Main Page: Difference between revisions

From Cheatsheet
Jump to navigation Jump to search
No edit summary
No edit summary
Line 3: Line 3:
tells the system bit
tells the system bit
<pre>uname -a</pre>
<pre>uname -a</pre>
What linux version and release
What linux version and release
<pre>cat /etc/redhat-release</pre>
<pre>cat /etc/redhat-release</pre>
<h1>VPS parent sudo rights</h1>
<h1>VPS parent sudo rights</h1>
Get root fight when logged in using LDAP
<pre>sudo su</pre>
<pre>sudo su</pre>


Line 15: Line 14:


                                                       <h1>Group</h1>
                                                       <h1>Group</h1>
add user to group
Add user to group
<pre>useradd -G {group-name} username</pre>
<pre>useradd -G {group-name} username</pre>


<h1>Permissions</h1>
<h1>Permissions</h1>
find 777 folders
Find 777 folders
<pre>find /home -perm 0777 -type d -print</pre>
<pre>find /home -perm 0777 -type d -print</pre>


<h1>Disable root login</h1>
<h1>Disable root login</h1>
 
<pre>
useradd lwstaff
useradd lwstaff
passwd (assign a password)
passwd (assign a password)
useradd -G wheel lwstaff
useradd -G wheel lwstaff
vim /etc/ssh/sshd_config
vim /etc/ssh/sshd_config
</pre>
change PermitRootLogin to no and uncomment it.
change PermitRootLogin to no and uncomment it.
restart sshd and test your work.
restart sshd and test your work.
Line 33: Line 33:


                                                       <h1> LIST</h1>
                                                       <h1> LIST</h1>
[[User:Admin|Admin]]list by last mmodified
list by last modified
ls -lt
<pre>ls -lt</pre>


[[User:Admin|Admin]]list by Proc id
list by Proc id
lsof -p PID
<pre>lsof -p PID</pre>


<h1>VI commands</h1>
<h1>VI commands</h1>
[[User:Admin|Admin]]add line numbers
Add line numbers
:set number
<pre>:set number</pre>


[[User:Admin|Admin]]remove line numbers
remove line numbers
:set nonumber
<pre>:set nonumber</pre>


<h1>ModRewrite</h1>
<h1>ModRewrite</h1>
[[User:Admin|Admin]]redirect
redirect
Make sure mod_rewrite is on in the httpd.conf
Make sure mod_rewrite is on in the httpd.conf
Options +FollowSymlinks
<pre>Options +FollowSymlinks
RewriteEngine on
RewriteEngine on
rewritecond %{http_host} ^domain.com [nc]
rewritecond %{http_host} ^domain.com [nc]
rewriterule ^(.*)$ http://www.domain.com/$1 [r=301,nc]
rewriterule ^(.*)$ http://www.domain.com/$1 [r=301,nc]</pre>


                                                       <h1>MODSEC</h1>
                                                       <h1>MODSEC</h1>
[[User:Admin|Admin]]Remove specified directory from modsec
Remove specified directory from modsec
SecRule REQUEST_URI  "URI goes here" phase:1,nolog,allow,ctl:ruleEngine=Off
<pre>SecRule REQUEST_URI  "URI goes here" phase:1,nolog,allow,ctl:ruleEngine=Off</pre>
[[User:Admin|Admin]]add to this file and restart
[[User:Admin|Admin]]add to this file and restart
vi /usr/local/apache/conf/modsec2/whitelist.conf
<pre>vi /usr/local/apache/conf/modsec2/whitelist.conf
/etc/init.d/httpd restart
/etc/init.d/httpd restart
/etc/init.d/apf restart
/etc/init.d/apf restart</pre>


[[User:Admin|Admin]]Remove a whole domain
Remove a whole domain
SecRule SERVER_NAME "handymanreality.com" phase:1,nolog,allow,ctl:ruleEngine=Off
<pre>SecRule SERVER_NAME "handymanreality.com" phase:1,nolog,allow,ctl:ruleEngine=Off</pre>


Common modsec uri's
<pre>/wp-admin/post.php


/wp-admin/post.php


 
</pre>
inventorymanagement.com
                                                       <h1> RPM</h1>
                                                       <h1> RPM</h1>
[[User:Admin|Admin]]Rpm src packages go here
Rpm src packages go here
/usr/local/src/
<pre>/usr/local/src/</pre>


[[User:Admin|Admin]]remove old kernal srcs
remove old kernal srcs
rpm -qa | grep kernel-source | xargs rpm -e
<pre>rpm -qa | grep kernel-source | xargs rpm -e</pre>


[[User:Admin|Admin]]Rpm remove installed packages
Rpm remove installed packages
rpm -e --nodeps {package name here}
<pre>rpm -e --nodeps {package name here}</pre>
                                                       <h1>Email</h1>
                                                       <h1>Email</h1>


[[User:Admin|Admin]]horde mail update (nothing can be in account of will all get erased)
horde mail update (nothing can be in account of will all get erased)
/usr/local/cpanel/bin/update-horde --force
<pre>/usr/local/cpanel/bin/update-horde --force</pre>
 
[[User:Admin|Admin]]To determine mailserver type
/scripts/setupmailserver --current


[[User:Admin|Admin]]count mail in folder
To determine mailserver type
ls | wc -l
<pre>/scripts/setupmailserver --current</pre>


[[User:Admin|Admin]]removing mass spam
Count mail in folder
rm -Rf /home/(user here}/mail/cur*
<pre>ls | wc -l</pre>


[[User:Admin|Admin]]spam removel script
removing mass spam
for i in $(find . | xargs grep -m 1 -s -i "Mailer-Daemon" | sed -e 's/\.\/[A-Z0-9a-z]\/\([A-Z0-9a-z\-]\{16\}\)\-[HDJ].*/\1/'); do exim -Mrm $i;done
<pre>rm -Rf /home/(user here}/mail/cur*</pre>


spam removel script
<pre>for i in $(find . | xargs grep -m 1 -s -i "Mailer-Daemon" | sed -e 's/\.\/[A-Z0-9a-z]\/\([A-Z0-9a-z\-]\{16\}\)\-[HDJ].*/\1/'); do exim -Mrm $i;done
</pre>


<h1>SPAMD</h1>
<h1>SPAMD</h1>


[[User:Admin|Admin]]SPAMD failing
SPAMD failing
/scripts/perlinstaller Digest::SHA1
<pre>/scripts/perlinstaller Digest::SHA1
/scripts/perlinstaller --force Mail::SpamAssassin
/scripts/perlinstaller --force Mail::SpamAssassin
/etc/rc.d/init.d/exim restart
/etc/rc.d/init.d/exim restart
/scripts/restartsrv spamd
/scripts/restartsrv spamd</pre>


<h1>EXIM</h1>
<h1>EXIM</h1>


[[User:Admin|Admin]]number of msg in q
number of msg in q
exim -bpc   
<pre>exim -bpc  </pre>


[[User:Admin|Admin]]print msg q summary
print msg q summary
exim -bp | exiqsumm  
<pre>exim -bp | exiqsumm </pre>


[[User:Admin|Admin]]start a full q run
Start a full q run
exim -q -v
<pre>exim -q -v</pre>


[[User:Admin|Admin]]start a local delivery q run
Start a local delivery q run
exim -ql -v  
<pre>exim -ql -v </pre>


[[User:Admin|Admin]]flush exim queue
Flush exim queue
exim -bpr | awk {'print $3'} | xargs exim -Mrm
<pre>exim -bpr | awk {'print $3'} | xargs exim -Mrm</pre>
                                                       <h1> APF</h1>
                                                       <h1> APF</h1>
[[User:Admin|Admin]]Apf un block
Apf un block
vi /etc/apf/deny_hosts.rules
<pre>vi /etc/apf/deny_hosts.rules
/etc/init.d/apf restart
/etc/init.d/apf restart</pre>


[[User:Admin|Admin]]# of attemps
# of attemps
vi /usr/local/bfd/conf.bfd
<pre>vi /usr/local/bfd/conf.bfd</pre>


[[User:Admin|Admin]]Starting APF:Unable to load iptables module (ipt_state), aborting.
Starting APF:Unable to load iptables module (ipt_state), aborting.
vi /etc/apf/conf.apf
<pre>vi /etc/apf/conf.apf
SET_MONOKERN change to 1
SET_MONOKERN change to 1
/etc/init.d/apf restart
/etc/init.d/apf restart</pre>


<h1>IPTABLES</h1>
<h1>IPTABLES</h1>
[[User:Admin|Admin]]block temp with IPtables
Block temp with IPtables
iptables -I INPUT 1 -s ipaddress -j DROP
<pre>iptables -I INPUT 1 -s ipaddress -j DROP</pre>


[[User:Admin|Admin]]block permanently with APF
Block permanently with APF
/etc/apf/deny_hosts.rules
<pre>/etc/apf/deny_hosts.rules</pre>


                                                       <h1>Load checking</h1>
                                                       <h1>Load checking</h1>
[[User:Admin|Admin]]listening on port
Listening on port
lsof -i :25
lsof -i :25



Revision as of 19:18, 29 March 2010

This is my wiki, containing all of my shortcuts.

System specs

tells the system bit

uname -a

What linux version and release

cat /etc/redhat-release

VPS parent sudo rights

Get root fight when logged in using LDAP

sudo su

OwnerShip

Tell what group number owner is

cat /etc/passwd | grep nobody

Group

Add user to group

useradd -G {group-name} username

Permissions

Find 777 folders

find /home -perm 0777 -type d -print

Disable root login

useradd lwstaff
passwd (assign a password)
useradd -G wheel lwstaff
vim /etc/ssh/sshd_config

change PermitRootLogin to no and uncomment it. restart sshd and test your work.


LIST

list by last modified

ls -lt

list by Proc id

lsof -p PID

VI commands

Add line numbers

:set number

remove line numbers

:set nonumber

ModRewrite

redirect Make sure mod_rewrite is on in the httpd.conf

Options +FollowSymlinks
RewriteEngine on
rewritecond %{http_host} ^domain.com [nc]
rewriterule ^(.*)$ http://www.domain.com/$1 [r=301,nc]

MODSEC

Remove specified directory from modsec

SecRule REQUEST_URI  "URI goes here" phase:1,nolog,allow,ctl:ruleEngine=Off

Adminadd to this file and restart

vi /usr/local/apache/conf/modsec2/whitelist.conf
/etc/init.d/httpd restart
/etc/init.d/apf restart

Remove a whole domain

SecRule SERVER_NAME "handymanreality.com" phase:1,nolog,allow,ctl:ruleEngine=Off

Common modsec uri's

/wp-admin/post.php


RPM

Rpm src packages go here

/usr/local/src/

remove old kernal srcs

rpm -qa | grep kernel-source | xargs rpm -e

Rpm remove installed packages

rpm -e --nodeps {package name here}

Email

horde mail update (nothing can be in account of will all get erased)

/usr/local/cpanel/bin/update-horde --force

To determine mailserver type

/scripts/setupmailserver --current

Count mail in folder

ls | wc -l

removing mass spam

rm -Rf /home/(user here}/mail/cur*

spam removel script

for i in $(find . | xargs grep -m 1 -s -i "Mailer-Daemon" | sed -e 's/\.\/[A-Z0-9a-z]\/\([A-Z0-9a-z\-]\{16\}\)\-[HDJ].*/\1/'); do exim -Mrm $i;done

SPAMD

SPAMD failing

/scripts/perlinstaller Digest::SHA1
/scripts/perlinstaller --force Mail::SpamAssassin
/etc/rc.d/init.d/exim restart
/scripts/restartsrv spamd

EXIM

number of msg in q

exim -bpc  

print msg q summary

exim -bp | exiqsumm 

Start a full q run

exim -q -v

Start a local delivery q run

exim -ql -v 

Flush exim queue

exim -bpr | awk {'print $3'} | xargs exim -Mrm

APF

Apf un block

vi /etc/apf/deny_hosts.rules
/etc/init.d/apf restart
  1. of attemps
vi /usr/local/bfd/conf.bfd

Starting APF:Unable to load iptables module (ipt_state), aborting.

vi /etc/apf/conf.apf
SET_MONOKERN change to 1
/etc/init.d/apf restart

IPTABLES

Block temp with IPtables

iptables -I INPUT 1 -s ipaddress -j DROP

Block permanently with APF

/etc/apf/deny_hosts.rules

Load checking

Listening on port lsof -i :25

AdminTotal connections on port 80 netstat -nap |grep -c :80

Adminrough per sec hits /usr/bin/lynx -dump -width 500 http://127.0.0.1/whm-server-status | grep GET | awk '{print $12}' | sort | uniq -c | sort -rn | head

AdminTells how many are using port 80 netstat -tn 2>/dev/null | grep :80 | awk '{print $5}' | cut -f1 -d: | sort | uniq -c | sort -rn | head

HTTPD and APACHE

to distill changes to the httpd.conf /usr/local/cpanel/bin/apache_conf_distiller --update

apache uptime /usr/bin/lynx -dump -width 500 http://127.0.0.1/whm-server-status

PHP

PHP info <?php phpinfo(); ?>

PHP version /usr/local/cpanel/bin/rebuild_phpconf --current

PHP 4 module check /usr/local/php4/bin/php

Suphp permission fix wget -O /scripts/suphpfix.pl http://layer3.liquidweb.com/scripts/suphpfix.pl chmod +x /scripts/suphpfix.pl /scripts/suphpfix.pl


enable/disable monitoring script --- wget http://scripts.ssullivan.org/apiCalls/confMonitoring perl confMonitoring

PhP mem limit on a shared with dso goes into the public_html in the .htaccess php_value memory_limit 64M

veiw availiable php upgrades /scripts/phpextensionmgr list

install php upgrade /scripts/phpextensionmgr install (name here)

MYSQL

to backup all databases to remote location mkdir /home/sqlbackup for db in `mysql -s -B -e "show databases"`;do mysqldump $db > /home/sqlbackup/$db.sql.(version number here);done

repair a crashed MYISAM table stop chkservd and mysql /usr/local/cpanel/bin/tailwatchd --disable=Cpanel::TailWatch::ChkServd /etc/init.d/mysql stop then do myisamchk -r /var/lib/mysql/(databasename)/(tablename) /etc/init.d/mysql start /usr/local/cpanel/bin/tailwatchd --enable=Cpanel::TailWatch::ChkServd

"MySQL server has gone away" fix

increase wait_timeout and max_allowed_packet in vim /etc/my.cnf /etc/init.d/mysql stop /etc/init.d/mysql start

Correct way to upgrade mysql in cpanel box vim /var/cpanel/cpanel.config mysql=version you want /usr/local/cpanel/whostmgr/bin/whostmgr2 --updatetweaksettings mkdir /home/sqlbackup for db in `mysql -s -B -e "show databases"`;do mysqldump $db > /home/sqlbackup/$db.sql.(old mysql version number here);done /scripts/mysqlup mysqladmin version /scripts/easyapache

Myqsl packages are installed rpm -qa | grep SQL | grep -vi perl Force perl update /scripts/perlinstaller --force Bundle::DBD::mysql

what mysql version mysqladmin version

Mysql database location cd /var/lib/mysql

imports a dumped file mysql database < db-dump-file.sql

Mysqldump mysqldump dbname > dbname.sql

Stats

update all stats for user in `ls -A /var/cpanel/users`; do /scripts/runweblogs $user ;done

Ports

AdminBindings netstat -lnc

VPS

VPS is locked when some operation (backup, migration, start / stop, etc.) with this VPS is in progress. You can determine which process is holding VPS #101 using the following command on the hardware node:

  1. cat /vz/lock/101.lck

You can kill that process if needed. Make sure that the process is really killed. If there is no process with that PID on the node, just remove the lockfile.

Top

Adminsort by memory shift - m

Adminsort by processor usage shift - p

MR Radar

AdminInstall mr radar lpyum install mm3k-client-pull

Rdesktop

rdesktop (servername here) -u mshooltz -p vovrogue1 &

SSl locations

/usr/share/ssl /etc/ssl/certs

Empty files

dd if=/dev/zero of=file1G.tmp bs=1G count=1

Index blocking Admin Blocks the index of / from being seen. Remove the +a- to make visable again. Options +Indexes +a-

CPANEL

AdminCpanel gives this error [a fatal error or timeout occurred while processing this directive] mv /home/(username)/.cpanel/*cache different location and or check permissions on the /home/(username)/.cpanel folder should be user:user


Adminerror when accessing http://ipaddress/~username/ Warning: Unknown: open_basedir restriction in effect. File(/home/hilariou/public_html/index.php) is not within the allowed path(s): (/usr/local/lp:/proc:/usr/lib/php:/usr/local/lib/php:/tmp) in Unknown on line 0

Move this line to the post section of the httpd.conf Include "/usr/local/lp/configs/httpd/vhost.conf"


ChkServd

~~enable and disable chkservd /usr/local/cpanel/bin/tailwatchd --disable=Cpanel::TailWatch::ChkServd /usr/local/cpanel/bin/tailwatchd --enable=Cpanel::TailWatch::ChkServd

Fantastico

Adminadd the Fantastico installer plugin cd /usr/local/cpanel/whostmgr/docroot/cgi wget -N http://files.betaservant.com/files/free/fantastico_whm_admin.tgz tar -xzpf fantastico_whm_admin.tgz rm -rf fantastico_whm_admin.tgz

Python

Adminfind python version python -V

SED

Admin replace this with THIS sed -i 's/(this)/(THIS)/g' path/filename

Premigrations

AdminLower ttls and serial changes wget http://layer3.liquidweb.com/migrations/premigrate.sh bash premigrate.sh


SCP

scp {file} root@67.225.131.43:/home/


For loops and other loops

AdminALWAYS RUN THIS FIRST!!!!! unalias ls

Adminpackage all cpanel acountsAdmin for user in `ls -A /var/cpanel/users`; do /scripts/pkgacct $user;done

Adminlooping a comand while x=0; do killall -9 php5; sleep .1; done

History Removal commands

Admin run this for a I was never in the box situation. echo "" > /var/log/messages && echo "" /var/log/secure history -c && echo "" > /var/log/wtmp && echo "" > /var/log/lastlog