Apis17™ Blogs

Saturday, January 17, 2015

sms gateway linux

starting new project:
http://smstools3.kekekasvi.com/index.php?p=hardwarecomp

http://www.frontlinesms.com/technologies/download/
http://linuxblog.darkduck.com/2014/01/sms-gateway-linux.html

1. Create your destination folder

Create a folder named "frontlinesms" in "/opt" directory.

Go to the terminal and type:

cd /opt
mkdir frontlinesms

You will need to copy the software installer in the new folder. It can be downloaded straight from the website Frontlinesms.com.

2. Run the installer

Type "sudo ./frontlinesms2_unix_2.1.3.sh" in your terminal and let the installer run. Remember you have created a new folder, so choose it when the setup gives you the option to change the folder.

Let the installation proceed and click 'Skip Registration' at the end and the press 'Finish'.

You should now be able to see Frontline on your menu and open its main screen.

3. Install your GSM modem or cellphone

Make sure the Frontline software is not working. Connect your mobile phone and see it the device it's recognized. If not, you should look for the drivers online. It would be best for you to check their website for supported devices.

Once you have connected your mobile phone, type "lsusb" and identify your GSM modem on the list. After you've made sure it's properly installed, you can open the software main screen again and send a trial SMS. The interface is quite friendly and clear so you should have no problem from this point onwards.

Friday, December 26, 2014

VLAN bridge.multiple Unipi account with single fiber line

~~ref:~~
~~http://net.doit.wisc.edu/~dwcarder/captivator/linux_trunking_bridging.txt~~

UPDATE: brctl method not working on my setting. maybe working on someone else. on centos, i'm using this method and it is working: https://sites.google.com/site/ghidit/how-to-2/configure-bridging-on-centos

UPDATE: 30/12/2014 - to connect second unifi account, please use interface ETH=br10 (bridge interface) not ETH=2.500

VLAN id 10 on eth0:

/etc/sysconfig/network-scripts/ifcfg-eth0.10
# Intel Corporation 82546EB Gigabit Ethernet Controller (Copper)
DEVICE=eth0.10
HWADDR=00:04:xx:xx:xx:xx
ONBOOT=yes
HOTPLUG=no
BOOTPROTO=none
TYPE=Ethernet
VLAN=yes
BRIDGE=br10

VLAN id 11 on eth0:

/etc/sysconfig/network-scripts/ifcfg-eth0.11
# Intel Corporation 82546EB Gigabit Ethernet Controller (Copper)
DEVICE=eth0.11
HWADDR=00:04:xx:xx:xx:xx
ONBOOT=yes
HOTPLUG=no
BOOTPROTO=none
TYPE=Ethernet
VLAN=yes
BRIDGE=br10

The bridges need to be configured too:

/etc/sysconfig/network-scrips/ifcfg-br10
DEVICE=br10
TYPE=Bridge
#IPADDR=1.2.3.4
#GATEWAY=1.2.3.1
#NETMASK=255.255.255.0
ONBOOT=yes
BOOTPROTO=none
IPV6INIT=no
IPV6_AUTOCONF=no
DELAY=5
STP=yes

~~store for future reference: currently not able to experiment~~

# setup vlans:

modprobe 8021q

/sbin/vconfig add eth2 970
/sbin/vconfig add eth2 972
/sbin/vconfig add eth3 971
/sbin/vconfig add eth3 973

# You should see: 
#
# Added VLAN with VID == 970 to IF -:eth2:-
# Added VLAN with VID == 972 to IF -:eth2:-
# Added VLAN with VID == 971 to IF -:eth3:-
# Added VLAN with VID == 973 to IF -:eth3:-

# bring interfaces up

ifconfig eth2 up
ifconfig eth3 up
ifconfig eth2.970 up
ifconfig eth2.972 up
ifconfig eth3.971 up
ifconfig eth3.973 up

# setup bridging

# create a bridge called "br970" and put vlans 970 and 971 in it
brctl addbr br970
brctl addif br970 eth2.970
brctl addif br970 eth3.971

# create a bridge called "br972" and put vlans 972 and 973 in it
brctl addbr br972
brctl addif br972 eth2.972
brctl addif br972 eth3.973

# bring the bridge virtual interfaces up on each bridge
ifconfig br970 192.168.70.5 netmask 255.255.254.0 up
ifconfig br972 192.168.72.5 netmask 255.255.254.0 up

# verify the bridging config looks legit:

brctl show

# You should see something like:
#
#  bridge name     bridge id               STP enabled     interfaces
#  br970           8000.000423ab99d8       no              eth2.970
#                                                          eth3.971
#  br972           8000.000423ab99d8       no              eth2.972
#                                                          eth3.973

Monday, November 24, 2014

Secure your SSL. How to setup?

ref: https://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy

Before and after please test here: https://www.ssllabs.com/ssltest/index.html

For cpanel, please use: EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS

UPDATE:
to get A marks please use:

ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-GCM-SHA384:AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-RSA-CAMELLIA256-SHA:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:AES128-GCM-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:!NULL:!eNULL:!aNULL:!DSS:-LOW:RSA+RC4+SHA

Ref: http://forums.cpanel.net/f185/cpanel-openssl-1-0-1c-higher-332001-p2.html

Apache

To configure Apache, you need to have the following lines in your configuration:

SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"

Nginx

To configure Nginx, you need to have the following lines in your configuration:

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS";

How to generate SHA2 (SHA256) CSR request

openssl req -new -newkey rsa:2048 -nodes -sha256 -out www.YOURDOMAIN.COM.sha256.csr -keyout www.YOURDOMAIN.key -subj "/C=CA/ST=ON/L=YOURCITY/O=YOUR COMPANY NAME/OU=Web/CN=*.YOURDOMAIN.COM"

Ref: http://forums.cpanel.net/f185/sha2-256-ssl-certificates-your-experiences-364612.html

Please change to rsa:4096 to create 4096 bits. currently cpanel stable version still using SHA1 for default.

Friday, September 26, 2014

bash update for centos 6 i386 and x64 cpanel

The problem: http://thehackernews.com/2014/09/bash-shell-vulnerability-shellshock.html

check your existing bash:
env X="() { :;} ; echo shellshock" /bin/sh -c "echo completed"
env X="() { :;} ; echo shellshock" `which bash` -c "echo completed"

for non-cpanel server you can easily run:
‪#‎yum‬ update bash

for cpanel server:

you will face this problem:

root@cp6 [~]# yum update bashLoaded plugins: fastestmirrorLoading mirror speeds from cached hostfile * epel: ftp.cuhk.edu.hk * extras: centos.exabytes.com.my

Setting up Update ProcessNo Packages marked for Update

Solution x64:

wget http://centos.ipserverone.com/centos/6/updates/x86_64/Packages/bash-4.1.2-15.el6_5.1.x86_64.rpm
rpm -Uvh bash-4.1.2-15.el6_5.1.x86_64.rpm

for i386:

wget http://centos.ipserverone.com/centos/6/updates/i386/Packages/bash-4.1.2-15.el6_5.1.i686.rpmrpm -Uvh bash-4.1.2-15.el6_5.1.i686.rpm

for centos 5 i386:

http://centos.ipserverone.com/centos/5/updates/i386/RPMS/bash-3.2-33.el5.1.i386.rpm

Centos 5 x64:

http://centos.ipserverone.com/centos/5/updates/x86_64/RPMS/bash-3.2-33.el5.1.x86_64.rpm