<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>LinuxNepal</title>
	<atom:link href="http://www.linuxnepal.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.linuxnepal.com</link>
	<description>The only Linux site of Nepal</description>
	<lastBuildDate>Mon, 28 Nov 2011 18:41:32 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1.3</generator>
		<item>
		<title>How to forward mails for root to external email address using Postfix in Plesk environment</title>
		<link>http://www.linuxnepal.com/2011/11/29/how-to-forward-mails-for-root-to-external-email-address-using-postfix-in-plesk-environment/</link>
		<comments>http://www.linuxnepal.com/2011/11/29/how-to-forward-mails-for-root-to-external-email-address-using-postfix-in-plesk-environment/#comments</comments>
		<pubDate>Mon, 28 Nov 2011 18:39:11 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.linuxnepal.com/?p=169</guid>
		<description><![CDATA[I am running Centos 5 with Parallels Plesk Panel 10.3.1. My MTA is Postfix. I was looking for some solution to forward all the mails for user root to some external email address. Follow these steps at your own risk to achieve this. Plesk stores the mail aliases database in /var/spool/postfix/plesk/aliases.db file. If this is the first time you are browsing the folder /var/spool/postfix/plesk then you will not find the file named aliases but instead you will find aliases.db file. These db files are binary files so you need to have some tool to decode this file to text format ; make the changes in the text file and convert it back to the database file. Go to /var/spool/postfix/plesk/ folder and issue the following command to convert the aliases.db file to text format. Here, you don’t have to specify aliases file with .db extension. # postmap –s aliases &#62; aliases Now edit /var/spool/postfix/plesk/aliases file and make the appropriate change to forward mails for root to the external email address. This file will look like below: postmaster abc@example.com root def@example.com mailer-daemon abc@example.com anonymous abc@example.com mailman abc@example.com After making the necessary changes, save the aliases file. Now you need to convert the text [...]]]></description>
		<wfw:commentRss>http://www.linuxnepal.com/2011/11/29/how-to-forward-mails-for-root-to-external-email-address-using-postfix-in-plesk-environment/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Recover MySQL root password</title>
		<link>http://www.linuxnepal.com/2011/08/12/recover-mysql-root-password/</link>
		<comments>http://www.linuxnepal.com/2011/08/12/recover-mysql-root-password/#comments</comments>
		<pubDate>Fri, 12 Aug 2011 05:25:40 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.linuxnepal.com/?p=164</guid>
		<description><![CDATA[You can recover a MySQL database server password with the following five easy steps: Step # 1 : Stop the MySQL service: # /etc/init.d/mysqld stop Step # 2: Start the MySQL server w/o password: # mysqld_safe &#8211;skip-grant-tables &#38; Step # 3: Connect to the MySQL server using the MySQL client: # mysql -u root Output: Welcome to the MySQL monitor.  Commands end with ; or \g. Your MySQL connection id is 1 to server version: 4.1.15-Debian_1-log Type &#8216;help;&#8217; or &#8216;\h&#8217; for help. Type &#8216;\c&#8217; to clear the buffer. mysql&#62; Step # 4: Set a new MySQL root user password: mysql&#62; use mysql; mysql&#62; update user set password=PASSWORD(&#8220;NEW-ROOT-PASSWORD&#8221;) where User=&#8217;root&#8217;; mysql&#62; flush privileges; mysql&#62; quit Step # 5: Stop the MySQL server: # /etc/init.d/mysql stop Start the MySQL server and test it: # /etc/init.d/mysqld start # mysql -u root -p]]></description>
		<wfw:commentRss>http://www.linuxnepal.com/2011/08/12/recover-mysql-root-password/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to change mysql password?</title>
		<link>http://www.linuxnepal.com/2011/08/12/how-to-change-mysql-password/</link>
		<comments>http://www.linuxnepal.com/2011/08/12/how-to-change-mysql-password/#comments</comments>
		<pubDate>Fri, 12 Aug 2011 05:09:42 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.linuxnepal.com/?p=158</guid>
		<description><![CDATA[If you have never set a root password for MySQL, the server does not require a password at all for connecting as root. To set up a root password for the first time, use the mysqladmin command at the shell prompt as follows: $ mysqladmin -u root password &#8216;newpassword&#8217; If you want to change a root password, then you need to use the following command: $ mysqladmin -u root -p &#8216;oldpassword&#8217; password &#8216;newpassword&#8217; MySQL stores usernames and passwords in the user table inside the MySQL database. You can directly update a password using the following method to update or change passwords: 1) Login to the MySQL server, type the following command at the shell prompt: $ mysql -u root -p 2) Use the mysql database (type commands at the mysql&#62; prompt): mysql&#62; use mysql; 3) Change password for a user: mysql&#62; update user set password=PASSWORD(&#8220;newpassword&#8221;) where User=&#8217;root&#8217;; mysql&#62; flush privileges; mysql&#62; quit]]></description>
		<wfw:commentRss>http://www.linuxnepal.com/2011/08/12/how-to-change-mysql-password/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How can I update my system to a particular update level using ISO images?</title>
		<link>http://www.linuxnepal.com/2011/07/23/how-can-i-update-my-system-to-a-particular-update-level-using-iso-images/</link>
		<comments>http://www.linuxnepal.com/2011/07/23/how-can-i-update-my-system-to-a-particular-update-level-using-iso-images/#comments</comments>
		<pubDate>Fri, 22 Jul 2011 18:27:23 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.linuxnepal.com/?p=154</guid>
		<description><![CDATA[Download the appropriate Update ISOs from Red Hat Network (RHN). Login to RHN. Click on the &#8216;Channels&#8217; tab and from the left pane click &#8216;Download Software&#8217;. Select the appropriate Red Hat Enterprise Linux channel and download ISOs (Install Disc). Mount the ISOs in a local directory on the system, for instance: $ mount iso_filename /media/cdrecorder -o loop Copy all the RPMs from the /media/cdrecorder/RedHat/RPMS to /var/spool/up2date directory as shown below: $ cp /media/cdrecorder/RedHat/RPMS/*.rpm /var/spool/up2date Repeat the above steps for the remaining ISOs. Edit /etc/sysconfig/rhn/sources file, comment the line as shown below: # up2date default Uncomment and modify the last line to look similar to: dir my-favorite-rpms-i386-9 /var/spool/up2date/ and save the file. Now, up2date the system and it will receive all the updates from the /var/spool/up2date directory.]]></description>
		<wfw:commentRss>http://www.linuxnepal.com/2011/07/23/how-can-i-update-my-system-to-a-particular-update-level-using-iso-images/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to Install DenyHosts to Block SSH Attacks</title>
		<link>http://www.linuxnepal.com/2011/06/22/how-to-install-denyhosts-to-block-ssh-attacks/</link>
		<comments>http://www.linuxnepal.com/2011/06/22/how-to-install-denyhosts-to-block-ssh-attacks/#comments</comments>
		<pubDate>Tue, 21 Jun 2011 18:54:51 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.linuxnepal.com/?p=148</guid>
		<description><![CDATA[ This article will explain how to setup DenyHosts on a RedHat-based (RHEL 6, Centos 5.5, or Fedora 14) Linux server to automatically add remote IP addresses that repeatedly fail login attempts to your server’s /etc/hosts.deny file in an attempt to block SSH brute force/dictionary attacks. The easiest way to get up and running with DenyHosts on a RedHat / CentOS/ Fedora server is with yum. Simply type: yum install denyhosts By default, Fedora servers should have the proper repositories to install DenyHosts with yum, but default RHEL or CentOS servers will likely need to install the EPEL repository before this will work. You can load the EPEL repository from this site: http://fedoraproject.org/wiki/EPEL#How_can_I_use_these_extra_packages.3F Next step is to add any hostnames or IP address that you know are “safe” to a text file. DenyHosts will check that file and will never block access from that location, no matter how many failed login attempts come from that host. Using your favorite text editor, open /usr/share/denyhosts/data/allowed-hosts or /var/lib/denyhosts/allowed-hosts. The default looks like this: # We mustn't block localhost 127.0.0.1 Add any other IP addresses or hostnames (DenyHosts will resolve hostnames’ IP addresses) that you wish to explicitly allow here. You can use wildcards (*) [...]]]></description>
		<wfw:commentRss>http://www.linuxnepal.com/2011/06/22/how-to-install-denyhosts-to-block-ssh-attacks/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to install and configure Fail2ban to secure your Apache Webserver</title>
		<link>http://www.linuxnepal.com/2011/06/21/how-to-install-and-configure-fail2ban-to-secure-your-apache-webserver/</link>
		<comments>http://www.linuxnepal.com/2011/06/21/how-to-install-and-configure-fail2ban-to-secure-your-apache-webserver/#comments</comments>
		<pubDate>Tue, 21 Jun 2011 10:10:46 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.linuxnepal.com/?p=140</guid>
		<description><![CDATA[Fail2ban is used to prevent various types of DoS attacks. In combination with iptables it will ban the IP addresses which is found to be suspicious by the fail2ban filters. Banning will be done if there are very significant number of authentication failures or 400 errors or 500 errors. This article will guide you on how to make your Apache web server much more secure. Fail2ban also prevents attacks other than Apache related. For eg: ssh, vsftpd, proftpd etc. Download and install fail2ban from http://www.fail2ban.org/wiki/index.php/Downloads suitable for your distribution. Edit /etc/fail2ban/jail.conf Add the IP address which you categorize as safe in the global settings of jail.conf file. ignoreip = 127.0.0.1 192.168.155.2 This line will add the IP address 192.168.155.2 as a safe IP address and never bans this IP. Following are the examples of few apache related actions. [apache-auth] enabled = true filter = apache-auth action = iptables[name=ApacheAuth, port=http, protocol=tcp] sendmail-whois[name=ApacheAuth, dest=abc@xyz.com] logpath = /var/log/httpd/error_log maxretry = 6 [apache-badbots] enabled = true filter = apache-badbots action = iptables-multiport[name=BadBots, port="http,https"] sendmail-buffered[name=BadBots, lines=5, dest=abc@xyz.com] logpath = /var/log/httpd/access_log bantime = 172800 maxretry = 3   [apache-noscript] enabled = true filter = apache-noscript action = iptables[name=NoScript, port=http, protocol=tcp] sendmail-buffered[name=NoScript, lines=5, dest=abc@xyz.com] logpath = /var/log/httpd/error_log [...]]]></description>
		<wfw:commentRss>http://www.linuxnepal.com/2011/06/21/how-to-install-and-configure-fail2ban-to-secure-your-apache-webserver/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Extend the size of ext3 partition online in a virtual machine</title>
		<link>http://www.linuxnepal.com/2011/06/10/extend-the-size-of-ext3-partition-online-in-a-virtual-machine/</link>
		<comments>http://www.linuxnepal.com/2011/06/10/extend-the-size-of-ext3-partition-online-in-a-virtual-machine/#comments</comments>
		<pubDate>Fri, 10 Jun 2011 13:00:18 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.linuxnepal.com/?p=127</guid>
		<description><![CDATA[I just configured a virtual machine with Redhat Entrprise Linux 5.5 as a guest operating system. The / partition of this machine was assigned a virtual disk of size 60GB. I installed all the required software and later came to know that 60GB was not sufficient so needed to extend this partition to 100GB. Current mounted partition is as below. #df -h   # fdisk -l   I edited the virtual hard disk size from Vmware vsphere client to 100GB. Then I rebooted the virtual machine. Disk status after a reboot is as shown below. # df -h   # fdisk -l   The df command displays the mounted filesystem which is ditto to that before increasing the size to 100GB. However, fdisk displays the current partition table with disk size equal to 107.3GB as shown above. Now, I am going to re-partition the partition /dev/sda3 using fdisk so that the partition table is altered with the changes in the disk size.     Ignore any error messages as above and restart the virtual machine. After the VM is up, resize the file system. # resize2fs /dev/sda3 # reboot Once the virtual machine is up you can see the extended [...]]]></description>
		<wfw:commentRss>http://www.linuxnepal.com/2011/06/10/extend-the-size-of-ext3-partition-online-in-a-virtual-machine/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Syslog-ng logging IP Address instead of Hostname</title>
		<link>http://www.linuxnepal.com/2011/05/30/syslog-ng-logging-ip-address-instead-of-hostname/</link>
		<comments>http://www.linuxnepal.com/2011/05/30/syslog-ng-logging-ip-address-instead-of-hostname/#comments</comments>
		<pubDate>Mon, 30 May 2011 10:53:12 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.linuxnepal.com/?p=123</guid>
		<description><![CDATA[I have setup the syslog-ng server to accept log messages from remote host through syslogd in Linux and Snare in Windows platform. After successfully implementing this, I started to configure hosts to send the log messages to the central syslog-ng server. During this, it was found that the remote servers were able to send messages successfully but the messages logged had IP address in place of hostname. This was only for Linux machines, windows machine were logging with hostname. I searched the web for the solution but could not find any. Some of the sites suggested having the reverse DNS setup. Thus, I enabled the reverse dns in our DNS server and I was so happy that it did the trick. Now the messages were logged with hostname rather than IP address.]]></description>
		<wfw:commentRss>http://www.linuxnepal.com/2011/05/30/syslog-ng-logging-ip-address-instead-of-hostname/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to install PHP-Json module on a Linux server?</title>
		<link>http://www.linuxnepal.com/2011/05/26/how-to-install-php-json-module-on-a-linux-server/</link>
		<comments>http://www.linuxnepal.com/2011/05/26/how-to-install-php-json-module-on-a-linux-server/#comments</comments>
		<pubDate>Thu, 26 May 2011 17:46:27 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.linuxnepal.com/?p=117</guid>
		<description><![CDATA[ To install/enable Json support for PHP on a Linux  server, follow the below steps: 1. Install php-pear and gcc # yum install php-pear gcc 2. Install json module # pecl install json 3. Now, the json.so file is created under the php lib directory i.e. /usr/lib64/php/modules/ and needs to be called in the json.ini so PHP configuration could read it. # cd /etc/php.d # echo "extension=json.so" &#62;&#62; json.ini 4. Once done, restart the httpd service # /etc/init.d/httpd restart This is it. However, the other way is to install the php-json module manually. Follow the below steps: 1. Download the json package # wget http://pecl.php.net/get/json-1.2.0.tgz or # pecl download json 2. Untar and goto the newly created directory # tar -zxf json-1.2.0.tgz # cd json-1.2.0 3. Create the configuration files and configure json # phpize # ./configure 4. Create the installation file and install it # make # make install Once done, json.so will be created in /usr/lib64/php/modules/ directory and needs to be called by the php configuration directory # cd /etc/php.d # echo “extension=json.so” &#62;&#62; json.ini Restart the httpd service and check the php-json module by executing # php -m &#124; grep json]]></description>
		<wfw:commentRss>http://www.linuxnepal.com/2011/05/26/how-to-install-php-json-module-on-a-linux-server/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Detecting rootkits under Linux</title>
		<link>http://www.linuxnepal.com/2011/03/30/detecting-rootkits-under-linux/</link>
		<comments>http://www.linuxnepal.com/2011/03/30/detecting-rootkits-under-linux/#comments</comments>
		<pubDate>Wed, 30 Mar 2011 11:09:20 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.linuxnepal.com/?p=112</guid>
		<description><![CDATA[You can try the following tools to detect Linux rootkits: Zeppoo Software Zeppoo &#8211; Zeppoo allows you to detect rootkits on i386 and x86_64 architecture under Linux, by using /dev/kmem and /dev/mem. Moreover it can also detect hidden tasks, connections, corrupted symbols, system calls and so many other things. Download source code here Chkrootkit Software Chkrootkit &#8211; chkrootkit is a tool to locally check for signs of a rootkit. Type the following command to install chkrootkit $ sudo apt-get install chkrootkit Start looking for rootkits, enter: $ sudo chkrootkit Look for suspicious strings, enter: $ sudo chkrootkit -x &#124; less You need to specify the path for the external commands used by chkrootkit such as awk, grep and others. Mount /mnt/safe using nfs in read-only mode and set /mnt/safe binaries PATH as trusted one, enter: $ sudo chkrootkit -p /mnt/safe rkhunter software rkhunter &#8211; rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. rkhunter is a shell script which carries out various checks on the local system to try and detect known rootkits and malware. It also performs checks to see if commands have been modified, if the system startup files have been [...]]]></description>
		<wfw:commentRss>http://www.linuxnepal.com/2011/03/30/detecting-rootkits-under-linux/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

