IPTABLES, Custom IP Chains in Linux

Creating a custom IP Chain, adding rules to that and creating a rule which would bring the Custom Chain into play:

1. Create a New Rule:

[root@rhel5 ~]# iptables -N MYCHAIN

2. Add a rule to that chain eg. to disallow an IP (192.168.1.10) from accessing the SMTP port (25) on (192.168.1.20):

[root@rhel5 ~]# iptables -A MYCHAIN -s 192.168.1.10 -d 172.168.1.20 -p tcp --dport 25 -j REJECT

(The destination IP is an alias to the network interface eth0, eg. eth0:1)

3. Creating a rule in the default INPUT chain which would jump to the custom rule whenever any request comes on the eth+ interface:

[root@rhel5 ~]# iptables -A INPUT -i eth+ -j MYCHAIN

4. Save the iptables rules:

[root@rhel5 ~]# service iptables save

5. Restart the iptables service

[root@rhel5 ~]# service iptables restart

6. To list all the rules;

[root@rhel5 ~]# iptables -L

Trouble setting up wireless for the network card type BCM4312 802.11b/g on Dell Inspiron-1525 running Fedora-13 ?

This piece of information is for all those who might face some issue in setting up of wireless network for Fedora release 13 (Goddard) on your "Dell Inspiron - 1525" laptop having BCM4312 802.11b/g card. The default driver which Fedora-13 provided for BCM4312 802.11b/g didn't work for me, thus I had look for a driver that would have served my purpose of going wireless. Following are the steps by which I could make wireless working for me, hope it helps you too...

So let's get started;

1. Check if you have wireless connection;

[root@Fedora-13 ~]# iwconfig

lo no wireless extensions.

eth0 no wireless extensions.

wlan0 IEEE 802.11bg Mode:Managed Access Point: Not-Associated

Tx-Power=0 dBm

Retry long limit:7 RTS thr:off Fragment thr:off

Encryption key:off

Power Management:off

pan0 no wireless extensions.

(Well, it shows wlan0 since it has the driver installed for wireless device, but for me unfortunately this did work when I tried to connect it with my wireless modem). Thus the workaround is to remove the driver installed and find an appropriate one and hook it up with the Broadcom network card.

2. Locate the Device ID's of Broadcom cards on your system by:

[root@Fedora-13 ~]# lspci -n | grep 14e4

3. Locate the installed driver;

[root@Fedora-13 ~]# lspci -v

0b:00.0 Network controller: Broadcom Corporation BCM4312 802.11b/g LP-PHY (rev 01)

Subsystem: Dell Wireless 1395 WLAN Mini-Card

Flags: bus master, fast devsel, latency 0, IRQ 17

Memory at fe7fc000 (64-bit, non-prefetchable) [size=16K]

Capabilities: [40] Power Management version 3

Capabilities: [58] Vendor Specific Information: Len=78

Capabilities: [e8] MSI: Enable- Count=1/1 Maskable- 64bit+

Capabilities: [d0] Express Endpoint, MSI 00

Capabilities: [100] Advanced Error Reporting

Capabilities: [13c] Virtual Channel

Capabilities: [160] Device Serial Number 41-d9-4d-ff-ff-a9-00-23

Capabilities: [16c] Power Budgeting

Kernel driver in use: b43-pci-bridge

Kernel modules: ssb

4. Note the Kernel module from above output and if you are interested to get the details;

[root@Fedora-13 ~]# modinfo ssb

filename: /lib/modules/2.6.33.3-85.fc13.i686/kernel/drivers/ssb/ssb.ko

license: GPL

description: Sonics Silicon Backplane driver

srcversion: B67624D9C93DCB668DC35D2

alias: pci:v000014E4d0000432Bsv*sd*bc*sc*i*

alias: pci:v000014E4d00004329sv*sd*bc*sc*i*

alias: pci:v000014E4d00004328sv*sd*bc*sc*i*

alias: pci:v000014E4d00004325sv*sd*bc*sc*i*

alias: pci:v000014E4d00004324sv*sd*bc*sc*i*

alias: pci:v000014E4d00004321sv*sd*bc*sc*i*

alias: pci:v000014E4d00004320sv*sd*bc*sc*i*

alias: pci:v000014E4d00004319sv*sd*bc*sc*i*

alias: pci:v000014E4d00004318sv*sd*bc*sc*i*

alias: pci:v000014E4d00004315sv*sd*bc*sc*i*

alias: pci:v000014E4d00004312sv*sd*bc*sc*i*

alias: pci:v000014E4d00004311sv*sd*bc*sc*i*

alias: pci:v000014E4d00004307sv*sd*bc*sc*i*

alias: pci:v000014E4d00004306sv*sd*bc*sc*i*

alias: pci:v000014E4d00004301sv*sd*bc*sc*i*

depends: mmc_core

vermagic: 2.6.33.3-85.fc13.i686 SMP mod_unload 686

5. Download the driver files:

Downloaded the file hybrid-portsrc-x86_32-v5.60.48.36.tar.gz from

http://www.broadcom.com/support/802.11/linux_sta.php

6. Extract it under a folder like /home/bijit/Downloads/hybrid_wl;

[root@Fedora-13 hybrid_wl]# tar -xvzf hybrid-portsrc-x86_32-v5.60.48.36.tar.gz

7. Now, you can refer to the installation manual that comes with package which was downloaded. But,

let me continue with how that was done on my system...

To build the driver I did the following;

8. Check the version of the installed Kernel;

[root@Fedora-13 hybrid_wl]# uname -r

2.6.33.3-85.fc13.i686

9. To make sure if I have the all the tools available, tried the following command only to encounter the

error :-)

make: *** /lib/modules/"release"/build: No such file or directory. Stop.

10. So, I would require the Kernel-devel package since it would not have thrown the above

error and there would have been the directory (/lib/modules/2.6.33.3-85.fc13.i686/build)

created by that package.

11. Installed the following Development package for building kernel modules to match the kernel;

kernel-devel-2.6.33.3-85.fc13.i686

12. Now, check for the directory which was missing earlier;

[root@Fedora-13 hybrid_wl]# ll /lib/modules/2.6.33.3-85.fc13.i686/build

lrwxrwxrwx. 1 root root 46 May 13 06:58 /lib/modules/2.6.33.3-85.fc13.i686/build

-> ../../../usr/src/kernels/2.6.33.3-85.fc13.i686

13. Building the driver as a loadable kernel module (LKM);

[root@Fedora-13 hybrid_wl]# make clean

[root@Fedora-13 hybrid_wl]# make

(Well, here I had to install gcc with all/any of its dependencies. This was necessary since compilers were

missing on my system)

14. In the above steps, the build process completes to generate "wl.ko" file.

15. I need to remove the previous non-fuctional "ssb" drivers;

[root@Fedora-13 hybrid_wl]# lsmod | grep "b43\|ssb"

[root@Fedora-13 hybrid_wl]# rmmod ssb; rmmod b43

16. As a precaution blacklisted the drivers to prevent it from getting loaded in future;

[root@Fedora-13 hybrid_wl]# echo "blacklist ssb" >> /etc/modprobe.d/blacklist.conf;

[root@Fedora-13 hybrid_wl]# echo "blacklist b43" >> /etc/modprobe.d/blacklist.conf;

17. Insmod the driver that was built in the previous steps;

Since, no "wl" drivers were prior to this one on my system, i had to add a security module before using the "wl" module.

[root@Fedora-13 hybrid_wl]# modprobe lib80211

then;

[root@Fedora-13 hybrid_wl]# insmod wl.ko

Wireless driver (wl.co) is now operational. Needed to wait for couple of seconds since

the Network Manager would take few seconds to detect the presence of a new network

driver and show the surrounding wireless networks.

18. Make the driver Boot time loadable.

[root@Fedora-13 hybrid_wl]# cp wl.ko /lib/modules/`uname -r`/kernel/drivers/net/wireless/

Lets generate modules.dep and map files

[root@Fedora-13 hybrid_wl]# depmod -a

[root@Fedora-13 hybrid_wl]# echo modeprobe wl >> /etc/rc.local

Note: I ignored the license warning that I received at the time of module insertion. I don't think its going to make any difference. Well, the whole setup also works for Fedora-10 instalations if you have network card is the one mentioned above...

My wireless network on Fedora-13 is working smoothly like any other wireless on any other devices :-)

Database replication an effective means of Backup !

What is Database replication?
Database replication is one of most effective means of Backup. This is more effective when you need to handle a huge volume of data in a big organization. It is an online process means the master database is backed up instantaneously as and when there are any changes to the master database. The process of Replication may work in chained fashion. Replication protects against hardware failures on one of the replicated databases but not against user stupidity or maliciousness! If a user deletes a number of records, this process will then be replicated onto the other replicated servers, making replication useless as a reliable means of backup.

How to achieve this? ( I described about MySQL Database only)
Here both the servers are of same versions i.e. version: 4.1.15

The Master server is located in the location
/home/bijit/database/mysql

To start the services:

mysqld_multi start 3
mysqld_multi start 4

To log into mysql:

/home/bijit/database/mysql/bin/mysql -u root -proot --port=3307 --socket=/home/bijit/database/mysql/config/mysql.sock

/home/bijit/database2/mysql/bin/mysql -u root -p --port=3308 --socket=/home/bijit/database2/mysql/var/mysql.sock

The slave server is located in the path
/home/bijit/database2/mysql
Steps:
On the master do the following:
1.
use database mysql;
GRANT REPLICATION SLAVE ON *.* TO replicator@localhost IDENTIFIED BY 'replicator';
FLUSH PRIVILEGES;
2.
Make a copy of tables and data i.e. the entire database of the Master server. In this case copy the data directory located in /home/bijit/database/mysql/var
3.
In the my.cnf of Master server, add the following entries;

log-bin
server-id=1
4. Login to maser mysql server, and note the bin-log file and its position as
mysql> show master status;
+----------------------+----------+--------------+------------------+
File Position Binlog_Do_DB Binlog_Ignore_DB
+----------------------+----------+--------------+------------------+
localhost-bin.000002 79
+----------------------+----------+--------------+------------------+
1 row in set (0.05 sec)

On the slave do the following:

1.
In the file my.cnf, add the following entries (under the slave servers entry),
master-host = localhost
master-user = replicator
master-password = replicator
master-port = 3307
server-id = 2

2. Start the slave server, create a user called replicator as created in the master;
mysql> use mysql;
mysql> grant all privileges on *.* to replicator@localhost identified by 'replicator';
mysql>flush privileges;
mysql> stop slave;
mysql> CHANGE MASTER TO MASTER_HOST='localhost',
MASTER_USER='root',
MASTER_PASSWORD='root',
MASTER_PORT=3307,
MASTER_LOG_FILE='localhost-bin.000002'
MASTER_LOG_POS=79
2.
Copy the data taken from the master onto the slave.

3. Login to slave server as mysql -u root -proot [This is now same as master]
Start the slave server as
mysql> start slave;
mysql> LOAD DATA FROM MASTER;

Now check both master and slave and you will see both servers are in sync.
MySql replication has begun !!!

Linux don't run well on Laptops! Who says :-)

I have successfully installed and configured Fedore Core 10 (Cambridge) on my Dell Inspirion 1525 Laptop without a hiccup.The only thing that annoyed me is that I could not play a single mp3 file in any of dozens of Music Players available on FC10. This is really a frustrating aspects of some modern Linux distros is that they do not come with mp3 support rolled in. May be, it is intentionally done to avoid any licensing issues. Also, granted using the ogg format is a much better solution as well as a much better sounding format but for a user like me who has a massive amount of mp3 files already located on multiple hard drives converting to ogg format would be a very time consuming option. So, I wanted to have the mp3 support on my native laptop itself.Here is the solution I have found.The first command will install the necessary repositories for yum to use.
First issue: rpm -ivh http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-stable.noarch.rpm
Now it’s time to install the actual plugin for support.
yum -y install gstreamer-plugins-bad gstreamer-plugins-ugly xine-lib-extras-nonfree

Now my system will allow mp3 playback in the major players. But there is still no xmms. To install xmms with mp3 support issue the following command:
yum install xmms xmms-mp3
Once this is finished your machine is all ready for full-blown mp3 playback in just about every type of application!

Alfresco, Is it the OpenSource counterpart to Windows Sharepoint ??

Here’s how to…..
Installing Alfresco on RHEL-5 System

1. Download Information:
Download the binary alfresco-1.2i-linux-community.bin from
http://sourceforge.net/project/showfiles.php?group_id=143373&package_id=157460&release_id=396245

2. Setup permissions:
Assign execute permission on the binary
# chmod u+x alfresco-1.2i-linux-community.bin

3. Installation:
Installation takes place in an interactive fashion thus unless something goes really bad, it won’t
take more than couple of minutes;
Start installing with the help of the following command
# ./alfresco-1.2i-linux-community.bin
(Make sure, your X-server is up and running)
The default installation directory would be under /opt/alfresco-1.2
Note: Alfresco installer comes bundled with Tomcat (Application Server), MySQL database and an
openoffice suite.

4. Gotchas!!! If you have multiple MySQL….
If you already have one MySQL DB running (on default 3306 port) then assign a different port of
MySQL while installing Alfresco.
Also, please move the mysql configuration file that you have under /etc/
to /mysql_install_directory/share/
And at the same time, copy the /opt/alfresco-1.2/mysql/support-files/ my-small.cnf with a name
my.cnf under /opt/alfresco-1.2/mysql/share/my.cnf
Eg.
# cp /opt/alfresco-1.2/mysql/support-files/ my-small.cnf /opt/alfresco-1.2/mysql/share/my.cnf

MySQL Port and Socket files;
Edit the file; /opt/alfresco-1.2/mysql/share/my.cnf and make the following changes as
port = 3307
socket = /opt/alfresco-1.2/mysql/data/mysql.sock
You might need to modify the file
/opt/alfresco-1.2/tomcat/shared/classes/alfresco/extension/custom-repository.properties
And change the port as;
db.url=jdbc:mysql://localhost:3307/${db.name}

5. Start alfresco:
Although after a successful installation, alfresco would start up automatically. You might also
want start and stop the same later on, the scripts for doing that can be found under;
/opt/alfresco-1.2/alf_start.sh
/opt/alfresco-1.2/alf_stop.sh

6. How to access:
Open a browser and type http://localhost:8080/alfresco; this should bring up the login page.
(Initial admin credentials are Username: admin, Password: admin)

(I did not try to install it with Tomcat server already installed, if some one tries that do share)