one machine multiple gateway

i have 2 NIC and they can access multiple gateway.

i search (google) then found this article

http://kindlund.wordpress.com/2007/11/19/configuring-multiple-default-routes-in-linux/

then found great explaination:

http://www.linuxhorizon.ro/iproute2.html

thanks ;)

iptables load balance

i think this is good resources but need to read & test

http://linuxgazette.net/108/odonovan.html

my csf blocking squid transparent mode. i need csf and squid working together.

updating dom-0 clock and problem [xen]

what de..

all dom-U mogok after update NTP time to actual time. after reading reading found this. damm..

https://www.centos.org/modules/newbb/viewtopic.php?topic_id=25237

the effect (dom-U only):

1. network cannot restart.

2. processor clock (at dom-U) not able to detect

3. not able to reboot

4. cannot start after shutdown

5. dom-U clock stop at 3.40AM (dam.. i must sleep dude)

finally swith off and on back. phew..

now clock is working and in correct time.

next reading and experiment will be (in case): http://dsumsky.blogspot.com/2009/01/running-ntpd-inside-xen-domu-or-not.html

lalala...

setting timezone on centos

http://whomwah.com/2008/10/01/setting-the-timezone-on-centos/

There are loads of timezone data files stored in:

/usr/share/zoneinfo

So for my CentOS install, to set my machine to London time, I use:

# # this is not correct for me # $ date Wed Oct  1 07:43:58 CDT 2011 # # to fix it # $ sudo rm /etc/localtime $ sudo ln -s /usr/share/zoneinfo/Asia/Kuala_Lumpur /etc/localtime # # now check it's ok # $ date Wed Oct  1 12:42:33 GMT 2011

configuring transparent proxy

still trying

http://wiki.squid-cache.org/SquidFaq/InterceptionProxy

squid transparent proxy

storing this url for future reference

http://www.lesismore.co.za/squid3.html

configuring squid access control list (ACL)

this will explain and giving some example how to configure squid ACL.

http://www.linuxmail.info/squid-acl-elements/

to allow only www.google.com or *.google.com add:

acl www_google dstdomain www.google.com acl www_google dstdomain google.com  # matches exactly google.com acl google_dom dstdomain .google.com # all subdomains of google.com

create yum local repository

i want fast updates on all dom-U client.

there are solution. create local repository.

http://www.howtoforge.com/creating_a_local_yum_repository_centos

so clever. now i'm updating 17mb kernel headers for each dom-U at full speed.

this is bandwidth savers too.. :)

Proper way: after kernel update [xen]

Kernel Diary: this just to remind me proper steps to do after dom-0 kernel updates

1. log in into each dom-U and run

#yum update -y

this will update kernel devel and kernel headers on dom-U

failing to do this will make iptables not able to start

2. fix xen kernel script

this will update latest kernel on dom-U (do this on every dom-U before rebooting them!!)

# /script/fixxenkernel

http://blog.apis17.info/2011/01/fix-xen-kernel.html

3. xm list

this will list all dom-U

4. xm reboot

this will reboot dom-U server. or just reboot entire system.

if you have iptables problem after dom-U reboot please install kernel-headers

#yum -y install kernel-devel kernel-headers

iptables: Table does not exist (do you need to insmod?)

then,

#modprobe ip_tables

hope this will save some time to figure up why iptables not working.

remember: i'm using hypervm. fixxenkernel scripts only available on hypervm

[netscreen] configure nat

http://kb.juniper.net/InfoCenter/index?page=content&id=KB11909

this wizard will show what is your network requirement and solution in configuring netscreen firewall. :)

this is what i'm searching. maybe alse help u too..

http://www.juniper.net/techpubs/software/screenos/screenos6.1.0/ce_v8.pdf

p:s/ i hate reading!!!

says.my [ ads ]

hi.. i already registered this program few months ago. not very interesting but just try

http://says.my/apis17/invite

maybe you should try too.. (for malaysian only)

:)

i just sharing this two URL to become verified user. DO NOT click if this ads is not match your interest.

1. http://says.my/apis17/milo-van2 - Milo milo ads

2. http://says.my/apis17/petpet - This is PetPet ads.

i think this is interesting. leave your comment

iptables after kernel updates [ solved ]

i have this

can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded.

to fix this problem

#yum update

Dependencies Resolved

================================================================================

Package Arch Version Repository Size

================================================================================

Installing:

kernel-xen i686 2.6.18-238.19.1.el5 updates 18 M

kernel-xen-devel i686 2.6.18-238.19.1.el5 updates 5.5 M

Updating:

curl i386 7.15.5-9.el5_6.3 updates 233 k

kernel-headers i386 2.6.18-238.19.1.el5 updates 1.1 M

Transaction Summary

================================================================================

Install 2 Package(s)

Upgrade 2 Package(s)

done..

:)

squid with ssl

i think this is good guide to install squid with ssl support

http://ipv6proxy.prolocation.net/howto.php

stored for my future reference.