root@keuangan-CQ3622L:/home/keuangan# cd Downloads/
root@keuangan-CQ3622L:/home/keuangan/Downloads# ls
epson-inkjet-printer-201207w_1.0.0-1lsb3.2_amd64.debroot@keuangan-CQ3622L:/home/keuangan/Downloads# dpkg -i epson-inkjet-printer-201207w_1.0.0-1lsb3.2_amd64.deb
Selecting previously unselected package epson-inkjet-printer-201207w.
(Reading database ... 163651 files and directories currently installed.)
Preparing to unpack epson-inkjet-printer-201207w_1.0.0-1lsb3.2_amd64.deb ...
Unpacking epson-inkjet-printer-201207w (1.0.0-1lsb3.2) ...
dpkg: dependency problems prevent configuration of epson-inkjet-printer-201207w:
epson-inkjet-printer-201207w depends on lsb (>= 3.2); however:
Package lsb is not installed.
dpkg: error processing package epson-inkjet-printer-201207w (--install):
dependency problems - leaving unconfigured
Errors were encountered while processing:
epson-inkjet-printer-201207w
root@keuangan-CQ3622L:/home/keuangan/Downloads# apt-get install lsb
Reading package lists... Done
Building dependency tree
Reading state information... Done
You might want to run 'apt-get -f install' to correct these:
The following packages have unmet dependencies:
lsb : Depends: lsb-core (>= 4.1+Debian11ubuntu6) but it is not going to be installed
Depends: lsb-graphics (>= 4.1+Debian11ubuntu6) but it is not going to be installed
Depends: lsb-cxx (>= 4.1+Debian11ubuntu6) but it is not going to be installed
Depends: lsb-desktop (>= 4.1+Debian11ubuntu6) but it is not going to be installed
Depends: lsb-printing (>= 4.1+Debian11ubuntu6) but it is not going to be installed
Depends: lsb-languages (>= 4.1+Debian11ubuntu6) but it is not going to be installed
E: Unmet dependencies. Try 'apt-get -f install' with no packages (or specify a solution).
root@keuangan-CQ3622L:/home/keuangan/Downloads# apt-get install -f
Reading package lists... Done
Building dependency tree
Reading state information... Done
Correcting dependencies... Done
The following extra packages will be installed:
alien at build-essential cpp-4.8 debhelper debugedit dh-apparmor dpkg-dev
fakeroot g++ g++-4.8 gcc-4.8 gcc-4.8-base heirloom-mailx lib32z1
libalgorithm-diff-perl libalgorithm-diff-xs-perl libalgorithm-merge-perl
libasan0 libatomic1 libc-dev-bin libc6 libc6-dbg libc6-dev libc6-i386
libdpkg-perl libfakeroot libgcc-4.8-dev libgomp1 libitm1 libjpeg62
libmail-sendmail-perl libpod-plainer-perl libquadmath0 librpm3 librpmbuild3
librpmio3 librpmsign1 libsigsegv2 libstdc++-4.8-dev libstdc++6
libsys-hostname-long-perl libtsan0 lsb lsb-core lsb-cxx lsb-desktop
lsb-graphics lsb-invalid-mta lsb-languages lsb-multimedia lsb-printing
lsb-security m4 ncurses-term pax po-debconf rpm rpm-common rpm2cpio
Suggested packages:
lsb-rpm default-mta mail-transport-agent gcc-4.8-locales dh-make rpm-i18n
apparmor-easyprof debian-keyring g++-multilib g++-4.8-multilib gcc-4.8-doc
libstdc++6-4.8-dbg gcc-4.8-multilib libgcc1-dbg libgomp1-dbg libitm1-dbg
libatomic1-dbg libasan0-dbg libtsan0-dbg libquadmath0-dbg glibc-doc
libstdc++-4.8-doc libmail-box-perl elfutils
Recommended packages:
libqt3-mt
The following NEW packages will be installed:
alien at build-essential debhelper debugedit dh-apparmor dpkg-dev fakeroot
g++ g++-4.8 heirloom-mailx lib32z1 libalgorithm-diff-perl
libalgorithm-diff-xs-perl libalgorithm-merge-perl libc6-i386 libfakeroot
libjpeg62 libmail-sendmail-perl libpod-plainer-perl librpm3 librpmbuild3
librpmio3 librpmsign1 libsigsegv2 libstdc++-4.8-dev
libsys-hostname-long-perl lsb lsb-core lsb-cxx lsb-desktop lsb-graphics
lsb-invalid-mta lsb-languages lsb-multimedia lsb-printing lsb-security m4
ncurses-term pax po-debconf rpm rpm-common rpm2cpio
The following packages will be upgraded:
cpp-4.8 gcc-4.8 gcc-4.8-base libasan0 libatomic1 libc-dev-bin libc6
libc6-dbg libc6-dev libdpkg-perl libgcc-4.8-dev libgomp1 libitm1
libquadmath0 libstdc++6 libtsan0
16 upgraded, 44 newly installed, 0 to remove and 309 not upgraded.
1 not fully installed or removed.
Need to get 41,5 MB/46,9 MB of archives.
After this operation, 61,1 MB of additional disk space will be used.
Do you want to continue? [Y/n] y
root@keuangan-CQ3622L:/home/keuangan/Downloads# dpkg -i epson-inkjet-printer-201207w_1.0.0-1lsb3.2_amd64.deb
(Reading database ... 168680 files and directories currently installed.)
Preparing to unpack epson-inkjet-printer-201207w_1.0.0-1lsb3.2_amd64.deb ...
Unpacking epson-inkjet-printer-201207w (1.0.0-1lsb3.2) over (1.0.0-1lsb3.2) ...
cups stop/waiting
cups start/running, process 15749
Setting up epson-inkjet-printer-201207w (1.0.0-1lsb3.2) ...
cups stop/waiting
cups start/running, process 15808
Processing triggers for libc-bin (2.19-0ubuntu6) ...
root@keuangan-CQ3622L:/home/keuangan/Downloads#
root@serveraldy:~# apt-get install smokeping -y
root@serveraldy:~# cd /etc/apache2/conf-available/
root@serveraldy:/etc/apache2/conf-available# ln -s /etc/smokeping/apache2.conf smokeping.conf
root@serveraldy:/etc/apache2/conf-available# a2enconf smokeping
root@serveraldy:/etc/apache2/conf-available# a2enmod cgid
root@serveraldy:/etc/apache2/conf-available# pico /etc/smokeping/config.d/Targets
*** Targets ***
probe = FPing
menu = Top
title = Network Latency Grapher
remark = Welcome to the SmokePing website of xxx Company. \
Here you will learn all about the latency of our network.
+ Local
menu = Local
title = Local Network
#parents = owner:/Test/James location:/
++ LocalMachine
menu = Local Machine
title = This host
host = localhost
#alerts = someloss
++ Web_Server_1
menu = google.com
title = google.com
host = google.com
root@serveraldy:/etc/apache2/conf-available# service smokeping restart
* Shutting down latency logger daemon smokeping [ OK ]
* Starting latency logger daemon smokeping [ OK ]
root@serveraldy:/etc/apache2/conf-available# service apache2 restart
root@serveraldy:/etc/apache2/conf-available# sudo apt-get install libapache2-mod-fcgi
. sebelum nya kita harus Mengecek dan Mengatasi Account yang Terindikasi Spam pada Zimbra Mail Server , saya mengikuti tutorial di http://vavai.com/2015/04/11/tips-mengecek-dan-mengatasi-account-yang-terindikasi-spam-pada-zimbra-mail-server/ ,root@mail:~# apt-get install fail2banroot@mail:~# cd /etc/fail2ban/jail.conf
# Fail2Ban configuration file
#
# Author: Cyril Jaquier
#
# $Revision: 747 $
## The DEFAULT allows a global definition of the options. They can be overridden
# in each jail afterwards.
[DEFAULT]
# "ignoreip" can be an IP address, a CIDR mask or a DNS host. Fail2ban will not
# ban a host which matches an address in this list. Several addresses can be
# defined using space separator.
ignoreip = 127.0.0.1/8 ip public server/28
# "bantime" is the number of seconds that a host is banned.
bantime = 1800
# A host is banned if it has generated "maxretry" during the last "findtime"
# seconds.
findtime = 600
# "maxretry" is the number of failures before a host get banned.
maxretry = 3
# "backend" specifies the backend used to get files modification. Available
# options are "gamin", "polling" and "auto". This option can be overridden in
# each jail too (use "gamin" for a jail and "polling" for another).
#
# gamin: requires Gamin (a file alteration monitor) to be installed. If Gamin
# is not installed, Fail2ban will use polling.
# polling: uses a polling algorithm which does not require external libraries.
# auto: will choose Gamin if available and polling otherwise.
backend = auto
# This jail corresponds to the standard configuration in Fail2ban 0.6.
# The mail-whois action send a notification e-mail with a whois request
# in the body.
[ssh-iptables]
enabled = true
filter = sshd
action = iptables[name=SSH, port=ssh, protocol=tcp]
sendmail-whois[name=SSH, dest=aldykustyandi@alshifacharity.com, sender=fail2ban@alshifacharity.com]
logpath = /var/log/auth.log
maxretry = 4
# This jail forces the backend to "polling".
[sasl-iptables]
enabled = false
filter = sasl
backend = polling
action = iptables[name=sasl, port=smtp, protocol=tcp]
sendmail-whois[name=sasl, dest=aldykustyandi@alshifacharity.com]
logpath = /var/log/zimbra.log
# Here we use TCP-Wrappers instead of Netfilter/Iptables. "ignoreregex" is
# used to avoid banning the user "myuser".
[ssh-tcpwrapper]
enabled = false
filter = sshd
action = hostsdeny
sendmail-whois[name=SSH, dest=aldykustyandi@alshifacharity.com]
ignoreregex = for myuser from
logpath = /var/log/messages
# This jail uses ipfw, the standard firewall on FreeBSD. The "ignoreip"
# option is overridden in this jail. Moreover, the action "mail-whois" defines
# the variable "name" which contains a comma using "". The characters '' are
# valid too.
[zimbra-account]
enabled = true
filter = zimbra
action = iptables-allports[name=zimbra-account]
sendmail[name=zimbra-account, dest=aldykustyandi@alshifacharity.com]
logpath = /opt/zimbra/log/mailbox.log
bantime = 1800
maxretry = 5
[zimbra-audit]
enabled = true
filter = zimbra
action = iptables-allports[name=zimbra-audit]
sendmail[name=Zimbra-audit, dest=aldykustyandi@alshifacharity.com]
logpath = /opt/zimbra/log/audit.log
bantime = 1800
maxretry = 5
[zimbra-recipient]
enabled = true
filter = zimbra
action = iptables-allports[name=zimbra-recipient]
sendmail[name=Zimbra-recipient, dest=aldykustyandi@alshifacharity.com]
logpath = /var/log/zimbra.log
#findtime = 604800
bantime = 172800
maxretry = 5
[postfix]
enabled = true
filter = postfix
action = iptables-multiport[name=postfix, port=smtp, protocol=tcp]
sendmail-buffered[name=Postfix, dest=aldykustyandi@alshifacharity.com]
logpath = /var/log/zimbra.log
bantime = -1
maxretry = 5
#[sasl]
#enabled = true
#port = smtp,ssmtp,imap2,imap3,imaps,pop3,pop3s
#filter = sasl
# You might consider monitoring /var/log/warn.log instead
# if you are running postfix. See http://bugs.debian.org/507990
#logpath = /var/log/zimbra.log
root@mail:~# pico /etc/fail2ban/filter.d/zimbra.conf
# Fail2Ban configuration file
#
# Author:
#
# $Revision: 1 $
#
[Definition]
# Option: failregex
# Notes.: regex to match the password failures messages in the logfile. The
# host must be matched by a group named "host". The tag "" can
# be used for standard IP/hostname matching and is only an alias for
# (?:::f{4,6}:)?(?P[\w\-.^_]+)
# Values: TEXT
#
failregex = \[ip=;\] account - authentication failed for .* \(no such account\)$
\[ip=;\] security - cmd=Auth; .* error=authentication failed for .*, invalid password;$
;oip=;.* security - cmd=Auth; .* protocol=soap; error=authentication failed for .* invalid password;$
\[oip=;.* SoapEngine - handler exception: authentication failed for .*, account not found$
WARN .*;ip=;ua=ZimbraWebClient .* security - cmd=AdminAuth; .* error=authentication failed for .*;$
NOQUEUE: reject: RCPT from .*\[\]: 550 5.1.1 .*: Recipient address rejected:
# .*\[ip=;\] .* - authentication failed for .* \(invalid password\)
#
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.
# Values: TEXT
#
ignoreregex =
root@mail:~# fail2ban-client reloadroot@mail:~# fail2ban-client status
Status
|- Number of jail: 5
`- Jail list: postfix, zimbra-audit, zimbra-recipient, zimbra-account, ssh-iptables
root@mail:~# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
fail2ban-zimbra-audit tcp -- anywhere anywhere
fail2ban-zimbra-account tcp -- anywhere anywhere
fail2ban-SSH tcp -- anywhere anywhere tcp dpt:ssh
fail2ban-postfix tcp -- anywhere anywhere multiport dports smtp
fail2ban-zimbra-recipient tcp -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain fail2ban-SSH (1 references)
target prot opt source destination
DROP all -- 221.194.44.227 anywhere
DROP all -- 221.229.172.35 anywhere
DROP all -- 91.201.236.50 anywhere
DROP all -- 221.194.44.218 anywhere
DROP all -- 121.18.238.19 anywhere
RETURN all -- anywhere anywhere
Chain fail2ban-postfix (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
Chain fail2ban-zimbra-account (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
Chain fail2ban-zimbra-audit (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
Chain fail2ban-zimbra-recipient (1 references)
target prot opt source destination
DROP all -- securemail-pl-mx18.synaq.com anywhere
RETURN all -- anywhere anywhere
root@mail:~#
root@mail:~# tail -f /var/log/fail2ban.log
2016-08-18 11:20:58,249 fail2ban.actions: WARNING [ssh-iptables] Unban 103.207.37.31
2016-08-18 11:24:02,481 fail2ban.actions: WARNING [ssh-iptables] Ban 91.224.160.106
2016-08-18 11:38:24,506 fail2ban.actions: WARNING [ssh-iptables] Unban 114.80.116.204
2016-08-18 11:41:29,738 fail2ban.actions: WARNING [ssh-iptables] Ban 121.18.238.19
2016-08-18 11:42:05,785 fail2ban.actions: WARNING [ssh-iptables] Ban 221.194.44.218
2016-08-18 11:42:29,845 fail2ban.actions: WARNING [ssh-iptables] Ban 91.201.236.50
2016-08-18 11:47:44,240 fail2ban.actions: WARNING [ssh-iptables] Unban 221.229.172.35
2016-08-18 11:49:13,355 fail2ban.actions: WARNING [ssh-iptables] Ban 221.229.172.35
2016-08-18 11:54:02,753 fail2ban.actions: WARNING [ssh-iptables] Unban 91.224.160.106
2016-08-18 11:58:02,188 fail2ban.actions: WARNING [ssh-iptables] Ban 221.194.44.227
root@ubuntu:/etc# apt-get install nagios-nrpe-server nagios-plugins
The following extra packages will be installed:
libarchive13 libgmp10 libgssglue1 libldb1 liblzo2-2 libnet-snmp-perl
libnettle4 libperl5.18 libsensors4 libsmbclient libsnmp-base libsnmp30
libtalloc2 libtdb1 libtevent0 libtirpc1 libwbclient0 nagios-plugins-basic
nagios-plugins-common nagios-plugins-standard python-crypto python-ldb
python-samba python-talloc python-tdb rpcbind samba-common samba-common-bin
samba-libs smbclient snmp whois
Suggested packages:
lrzip libcrypt-des-perl libdigest-hmac-perl libio-socket-inet6-perl
lm-sensors snmp-mibs-downloader nagios3 icinga nagios-plugins-contrib
postfix sendmail-bin exim4-daemon-heavy exim4-daemon-light python-crypto-dbg
python-crypto-doc heimdal-clients cifs-utils
The following NEW packages will be installed:
libarchive13 libgmp10 libgssglue1 libldb1 liblzo2-2 libnet-snmp-perl
libnettle4 libperl5.18 libsensors4 libsmbclient libsnmp-base libsnmp30
libtalloc2 libtdb1 libtevent0 libtirpc1 libwbclient0 nagios-nrpe-server
nagios-plugins nagios-plugins-basic nagios-plugins-common
nagios-plugins-standard python-crypto python-ldb python-samba python-talloc
python-tdb rpcbind samba-common samba-common-bin samba-libs smbclient snmp
whois
0 upgraded, 34 newly installed, 0 to remove and 132 not upgraded.
Need to get 10.2 MB of archives.
After this operation, 47.3 MB of additional disk space will be used.
Do you want to continue? [Y/n] yroot@ubuntu:/etc# pico /etc/nagios/nrpe.cfg
root@ubuntu:/etc# fdisk -lDisk /dev/sda: 107.4 GB, 107374182400 bytes
255 heads, 63 sectors/track, 13054 cylinders, total 209715200 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x0006c35e
Device Boot Start End Blocks Id System
/dev/sda1 * 2048 23437311 11717632 82 Linux swap / Solaris
/dev/sda2 23439358 209713151 93136897 5 Extended
/dev/sda5 23439360 29296639 2928640 83 Linux
/dev/sda6 29298688 209713151 90207232 83 Linux
root@ubuntu:/etc# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/sda6 85G 77G 4,1G 95% /
none 4,0K 0 4,0K 0% /sys/fs/cgroup
udev 3,0G 4,0K 3,0G 1% /dev
tmpfs 597M 500K 597M 1% /run
none 5,0M 0 5,0M 0% /run/lock
none 3,0G 0 3,0G 0% /run/shm
none 100M 0 100M 0% /run/user
/dev/sda5 2,7G 754M 1,8G 30% /boot
root@ubuntu:/etc#
command[check_swap]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -p /dev/sda1root@ubuntu:/etc# service nagios-nrpe-server restart
* Stopping nagios-nrpe nagios-nrpe [ OK ]
* Starting nagios-nrpe nagios-nrpe [ OK ]
root@ubuntu:/etc#root@serveraldy:~# pico /usr/local/nagios/etc/objects/commands.cfg
kemudian tambahkan baris berikut
define command {
command_name check_nrpe
command_line $USER1$/check_nrpe -H $HOSTADDRESS$ -t 30 -c $ARG1$ $ARG2$
}
terakhir tambahkan service yang akan di monitor
# OPen Library #
###############################################################
define host{
use linux-server
host_name openlibrary.assyifa
alias openlibrary.assyifa
address 192.168.223.10
contacts nagiosadmin
contact_groups admins
max_check_attempts 5
check_period 24x7
notification_interval 15
first_notification_delay 0
notification_period 24x7
notification_options d,u,r,f,s
notifications_enabled 1
check_interval 5
icon_image
icon_image_alt
vrml_image
}
define service{
use local-service
host_name openlibrary.assyifa
service_description PING
contact_groups admins
check_command check_ping!100.0,20%!500.0,60%
notifications_enabled 1
}
define service{
use local-service
host_name openlibrary.assyifa
service_description SSH
#max_check_attempts 5
#check_interval 1
#retry_interval 1
#contacts nagiosadmin
#contact_groups admins
notifications_enabled 1
check_command check_ssh
}
define service{
use local-service
host_name openlibrary.assyifa
service_description HTTP
contact_groups admins
check_command check_http
notifications_enabled 1
}
define service{
use local-service
host_name openlibrary.assyifa
service_description Root Partition
contact_groups admins
check_command check_nrpe!check_hda1
}
define service{
use local-service
host_name openlibrary.assyifa
service_description Total Processes
contact_groups admins
check_command check_nrpe!check_total_procs
}
define service{
use generic-service
host_name openlibrary.assyifa
service_description Current Load
contact_groups admins
check_command check_nrpe!check_load
}
define service{
use local-service
host_name openlibrary.assyifa
service_description Swap Usage
contact_groups admins
check_command check_nrpe!check_swap
}
define service{
use generic-service
host_name openlibrary.assyifa
service_description Zombie
contact_groups admins
check_command check_nrpe!check_zombie_procs
}
root@serveraldy:~# service nagios restart
Running configuration check...
Stopping nagios:. done.
Starting nagios: done.
root@serveraldy:~#
root@serveraldy:/# cd /var/www/html/
root@serveraldy:/var/www/html# wget aldy.alshifacharity.com/wp-content/uploads/2016/08/nagmap-1.0.tar.gz
--2016-08-11 17:40:02-- http://aldy.alshifacharity.com/wp-content/uploads/2016/08/nagmap-1.0.tar.gz
Resolving aldy.alshifacharity.com (aldy.alshifacharity.com)... 192.168.222.227
Connecting to aldy.alshifacharity.com (aldy.alshifacharity.com)|192.168.222.227|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9584 (9,4K) [application/x-gzip]
Saving to: ‘nagmap-1.0.tar.gz’
100%[=====================================================================================================================>] 9.584 --.-K/s in 0s
2016-08-11 17:40:02 (37,1 MB/s) - ‘nagmap-1.0.tar.gz’ saved [9584/9584]
root@serveraldy:/var/www/html# tar -xvzf nagmap-0.11.tar.gz
root@serveraldy:/var/www/html# ls
nagmap nagmap-1.0.tar.gz
root@serveraldy:/var/www/html#
root@serveraldy:/var/www/html# pico nagmap/
call.php config.php favicon.ico index.php marker.php nagios_cfg.php status.php THANKS
CHANGELOG debug.php functions.php INSTALL moire.php README style.css
root@serveraldy:/var/www/html# pico nagmap/config.php
root@serveraldy:/var/www/html# pico /usr/local/nagios/etc/switch/switch.cfg
root@serveraldy:~# locate side.php
/root/nagios-4.0.8/html/side.php
/usr/local/nagios/share/side.php
/usr/share/nagios3/htdocs/side.php
root@serveraldy:~# pico /usr/local/nagios/share/side.php
