Month: January 2007

chkrootkit and logcheck mail notification

#apt-get install cron
#crontab /etc/crontab
#apt-get install chkrootkit

write a script ‘chkrootkit’ and save in /

#/bin/bash
cd /usr/sbin/ && ./chkrootkit 2>&1 | mail -s “chkrootkit output” yourname@xyz.com

#chmod 777 / chkrootkit
#apt-get install logcheck

we edit the /etc/logcheck/logcheck.conf

INTRO=1
REPORTLEVEL=”server”
SENDMAILTO=”yourname@xyz.com”
FQDN=1
RULEDIR=”/etc/logcheck”

then we write a script ‘logcheck’ and save in /

#/bin/bash
su -s /bin/bash -c “/usr/sbin/logcheck” logcheck

#chmod 777 /logcheck
we add the chkrootkit and logcheck script in the /var/spool/cron/crontabs/root

46 12 * * * /./chkrootkit
46 12 * * * /./logcheck

done 🙂

This Rsync and ssh is to automatically backup files from one server to another.

for more doc follow this link

We generate a key

$ ssh-keygen -t dsa -b 2048 -f /home/thisuser/cron/thishost-rsync-key
Generating public/private dsa key pair.
Enter passphrase (empty for no passphrase): [press enter here]
Enter same passphrase again: [press enter here]
Your identification has been saved in /home/thisuser/cron/thishost-rsync-key.
Your public key has been saved in /home/thisuser/cron/thishost-rsync-key.pub.
The key fingerprint is:
2e:28:d9:ec:85:21:e7:ff:73:df:2e:07:78:f0:d0:a0 thisuser@thishost

Copy the public key to remove PC

$ scp /home/thisuser/cron/thishost-rsync-key.pub remoteuser@remotehost:/home/remoteuser/

Configuring remotehost

$ ssh remoteuser@remotehost remoteuser@remotehost’s password: [type correct password here]

need to make sure we have the directory and files we need to authorize connections with this key

$ if [ ! -d .ssh ]; then mkdir .ssh ; chmod 700 .ssh ; fi
$ mv thishost-rsync-key.pub .ssh/
$ cd .ssh/
$ if [ ! -f authorized_keys ]; then touch authorized_keys ; chmod 600 authorized_keys ; fi
$ cat thishost-rsync-key.pub >> authorized_keys

we edit the ‘authorized_keys’ file (with vi)

before edit

ssh-dss AAAAB3NzaC1kc3MAAAEBAKYJenaYvMG3nHwWxKwlWLjHb77CT2hXwmC8Ap+ fG8wjlaY/9t4uA+2j2yBgN5cy8arlZ80q1Mcy763RjYGkR/FkLJ611HWIA= thisuser@thishost

we made the following change

from=”10.1.1.1″,command=”/home/remoteuser/cron/validate-rsync” ssh-dss AAAAB3Nza
C1kc3MAAAEBAKYBgN5cy8arlZ80q1Mcy763RjYGkR/FkLJ611HWIA= thisuser@thishost

your can omit the ‘from=”10.1.1.1″,’ part of the line (including the comma), then ‘rsync’ will be possible using this key from anywhere.

create a script /home/remoteuser/cron/validate-rsync

#!/bin/sh

case “$SSH_ORIGINAL_COMMAND” in
*&*)
echo “Rejected”
;;
*(*)
echo “Rejected”
;;
*{*)
echo “Rejected”
;;
*;*)
echo “Rejected”
;;
*

I have test in Debian testing (Sid)

for more doc www.xiph.org

# apt-get install icecast2

edit /etc/default/icecast2
icecast2
=====
ENABLE=true
=====

start the icecast
/etc/init.d/icecast2 start

edit /etc/icecast2/icecast.xml enable the relay if you want.

There are two types of relays: a “Master server relay” or a “Specific Mountpoint relay.” A Master server relay is only supported between icecast2 servers and is used to relays all mountpoints on a remote icecast2 server.

icecast.xml
=======
master-server 127.0.0.1 master-server
master-server-port 8001 master-server-port
master-update-interval 120 master-update-interval
master-password hackme master-password

relays-on-demand 1 relays-on-demand
on-demand 1 on-demand
relay-shoutcast-metadata 1 relay-shoutcast-metadata

example:

relay
server 127.0.0.1 server
port 8001 port
mount /example.ogg mount
local-mount different.ogg local-mount
on-demand 1 on-demand

(if your want to stream the mounted /example.ogg via /different.ogg in server)
========

restart the icecast server
/etc/init.d/icecast2 restart

with your browser
http://localhost:8000/
(user: admin, pass: hackme, by default)

copy a audio.ogg or video.ogg in your “/usr/share/icecast2/web/” and test it with your player.

Ices2 config
(Ogg Vorbis streaming source for Icecast 2)

#apt-get install ices2

cd /usr/share/doc/ices2/examples/

To stream some pre-encoded ogg files

cp /usr/share/doc/ices2/examples/ices-playlist.xml /usr/share/icecast2/web/

edit the /usr/share/icecast2/web/ices-playlist.xml

ices-playlist.xml
==========
hostname localhost hostname
port 8000 port
password hackme password
mount /example1.ogg mount

param name=”restart-after-reread” 1 param (optional)
==========
you can hear it via
http://localhost:8000/example1.ogg

if you change it to /example.ogg,
then you can hear it via
http://localhost:8000/example.ogg
or
http://localhost:8000/different.ogg (via the relay)

create a playlist “playlist.txt” in /usr/share/icecast2/web/

playlist.txt
=======
fordername/01-name.ogg
fordername/02-name.ogg
fordername/03-name.ogg
………………………
=======

start the stream
# ices2 ices-playlist.xml

To stream from Input (alsa or oss)

cp /usr/share/doc/ices2/examples/ices-alsa.xml /usr/share/icecast2/web/

edit the /usr/share/icecast2/web/ices-alsa.xml if your need.

ices-alsa.xml
=========
hostname localhost hostname
port 8000 port
password hackme password
mount /example1.ogg mount
===========
you can hear it via
http://localhost:8000/example1.ogg

if you change it to /example.ogg,
then you can hear it via
http://localhost:8000/example.ogg
or
http://localhost:8000/different.ogg (via the relay)

start the live stream
# ices2 ices-alsa.xml

Video Streaming

#apt-get install ffmpeg ffmpeg2theora oggfwd

example:
#ffmpeg2theora output.ogg -x 320 -y 240 -V 150 -A 64 -o – –optimize | oggfwd localhost 8000 hackme /theora.ogg

(if your want to stream the output.ogg via mountpoint /theora.ogg in icecast server)
play http://localhost:8000/theora.ogg

done 🙂