The message appears every time rsync or just ssh is called. In my case the reason is that ssh tries to connect via IPv6 first and afterwards with IPv4. Since I’ve not setup IPv6 on my NAS the connect fails and the message above appears. It’s not a big harm but it’s nicer to remove this message.

Removing the message is esay, just add -4 as command line parameter to ssh:

-4 Forces ssh to use IPv4 addresses only.


For ssh or rsync the usage looks like:


ssh -4
rsync -e "ssh -4"


And the message disappears.

He recommends to protect your wp-admin area using the Apache .htaccess file. Here in detail access is only allowed from IP addresses from where you are logging in. It’s definitely a good way to protect you blog, but often people don’t have a fixed IP address. The DSL provider assigns a different IP address on every dial in. Unfortunately there is no easy way to obtain the network addresses of your DSL provider which can be entered in your .htaccess file.

Another important recommendation: Always keep your server software and WordPress software up to date!

Also remove the following line from your header.php which will show hackers your WordPress version:

<meta name=”generator” content=”WordPress <?php bloginfo(’version’); ?>” /> <!-– leave this for stats please -->

So let’s concentrate on the restricted access in the wp-admin area. It’s a little bit tricky to get the address list of your DSL provider. I’ll explain and show an example script below. First let’s have a look at the video from Matt Cutts.

As step one you have to find out your own IP address. Let’s assume your IP address assigned from your provider is 213.168.95.20 (this is just an example!). Next do a whois lookup:

server:~# whois 213.168.95.20
...
inetnum:        213.168.95.0 - 213.168.98.255
netname:        NC-DIAL-IN-POOL

Have a look at the netname NC-DIAL-IN-POOL. Usually provider assign  a common name for all DSL dynamic address. But we want to add all IP addresses or better all network ranges into our .htaccess file. Ok now we need to get all address ranges with this netname. This can be achieved using the Linux whois tool:

server:~# whois -h whois.ripe.net NC-DIAL-IN-POOL
...
inetnum:        194.8.209.0 - 194.8.209.255
...
inetnum:        194.8.205.0 - 194.8.205.255
...

Fine we get a list with all network ranges from our provider now, but still not the correct netmask format and a lot of other output which we don’t need. Basically it’s possible to manually generate the .htaccess file now. Not big fun… So I’ve created a small perl script which does the job. As small bonus it creates the needed format for .htaccess file which means you are able to directly add the output to your .htaccess file in the wp-admin folder.

Important: Before usage you have to add the netname of the dial-in pool of your provider. How to find it out is described above. Below is only an example. The output will look like:

server:~# ./gethtaccessranges.sh
allow from 194.8.209.0/24
allow from 194.8.205.0/24
allow from 195.14.226.0/24

Finally generate a .htaccess file in your wp-admin/ folder with the content:

order deny,allow
deny from all

and add the output of the script gethtaccessranges.sh below the two lines. That’s it! Now access to wp-admin is only allowed from dynamic IP address from your provider. Sure it’s not the perfect solution but I’ll prevent you from many other hack attempts from all over the world.

At the end of the script there is also an example in case providers use number in their netnames.

#!/usr/bin/perl -w
# gethtaccessranges.sh
# Harald Kraemer 08.08.2010
# www.technnitip.net
#
# NET::CIDR and NET::Whois is need to run this script.
# On debian you can install using apt-get:
# apt-get install libnet-cidr-perl libnet-whois-perl
#
# Important: Replace the netname "NC-DIAL-IN-POOL" at the end of the
# script with the dial-in netname of your provider! Use the command
# whois <my-ip-address> to find out the netname.

use Net::CIDR;
use Net::CIDR ':all';
use Net::Whois::Raw;
use strict;

sub getRanges
{
  my($netname) = @_;
  my $whois;
  my @whois_array;
  my @ranges;

  $whois = whois( $netname, 'whois.ripe.net' );

  @whois_array   = split( "\n", $whois );
  @ranges        = grep( /inetnum:/, @whois_array );

  foreach ( @ranges )
  {
    s/inetnum://g;
    s/ //g;
    s/ - /-/g;

    foreach my $item ( Net::CIDR::range2cidr( $_ ) )
    {
      print "allow from " . $item . "\n";
    }
  }
}

getRanges('NC-DIAL-IN-POOL');

#for( my $i=1; $i <= 30; $i++)
#{
#  getRanges('DTAG-DIAL' . $i);
#}

No related posts.

In my case mdadm is used to configure the software RAID and mdadm –detail /dev/md1 can be used to show the rebuild status:

[root@hxxxxxxx ~]# mdadm --detail /dev/md1
/dev/md1:
Version : 00.90
Creation Time : Thu Nov  9 18:57:15 2006
Raid Level : raid1
Array Size : 159726144 (152.33 GiB 163.56 GB)
Used Dev Size : 159726144 (152.33 GiB 163.56 GB)
Raid Devices : 2
Total Devices : 2
Preferred Minor : 1
Persistence : Superblock is persistent

Update Time : Sun Feb 14 19:45:21 2010
State : active, resyncing
Active Devices : 2
Working Devices : 2
Failed Devices : 0
Spare Devices : 0

Rebuild Status : 31% complete

UUID : be29700c:083d0c62:67a9c130:e044323b
Events : 0.3626065

Number   Major   Minor   RaidDevice State
0       8        3        0      active sync   /dev/sda3
1       8       19        1      active sync   /dev/sdb3

In my case 31% of the rebuilt process are finished. We still have to wait a little bit..

Links

• The Software-RAID HOWTO: Detecting, querying and testing
• The Software-RAID HOTWO

• Changing into a deeper directory structure will create an incredible long bash prompt

For me it was quite annoying to have the prompt sometimes wider than the terminal window. In Debian standard configuration this is the case. So I decided to shorten the prompt.

I kept my prompt very simple, the only thing you have to do is to add the following lines to your ~/.bashrc

export PS1="[\u@\h \W]\\$ "
export PS2="> "

Make sure to add it at the end of your .bashrc file in your home directory. Otherwise it may be overwritten by other prompt definitions in your .bashrc.

Before

harry@h1096660:/usr/local/include/ffmpeg$

After

[harry@h1096660 ffmpeg]$

Better

Further links and examples

• Bash Prompt HOWTO
• Bash Prompts

coLinux is the base – a port of the Linux kernel which allows you to run Linux cooperatively on your Windows PC. andLinux is a complete Ubuntu Linux system which uses coLinux, Xming as X server and PulseAudio as sound server.

I’ve tried andLinux on my Windows XP notebook, installation was easy. Quite nice if you also want to have Linux running on your PC without purchasing other products. You can start Linux applications and they appear like a regular Windows application on your desktop.

andLinux offers some more features:

• Access from Linux applications to Windows filesystem
• Quick start of Linux applications from Quicklaunch bar
• Easy start of applications from KDE Start menu

See also:

• German andLinux website: andlinux.de

Definitely a try worth!

dpkg-reconfigure tzdata

Now you will be prompted to choose your desired time zone.

How the time zone can be change manually can be found here:

• http://www.wikihow.com/Change-the-Timezone-in-Linux
• http://www.linuxsa.org.au/tips/time.html

Your desktop is running with Windows and you often need to connect remote servers using SSH then you will already know PuTTY. You will also know that it’s getting frustrating to enter the passoword every time. There is a simple way to login to remote machines using RSA/DAS keys.

What is needed?

First of all you will need to download the PuTTY.exe. And to generate the keys on your Windows desktop you’ll need to download  PuTTYgen.exe as well.

Key Generation

Start PuTTYgen.exe after download and press the Generate button. Now follow the instruction and move the mouse cursor over the desired area. I’ve used the default parameter [x] SSH-2 RSA with a key length of 1024 bits.

I leave the Key passphrase empty because I don’t want to enter any passwords during login.

To have the key later available for other servers use the “Save public key” and “Save private key” button. My private key is saved as haifisch.ppk and my public key as haifisch. By the way, haifisch is German and means shark.

Now mark the generated public key, copy it to the clip board and paste it into ~/.ssh/authorized_keys file on the remote server of the user you want to login as.

PuTTY Configuration

Keys have been generated and stored on the remote server, therefore PuTTYgen can be closed now and the PuTTY.exe is needed now.

In PuTTY under the item “Session” enter the host name of the remote server and connection type SSH. Next choose “Connection/Data” and enter the remote user name. Also the previously defined private key is needed, it is given in “Connection/SSH/Auth” using the “Browse” button. In my case it’s haifisch.ppk.

When all settings are done go back to “Session”, enter a name for this session and press “Save”.

That’s it. Try it by double clicking on the saved session.

Login via Desktop Icon

If you want to have a desktop icon which opens putty and logs into a remote server generate a file e.g. www.myserver.com.bat with the content:

start C:\temp\putty\putty.exe -load "Session Name in PuTTY"

Now generate a link to this batch file on your desktop and login in by double clicking.

As you know only the early bird catches the worm, I immediately decided to update one server to Lenny. Sure, sometimes the worm isn’t delicious but if you are dealing with IT stuff you will know this kind of bad tasting worms already.

Okay the good news are: The worm wasn’t bad tasting in this case. Find my upgrade report below.

Upgrade Procedure

First I started with:

apt-get update

And received the error message:

There are no public key available for the following key IDs: 4D270D06F42584E6

Which means we need to get a new public key:

gpg --recv-key --keyserver wwwkeys.eu.pgp.net 4D270D06F42584E6
gpg --export 4D270D06F42584E6 | apt-key add -

or optionally with (not tested):

apt-get install debian-archive-keyring

Fine, next apt-get update was done again and several packages have been updated. It was prompted if a new /etc/mysql/my.cnf should be installed or my old one should be kept. I decided to keep my old one.

Afterwards I upgraded the distribution with apt-get dist-upgrade and many packages have been downloaded and installed.

For several config files it is again prompted if the old one should be kept or overwritten. I decided to backup to old configuration files and overwrite them with the new ones from the current distribution. I wanted to make sure that I don’t run into conflicts. Using this way the upgrade is performed very quick.

In the next step I adapted all my changes from backuped config files into the new ones. In my case mainly the Apache2 and MySQL configurations.

Apache2

After doing this Apache2 started with the message “NameVirtualHost *:80 has no VirtualHosts” and no one of my virtual hosts was recognized. I resolved this issue by changing the file /etc/apache2/sites-enabled/000-default and /etc/apache2/ports.conf. Within both files I’ve changed declarations “*:80″ to “*”:

/etc/apache2/sites-enabled/000-default

<VirtualHost *>

/etc/apache2/ports.conf

NameVirtualHost *

Note that all your virtual host configurations also have to be defined with “<VirtualHost * >”.

APT

To receive the updates for “Lenny” edit the file /etc/apt/sources.conf and change the line:

deb http://security.debian.org/ etch/updates main contrib non-free

to

deb http://security.debian.org/ lenny/updates main contrib non-free

Grub

One special thing on my server here (Strato root server) is the Grub configuration. The server is configured with SATA RAID 1, therefore partitions are mounted on /dev/md0 and /dev/md1. After every kernel update I manually change the /boot/grub/menu.lst file. Here I copy the two parts for the latest running kernel and simply adjust the kernel versions:

title           Debian GNU/Linux, kernel (2.6.26-1-686)
root            (hd0,0)
kernel          /vmlinuz-2.6.26-1-686 root=/dev/md1 ro console=tty0 console=ttyS                   0,57600
initrd          /initrd.img-2.6.26-1-686
savedefault
boot

title           Debian GNU/Linux, kernel (2.6.26-1-686, recovery mode)
root            (hd0,0)
kernel          /vmlinuz-2.6.26-1-686 root=/dev/md1 ro console=tty0 console=ttyS                   0,57600 single
initrd          /initrd.img-2.6.26-1-686
savedefault
boot

Finally reboot and your issue will show “Debian GNU/Linux 5.0″.

• Syntax highlighting
• Different color scheme
• Disable indenting when copy and pasting a text from clip board
• Replace tabs with blanks
• Use 2 spaces as tabs instead of 4 spaces
• Improve the search
• Display cursor position

Open the .vimrc in your home directory and add the following settings:

" enable syntax highlightning
syntax enable

" set a different color scheme
colorscheme desert

" avoid identing when pasting a text
set paste

" enable auto indent
set autoindent

" expand tabs to spaces
set expandtab

" set the tab stop to 2 spaces and soft tab stop to 2 spaces
set tabstop=2 sts=2
set shiftwidth=2

" immediately search and display the typed search pattern
set incsearch

" highlighting of search matches
set hlsearch

" show cursor position
set ruler

Much better now! Try the search (e.g. ESC /high) and you will recognize that the search pattern will be immediately highlighted when you enter it.

Note: If you want to replace all tabs within an existing file you can now use the vi command “:retab” and all tabs will be removed according the settings done in your .vimrc.

And finally the result:

No related posts.