飘零的代码 piao2010 ’s blog

转载请保留版权：http://piao2010.com 谢谢！
最近在公司实习，第一个任务就是配置一个企业内部的邮件服务系统，要求同时支持WEB方式和smtp pop3 imap收发邮件。
经过一番Google对主流软件进行筛选之后我决定采用的软件如下：
POSTFIX Courier-imap,Courier-authlib,Cyrus SASL,Maildrop
webmail采用extmail 后台extman
垃圾邮件过滤和病毒防护采用Amavisd-new, ClamAV,spamassassin,slockd
因为之前没接触过邮件服务配置，而且对Linux也不算太熟悉，一直用的是FreeBSD,所以这个任务整整花了10天多的时间终于在三台虚拟机上安装测试成功并最终在服务器上实现，我测试的是CentOS和Fedora 系统，重要软件采用源码方式安装，基本上可以适用于其它平台。

测试地址：http://mail.piao2010.com 欢迎大家测试！

参考文章
http://waringid.blog.51cto.com/65148/58412
http://www.extmail.org/docs/extmail_solution_linux/
http://os.51cto.com/art/200710/57530_1.htm
http://www.postfix.org/SASL_README.html
《POSTFIX权威指南》等等
感谢以上作者的辛勤劳动

 
***************************************************

一切重新开始：(2009-7-18)

***************************************************

yum install ntp
ntpdate 210.72.145.44 && clock -w#无关操作，因为虚拟机的时间总是不准，所以同步一下时间。

vi /etc/sysconfig/selinux
禁用selinux
如果不想禁用也可以用下面的命令
setsebool httpd_disable_trans=1
setsebool mysqld_disable_trans=1
iptables相关设置
允许 25 110 80 端口

设置hostname
/etc/sysconfig/network
/etc/hosts read more »

此文是我的计算机网络课作业，拿出来凑凑数。

第一次接触“抓包”这个词应该是在高一的时候，当时刚刚迷上网络安全，经常从《黑客X档案》中看见一些利用抓包技术入侵的文章，最常用的工具就是WsockExpert， read more »

When Figure 6-1 summarizes the flags, their meanings, and their usual usage.[Hack #58] shows how to create your own file integrity checking program that will alert you if any of your binaries or other important files are changed. An additional layer of protection is to use chflags to read more »

ACLs

Edit the superblock with the

# shutdown now*** FINAL System shutdown message from root@mycompany.com ***System going down IMMEDIATELYDec 11 10:28:07 genisis shutdown: shutdown by root:System shutdown time has arrivedWriting entropy read more »

网上没下载到中文版的，所以只能拿英文版的做一下摘记吧。

Let’s start with the copyright information. That’s this part of the default login process:

Copyright (c) 1992-2003 The FreeBSD Project.

Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994

The Regents of the University of California. All rights reserved.

To prevent users from seeing this information, simply:

# touch /etc/COPYRIGHT

Technically, you could add your own information to /etc/COPYRIGHT instead of leaving it as an

empty file. However, it is common read more »

参考书籍:FreeBSD 使用手册，BSD HACKS

首先进入目录

# cd /usr/src/sys/i386/conf

复制一份配置文件命名为HACKER-PIAO
# cp GENERIC HACKER-PIAO

如果说不存在这个目录的话可以进行如下操作:

#sysinstall， 选择 Configure， 然后是 Distributions、 src，选中其中的 base 和 sys。 如果您不喜欢 sysinstall 并且有一张 “官方的” FreeBSD CDROM， 也可以使用下列命令， 从命令行来安装源代码：# mount /cdrom# mkdir -p /usr/src/sys# ln -s /usr/src/sys /sys# cat /cdrom/src/ssys.[a-d]* | tar -xzvf -# cat /cdrom/src/sbase.[a-d]* | tar -xzvf -       

接下来定制内核 HACKER-PIAO 主要是参考使用手册和BSD HACKS,这里我列出一小部分设置,其它设置可以参看当前目录下的NOTES文件

makeoptions COPTFLAGS=”-O2 -pipe -funroll-loops -ffast-math”
options  DEVICE_POLLING
options  HZ=1000options  IPFIREWALL
options  DUMMYNET###远程SSH配置时请用accept
options  IPFIREWALL_DEFAULT_TO_ACCEPT
options  IPDIVERToptions  IPFIREWALL_VERBOSE
options  IPFIREWALL_VERBOSE_LIMIT=100
options  IPSTEALTH
options  ACCEPT_FILTER_DATA
options  ACCEPT_FILTER_HTTP
#options ICMP_BANDLIM      #貌似7.0不支持这个参数#防火墙和流量控制结束其它设置我不列举出来了.

其它设置我就不列举了

进入 /usr/src 目录：

# cd /usr/src
编译内核：

# make buildkernel KERNCONF=HACKER-PIAO

等待N久….如果出错可以根据提示信息修改相应配置

安装新内核：（这步还是挺快的）

# make installkernel KERNCONF=HACKER-PIAO

重启系统

#shutdown -r now

如果不出现错误的话就成功了。o(∩_∩)o…

半天时间就这样过去了，不过还是比较值得的，学到很多东东。

  之前接触的是FreeBSD，最近想学习一下Linux，朋友推荐centOS，于是就打算在服务器上装一个跑跑。

下载安装就不说了，都挺简单的。设置好网络，配置好SSH，基本上和BSD下一致。然后准备安装软件，yum命令听说特别好用，哈哈！首先设置一下，这里采用的是科大的 http://centos.ustc.edu.cn/

步骤一：

 cd /etc/yum.repos.d

mv CentOS-Base.repo  CentOS-Base.repo.save

wget http://centos.ustc.edu.cn/CentOS-Base.repo.5

mv CentOS-Base.repo.5 CentOS-Base.repo

步骤二：

rpm –import http://centos.ustc.edu.cn/centos/RPM-GPG-KEY-CentOS-5

然后yum update一下。

接下来安装软件就爽了。yum install XXX

配置软件的过程和BSD下基本一致，但是yum命令比BSD的ports更快更简单。

官方的文件通俗易懂，相信有需要的朋友们一看就能明白。

#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#
*                         Sniffit V.0.3.7 Beta                                *
#                          By Brecht Claerhout                                #
*                                                                             *
#  This program is intended to demonstrate the unsafeness of TCP (currently)  #
*                 No illegal activities are encouraged!                       *
#                     Please read the LICENSE file                            #
*                                                                             *
#  Sniffit grew a little upon its original intentions and is now              #
*  extended for network debugging (UDP, ICMP, netload, etc.)                  *
#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#
*                          Libpcap library                                    *
#      This product includes software developed by the Computer Systems       #
*           Engineering Group at Lawrence Berkeley Laboratory.                *
#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#

0. Introduction, and some stuff you should know.
        0.1 Credits and contact
        0.2 Compiling
        0.3 License 
1. Programmers notes
 excuses for my incompetence
2. Use of the program
 flags and examples
3. Extra info on use
        3.1 Running interactive mode
 3.2 Forcing network devices   (*READ*)
 3.3 Format of the config file
 3.4 Loglevels
4. The output
 4.1 Normal
 4.2 Logfile
5. IMPORTANT NOTES, READ!
 this also!

——————————————————————————

0. Introduction, and some stuff you should know.
————————————————

0.3.7 (Beta). It has been a while I know. But this year has been a hell, last
year of uni, projects, thesis, …. it didn’t stop. Well that is behind us
now, the most important thing, is that I’m back working on the program again,
and intend to keep on doing it.

I hope you enjoy this beta version. Like always, I removed some bugs. There
is a new ‘logging’ feature. It is now possible to record traffic with
Sniffit and process it later! (it is completely different from the logging
done in the 0.3.6 version, that is known to some hardcore Sniffit users)
Please take a minute to skim through the text and read the passages marked
with a ‘*’, these are the new features.
(Please read BETA-TESTING)

I use the libpcap library developed at Berkeley Laboratory, for easy
porting (Read the licence).

0.1 Credits and contact
———————–

Credits go to (in order of appearance on the Sniffit scene):
    Wim Vandeputte <wvdputte@reptile.rug.ac.be>,
     best friend and UNIX guru, for support, testing and
                   providing me with a WWW site.
    Godmar Back, for fixing that kernel 1.2.X bug (Sniffit 0.1.X).
    Peter Kooiman, of Paradigm Systems Technology for providing read more »