- # Apache - The UNIX web server platform
cd /usr/src
fetch
http://mirror.its.uidaho.edu/pub/apache/httpd/httpd-2.2.14.tar.gz
# Unzip and Untar
tar xvf
httpd-?.?.??.tar.gz
# Change dir
cd httpd-?.?.??
# Edit
two (2) files to mimic FreeBSD "Ports" installation
vi
/usr/src/httpd-?.?.??/include/httpd.h
# find DEFAULT_ERRORLOG
and change logs/error_log to
/var/log/httpd-error.log
vi /usr/src/httpd-?.?.??/include/scoreboard.h
# find DEFAULT_SCOREBOARD
and change logs/apache_runtime_status
to /var/run/apache_runtime_status
# Configure
./configure --enable-layout=FreeBSD
--sysconfdir=/usr/local/etc/apache22 --sharedstatedir=/var/run
--localstatedir=/var --with-port=80 --with-sslport=443
--enable-v4-mapped --with-mpm=prefork --mandir=/usr/local/man
--infodir=/usr/local/info --build=i386-srcbld-freebsd8.0
--enable-modules=all --enable-mods-shared=all --enable-http
--enable-ssl --enable-cgi --enable-cgid --enable-expires
--enable-headers --enable-mime-magic --enable-imagemap
--enable-cern-meta --enable-usertrack --enable-unique-id
--enable-speling --enable-rewrite --enable-so --enable-info
--enable-authn-anon --enable-authn-dbd --enable-authn-alias
--enable-authz-owner --enable-auth-digest --enable-cache
--enable-mem-cache --enable-dav --enable-dav-fs --enable-dav-lock
--enable-dbd --enable-dumpio --enable-ext-filter --enable-deflate
--enable-log-forensic --enable-logio --enable-ident --enable-proxy
--enable-proxy-connect --enable-proxy-ftp --enable-proxy-http
--enable-proxy-ajp --enable-proxy-balancer --enable-vhost-alias
--enable-suexec --enable-authz-dbm --enable-isapi
--enable-file-cache --enable-disk-cache --enable-case-filter
--enable-case-filter-in --enable-charset-lite --enable-deflate
--enable-bucketeer --enable-version --enable-authn-dbm
--enable-exception-hook --enable-substitute --enable-echo
--enable-example --enable-optional-hook-export
--enable-optional-hook-import --enable-optional-fn-import
--enable-optional-fn-export
# Compile
gmake
# Install
gmake install
# Quick Start Server Tests:
/usr/local/sbin/apachectl -k start
/usr/local/sbin/apachectl -k restart
/usr/local/sbin/apachectl -k stop
/usr/local/sbin/apachectl -k start
# Test with your web browser on another
machine:
http://YourServerIP
# Update rc.conf
vi /etc/rc.conf
# Create “rc” scripts to start at boot time
(Although this example is a source install, these scripts are from
the FreeBSD Ports and work as designed):
vi
/usr/local/etc/rc.d/apache22
vi
/usr/local/etc/rc.d/htcacheclean
#
Make the startup scripts executable:
chmod +x /usr/local/etc/rc.d/apache22
chmod +x /usr/local/etc/rc.d/htcacheclean
# Edit the "httpd.conf" and add at the very bottom of the conf file
vi
/usr/local/etc/apache22/httpd.conf
# Edit the "httpd.conf" to suit your needs, at least
change the variables:
vi
/usr/local/etc/apache22/httpd.conf
User www
Group www
ServerAdmin
you@example.com
# Set directory permissions:
chown -R www:www
/usr/local/www/data
# chown -R www:www /usr/local/www/apache22/data
# chown -R www:www /opt/apache/htdocs/
# Commands to remember:
/usr/local/sbin/apachectl -k start
/usr/local/sbin/apachectl -k restart
/usr/local/sbin/apachectl -k stop
# The
Apache configuration file:
vi /usr/local/etc/apache22/httpd.conf
# Apache logs:
cd /var/log
tail -f /var/log/httpd-error.log
tail -f /var/log/error_log
cat /var/log/access_log
# See Also:
#
http://www.devshed.com/c/a/Apache/Building-Apache-the-Way-You-Want-It/
# Mod PERL
cd /usr/ports/www/mod_perl2
make install clean distclean
# Edit the "httpd.conf" and add the new perl
module to load, at the very bottom of the conf file
vi
/usr/local/etc/apache22/httpd.conf
or
# Change to the /tmp
directory not your normal source dir!
cd /tmp
# Download
fetch
http://perl.apache.org/dist/mod_perl-2.0-current.tar.gz
# Unzip and Untar
tar xvf
mod_perl-?.?-current.tar.gz
# Configure
cd mod_perl-?.?.?
perl Makefile.PL MP_APXS=/usr/local/sbin/apxs
# Edit the "httpd.conf" and add the new perl
module to load, at the very bottom of the conf file
vi
/usr/local/etc/apache22/httpd.conf
# Compile
make
# Install
# make test
make install
cd /usr/src/httpd-?.?.?
make clean
# Mod Perl Quick Start:
http://perl.apache.org/docs/2.0/user/intro/start_fast.html
# Adding a "Real" HTTPS / SSL ability to
your Apache Web Server:
http://slacksite.com/apache/certificate.php
$12.99/yr =
http://www.godaddy.com/Compare/gdcompare_ssl.aspx?isc=sslqgo001c
cd
/usr/local/etc/apache22/
# Generate a key and do not forget the
password
openssl genrsa -des3
-out
joomla.netjunkies.net-server.key
2048
password
password
# Remove the password from the
file so Apache can start at boot time without needing a human to
be present to type in the password
openssl rsa -in
joomla.netjunkies.net-server.key
-out
joomla.netjunkies.net-server.pem
# Generate a CSR (Certificate Signing
Request) that will be used a
Godaddy or
Thawte or
Verisign
# Note: When you are prompted for
CN (Common Name), make sure you put
the server's FQDN like:
joomla.netjunkies.net
(DO NOT PUT YOUR ACTUAL NAME!)
openssl req
-new -key
joomla.netjunkies.net-server.key
-out
joomla.netjunkies.net-server.csr
# Use the newly created CSR file (and
some ca$h) to buy a SSL certificate!
# You will send them a "csr" file and the will send you a "crt'
file:
joomla.netjunkies.net-server.crt
# Add to httpd.conf
vi
/usr/local/etc/apache22/httpd.conf
Listen 209.195.211.6:80
Listen 209.195.211.6:443
Listen 209.195.211.7:80
Listen 209.195.211.7:443
#Listen 80
#Listen 443
SSLMutex sem
SSLRandomSeed startup builtin
SSLSessionCache none
SSLCipherSuite HIGH:MEDIUM
SSLProtocol all -SSLv2
#
UseCanonicalName off
NameVirtualHost 209.195.211.6
NameVirtualHost 209.195.211.7
#
<VirtualHost 209.195.211.6:443>
ServerAdmin YourEmail@gmail.com
DocumentRoot /usr/local/www/data
ServerName joomla.netjunkies.net
ScriptAlias /cgi-bin/ /usr/local/www/cgi-bin/
SSLEngine on
SSLCertificateFile
/usr/local/etc/apache22/joomla.netjunkies.net-server.crt
SSLCertificateKeyFile
/usr/local/etc/apache22/joomla.netjunkies.net-server.pem
SSLCACertificateFile /usr/local/etc/apache22/gd_bundle.crt
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
<Directory "/usr/local/www/data">
allow from all
Options +Indexes
</Directory>
</VirtualHost>
# Make the SSL logs directory
mkdir
/usr/local/www/data/logs/
chown -R www:www
/usr/local/www/data/logs/
# Restart Apache
/usr/local/etc/rc.d/apache22 restart
sockstat -4
# Adding a "Self
Signed" HTTPS / SSL ability to
your Apache Web Server
# Create a certificate authority
cd /root
cp /usr/local/openssl/openssl.cnf.sample /usr/local/openssl/openssl.cnf
openssl genrsa -des3 -out my-ca.key 2048
openssl req -new -x509 -days 3650 -key my-ca.key -out my-ca.crt
# Create a server certificate
# Note: When asked for "CN" do NOT put your name, you must put the
FQDN of the web server!
openssl genrsa -des3 -out nms1-server.key 1024
openssl req -new -key nms1-server.key -out nms1-server.csr
openssl x509 -req -in nms1-server.csr -out nms1-server.crt -sha1 -CA
my-ca.crt -CAkey my-ca.key -CAcreateserial -days 3650
openssl x509 -in nms1-server.crt -text -noout
chmod 0400 *.key
cp nms1-server.crt /usr/local/etc/apache22/nms1.crt
cp nms1-server.key /usr/local/etc/apache22/nms1.key
cp my-ca.crt /usr/local/etc/apache22/cassl.crt
# HTTPS
vi /usr/local/etc/apache22/httpd.conf
# Edit:
Listen 192.168.0.161:80
Listen 192.168.0.161:443
# Add to the very bottom of your httpd.conf:
SSLMutex sem
SSLRandomSeed startup builtin
SSLSessionCache none
SSLCipherSuite HIGH:MEDIUM
SSLProtocol all -SSLv2
<VirtualHost 192.168.0.161:443>
DocumentRoot /opt/apache/htdocs
ServerName nms1.yourcompany.com
ServerAdmin YourEmail@yourcompany.com
SSLEngine on
SSLCertificateFile /usr/local/etc/apache22/nms1.crt
SSLCertificateKeyFile /usr/local/etc/apache22/nms1.key
SSLCACertificateFile /usr/local/etc/apache22/cassl.crt
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
SSLCipherSuite HIGH:MEDIUM
SSLProtocol all -SSLv2
<Directory "/opt/apache/htdocs">
SSLOptions +StdEnvVars
Options Indexes
AllowOverride None
Allow from from all
Order allow,deny
</Directory>
</VirtualHost>
# Test:
/usr/local/sbin/apachectl -k stop
/usr/local/sbin/apachectl -k start
sockstat -4
openssl s_client -connect nms1.yourcompany.com:443
# Remove the need to type a passphrase every time
Apache starts:
cp /usr/local/etc/apache22/nms1.key
/usr/local/etc/apache22/nms1.key.withpassphrase
openssl rsa -in /usr/local/etc/apache22/nms1.key.withpassphrase -out
/usr/local/etc/apache22/nms1.key
- MySQL - An open source SQL database and web based
management
#
Add
a “mysql” user to your system:
(MySQL
should not need to run as root!)
pw groupadd
mysql
pw useradd mysql -n mysql -G
mysql -s /usr/sbin/nologin
cd /usr/src
fetch
http://mysql.he.net/Downloads/MySQL-5.1/mysql-5.1.43.tar.gz
# Unzip and Untar and Change Directory
tar xvf mysql-?.?.*.tar.gz
cd mysql-?.?.*
# Configure
./configure --prefix=/usr/local --mandir=/usr/local/man
--infodir=/usr/local/info/ --build=i386-srcbld-freebsd8.0
--localstatedir=/var/db/mysql --with-mysqld-user=mysql
--with-mysqlmanager --enable-thread-safe-client --enable-assembler
--with-tcp-port=3306 --without-debug --with-ssl=/usr/include
-with-readline --enable-dependency-tracking --enable-local-infile
--with-libwrap --with-low-memory --with-named-thread-libs=-pthread
--with-embedded-server --with-big-tables --enable-profiling
--with-plugins=all
# or dynamically linked plugins
./configure --prefix=/usr/local --mandir=/usr/local/man
--infodir=/usr/local/info/ --build=i386-srcbld-freebsd8.0
--localstatedir=/var/db/mysql --with-mysqld-user=mysql
--with-mysqlmanager --enable-thread-safe-client --enable-assembler
--with-tcp-port=3306 --without-debug --with-ssl=/usr/include
-with-readline --enable-dependency-tracking --enable-local-infile
--with-libwrap --with-low-memory --with-named-thread-libs=-pthread
--with-embedded-server --with-big-tables --enable-profiling
--with-plugins=partition,daemon_example,ftexample,archive,blackhole,csv,example,federated,heap,ibmdb2i,innobase,innodb_plugin,myisam,myisammrg,ndbcluster
# or statically linked plugins
./configure --prefix=/usr/local --mandir=/usr/local/man
--infodir=/usr/local/info/ --build=i386-srcbld-freebsd8.0
--localstatedir=/var/db/mysql --with-mysqld-user=mysql
--with-mysqlmanager --enable-thread-safe-client --enable-assembler
--with-tcp-port=3306 --without-debug --with-ssl=/usr/include
-with-readline --enable-dependency-tracking --enable-local-infile
--with-libwrap --with-low-memory --with-named-thread-libs=-pthread
--with-embedded-server --with-big-tables --enable-profiling
--with-plugin-partition
--with-plugin-daemon_example --with-plugin-ftexample
--with-plugin-archive --with-plugin-blackhole --with-plugin-csv
--with-plugin-example --with-plugin-federated --with-plugin-heap
--with-plugin-ibmdb2i --with-plugin-innobase
--with-plugin-innodb_plugin --with-plugin-myisam
--with-plugin-myisammrg --with-plugin-ndbcluster
# Compile
gmake all
# Install
gmake install
# GUI Tools
cd /usr/ports/databases/mysql-gui-tools/
make install clean distclean
# Install the base database
/usr/local/bin/mysql_install_db
# Set permissions to correct owner
chown -R mysql:mysql /var/db/mysql
# Start the server
cd /usr/local ; /usr/local/bin/mysqld_safe &
# Perform basic checks
/usr/local/bin/mysqladmin version
/usr/local/bin/mysqladmin variables
# Set a Password!
/usr/local/bin/mysqladmin -u root password
mysqlpassword
# Secure a
production server
/usr/local/bin/mysql_secure_installation
# Add a "mysql" user with password
and grant that user permission to connect
/usr/local/bin/mysql --user=root --password=mysqlpassword
mysql
GRANT ALL PRIVILEGES ON *.* TO
mysql@localhost
IDENTIFIED BY 'mysqlpassword' WITH GRANT OPTION;
GRANT ALL PRIVILEGES ON *.* TO
mysql@"%" IDENTIFIED BY
'mysqlpassword' WITH GRANT OPTION;
GRANT ALL PRIVILEGES ON *.* TO
root@localhost
IDENTIFIED BY 'mysqlpassword' WITH GRANT OPTION;
FLUSH PRIVILEGES;
exit
# Add a "mysqltop" user with
no password
and no ability to make changes and only usable via localhost for the
"mtop" CLI tool
/usr/local/bin/mysql --user=root --password=mysqlpassword
mysql
grant super, reload, process on *.* to
mysqltop;
grant super, reload, process on *.* to
mysqltop@localhost;
flush privileges;
exit
#
(Optional) Add
some compatibility for Linux applications by creating a symbolic
links
ln -sv /usr/local/bin/mysqldump /usr/bin/mysqldump
# (Optional) Run some tests before going into production
(optional)
#
/usr/local/mysql-test/mysql-test-run --force
# cd /usr/local/mysql-test ; perl mysql-test-run.pl
# Report any problems with the /usr/local/bin/mysqlbug script
# Create the "rc" startup script
vi /usr/local/etc/rc.d/mysql-server
chmod +x /usr/local/etc/rc.d/mysql-server
vi /etc.rc.conf
mysql_enable="YES"
# Test the "rc" script
/usr/local/etc/rc.d/mysql-server restart
/usr/local/etc/rc.d/mysql-server stop
/usr/local/etc/rc.d/mysql-server start
/usr/local/etc/rc.d/mysql-server reload
# Clean up
cd /usr/src/mysql-?.?.*
make clean
# Perform basic checks using the password
/usr/local/bin/mysqladmin --user=root --password=mysqlpassword
ping
/usr/local/bin/mysqladmin --user=root --password=mysqlpassword version
/usr/local/bin/mysqladmin --user=root --password=mysqlpassword variables
/usr/local/bin/mysqladmin --user=mysql
--password=mysqlpassword var
ext stat ver
# Edit your /etc/my.cnf
# See my example my.cnf
# Get the free
MySQL
Administrator to optimize and test your settings!
UNTESTED AT THIS POINT DO NOT USE
# cd /usr/ports/devel/libglade2
# make install clean
# cd /usr/ports/x11-toolkits/gtkmm24
# make install clean
# cd /usr/ports/databases/mysql-administrator
# make install clean
# cd /usr/src
# fetch http://mysql.he.net/Downloads/MySQLGUITools/mysql-gui-tools-5.0r12.tar.gz
# Performance tuning
# Edit /etc/my.cnf
vi /etc/my.cnf
# Restart MySQL
/usr/local/etc/rc.d/mysql.sh restart
# Check out your MySQL settings and tune /etc/my.cnf do more as
desired
/usr/local/bin/mysqladmin --user=mysql
--password=mysqlpassword var
ext stat ver
- Perl with Modules - Scripting language with add-ons to get actual work
done
# DBI - http://dbi.perl.org
# Launch the CPAN shell anytime
/usr/bin/perl -MCPAN -e shell
# Install HTTP::Date
install HTTP::Date
yes# Install DBI
install DBI
# install DBD::mysql
install DBD::mysql
#
install Net::SNMP
#
install CGI
#
force install SNMP::Info
yes
#
install HTML::HeadParser
#
install URI
#
install Bundle::LWP
#
install BSD::Resource
install Digest::MD5
install Digest::SHA1
install Digest::SHA2
install Net::Telnet
install Time::HiRes
install Net::Server
install Unicode::Map
install Jcode
install Spreadsheet::WriteExcel
yes
yes
force install Proc::ProcessTable # CTRL-C if it locks up
install IO::Scalar
install Spreadsheet::ParseExcel
# After installation, exit CPAN shell
exit
# CPAN shell commands to know - just
FYI
? <--
Display Help Menu
reload cpan <-- Reloads CPAN interface
i /DBD/ <-- Searches for any module with
"DBD" in the name
install DBI <-- Installs module "DBI"
# SNMP_Session - http://www.switch.ch/misc/leinen/snmp/perl/
# Change to your desired "source" storage
directory
cd /usr/src
# Download
fetch
http://snmp-session.googlecode.com/files/SNMP_Session-1.13.tar.gz
# Unzip and Untar
tar xvf SNMP_Session-?.??.tar.gz
# Configure
cd SNMP_Session-?.??
perl Makefile.PL
# Compile
make
# Install
make install
# cgi-lib.pl -
http://cgi-lib.berkeley.edu
# Change to the FreeBSD Ports directory for
cgi-lib.pl
cd /usr/ports/www/cgi-lib.pl
# Install
make install
# Below is an example CGI
that uses PERL that you can use later after you have Apache
installed
# A basic html page with form fields that submits to a pl script
that reads the values passed to it
# Example web page simple.html
(that calls simple.pl)
vi
/usr/local/www/data/simple.html
# Example PERL CGI Script
simple.pl
vi
/usr/local/www/cgi-bin/simple.pl
# File Permissions
chmod a+x
/usr/local/www/cgi-bin/simple.pl
chown www:www
/usr/local/www/data/simple.html
chown www:www
/usr/local/www/cgi-bin/simple.pl
# Edit Apache config to allow cgi and pl files to execute by
editing, un-commenting and adding 3 things
vi
/usr/local/etc/apache22/httpd.conf
Options FollowSymLinks ExecCGI
ScriptAlias /cgi-bin/ "/usr/local/www/cgi-bin/"
AddHandler cgi-script .cgi .pl
# Restart Apache
/usr/local/sbin/apachectl -k restart
# Test out the script
http://YourServer/simple.html
# Clean up
cd /usr/ports/www/cgi-lib.pl
make clean distclean
- FreeTDS - Library that enables UNIX (via Perl) to talk to Microsoft SQL
Servers (and Sybase)
# Change to your desired "source" storage
directory
cd /usr/src
# Download (Notes:
Users behind a Proxy Server should read this and
users without Internet but have
a CDRom read this.)
fetch
http://ibiblio.org/pub/Linux/ALPHA/freetds/stable/freetds-stable.tgz
# Unzip and Untar
tar xvf freetds-stable.tgz
# Configure
cd freetds-?.??/
./configure --enable-msdblib --with-tdsver=8.0
# Compile & Install
make install clean
# PHP tests for a FreeTDS installation by looking
for files that FreeTDS no longer installs
touch
/usr/local/include/tds.h
touch /usr/local/lib/libtds.a
# DBD::Sybase - http://www.peppler.org/freeware/dbd-sybase.html
# Change to your desired "source" storage
directory
cd /usr/src
# Download
fetch
http://www.peppler.org/downloads/DBD-Sybase-1.08.tar.gz
# Ungzip and Untar
tar xvf
DBD-Sybase-?.??.tar.gz
# Change to the source directory
cd DBD-Sybase-?.??
# Set a few shell variables temporarily
SYBASE=/usr/local/
export SYBASE
LD_LIBRARY_PATH=${LD_LIBRARY_PATH}:$SYBASE/lib
export LD_LIBRARY_PATH
# Add the needed environment variables
(so it they survive reboots)
to /etc/rc.local
vi /etc/rc.local
# Fix dbdimp.c before compiling or you will get an
error:
>
dbdimp.c:800: error: 'BLK_VERSION_150' undeclared (first use in this
function)
> dbdimp.c:800: error: (Each undeclared identifier is reported only
once
> dbdimp.c:800: error: for each function it appears in.)
# This is really a FreeTDS bug - they define
the CS_VERSION_1xx symbols, but not the corresponding
BLK_VERSION_xxx symbols.
Edit dbdimp.c
and addvi /usr/src/DBD-Sybase-1.08/dbdimp.c
#define BLK_VERSION_150 BLK_VERSION_100
#define BLK_VERSION_125 BLK_VERSION_100
#define BLK_VERSION_120 BLK_VERSION_100
somewhere near the top (but after the
#include section).
Michael
Michael Peppler - Peppler Consulting SaRL
mpeppler@peppler.org -
http://www.peppler.org
# Create the Makefile - press "Enter" on any
questions to accept default settings
perl Makefile.PL
# Compile
make
# make test
# Install
make install clean
# Optional test script - safe to ignore /
skip this
# Test
a connection to a Microsoft SQL Server
# (You should already have a database called "test" a table
"authors" a field "Name")
# Create a scripts directory if one does not already exist
cd /opt
mkdir scripts
cd /opt/scripts
# Create a script for testing
vi /opt/scripts/my.pl
# Make the script executable
chmod +x /opt/scripts/my.pl
# Run the script
/opt/scripts/my.pl
# Note: Edit freetds.conf to suit your
needs
vi /usr/local/etc/freetds.conf
# UNIXODBC -
http://www.unixodbc.org
# Install unixODBC from ports
cd /usr/ports/databases/unixODBC/
make install clean distclean
-
Net-SNMP - SNMP Trap Receiver (traplogd) logging service + SNMP tool set
# Add SNMP
TT
cd /usr/ports/net-mgmt/snmptt
make install clean distclean
# Download (Notes:
Users behind a Proxy
Server should read this and
users without Internet but have a CDRom read this.)
cd /usr/src
fetch
http://easynews.dl.sourceforge.net/sourceforge/net-snmp/net-snmp-5.4.2.1.tar.gz
#
Warning 5.5 is broken in FreeBSD8 - tested 2/11/2010
# fetch
http://downloads.sourceforge.net/project/net-snmp/net-snmp/5.5/net-snmp-5.5.tar.gz
# ./configure --prefix=/usr/local --build=i386-src-freebsd8.0
--disable-debugging --with-mib-modules="if-mib"
--with-perl-modules --enable-embedded-perl --enable-shared
--with-default-snmp-version=2 --with-sys-contact="scomoletti@gmail.com"
--with-sys-location="Earth" --with-zlib=/usr/local/lib
--with-bzip2=/usr/local/lib --with-openssl=/usr/local/ssl/lib
--with-logfile=/var/log/snmpd.log
--with-persistent-directory=/var/net-snmp --enable-as-needed
--enable-internal-md5 --enable-mfd-rewrites --enable-reentrant
--disable-snmptrapd-subagent --with-transports="UDP UDPIPv6
TCPIPv6 TCP Unix Callback Alias SSH DTLSUDP"
--with-security-modules="usm ksm tsm" --enable-ipv6
--enable-new-features --with-mysql --with-mib-modules="mibII
snmpv3mibs ucd_snmp agent_mibs agentx notification target
utilities disman/event disman/schedule host smux mibII/mta_sendmail
ucd-snmp/diskio if-mib"
# configure: error: if-mib/data_access/interface:
*** This platform does not yet support IF-MIB rewrites ***
# Ungzip and Untar
tar xvf net-snmp-5*
# Configure
cd net-snmp-5*
# New way:
./configure --prefix=/usr/local --build=i386-src-freebsd8.0
--disable-debugging --with-mib-modules="if-mib"
--with-perl-modules --enable-embedded-perl
--enable-shared --with-default-snmp-version=2
--with-sys-contact="YourEmail@gmail.com" --with-sys-location="Earth"
--with-zlib=/usr/local/lib --with-bzip2=/usr/local/lib
--with-openssl=/usr/local/ssl/lib --with-logfile=/var/log/snmpd.log
--with-persistent-directory=/var/net-snmp --enable-as-needed
--enable-internal-md5 --enable-mfd-rewrites --enable-reentrant
--disable-snmptrapd-subagent
# Compile & Install
make
make install
make clean
# Create
some directories and edit the snmptrapd.conf:
cd /usr/local/etc
mkdir snmp
vi /usr/local/etc/snmp/snmptrapd.conf
# Create an “rc” script to start at boot time:
vi /usr/local/etc/rc.d/snmpd
vi /usr/local/etc/rc.d/snmptrapd
#
Make the startup script executable:
chmod +x /usr/local/etc/rc.d/snmpd
chmod +x /usr/local/etc/rc.d/snmptrapd
# Edit rc.conf to allow remote syslog
messages since you now allow remote traps!
vi /etc/rc.conf
# Edit syslog.conf and add "local7.*" to
the "/var/log/messages" line:
vi /etc/syslog.conf
*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err;local7.*
/var/log/messages
# Restart Syslog
killall -HUP syslogd
# Notes
# MIBS are here: /usr/local/share/snmp/mibs
# Optional
# Edit snmpd.conf to
suit your needs (Remember to fix /etc/rc.conf - snmpd_enable="YES"
if you want the agent turned on - security risky!)
vi /etc/snmpd.config
# The agent section is not complete yet - use at
your own risk
/usr/local/bin/snmpconf -G
/usr/local/bin/snmpconf -r none -g basic_setup
# Note: This section about the "agent"
(snmpd) is not complete - My intention was to get the "server"
(traplogd) running quickly.
#
Your help is welcomed here!
-
PHP - Scripting language preferred by many web based applications
# Add IMAP c-Client with SSL support to
PHP
cd /usr/src
fetch
ftp://ftp.cac.washington.edu/imap/imap-2007e.tar.gz
tar xvf imap-2007e.tar.gz
cd /usr/src/imap-2007e
make bsf
# Add xmlrpc support to PHP
cd /usr/ports/net/xmlrpc-epi/
make install clean distclean
# Get PHP
cd /usr/src
#
fetch
http://us2.php.net/distributions/php-5.3.0.tar.gz
5.2.10 breaks PEAR and mcrypt and 5.3.0 breaks everything!
#
fetch
http://us2.php.net/distributions/php-5.2.9.tar.gz
fetch
http://museum.php.net/php5/php-5.2.9.tar.gz
# Unzip
and Untar
tar xvf php-?.?.*.tar.gz
#
Stop Apache
/usr/local/sbin/apachectl -k stop
# Change directory
cd php-?.?.*
# Configure
./configure --with-apxs2=/usr/local/sbin/apxs
--with-mysql=/usr/local --with-openssl=/usr --with-mssql=/usr/local
--with-zlib --with-jpeg-dir=/usr/local/lib
--with-freetype-dir=/usr/local/lib --enable-exif
--with-png-dir=/usr/local/lib --enable-calendar --enable-ftp
--with-libxml-dir=/usr/local/lib --with-snmp=/usr/local
--enable-magic-quotes --enable-mbstring
--enable-sockets --with-gd --enable-gd-native-ttf --enable-soap
--enable-sigchild --with-mssql --with-bz2
--with-kerberos --with-unixODBC --with-ldap --with-curl
--with-curlwrappers --with-pdo-dblib --with-cdb --enable-bcmath
--with-mcrypt=/usr/local/lib --enable-zip --with-gettext
--with-imap=/usr/src/imap-2007e --with-imap-ssl --with-mysqli
--enable-fastcgi --enable-embedded-mysqli --enable-wddx
--with-xmlrpc
# Compile
& Install
make install clean
#cd /usr/ports/security/php5-mcrypt
#make install clean
#
Copy the "php.ini" file
cp /usr/src/php-5.2.9/php.ini-recommended /usr/local/lib/php.ini
# Edit the Apache configuration file
(Add to the very bottom of the file!)
vi
/usr/local/etc/apache22/httpd.conf
# Restart
Apache:
/usr/local/sbin/apachectl -k start
# Create a PHP Info file
vi /usr/local/www/data/phpinfo.php
chown -R www:www
/usr/local/www/data
# Test
the phpinfo.php file with your web browser:
http://YourServerIP/phpinfo.php
# Add
some compatibility for Linux applications by creating a symbolic
link
vi
/usr/local/lib/php.ini
# You may want to add:
/usr/local/lib/php to your php.ini include_path
include_path = ".:/usr/local/lib/php"
# Turn on zlib compressed output
#
zlib.output_compression = On
# Tune a few other parameters as you see
fit
max_execution_time = 300
max_input_time = 300
memory_limit = 128M
register_globals = Off
post_max_size = 128M
upload_tmp_dir = /tmp
upload_max_filesize = 128M
sendmail_path = /usr/sbin/sendmail
magic_quotes_gpc = On
session.save_path = "/tmp"
error_reporting = E_ALL & ~E_DEPRECATED
display_errors = On
# Notes:
# PEAR system config file at: /usr/local/etc/pear.conf
# PDO headers: /usr/local/include/php/ext/pdo/
# Use PEAR to install DB
pear install DB
pear install MDB2
pear install pear/MDB2#fbsql
pear install pear/MDB2#ibase
pear install pear/MDB2#mysql
pear install pear/MDB2#mysqli
pear install pear/MDB2#mssql
pear install pear/MDB2#oci8
pear install pear/MDB2#pgsql
pear install pear/MDB2#querysim
pear install pear/MDB2#sqlite
- # phpMyAdmin - Web based MySQL
Administration
cd /usr/src
fetch
http://internap.dl.sourceforge.net/sourceforge/phpmyadmin/phpMyAdmin-3.2.1-all-languages.tar.gz
or
fetch
http://downloads.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.3.0-beta1/phpMyAdmin-3.3.0-beta1-all-languages.tar.gz
# Unzip and Untar
tar xvf phpMyAdmin-?.*.gz
-C /usr/local/www/data/
mv /usr/local/www/data/phpMyAdmin-3.2.1-all-languages/
/usr/local/www/data/phpMyAdmin/
or
mv /usr/local/www/data/phpMyAdmin-3.3.0-beta1-all-languages/
/usr/local/www/data/phpMyAdmin/
# Create some directories
cd /usr/local/www/data/phpMyAdmin/
mkdir /usr/local/www/data/phpMyAdmin/config
mkdir /usr/local/www/data/phpMyAdmin/uploads
mkdir /usr/local/www/data/phpMyAdmin/exports
# Set directory permissions
chmod o+rw
/usr/local/www/data/phpMyAdmin/config
chown -R www:www
/usr/local/www/data
# Edit httpd.conf to allow "main.php" as a default web page for a
directory listing, add main.php to the end of this line:
vi
/usr/local/etc/apache22/httpd.conf
DirectoryIndex index.html
index.php
# Restart Apache
/usr/local/sbin/apachectl -k restart
# Create the database:
http://wiki.phpmyadmin.net/pma/pmadb
/usr/local/bin/mysqladmin
--user=mysql --password=mysqlpassword
create
phpmyadmin
# Import the default database:
/usr/local/bin/mysql --user=mysql --password=mysqlpassword
phpmyadmin <
/usr/local/www/data/phpMyAdmin/scripts/create_tables.sql
/usr/local/bin/mysql --user=mysql --password=mysqlpassword
phpmyadmin <
/usr/local/www/data/phpMyAdmin/scripts/upgrade_tables_mysql_4_1_2+.sql
# Add a "mysqltop" user with
no password
and no ability to make changes and only usable via localhost for the
"mtop" CLI tool
/usr/local/bin/mysql --user=mysql --password=mysqlpassword
mysql
GRANT USAGE ON mysql.* TO 'pma'@'localhost'
IDENTIFIED BY 'pmapassword';
GRANT SELECT (
Host, User, Select_priv, Insert_priv, Update_priv,
Delete_priv,
Create_priv, Drop_priv, Reload_priv, Shutdown_priv,
Process_priv,
File_priv, Grant_priv, References_priv, Index_priv,
Alter_priv,
Show_db_priv, Super_priv, Create_tmp_table_priv,
Lock_tables_priv,
Execute_priv, Repl_slave_priv, Repl_client_priv
) ON mysql.user TO 'pma'@'localhost';
GRANT SELECT ON mysql.db TO 'pma'@'localhost';
GRANT SELECT ON mysql.host TO 'pma'@'localhost';
GRANT SELECT (Host, Db, User, Table_name, Table_priv, Column_priv)
ON mysql.tables_priv TO 'pma'@'localhost';
GRANT USAGE ON mysql.* TO 'pma'@"%"
IDENTIFIED BY 'pmapassword';
GRANT SELECT, INSERT, UPDATE, DELETE ON phpmyadmin.* TO 'pma'@"%";
GRANT SELECT (
Host, User, Select_priv, Insert_priv, Update_priv,
Delete_priv,
Create_priv, Drop_priv, Reload_priv, Shutdown_priv,
Process_priv,
File_priv, Grant_priv, References_priv, Index_priv,
Alter_priv,
Show_db_priv, Super_priv, Create_tmp_table_priv,
Lock_tables_priv,
Execute_priv, Repl_slave_priv, Repl_client_priv
) ON mysql.user TO 'pma'@"%";
GRANT SELECT ON mysql.db TO 'pma'@"%";
GRANT SELECT ON mysql.host TO 'pma'@"%";
GRANT SELECT (Host, Db, User, Table_name, Table_priv, Column_priv)
ON mysql.tables_priv TO 'pma'@"%";
GRANT ALL ON phpmyadmin.* TO
pma@localhost IDENTIFIED BY 'pmapassword';
GRANT ALL ON phpmyadmin.* TO
pma@"%" IDENTIFIED BY 'pmapassword';
flush privileges;
exit
cp /usr/local/www/data/phpMyAdmin/config.sample.inc.php
/usr/local/www/data/phpMyAdmin/config/config.inc.php
chmod o+w
/usr/local/www/data/phpMyAdmin/config/config.inc.php
# Web based configuration
# http://YourWebServer/phpMyAdmin/setup/index.php
rm -R
/usr/local/www/data/phpMyAdmin/config
# Set directory permissions
chown -R www:www
/usr/local/www/data/phpMyAdmin
# Create an ".htaccess" file to permit only users you specify
to access phpMyAdmin from the web
vi /usr/local/www/data/phpMyAdmin/.htaccess
# Add the
first user to create the password
file:
/usr/local/sbin/htpasswd -c /etc/phpMyAdminhtpasswd.users admin
# Add more
users if you want without creating a new file:
/usr/local/sbin/htpasswd /etc/phpMyAdminhtpasswd.users
SomeOtherUserNameHere
# Edit the Apache configuration file
(Add to the very bottom of the file!)
vi
/usr/local/etc/apache22/httpd.conf
# Update permissions
chown -R www:www
/usr/local/www/data/
# Restart Apache
/usr/local/sbin/apachectl -k restart
# Quick
test in your web browser (You should be prompted for a password:
http://YourServerIP/phpMyAdmin
- ProFTPd
- UNIX FTP Server
#
Add
a “cmsftpuser” user to your system:
mkdir /usr/home
ln -sv /usr/home /home
pw useradd
cmsftpuser -n
cmsftpuser -G
www -s
/usr/local/bin/bash -d
/home/cmsftpuser/
passwd
cmsftpuser
cmsftpuserpassword
cmsftpuserpassword
mkdir /home/cmsftpuser/
chown -R
cmsftpuser:www
/home/cmsftpuser/
cd /usr/ports/ftp/proftpd
make install clean distclean
vi /usr/local/etc/proftpd.conf
vi /etc/rc.conf
# Log in to Webmin and fix the proftpd binary location in the
module configuration for ProFTPd
# https://YourServer:100000
# Path to ProFTPD executable:
shutdown -r now
- # Joomla!
- Joomla is an award-winning content management system
# Add some configuration settings to Apache to allow virtual
directories
#
http://rimuhosting.com/howto/virtualhosting.jsp
#
http://www.experts-exchange.com/OS/Linux/Q_22539902.html
vi /usr/local/etc/apache22/httpd.conf
UseCanonicalName off
NameVirtualHost 209.195.211.6
<VirtualHost 209.195.211.6:80>
DocumentRoot "/usr/local/www/data"
ServerName netjunkies.net
ServerAlias joomla.netjunkies.net
<Directory "/usr/local/www/data">
allow from all
Options +Indexes
</Directory>
</VirtualHost>
<VirtualHost 209.195.211.6:80>
DocumentRoot "/usr/home/msh/www/data"
ServerName moresatisfyinghobbies.com
ServerAlias www.moresatisfyinghobbies.com
<Directory "/usr/home/msh/www/data">
allow from all
Options +Indexes
</Directory>
</VirtualHost>
# Add a “moresatisfyinghobbies”
user to your system:
pw useradd
msh -n
msh -G
www -s
/usr/local/bin/bash -d /home/msh/
passwd msh
mshpassword
mshpassword
mkdir /home/msh/
mkdir /home/msh/www/
mkdir /home/msh/www/cgi-bin/
mkdir /home/msh/www/data/
chown -R www:www
/home/msh/
# Restart Apache
/usr/local/sbin/apachectl -k restart
# Add Joomla to “moresatisfyinghobbies”
cd /home/msh/www/data/
fetch
http://joomlacode.org/gf/download/frsrelease/10785/42655/Joomla_1.5.14-Stable-Full_Package.zip
unzip Joomla_1.5.14-Stable-Full_Package.zip
chown -R
www:www /home/msh/www/data/
ls -alF
/home/msh/www/data/
rm Joomla_1.5.14-Stable-Full_Package.zip
# http://www.moresatisfyinghobbies.com/
Select English. Click Next.
Check for errors and warnings.
Next. Review license. Next.
Database type: MySQL
Hostname:
localhost
User Name:
root
Password:
mysqlpassword
Database Name:
joomla
Next.
FTP configuration: no
Next
Site name (may contain spaces)
Email address:
YourEmail@gmail.com
Admin Password:
joomlapassword
Next
rm -R /home/msh/www/data/installation
http://www.moresatisfyinghobbies.com/administrator
Admin ID: admin
Admin Password:
joomlapassword
# chmod a+rw /home/msh/www/data/configuration.php
- Mambo
- CMS
cd /usr/src
fetch
http://mambo-code.org/gf/download/frsrelease/388/790/MamboV4.6.5.tar.gz
mkdir /usr/local/www/data/mambo
tar xvf MamboV4.?.?.tar.gz -C /usr/local/www/data/mambo
chown -R www:www /usr/local/www/data
http://joomla.netjunkies.net/mambo/installation
rm -R /usr/local/www/data/mambo/installation
chown -R www:www /usr/local/www/data
- WordPress
- CMS
cd /usr/src
fetch
http://wordpress.org/latest.tar.gz
mkdir /home/msh/www/data/blogs
tar xvf latest.tar.gz -C /home/msh/www/data/blogs
cp -R /home/msh/www/data/blogs/wordpress/* /home/msh/www/data/blogs/
rm -R
/home/msh/www/data/blogs/wordpress/
chown -R www:www /home/msh/www/data/blogs
create a blank database called:
mshwordpress
http://www.moresatisfyinghobbies.com/blogs
http://www.moresatisfyinghobbies.com/blogs/wp-admin/
- Drupal - CMS
cd /usr/src
fetch
http://ftp.drupal.org/files/projects/drupal-6.13.tar.gz
tar xvf drupal-?.??.tar.gz
mv /usr/src/drupal-?.?? /usr/local/www/data/drupal
cp /usr/local/www/data/drupal/sites/default/default.settings.php
/usr/local/www/data/drupal/sites/default/settings.php
chmod a+x /usr/local/www/data/drupal/sites/default/settings.php
chown -R www:www /usr/local/www/
create a blank database called:
drupal
http://joomla.netjunkies.net/drupal
- Sugar CRM
cd /usr/src
fetch
http://www.sugarforge.org/frs/download.php/5961/SugarCE-5.2.0j.zip
unzip SugarCE-5.2.0j.zip
mv /usr/src/SugarCE-Full-5.2.0j/ /usr/local/www/data/joomla/crm/
chown -R www:www /usr/local/www/data/joomla/crm/
#http://joomla.netjunkies.net/joomla/crm/install.php
- Moodle
cd /usr/src
fetch
http://download.moodle.org/stable19/moodle-weekly-19.zip
unzip moodle-weekly-19.zip
mkdir /usr/local/www/moodledata
mkdir /usr/local/www/data/joomla/lms/
chown -R www:www /usr/local/www/data/joomla/lms
- phpBB3
cd /usr/src
fetch
http://d10xg45o6p6dbl.cloudfront.net/projects/p/phpbb/phpBB-3.0.5.zip
unzip phpBB-3.0.5.zip
- Gallery
#Add some utilities used by Gallery modules
cd /usr/ports/graphics/libkdcraw
make install clean distclean
cd /usr/ports/graphics/dcraw
make install clean distclean
cd /usr/ports/graphics/ImageMagick
make install clean distclean
cd /usr/ports/graphics/netpbm-devel
make install clean distclean
cd /usr/ports/graphics/netpbm
make install clean distclean
#cd /usr/src/
#wget
ftp://ftp.imagemagick.org/pub/ImageMagick/ImageMagick-6.5.5-10.tar.gz
# Download Gallery Full
cd /usr/src/
wget
http://downloads.sourceforge.net/project/gallery/gallery2/2.3/gallery-2.3-full.zip?use_mirror=voxel
unzip gallery-2.3-full.zip
mv /usr/src/gallery2/ /usr/local/www/data/joomla/gallery/
chown -R www:www /usr/local/www/data/joomla/gallery/
#
create a blank database called:
test_gallery2
/usr/local/bin/mysqladmin
--user=mysql --password=mysqlpassword create
test_gallery2
#http://joomla.netjunkies.net/joomla/gallery/
vi /usr/local/www/data/joomla/gallery/login.txt
chown -R www:www /usr/local/www/data/joomla/gallery/
mkdir /usr/local/www/g2data
chmod 777 /usr/local/www/g2data
chown -R www:www /usr/local/www/g2data
# Configure some modules after install completes
# The Dcraw module was installed, but needs configuration to be
activated
# The ImageMagick module was installed, but needs configuration
to be activated
# The Multiroot module was installed, but needs configuration to
be activated
# The NetPBM module was installed, but needs configuration to be
activated
# The Nokia Image Upload module was installed, but needs
configuration to be activated
# The URL Rewrite module was installed, but needs configuration
to be activated
-
TeamSpeak - TeamSpeak is flexible, powerful, scalable
software which enables people to speak with one another over the
Internet
- phpMyEdit
- Samba - A way for UNIX machines to interact with "Windows" based
machines
# Download (Notes:
Users behind a Proxy
Server should read this and
users without Internet but have a CDRom read this.)
# Download and Install from FreeBSD Ports
Collection
cd /usr/ports/net/samba3
# Compile
make install
- SSL Explorer - SSL VPN Server
- PopTop - PPTP VPN Server
- IPSec Tools and Racoon 2 - IPSec
VPN Server
- OpenVPN - SSL VPN Server
- Avahi - http://avahi.org (and
maybe
http://www.apple.com/support/downloads/bonjourforwindows.html)
- Amanda - http://amanda.zmanda.com
- SAJAX -
http://www.modernmethod.com/sajax/index.phtml
- PAM - http://trac.des.no/openpam and
http://www.freebsd.org/doc/en/articles/pam/pam-freebsd-modules.html
and
http://www.onlamp.com/pub/a/bsd/2003/02/20/FreeBSD_Basics.html
- FreeRADIUS - http://freeradius.org
- # Tripwire - Monitor
and alert on file changes
# Tripwire v2.4.0.2
http://sourceforge.net/projects/tripwire
# Install Tripwire
cd /usr/ports/security/tripwire
make install
#
Answer questions and set various passwords (remember these
passwords) when prompted.
#
Setup email addresses for notification as described here:
#
http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/ref-guide/s1-tripwire-update-policy.html#S2-TRIPWIRE-EMAIL
mv /usr/local/etc/tripwire/twpol.txt /usr/local/etc/tripwire/twpol.txt.original
vi /usr/local/etc/tripwire/twpol.txt
# Be sure to replace every instance of YourEmail@YourDomain.com with
your actual email address!
# Make sure you edit the "HOSTNAME=" variable! (Find out your
hostname from a prompt by typing: hostname )
# Update your site policy
/usr/local/sbin/twadmin --create-polfile -S
/usr/local/etc/tripwire/site.key /usr/local/etc/tripwire/twpol.txt
# Create a new database
/usr/local/sbin/tripwire --init
# Make sure tripwire runs
daily
cp
/usr/ports/security/tripwire/work/tripwire-2.4.1.2-src/contrib/tripwire-check
/etc/periodic/daily/998.tripwire-check
chmod +x
/etc/periodic/daily/998.tripwire-check
# Edit the default
script and fix two lines!
vi
/etc/periodic/daily/998.tripwire-check
# Run tripwire manually as
desired (try it at least once now)
/usr/local/sbin/tripwire --check
# Tripwire Reports (*.twr) are kept
here: /var/db/tripwire/report/
# Get a list of your reports
ls /var/db/tripwire/report
# View a report
/usr/local/sbin/twprint -m r --twrfile
/var/db/tripwire/report/<name>.twr
# NOTE:
After you see your first report, you will want
to cleanup tripwire's configuration
# to stop checking for
things that don't exist, this means deleting lines in twpol.txt
vi /usr/local/etc/tripwire/twpol.txt
# You will then need to update your policy
file and create a new database again
/usr/local/sbin/twadmin
--create-polfile -S /usr/local/etc/tripwire/site.key
/usr/local/etc/tripwire/twpol.txt
/usr/local/sbin/tripwire --init
# Run tripwire manually again and view the new report to verify your
policy is error free
/usr/local/sbin/tripwire --check
# Clean up the install directory
cd /usr/ports/security/tripwire
make clean
#
Guide:
http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/ref-guide/ch-tripwire.html
- OpenNTPD - Time Server
- RRDtool - Logging and Graphing
cd /usr/ports/databases/rrdtool/
make install clean distclean
- Cacti - Network graphing solution designed to harness the
power of RRDtool
Cacti Message Management -
http://forums.cacti.net/viewtopic.php?t=31374
SNMP Trap Translator -
http://www.snmptt.org/
SNMPTT Gui -
http://snmptt-gui.sourceforge.net/
# Notes to self:
# cd /opt/scripts
# fetch http://www.N3NCY.com/NMSWorld/UNIX/bloom.pl.txt
# fetch http://www.N3NCY.com/NMSWorld/UNIX/PIAUpdateArray.pl.txt
# mv bloom.pl.txt bloom.pl
# mv PIAUpdateArray.pl.txt PIAUpdateArray.pl
# chmod a+x bloom.pl
# chmod a+x PIAUpdateArray.pl
# Download (Notes:
Users behind a Proxy
Server should read this and
users without Internet but have a CDRom read this.)
cd /usr/src
fetch
http://www.cacti.net/downloads/cacti-0.8.7e.tar.gz
# Unzip and Untar
tar xvf cacti-?.?.*.tar.gz
# Put Cacti under your public web area
document root
mv /usr/src/cacti-?.?.?? /usr/local/www/data/cacti/
# Create the MySQL database:
/usr/local/bin/mysqladmin
--user=mysql --password=mysqlpassword create cacti
# Import the default cacti database:
/usr/local/bin/mysql --user=mysql --password=mysqlpassword cacti <
/usr/local/www/data/cacti/cacti.sql
# Create a MySQL username and password for Cacti
/usr/local/bin/mysql --user=root --password=mysqlpassword
mysql
GRANT ALL ON cacti.* TO cactiuser@localhost IDENTIFIED BY 'cactipassword';
GRANT ALL ON cacti.* TO cactiuser@"%" IDENTIFIED BY 'cactipassword';
flush privileges;
exit
# Edit include/config.php and specify the MySQL
user, password and database for your Cacti configuration
#vi /usr/local/www/data/cacti/include/config.php
#$database_default =
"cacti";
#$database_hostname = "localhost";
#$database_username = "cactiuser";
#$database_password = "cactipassword";
#$config['url_path'] = '/cacti/';
#cp
/usr/local/www/data/cacti/include/config.php
/usr/local/www/data/cacti/include/config.php
perl -i.bak -p -e 's/database_username = "\w*";/database_username =
"cactiuser";/ig'
/usr/local/www/data/cacti/include/config.php
perl -i.bak -p -e 's/database_password = "\w*";/database_password =
"cactipassword";/ig'
/usr/local/www/data/cacti/include/config.php
# Add a line to the very bottom of your /etc/crontab file
#vi /etc/crontab
#
echo "# Cacti Poller" >> /etc/crontab
echo "*/5 * * * * root /usr/local/bin/php
/usr/local/www/data/cacti/poller.php > /dev/null 2>&1" >>
/etc/crontab
# Update directory permissions
chown -R www:www /usr/local/www/data
# Point your web browser to:
http://YourServersIP/cacti/
# Log in the with a
username/password of admin
# You will be required to change this password immediately.
# Make sure to fill in all of the path variables carefully and
correctly on the following screen.
# Get the "Plug-in Architecture" http://www.CactiUsers.org
cd
/usr/local/www/data/cacti
fetch
http://mirror.cactiusers.org/downloads/plugins/cacti-plugin-0.8.7e-PA-v2.5.zip
unzip cacti-plugin-0.8.7e-PA-v2.5.zip
chown -R www:www /usr/local/www/data
tar xvf cacti-plugin-arch.tar.gz
cp -R /usr/src/cacti-plugin-arch/files-0.8.7e/ /usr/local/www/data/cacti/
# Edit your Cacti global configuration file
vi /usr/local/www/data/cacti/include/global.php
perl -i.bak -p -e 's/database_username =
"\w*";/database_username = "cactiuser";/ig'
/usr/local/www/data/cacti/include/global.php
perl -i.bak -p -e 's/database_password = "\w*";/database_password =
"cactipassword";/ig'
/usr/local/www/data/cacti/include/global.php
# Import the default cacti database:
/opt/mysql/bin/mysql --user=cactiuser --password=cactipassword
cacti < /usr/src/cacti-plugin-arch/pa.sql
# Set the file permissions in the web directories so the web server
has permission to display them
chown -R www:www /usr/local/www/data
- Syslog-NG - Syslog logging service with database support
# Install SyslogNG
cd /usr/ports/sysutils/syslog-ng3
make
make install
# Copy the sample configuration file to get you started
cp /usr/local/etc/syslog-ng/syslog-ng.conf.sample /usr/local/etc/syslog-ng.conf
# Edit your startup parameters to enable starting on reboot by
adding two lines
vi /etc/rc.conf
syslog_ng_enable="YES"
syslogd_enable="NO"
syslogd_program="/usr/local/sbin/syslog-ng"
syslogd_flags=""
# Edit the SyslogNG configuration file to suit your needs
vi /usr/local/etc/syslog-ng.conf
#
# *.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
#
log { source(src); filter(f_notice); filter(f_not_authpriv);
destination(messages); };
log { source(src); filter(f_kern); filter(f_debug);
destination(messages); };
log { source(src); filter(f_lpr); filter(f_info);
destination(messages); };
log { source(src); filter(f_mail); filter(f_crit);
destination(messages); };
log { source(src); filter(f_news); filter(f_err);
destination(messages); };
# HERE IS THE NEW LINE YOU NEED TO ADD
log { source(src); filter(f_local7); destination(messages); };
# Shut down the standard FreeBSD syslogd
kill `cat /var/run/syslog.pid`
# Start the new syslog-ng:
/usr/local/etc/rc.d/syslog-ng start
#
/usr/local/sbin/syslog-ng
# At this point you have swapped out the FreeBSD
built-in Syslog with the newer SyslogNG
- ntop - Network application monitoring
and NetFlow tool
- TFTPD - TFTP Server
- DHCPD - DHCP Server
- Snort - Network intrusion detection
system with Oinkmaster and BASE
- Nessus - Network Vulnerability Scanner
- Cisco Router Audit Tool - An automated Cisco configuration checking
system
