo init 6</p></blockquote>
<p><strong>To reboot Ubuntu Linux</strong></p>
<p>Type the command:</p>
<blockquote><p>sudo reboot</p></blockquote>
<p>More information can be found about these two commands by typing following commands (man page):</p>
<blockquote><p>man reboot<br />
man shutdown</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://namhuy.org/blog/2008/02/09/terminal-or-shell-command-to-shutdown-or-reboot-ubuntu-linux/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Securing Linux Server with IPKungfu</title>
		<link>http://namhuy.org/blog/2007/10/31/securing-linux-server-with-ipkungfu/</link>
		<comments>http://namhuy.org/blog/2007/10/31/securing-linux-server-with-ipkungfu/#comments</comments>
		<pubDate>Wed, 31 Oct 2007 08:01:55 +0000</pubDate>
		<dc:creator>Huy Tran</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Tips - Tricks]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[firewall]]></category>
		<category><![CDATA[iptables]]></category>

		<guid isPermaLink="false">http://namhuy.org/blog/2007/10/31/securing-linux-server-with-ipkungfu/</guid>
		<description><![CDATA[Ipkungfu or linuxkungfu is an iptables firewall script. With ipkungfu, you can easily configure as to which port of the server will be opened for connection, restrict who can access the server plus other security features. You can refer to &#8230; <a href="http://namhuy.org/blog/2007/10/31/securing-linux-server-with-ipkungfu/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.linuxkungfu.org/" target="_blank">Ipkungfu</a> or <a href="http://www.linuxkungfu.org/" target="_blank">linuxkungfu</a> is an iptables firewall script. With ipkungfu, you can easily configure as to which port of the server will be opened for connection, restrict who can access the server plus other security features. You can refer to the website of ipkungfu at <a href="http://www.linuxkungfu.org/" target="_blank">http://www.linuxkungfu.org/</a> for the list of complete features.</p>
<p>Ipkungfu is available a the <a href="http://namhuy.org/blog/category/open-source/linux/ubuntu/" target="_blank">Ubuntu</a> repositories. To install ubuntu,</p>
<blockquote><p># aptitude install ipkungfu</p></blockquote>
<p>Ipkungfu should now be working.</p>
<p>After installing ipkungfu, type<span id="more-39"></span></p>
<blockquote><p># ipkungfu</p></blockquote>
<p>to configure ipkungfu and answer “yes” if you are prompted.</p>
<blockquote><p>At this point, if you connecting remotely via ssh, make sure you are not disconnected because by default, ipkungfu is blocking all incoming connections. If you are working directly at the terminal, then there’s no problem. Open the file /etc/ipkungfu/services.conf</p></blockquote>
<p>and append ACCEPT beside the port that you want to open.</p>
<blockquote><p># Service Names and Protocols are lowercase, Targets are UPPERCASE.<br />
#<br />
# Example:<br />
# ssh:22:tcp:ACCEPT<br />
ftp-data:20:tcp<br />
ftp:21:tcp<br />
ssh:22:tcp:ACCEPT<br />
telnet:23:tcp<br />
smtp:25:tcp<br />
domain:53:tcp<br />
bootps:63:tcp<br />
http:80:tcp:ACCEPT<br />
pop3:110:tcp<br />
auth:113:tcp<br />
ntp:123:tcp<br />
imap:143:tcp<br />
https:443:tcp<br />
imaps:993:tcp<br />
pop3s:995:tcp<br />
socks:1080:tcp<br />
# Add your services below. The rule is:<br />
# ServiceName:ServicePort:Protocol[:ACCEPT|DROP|REJECT|or any valid target)] # extra comments<br />
#</p></blockquote>
<p>The, save the file. In the example, I have allowed connection for ports 22 (SSH) and 80 (HTTP). Open the file</p>
<blockquote><p>/etc/ipkungfu/ipkungfu.conf</p></blockquote>
<p>and configure it based on your server’s setting and your preferred setting.</p>
<blockquote><p># =========================================================================<br />
# $Id: ipkungfu.conf 57 2005-11-02 17:04:20Z s0undt3ch $<br />
# =========================================================================<br />
# Please read the README and FAQ for more information<br />
# Some distros (most notably Redhat) don&#8217;t have<br />
# everything we need in $PATH so we specify it here.<br />
# Make sure modprobe, iptables, and route are here,<br />
# as well as ordinary items such as echo and grep.</p>
<p># Default is as shown in the example below.<br />
#PATH=/sbin:/usr/sbin:/bin:/usr/bin:/usr/local/bin:/usr/local/sbin</p>
<p># Set the path to ipkungfu&#8217;s runtime error log.<br />
# Default: /var/log/ipkungfu.log<br />
#IPKUNGFU_LOG=</p>
<p># Your external interface<br />
# This is the one that connects to the internet.<br />
# Ipkungfu will detect this if you don&#8217;t specify.<br />
EXT_NET=&#8221;eth0&#8243;<br />
#EXT_NET=&#8221;eth1&#8243;<br />
#EXT_NET=&#8221;ppp0&#8243;</p>
<p># Your internal interfaces, if any.  If you have more<br />
# than 1 internal interface, separate them with<br />
# spaces.  If you only have one interface, put &#8220;lo&#8221;<br />
# here. Default is auto-detected.<br />
#INT_NET=&#8221;eth0&#8243;<br />
#INT_NET=&#8221;eth1&#8243;<br />
#INT_NET=&#8221;lo&#8221;</p>
<p># IP Range of your internal network.  Use &#8220;127.0.0.1&#8243;<br />
# for a standalone machine.  Default is a reasonable<br />
# guess. Separate multiple ranges with spaces.<br />
#LOCAL_NET=&#8221;192.168.0.0/255.255.0.0 10.0.0.0/255.0.0.0&#8243;</p>
<p># Set this to 0 for a standalone machine, or 1 for<br />
# a gateway device to share an Internet connection.<br />
# Default is 1.<br />
GATEWAY=0</p>
<p># TCP ports you want to allow for incoming traffic<br />
# Don&#8217;t add ports here that you intend to forward.<br />
# This should be a list of tcp ports that have<br />
# servers listening on them on THIS machine,<br />
# separated by spaces. You can add port ranges<br />
# delimited by hyphens, such as &#8220;20-22&#8243;. Default<br />
# is none.<br />
#ALLOWED_TCP_IN=&#8221;22 80&#8243;</p>
<p># UDP ports to allow for incoming traffic<br />
# See the comments above for ALLOWED_TCP_IN<br />
#ALLOWED_UDP_IN=&#8221;"</p>
<p># Temporarily block future connection attempts from an<br />
# IP that hits these ports (If module is present)<br />
# Hits to these ports will be logged as &#8220;BADGUY&#8221; hits<br />
# regardless of log.conf settings.<br />
FORBIDDEN_PORTS=&#8221;135 137 139&#8243;</p>
<p># Drop all ping packets?<br />
# Set to 1 for yes, 0 for no. Default is no.<br />
BLOCK_PINGS=0</p>
<p># Possible values here are &#8220;DROP&#8221;, &#8220;REJECT&#8221;, or &#8220;MIRROR&#8221;<br />
#<br />
# &#8220;DROP&#8221; means your computer will not respond at all. &#8220;Stealth mode&#8221;<br />
#<br />
# &#8220;REJECT&#8221; means your computer will respond with a<br />
# message that the packet was rejected.<br />
#<br />
# &#8220;MIRROR&#8221;, if your kernel supports it, will swap the source and<br />
#   destination IP addresses, and send the offending packet back<br />
#   where it came from.  USE WITH EXTREME CAUTION! Only use this if you fully<br />
#   understand the consequences.<br />
#<br />
# The safest option, and the default in each case,,  is &#8220;DROP&#8221;. Don&#8217;t change<br />
# unless you fully understand this.<br />
# What to do with &#8216;probably malicious&#8217; packets<br />
#SUSPECT=&#8221;REJECT&#8221;<br />
SUSPECT=&#8221;DROP&#8221;</p>
<p># What to do with obviously invalid traffic<br />
# This is also the action for FORBIDDEN_PORTS<br />
#KNOWN_BAD=&#8221;REJECT&#8221;<br />
KNOWN_BAD=&#8221;DROP&#8221;</p>
<p># What to do with port scans<br />
#PORT_SCAN=&#8221;REJECT&#8221;<br />
PORT_SCAN=&#8221;DROP&#8221;</p>
<p># How should ipkungfu determine your IP address? The default<br />
# answer, &#8220;NONE&#8221;, will cause ipkungfu to not use the few<br />
# features that require it to know your external IP address.<br />
# This option is good for dialup users who run ipkungfu on<br />
# bootup, since dialup users rarely use the features that<br />
# require this, and the IP address for a dialup connection<br />
# generally isn&#8217;t known at bootup.  &#8220;AUTO&#8221; will cause<br />
# ipkungfu to automatically determine the IP address of<br />
# $EXT_NET when it is started.  If you have a static IP<br />
# address you can simply enter your IP address here.<br />
# If you do port forwarding and your ISP changes your IP<br />
# address, choose NONE here, or your port forwarding<br />
# will break when your IP address changes. Default is<br />
# &#8220;NONE&#8221;.<br />
#GET_IP=&#8221;NONE&#8221;<br />
#GET_IP=&#8221;AUTO&#8221;<br />
GET_IP=&#8221;202.92.148.101&#8243;</p>
<p># If the target for identd (113/tcp) is DROP, it can take<br />
# a long time to connect to some IRC servers. Set this to<br />
# 1 to speed up these connections with a negligible cost<br />
# to security.  Identd probes will be rejected with the<br />
# &#8216;reject-with-tcp-reset&#8217; option to close the connection<br />
# gracefully. If you want to actually allow ident probes,<br />
# and you&#8217;re running an identd, and you&#8217;ve allowed port<br />
# 113 in ALLOWED_TCP_IN, set this to 0. Default is 0.<br />
#DONT_DROP_IDENTD=0<br />
# Set this to 0 if you&#8217;re running ipkungfu on a machine<br />
# inside your LAN.  This will cause private IP addresses<br />
# coming in on $EXT_NET to be identified as a spoof,<br />
# which would be inaccurate on intra-LAN traffic<br />
# This will cause private IP addresses coming in on<br />
# $EXT_NET to be identified as a spoof. Default is 1.<br />
#DISALLOW_PRIVATE=1</p>
<p># For reasons unknown to me, ipkungfu sometimes causes<br />
# kernel panics when run at init time. This is my<br />
# attempt to work around that.  Ipkungfu will wait<br />
# the specified number of seconds before starting, to<br />
# let userspace/kernel traffic catch up before executing.<br />
# Default is 0.<br />
#WAIT_SECONDS=5</p>
<p># This option, if enabled, will cause ipkungfu to set<br />
# the default policy on all builtin chains in the filter<br />
# table to ACCEPT in the event of a failure.  This is<br />
# intended for remote administrators who may be locked<br />
# out of the firewall if ipkungfu fails.  A warning to<br />
# this effect will be echoed so that the situation can be<br />
# rectified quickly.  This is the same as running<br />
# ipkungfu with &#8211;failsafe.  Default is 0.<br />
#FAILSAFE=0</p>
<p># Configurable list of kernel modules to load at runtime.<br />
# If no list is provided, the default and needed ones,<br />
# ip_nat_irc, ip_conntrack_ftp ip_nat_ftp ip_conntrack_irc,<br />
# will still be loaded.<br />
#MODULES_LIST=&#8221;"</p></blockquote>
<p>The</p>
<blockquote><p>EXT_NET=&#8221;eth0&#8243;</p></blockquote>
<p>is you the active network interface.</p>
<blockquote><p>GATEWAY=0</p></blockquote>
<p>because I’m configuring a standalone server. I have also set the forbidden ports</p>
<blockquote><p>FORBIDDEN_PORTS=&#8221;135 137 139&#8243;</p></blockquote>
<p>I don’t block pings</p>
<blockquote><p>BLOCK_PINGS=0</p></blockquote>
<p>because the ping tool is an effective use to test for the connectivity of the server.<br />
For suspected, bad ports and port scan, I drop the packets.</p>
<blockquote><p>SUSPECT=&#8221;DROP&#8221;<br />
KNOWN_BAD=”DROP”<br />
PORT_SCAN=”DROP”</p></blockquote>
<p>If you have a static IP address, set GET_IP to your IP address.</p>
<blockquote><p>GET_IP=&#8221;202.92.148.101&#8243;</p></blockquote>
<p>The save the file. Restart by ipkungfu</p>
<blockquote><p>/etc/init.d/ipkungfu restart</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://namhuy.org/blog/2007/10/31/securing-linux-server-with-ipkungfu/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>HOWTO: Monitoring your desktop Linux the easy way</title>
		<link>http://namhuy.org/blog/2007/07/31/howto-monitoring-your-desktop-linux-the-easy-way/</link>
		<comments>http://namhuy.org/blog/2007/07/31/howto-monitoring-your-desktop-linux-the-easy-way/#comments</comments>
		<pubDate>Tue, 31 Jul 2007 05:01:27 +0000</pubDate>
		<dc:creator>Huy Tran</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[Tips - Tricks]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[computer]]></category>
		<category><![CDATA[cpu]]></category>
		<category><![CDATA[desktop]]></category>
		<category><![CDATA[gkrellm]]></category>
		<category><![CDATA[memory]]></category>
		<category><![CDATA[monitor]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[programs]]></category>
		<category><![CDATA[usage]]></category>

		<guid isPermaLink="false">http://namhuy.org/blog/2007/07/31/howto-monitoring-your-desktop-linux-the-easy-way/</guid>
		<description><![CDATA[There are lots of programs that help us to monitor our personal computer. They provide us with memory consumption, cpu usage, network statistics and lots more. In this article I’m going to introduce gkrellm. I’ve always had gkrellm running in &#8230; <a href="http://namhuy.org/blog/2007/07/31/howto-monitoring-your-desktop-linux-the-easy-way/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>There are lots of programs that help us to monitor our personal computer. They provide us with memory consumption, cpu usage, network statistics and lots more. In this article I’m going to introduce gkrellm. I’ve always had gkrellm running in every desktop Linux. It’s very useful and provides essential information in real time. Installing gkrellm is just very easy, type:sudo apt-get install gkrellm</p>
<p>to run it, type</p>
<p>gkrellm &amp;</p>
<p>and you’ll get several info about your computer in real time.</p>
<p>Gkrellm supports themes, so the app can have several appearances. I always use the “invisible” theme, which is a transparent theme, so you can see the background. Very cool. To install a new theme (Ubuntu) go to</p>
<p><a href="http://www.muhri.net/gkrellm/" target="_blank">http://www.muhri.net/gkrellm/</a></p>
<p>and download the theme you like. Most of the themes come gzipped. Once you download the theme to your home directory, ungzipp it and move the whole directory to ~/.gkrellm2/themes.</p>
]]></content:encoded>
			<wfw:commentRss>http://namhuy.org/blog/2007/07/31/howto-monitoring-your-desktop-linux-the-easy-way/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>HOWTO: Flash Player 9 for Linux</title>
		<link>http://namhuy.org/blog/2007/07/28/howto-flash-player-9-for-linux/</link>
		<comments>http://namhuy.org/blog/2007/07/28/howto-flash-player-9-for-linux/#comments</comments>
		<pubDate>Sat, 28 Jul 2007 05:01:58 +0000</pubDate>
		<dc:creator>Huy Tran</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Tips - Tricks]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[flash]]></category>
		<category><![CDATA[player]]></category>

		<guid isPermaLink="false">http://namhuy.org/blog/2007/07/28/howto-flash-player-9-for-linux/</guid>
		<description><![CDATA[&#160; Download the player in: http://labs.adobe.com/downloads/flashplayer9.html and download the installer. It comes tarred and gzipped. Just type tar -xzvf nameofthefile.tar.gz (in your home directory) where nameofthefile= FP9_plugin_beta_112006 this will create the directory named: flash-player-plugin-9.0.21.78/ Go to /usr/lib/mozilla-firefox/plugins directory and type: &#8230; <a href="http://namhuy.org/blog/2007/07/28/howto-flash-player-9-for-linux/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p class="content">&nbsp;</p>
<p class="snap_preview">Download the player in:</p>
<p><a href="http://labs.adobe.com/downloads/flashplayer9.html" target="_blank">http://labs.adobe.com/downloads/flashplayer9.html</a> and download the installer. It comes tarred and gzipped.</p>
<p>Just type tar -xzvf nameofthefile.tar.gz (in your home directory)</p>
<p>where nameofthefile= FP9_plugin_beta_112006</p>
<p>this will create the directory named:  flash-player-plugin-9.0.21.78/</p>
<p>Go to /usr/lib/mozilla-firefox/plugins directory and type:</p>
<p>sudo ln -s /home/yourusername/flash-player-plugin-9.0.21.78/libflashplayer.so .</p>
<p>Don’t forget the last dot.</p>
<p>And that’s all!!</p>
<p>Happy surfing with the last Flash Player!!</p>
]]></content:encoded>
			<wfw:commentRss>http://namhuy.org/blog/2007/07/28/howto-flash-player-9-for-linux/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
