kernel: Limiting icmp unreach response from 299 to 200 packets/sec

/var/log/messages
Oct 15 09:38:32 machine kernel: Limiting icmp unreach response from 299 to 200 packets/sec

當出現以上訊息時，可能是RST攻擊，可以設定以下參數(預設為0)。

sysctl -w net.inet.tcp.blackhole=2
sysctl -w net.inet.udp.blackhole=1

然後在/etc/sysctl.conf加入
net.inet.tcp.blackhole=2

net.inet.udp.blackhole=1

mail relay

#/etc/rc.conf加入
sendmail_enable="YES"

#新增 mail relay
cd /etc/mail/
ee access
#格式 192.168.1.1   RELAY
make
make restart

ubuntu firefox + flash plugin

sudo add-apt-repository ppa:skunk/pepper-flash
sudo add-apt-repository ppa:nilarimogard/webupd8

sudo apt-get update
sudo apt-get install pepflashplugin-installer
sudo apt-get install freshplayerplugin

snmp + mrtg

snmp

1.ee /etc/rc.conf加入
bsnmpd_enable="YES"

2./etc/rc.d/bsnmpd start


mrtg

1.cd /usr/ports/net-mgmt/mrtg
   make BATCH=yes install clean

2.ee /etc/rc.conf加入
mrtg_daemon_enable="YES"
mrtg_daemon_config="/usr/local/etc/mrtg/mrtg.cfg"

3.啟動mrtg

mrtg /usr/local/etc/mrtg/mrtg.cfg


index.htm

indexmaker -output=/home/www/mrtg/index.htm /usr/local/etc/mrtg/mrtg.cfg

Lubuntu 安裝 xrdp

1. sudo apt-get install xrdp

2.sudo nano /etc/xrdp/startwm.sh

#'. /etc/X11/Xsession'
. /usr/bin/startlxde

3.如果沒有startlxde
安裝 sudo apt-get install lxde-common

dokuwiki安裝過程

1. 安裝
cd /usr/ports/www/dokuwiki
    make install clean

2.httpd.conf加入
Alias /dokuwiki /usr/local/www/dokuwiki
﹤Directory "/usr/local/www/dokuwiki"﹥
    Options FollowSymLinks
    AllowOverride ALL
    Require all granted
﹤/Directory﹥

3. 變更資料夾權限
chown -R www /usr/local/www/dokuwiki

4.開啟設定網頁
http://ip/dokuwiki/install.php

5.設定完成後
   rm /usr/local/www/dokuwiki/install.php
   chown -R root /usr/local/www/dokuwiki/conf

比較word版本差異

1.選擇 校閱->比較->比較文件的兩個版本

2.選擇 原始文件及修訂後的文件

就會比對出兩個文件中差異的部分。

在 FreeBSD 10.1 上建置 vpn server

/usr/ports/net/mpd5
make install clean

edit /usr/local/etc/mpd5/mpd.conf

startup:

default:
        load pptp_server

pptp_server:
        set ippool add LANPOOL 10.10.1.10 10.10.1.50

        create bundle template VPN

        set iface disable on-demand
        set iface idle 0

        set iface enable proxy-arp
        set iface enable tcpmssfix

        set ipcp yes vjcomp

        set ipcp ranges 10.10.1.1/32 ippool LANPOOL

        set bundle enable compression

        set ccp yes mppc

        set mppc no e40
        set mppc yes e128

        set mppc yes stateless

        create link template VPNLINK pptp

        set link action bundle VPN

        set link enable multilink

        set link yes acfcomp protocomp

        set link no pap chap

        set link enable chap

        set link keep-alive 30 300

        set link mtu 1460

        set link enable incoming

edit /usr/local/etc/mpd5/mpd.secret

abcd 123456   //account password

edit /etc/rc.conf

gateway_enable="YES"

pf_enable="YES"
pf_rules="/etc/pf.conf"
pflog_enable="YES"
pflog_logfile="/var/log/pflog"

mpd_flags="-b"
mpd_enable="YES"

edit /etc/pf.conf

ext_if ="hn0"

table persist {10.10.1.0/24}

nat on $ext_if from to any -> ($ext_if)
pass in all
pass out all
#pass in quick inet from to any keep state

重新啟動之後，使用abcd及密碼123456撥接登入vpn server