Main Page: Difference between revisions
No edit summary |
No edit summary |
||
Line 3: | Line 3: | ||
tells the system bit | tells the system bit | ||
<pre>uname -a</pre> | <pre>uname -a</pre> | ||
What linux version and release | What linux version and release | ||
<pre>cat /etc/redhat-release</pre> | <pre>cat /etc/redhat-release</pre> | ||
<h1>VPS parent sudo rights</h1> | <h1>VPS parent sudo rights</h1> | ||
Get root fight when logged in using LDAP | |||
<pre>sudo su</pre> | <pre>sudo su</pre> | ||
Line 15: | Line 14: | ||
<h1>Group</h1> | <h1>Group</h1> | ||
Add user to group | |||
<pre>useradd -G {group-name} username</pre> | <pre>useradd -G {group-name} username</pre> | ||
<h1>Permissions</h1> | <h1>Permissions</h1> | ||
Find 777 folders | |||
<pre>find /home -perm 0777 -type d -print</pre> | <pre>find /home -perm 0777 -type d -print</pre> | ||
<h1>Disable root login</h1> | <h1>Disable root login</h1> | ||
<pre> | |||
useradd lwstaff | useradd lwstaff | ||
passwd (assign a password) | passwd (assign a password) | ||
useradd -G wheel lwstaff | useradd -G wheel lwstaff | ||
vim /etc/ssh/sshd_config | vim /etc/ssh/sshd_config | ||
</pre> | |||
change PermitRootLogin to no and uncomment it. | change PermitRootLogin to no and uncomment it. | ||
restart sshd and test your work. | restart sshd and test your work. | ||
Line 33: | Line 33: | ||
<h1> LIST</h1> | <h1> LIST</h1> | ||
list by last modified | |||
ls -lt | <pre>ls -lt</pre> | ||
list by Proc id | |||
lsof -p PID | <pre>lsof -p PID</pre> | ||
<h1>VI commands</h1> | <h1>VI commands</h1> | ||
Add line numbers | |||
:set number | <pre>:set number</pre> | ||
remove line numbers | |||
:set nonumber | <pre>:set nonumber</pre> | ||
<h1>ModRewrite</h1> | <h1>ModRewrite</h1> | ||
redirect | |||
Make sure mod_rewrite is on in the httpd.conf | Make sure mod_rewrite is on in the httpd.conf | ||
Options +FollowSymlinks | <pre>Options +FollowSymlinks | ||
RewriteEngine on | RewriteEngine on | ||
rewritecond %{http_host} ^domain.com [nc] | rewritecond %{http_host} ^domain.com [nc] | ||
rewriterule ^(.*)$ http://www.domain.com/$1 [r=301,nc] | rewriterule ^(.*)$ http://www.domain.com/$1 [r=301,nc]</pre> | ||
<h1>MODSEC</h1> | <h1>MODSEC</h1> | ||
Remove specified directory from modsec | |||
SecRule REQUEST_URI "URI goes here" phase:1,nolog,allow,ctl:ruleEngine=Off | <pre>SecRule REQUEST_URI "URI goes here" phase:1,nolog,allow,ctl:ruleEngine=Off</pre> | ||
[[User:Admin|Admin]]add to this file and restart | [[User:Admin|Admin]]add to this file and restart | ||
vi /usr/local/apache/conf/modsec2/whitelist.conf | <pre>vi /usr/local/apache/conf/modsec2/whitelist.conf | ||
/etc/init.d/httpd restart | /etc/init.d/httpd restart | ||
/etc/init.d/apf restart | /etc/init.d/apf restart</pre> | ||
Remove a whole domain | |||
SecRule SERVER_NAME "handymanreality.com" phase:1,nolog,allow,ctl:ruleEngine=Off | <pre>SecRule SERVER_NAME "handymanreality.com" phase:1,nolog,allow,ctl:ruleEngine=Off</pre> | ||
Common modsec uri's | |||
<pre>/wp-admin/post.php | |||
</pre> | |||
<h1> RPM</h1> | <h1> RPM</h1> | ||
Rpm src packages go here | |||
/usr/local/src/ | <pre>/usr/local/src/</pre> | ||
remove old kernal srcs | |||
rpm -qa | grep kernel-source | xargs rpm -e | <pre>rpm -qa | grep kernel-source | xargs rpm -e</pre> | ||
Rpm remove installed packages | |||
rpm -e --nodeps {package name here} | <pre>rpm -e --nodeps {package name here}</pre> | ||
<h1>Email</h1> | <h1>Email</h1> | ||
horde mail update (nothing can be in account of will all get erased) | |||
/usr/local/cpanel/bin/update-horde --force | <pre>/usr/local/cpanel/bin/update-horde --force</pre> | ||
To determine mailserver type | |||
<pre>/scripts/setupmailserver --current</pre> | |||
Count mail in folder | |||
<pre>ls | wc -l</pre> | |||
removing mass spam | |||
<pre>rm -Rf /home/(user here}/mail/cur*</pre> | |||
spam removel script | |||
<pre>for i in $(find . | xargs grep -m 1 -s -i "Mailer-Daemon" | sed -e 's/\.\/[A-Z0-9a-z]\/\([A-Z0-9a-z\-]\{16\}\)\-[HDJ].*/\1/'); do exim -Mrm $i;done | |||
</pre> | |||
<h1>SPAMD</h1> | <h1>SPAMD</h1> | ||
SPAMD failing | |||
/scripts/perlinstaller Digest::SHA1 | <pre>/scripts/perlinstaller Digest::SHA1 | ||
/scripts/perlinstaller --force Mail::SpamAssassin | /scripts/perlinstaller --force Mail::SpamAssassin | ||
/etc/rc.d/init.d/exim restart | /etc/rc.d/init.d/exim restart | ||
/scripts/restartsrv spamd | /scripts/restartsrv spamd</pre> | ||
<h1>EXIM</h1> | <h1>EXIM</h1> | ||
number of msg in q | |||
exim -bpc | <pre>exim -bpc </pre> | ||
print msg q summary | |||
exim -bp | exiqsumm | <pre>exim -bp | exiqsumm </pre> | ||
Start a full q run | |||
exim -q -v | <pre>exim -q -v</pre> | ||
Start a local delivery q run | |||
exim -ql -v | <pre>exim -ql -v </pre> | ||
Flush exim queue | |||
exim -bpr | awk {'print $3'} | xargs exim -Mrm | <pre>exim -bpr | awk {'print $3'} | xargs exim -Mrm</pre> | ||
<h1> APF</h1> | <h1> APF</h1> | ||
Apf un block | |||
vi /etc/apf/deny_hosts.rules | <pre>vi /etc/apf/deny_hosts.rules | ||
/etc/init.d/apf restart | /etc/init.d/apf restart</pre> | ||
# of attemps | |||
vi /usr/local/bfd/conf.bfd | <pre>vi /usr/local/bfd/conf.bfd</pre> | ||
Starting APF:Unable to load iptables module (ipt_state), aborting. | |||
vi /etc/apf/conf.apf | <pre>vi /etc/apf/conf.apf | ||
SET_MONOKERN change to 1 | SET_MONOKERN change to 1 | ||
/etc/init.d/apf restart | /etc/init.d/apf restart</pre> | ||
<h1>IPTABLES</h1> | <h1>IPTABLES</h1> | ||
Block temp with IPtables | |||
iptables -I INPUT 1 -s ipaddress -j DROP | <pre>iptables -I INPUT 1 -s ipaddress -j DROP</pre> | ||
Block permanently with APF | |||
/etc/apf/deny_hosts.rules | <pre>/etc/apf/deny_hosts.rules</pre> | ||
<h1>Load checking</h1> | <h1>Load checking</h1> | ||
Listening on port | |||
lsof -i :25 | lsof -i :25 | ||
Revision as of 19:18, 29 March 2010
This is my wiki, containing all of my shortcuts.
System specs
tells the system bit
uname -a
What linux version and release
cat /etc/redhat-release
VPS parent sudo rights
Get root fight when logged in using LDAP
sudo su
OwnerShip
Tell what group number owner is
cat /etc/passwd | grep nobody
Group
Add user to group
useradd -G {group-name} username
Permissions
Find 777 folders
find /home -perm 0777 -type d -print
Disable root login
useradd lwstaff passwd (assign a password) useradd -G wheel lwstaff vim /etc/ssh/sshd_config
change PermitRootLogin to no and uncomment it. restart sshd and test your work.
LIST
list by last modified
ls -lt
list by Proc id
lsof -p PID
VI commands
Add line numbers
:set number
remove line numbers
:set nonumber
ModRewrite
redirect Make sure mod_rewrite is on in the httpd.conf
Options +FollowSymlinks RewriteEngine on rewritecond %{http_host} ^domain.com [nc] rewriterule ^(.*)$ http://www.domain.com/$1 [r=301,nc]
MODSEC
Remove specified directory from modsec
SecRule REQUEST_URI "URI goes here" phase:1,nolog,allow,ctl:ruleEngine=Off
Adminadd to this file and restart
vi /usr/local/apache/conf/modsec2/whitelist.conf /etc/init.d/httpd restart /etc/init.d/apf restart
Remove a whole domain
SecRule SERVER_NAME "handymanreality.com" phase:1,nolog,allow,ctl:ruleEngine=Off
Common modsec uri's
/wp-admin/post.php
RPM
Rpm src packages go here
/usr/local/src/
remove old kernal srcs
rpm -qa | grep kernel-source | xargs rpm -e
Rpm remove installed packages
rpm -e --nodeps {package name here}
horde mail update (nothing can be in account of will all get erased)
/usr/local/cpanel/bin/update-horde --force
To determine mailserver type
/scripts/setupmailserver --current
Count mail in folder
ls | wc -l
removing mass spam
rm -Rf /home/(user here}/mail/cur*
spam removel script
for i in $(find . | xargs grep -m 1 -s -i "Mailer-Daemon" | sed -e 's/\.\/[A-Z0-9a-z]\/\([A-Z0-9a-z\-]\{16\}\)\-[HDJ].*/\1/'); do exim -Mrm $i;done
SPAMD
SPAMD failing
/scripts/perlinstaller Digest::SHA1 /scripts/perlinstaller --force Mail::SpamAssassin /etc/rc.d/init.d/exim restart /scripts/restartsrv spamd
EXIM
number of msg in q
exim -bpc
print msg q summary
exim -bp | exiqsumm
Start a full q run
exim -q -v
Start a local delivery q run
exim -ql -v
Flush exim queue
exim -bpr | awk {'print $3'} | xargs exim -Mrm
APF
Apf un block
vi /etc/apf/deny_hosts.rules /etc/init.d/apf restart
- of attemps
vi /usr/local/bfd/conf.bfd
Starting APF:Unable to load iptables module (ipt_state), aborting.
vi /etc/apf/conf.apf SET_MONOKERN change to 1 /etc/init.d/apf restart
IPTABLES
Block temp with IPtables
iptables -I INPUT 1 -s ipaddress -j DROP
Block permanently with APF
/etc/apf/deny_hosts.rules
Load checking
Listening on port lsof -i :25
AdminTotal connections on port 80 netstat -nap |grep -c :80
Adminrough per sec hits /usr/bin/lynx -dump -width 500 http://127.0.0.1/whm-server-status | grep GET | awk '{print $12}' | sort | uniq -c | sort -rn | head
AdminTells how many are using port 80 netstat -tn 2>/dev/null | grep :80 | awk '{print $5}' | cut -f1 -d: | sort | uniq -c | sort -rn | head
HTTPD and APACHE
to distill changes to the httpd.conf /usr/local/cpanel/bin/apache_conf_distiller --update
apache uptime /usr/bin/lynx -dump -width 500 http://127.0.0.1/whm-server-status
PHP
PHP info <?php phpinfo(); ?>
PHP version /usr/local/cpanel/bin/rebuild_phpconf --current
PHP 4 module check /usr/local/php4/bin/php
Suphp permission fix wget -O /scripts/suphpfix.pl http://layer3.liquidweb.com/scripts/suphpfix.pl chmod +x /scripts/suphpfix.pl /scripts/suphpfix.pl
enable/disable monitoring script ---
wget http://scripts.ssullivan.org/apiCalls/confMonitoring
perl confMonitoring
PhP mem limit on a shared with dso goes into the public_html in the .htaccess php_value memory_limit 64M
veiw availiable php upgrades /scripts/phpextensionmgr list
install php upgrade /scripts/phpextensionmgr install (name here)
MYSQL
to backup all databases to remote location mkdir /home/sqlbackup for db in `mysql -s -B -e "show databases"`;do mysqldump $db > /home/sqlbackup/$db.sql.(version number here);done
repair a crashed MYISAM table stop chkservd and mysql /usr/local/cpanel/bin/tailwatchd --disable=Cpanel::TailWatch::ChkServd /etc/init.d/mysql stop then do myisamchk -r /var/lib/mysql/(databasename)/(tablename) /etc/init.d/mysql start /usr/local/cpanel/bin/tailwatchd --enable=Cpanel::TailWatch::ChkServd
"MySQL server has gone away" fix
increase wait_timeout and max_allowed_packet in vim /etc/my.cnf /etc/init.d/mysql stop /etc/init.d/mysql start
Correct way to upgrade mysql in cpanel box vim /var/cpanel/cpanel.config mysql=version you want /usr/local/cpanel/whostmgr/bin/whostmgr2 --updatetweaksettings mkdir /home/sqlbackup for db in `mysql -s -B -e "show databases"`;do mysqldump $db > /home/sqlbackup/$db.sql.(old mysql version number here);done /scripts/mysqlup mysqladmin version /scripts/easyapache
Myqsl packages are installed rpm -qa | grep SQL | grep -vi perl Force perl update /scripts/perlinstaller --force Bundle::DBD::mysql
what mysql version mysqladmin version
Mysql database location cd /var/lib/mysql
imports a dumped file mysql database < db-dump-file.sql
Mysqldump mysqldump dbname > dbname.sql
Stats
update all stats for user in `ls -A /var/cpanel/users`; do /scripts/runweblogs $user ;done
Ports
AdminBindings netstat -lnc
VPS
VPS is locked when some operation (backup, migration, start / stop, etc.) with this VPS is in progress. You can determine which process is holding VPS #101 using the following command on the hardware node:
- cat /vz/lock/101.lck
You can kill that process if needed. Make sure that the process is really killed. If there is no process with that PID on the node, just remove the lockfile.
Top
Adminsort by memory shift - m
Adminsort by processor usage shift - p
MR Radar
AdminInstall mr radar lpyum install mm3k-client-pull
Rdesktop
rdesktop (servername here) -u mshooltz -p vovrogue1 &
SSl locations
/usr/share/ssl /etc/ssl/certs
Empty files
dd if=/dev/zero of=file1G.tmp bs=1G count=1
Index blocking Admin Blocks the index of / from being seen. Remove the +a- to make visable again. Options +Indexes +a-
CPANEL
AdminCpanel gives this error [a fatal error or timeout occurred while processing this directive] mv /home/(username)/.cpanel/*cache different location and or check permissions on the /home/(username)/.cpanel folder should be user:user
Adminerror when accessing http://ipaddress/~username/
Warning: Unknown: open_basedir restriction in effect. File(/home/hilariou/public_html/index.php) is not within the allowed path(s): (/usr/local/lp:/proc:/usr/lib/php:/usr/local/lib/php:/tmp) in Unknown on line 0
Move this line to the post section of the httpd.conf Include "/usr/local/lp/configs/httpd/vhost.conf"
ChkServd
~~enable and disable chkservd /usr/local/cpanel/bin/tailwatchd --disable=Cpanel::TailWatch::ChkServd /usr/local/cpanel/bin/tailwatchd --enable=Cpanel::TailWatch::ChkServd
Fantastico
Adminadd the Fantastico installer plugin cd /usr/local/cpanel/whostmgr/docroot/cgi wget -N http://files.betaservant.com/files/free/fantastico_whm_admin.tgz tar -xzpf fantastico_whm_admin.tgz rm -rf fantastico_whm_admin.tgz
Python
Adminfind python version python -V
SED
Admin replace this with THIS sed -i 's/(this)/(THIS)/g' path/filename
Premigrations
AdminLower ttls and serial changes wget http://layer3.liquidweb.com/migrations/premigrate.sh bash premigrate.sh
SCP
scp {file} root@67.225.131.43:/home/
For loops and other loops
AdminALWAYS RUN THIS FIRST!!!!! unalias ls
Adminpackage all cpanel acountsAdmin for user in `ls -A /var/cpanel/users`; do /scripts/pkgacct $user;done
Adminlooping a comand while x=0; do killall -9 php5; sleep .1; done
History Removal commands
Admin run this for a I was never in the box situation. echo "" > /var/log/messages && echo "" /var/log/secure history -c && echo "" > /var/log/wtmp && echo "" > /var/log/lastlog