Speedy paket familia menggunakan ip dynamic,jadi biar mikrotik bisa diremote dari luar maka mikrotik disetup autoupdate ke dyndns.com.. Mikrotik yg digunakan seri RB750 dengan OSv4.6(also work on OS v5.14) bridge mode(Dial dari mikrotik)
1. Add script:
–Via Winbox: System => Scripts => Klik tanda + => Beri nama script sesuai keinginan => Centang semua Policy => Masukkan script dibawah ini => Klik Apply => Klik OK
Continue reading
Login ke WordPress Dashboard => Menu Appearance => Widgets => Text => buat script YM seperti dibawah:
Script YM:
<a href=”ymsgr:SendIM?YM-id“>
<img border=0 src=”http://opi.yahoo.com/online?u=YM-id&m=g&t=2“/></a>
Keterangan:
-Ganti tulisan yang di-mark biru YM-id dengan YM id/login YM anda
-Ganti angka yang di-mark merah dengan angka sesuai list icon YM yang diinginkan
Detail:
http://www.webmin.com/rpm.html
Using the Webmin YUM repository
-Download & import webmin gpg key
# mkdir /opt/webmin
# cd /opt/webmin
# wget http://www.webmin.com/jcameron-key.asc
# rpm --import jcameron-key.asc
-Add webmin repository
# vi /etc/yum.repos.d/webmin.repo
[webmin]
name=Webmin Distribution Neutral
#baseurl=http://download.webmin.com/download/yum
mirrorlist=http://download.webmin.com/download/yum/mirrorlist
enabled=0
-Install webmin via yum
# yum --enablerepo=webmin install webmin
Enable port 10000
# iptables -A INPUT -p tcp -m tcp --dport 10000 -j ACCEPT
# service iptables save
# service iptables restart
-Tes akses server menggunakan webmin. Buka browser ketik: http://ip_server:10000
Terkadang diperlukan auto login di beberapa PC user seperti di PC yang dipakai banyak user atau di beberapa user yang gaptek ^_^
Berikut cara setup autologin di Windows:
1. Buka regedit. Start Menu => Run atau Tombol Windows+R => Ketik: regedit
2. Cari key berikut:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon
Reference:
http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention
allows only 10 FTP login incorrect answers per minute
/ip firewall filter
add chain=input protocol=tcp dst-port=21 src-address-list=ftp_blacklist action=drop \
comment="drop ftp brute forcers"
add chain=output action=accept protocol=tcp content="530 Login incorrect" dst-limit=1/1m,9,dst-address/1m
add chain=output action=add-dst-to-address-list protocol=tcp content="530 Login incorrect" \
address-list=ftp_blacklist address-list-timeout=3h
This will prevent a SSH brute forcer to be banned for 10 days after repetitive attempts. Change the timeouts as necessary.
/ip firewall filter
add chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist action=drop \
comment="drop ssh brute forcers" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new \
src-address-list=ssh_stage3 action=add-src-to-address-list address-list=ssh_blacklist \
address-list-timeout=10d comment="" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new \
src-address-list=ssh_stage2 action=add-src-to-address-list address-list=ssh_stage3 \
address-list-timeout=1m comment="" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new src-address-list=ssh_stage1 \
action=add-src-to-address-list address-list=ssh_stage2 address-list-timeout=1m comment="" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new action=add-src-to-address-list \
address-list=ssh_stage1 address-list-timeout=1m comment="" disabled=no
If you want to block downstream access as well, you need to block the with the forward chain:
/ip firewall filter
add chain=forward protocol=tcp dst-port=22 src-address-list=ssh_blacklist action=drop \
comment="drop ssh brute downstream" disabled=no
Install rpmforge Repository
Download the rpmforge-release package. Choose one of the two links below, selecting to match your host’s architecture. If you are unsure of which one to use you can check your architecture with the command uname -i
# cd /opt
-For CentOS 6 i686 (32bit):
# wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.i686.rpm
-For CentOS 6 x86_64 (64bit):
# wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm
Continue reading
Install from epel or rpmforge repo, i’m install it from epel:
# yum --enablerepo=epel -y install denyhosts
-(Optional) If need to configure denyhosts, edit file denyhosts.conf, actually default configuration is fine..
# vi /etc/denyhosts.conf
-Start denyhosts service & make start on boot:
# service denyhosts start
# chkconfig denyhosts on
Continue reading
Disabled with reboot, edit /etc/selinux/config and save..
# vi /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of these two values:
# targeted - Targeted processes are protected,
# mls - Multi Level Security protection.
SELINUXTYPE=targeted
Setup yahoo mail di Microsoft Outlook 2010:
-Account Setting => New Email Account => Manually configure … => Internet Email
-Ketik pop.mail.yahoo.com di kotak Incoming Mail (POP3, IMAP, or HTTP) Server
-Ketik smtp.mail.yahoo.com di kotak Outgoing Mail (SMTP) Server
Continue reading