Friday, August 29, 2008

compiz-fusion: Cylinder anyone?

If you enable 3D desktop effects in your desktop, we can change the shape of the desktop when we 'spin' it to cylinder.
The steps are as follows:

1. Run ccsm - Compiz Config Settings Manager. In Mandriva, it's under Tools menu or you can type ccsm in terminal. Afterthat, click on Cube Reflection and Deformation.


2. Go to Deformation tab and click on Deformation menu to and choose Cylinder.


3. Test it by pressing Ctrl+Alt and press left button of your mouse and move your mouse to spin your desktop.

Here some screenshots of my desktop on Mandriva Cooker.



Tuesday, August 19, 2008

It takes two to tango

Yeah.. You may well confused with the title of this post. What the hell it has to do with Linux? Yeah. You got it wrong. Make people confuse is one of the tactic to make readers read your blog. Am i right? Well it doesn't matter.

Last week, I setup 2nd router for my office to make traffic smoother. We experienced slow internet connection lately and no wonder since we have 500 clients accessing the only one router to go to the internet. So after thinking a plan on how to solve it, I came out with a soultion to buy a new and powerful router. 3 days later, I was thinking it was a good idea to split the traffic since we have 2 internet connections. So I setup a second router and split up client connections to the two router evenly. After 2 days, I can say it is successfully make our internet experience a pleasure.

In the new router I installed squid 3.0, BIND and dansguardian. All on Mandriva Spring 2008. So every client connected to one of the router has been setup with gateway and dns point to the router.

So If your office internet connection is becoming slower and slower and you have 2 internet connections, you may to think to split up for smooth traffic to the internet and make your users happy.

cheers!


Monday, July 14, 2008

Iptables: DNAT

DNAT stands for Destination NAT. It is a type of NAT. The other one is SNAT which stands for Source NAT. What's the difference I hear you ask. Good question! :) DNAT changes destination of relevant packets. SNAT changes the source of relevant packets. Last week, my boss asked me to open an internal system in order to be accessed publicly.

Let's say my internal system server's IP is 192.168.2.123 and the system is a web-based system (port 80). It is behind a firewall which has a public IP say 111.222.333.444. To access the internal system from internet, the firewall IP should be used as a gateway to reach the internal system server.

Internet ----> Firewall ----> Internal system

I want to make any packets destined to port 3256 on firewall should be NAT'ed to internal system server on port 80. So the DNAT in firewall is:

iptables -t nat -I PREROUTING -s ! 192.168.2.0/24 -p tcp --dport 3256 -j DNAT --to 192.168.2.123:80

There you go. All packets destined to firewall on port 3256 will be redirected to internal system server on port 80. There are other ways to achieve this using other tools like xinetd but I leave that one for exercise for readers. :)


Tuesday, July 08, 2008

Linux : Before Munich, it was Extremadura

I remembered 3 years ago I read a Linux magazine about Munich. The government were going to convert all Windows PCs to Linux. Then I just came across an old news about how one of the poorest region in Spain migrated their all pcs using by civil servants duirng a weekend.

We changed the desktop systems from Windows to Linux during the weekend, when the civil servants came back next Monday morning they found Linux running on their desktop machines.

The public government of the Spanish region of Extremadura has now a long tradition of promoting and using free software. Extremadura is a region located in the South-West of Spain, in the center of a triangle formed by the cities of Madrid, Seville and Lisbon.

More from the news:

Another essential component of the network are the end user terminals. These were made from PCs running a localized version of Linux called Linex (compound word from LINux and EXtremadura) which they tailored to their specific needs and changing the name of the programs to more accessible ones to the people in Extremadura. For example, the Gimp image processing program was renamed to Zurbar�n, a famous Spanish painter. Besides building one of the best known Linux distributions, Linex, they have achieved the amazing goal of having one PC for every two students in their schools. Yes, you read it correctly, one PC per two students.

In total they now have some 80000 desktop PCs running Linux. Of them, 66000 are in schools and education centers and the rest, 14000, are in other public administration buildings. Although not 100% of all Extremadura's public administration departments have been switched to Linux desktops, this numbers certainly indicate that they are in the right path to reaching this goal.


Hmm. I think this proves that Linux can be used in government sector without problem. Certain issues need to be addressed first especially pertaining to proprietary softwares used. This issue mostly can be solved. The expert of migration will take of it. :)

Do you have any story about Linux in government at your place? Do write in.

More related news:
Munich goes Open Source
Full steam ahead for Linux in Munich
Debian wins Munich Linux deal


Friday, June 20, 2008

Firefox download fiesta : Awesome record indeed!



Firefox download day was on June 17, 2008 (US timezone). The original target was 5 million downloads in 24 hours. Not only they reached the target but exceeding it by 3 millions. The best record ever for firefox downloads in a single day. The people of Guiness World Record has yet to validate the record. Please check back here again after a few days.

RankCountryPledges
1United States3,915,375
2Germany1,068,315
3Japan714,845
4United Kingdom488,031
5Iran480,550
6Spain440,801
7France436,447
8Lithuania370,750
9Canada365,852
10Italy364,634


Although the time to set the record has over, you are encouraged to download firefox 3 because it has over 15,000 improvements over previous versions. See release notes for more details.

(Excerpt from Mozilla page)

What’s New in Firefox 3:

The Web is all about innovation, and Firefox 3 sets the pace with dozens of new features to deliver a faster, more secure and customizable Web browsing experience for all.

User Experience. The enhancements to Firefox 3 provide the best possible browsing experience on the Web. The new Firefox 3 smart location bar, affectionately known as the “Awesome Bar,” learns as people use it, adapting to user preferences and offering better fitting matches over time. The Firefox 3 Library archives browsing history, bookmarks, and tags, where they can be easily searched and organized. One-click bookmarking and tagging make it easy to remember, search and organize Web sites. The new full-page zoom displays any part of a Web page, up close and readable, in seconds.

Performance. Firefox 3 is built on top of the powerful new Gecko 1.9 platform, resulting in a safer, easier to use and more personal product. Firefox 3 now uses less memory while it’s running, and its redesigned page rendering and layout engine means users see Web pages two to three times faster than Firefox 2.

Security. Firefox 3 raises the bar for security. The new malware and phishing protection helps protect from viruses, worms, trojans and spyware to keep people safe on the Web. Firefox 3’s one-click site ID information allows users to verify that a site is what it claims to be. Mozilla’s open source process leverages the experience of thousands of security experts around the globe.

Customization. Everyone uses the Web differently, and Firefox 3 lets users customize their browser with more than 5,000 add-ons. Firefox Add-ons allow users to manage tasks like participating in online auctions, uploading digital photos, seeing the weather forecasts, and listening to music, all from the convenience of the browser. The new Add-ons Manager helps users to find and install add-ons directly from the browser.

For more information about Mozilla Firefox 3 and how it delivers an easier, faster, and safer online experience, visit http://www.mozilla.com/firefox/features.

Mozilla Firefox 3 is available now for Windows, Linux, and Mac OS X operating systems as a free download from http://www.getfirefox.com.


Other related stuffs

See youtube video what people said about Mozilla Firefox
Mozilla Digital Memory Bank
Press coverage on standblog



Thursday, June 05, 2008

openSUSE and iMac G3

If you have an iMac G3 and want to install Linux (instead of throwing it out of your window and kills 2 people :P), you may want to try openSUSE. From my experience, openSuse is the best distro for it. What about other distro? Well, i've tried Ubuntu. It is not suitable for this type of iMac. YDL? The installation went smoothly but i had to tweak the X before it worked. One caveat though. If your iMac doesn't have DVD drive, you have to install via internet. First you have to download the install iso and burn it to CD. Boot from the CD and there's menu for you to choose. Choose installation and update. For more info on this, click here.

You will be asked for repository IP address. You can put name address instead of IP. Then, you will asked for directory for packages. Enter the directory. You can find them here. Please choose a repository near you.

Any question regarding installation, just ask here. Maybe I can help. :)


Wednesday, May 21, 2008

upgrading zlib

I have to upgrade my zlib to version 1.2.3 to upgrade clamav 0.93. If you have recent version (after July 18,2005), you might have it installed already. For older distros, upgrade is a must to avoid security vulnerabilities in 1.2.1 and 1.2.2. You can download the source code here : http://www.zlib.net/zlib-1.2.3.tar.gz

Install from source.
1. unpack the source : tar xzvf zlib-1.2.3.tar.gz
2. change to source dir: cd zlib-1.2.3
3. configure it: ./configure --shared --prefix=/usr
4. 'make' it: make
5. install it: make install (this will install the library in dir /usr)

Extra check:
1. Go to /usr/lib and check whether symbolic links are ok :
[root@proxy lib]# ls -l libz*
lrwxrwxrwx 1 root root 13 May 16 06:29 libz.so -> libz.so.1.2.3*
lrwxrwxrwx 1 root root 13 May 16 06:29 libz.so.1 -> libz.so.1.2.3*
-rwxr-xr-x 1 root root 82305 May 16 06:29 libz.so.1.2.3*

If old libraries are still lying around or libz.so and libz.so.1 point to old library e.g libz.so -> libz.so.1.2.1, delete them.

That's all there is to it.

Reference:
zlib home


Wednesday, May 07, 2008

Installing CentOS 5.1



Hi all,

I am installing CentOS 5.1 to a machine at my friend's office. I had to download 7 ISOs beforehand but it needs only 5 CDs for complete installation (depending on what packages I want to install). I might have downloaded the DVD iso but since I don't have DVD-RW drive, I chose to download the CD ISOs.

The machine is HP Proliant 350 G5 with Intel Xeon processor and it is a 64-bit machine (as all modern Xeon processors are). The machine has been installed Fedora Core 5 before and it had many problems as FC5 is designed for desktop and not server. This should be expected. The machine will be used for database, dhcp and DNS server.


Saturday, April 19, 2008

Compiz-Fusion on Mandriva Spring 2008





Thursday, April 17, 2008

Upgrading Mandriva 2008 to Mandriva 2008.1 aka Mandriva Spring

Screenshot of KDE 4 on Mandriva Spring 2008

Here are the steps to upgrade mandriva 2008 to 2008.1 via online repos.

1) Back up the current urpmi.cfg
2) Change the repos mentioned in urpmi.cfg from 2008.0 to 2008.1
3) Run urpmi.update -a to verify repos
4) urpmi --auto-update -v

If there are problems with dependencies, remove the old versions (notably KDE4 as in my experience, yours maybe with different packages). Then in some cases you have to run this command:

5) urpmi --auto-select

Relax and sit back while watching the packages being upgraded. For my system, almost 1600 packages upgraded. Lastly, you will be instructed to reboot the system because of kernel and dbus upgrade. So far the new system is running smoothly without problem.

reference: Mandriva Forum


Tuesday, April 15, 2008

My history of commands

Based on kagesenshi's post titled Me! Me!, I also want to know what commands were used by me regularly. So:

[zamri@localhost ~]$ history | awk '{a[$2]++ } END{for(i in a){print a[i] " " i}}'|sort -rn|head
126 ssh
100 ls
97 smbclient
86 cd
76 su
58 wine
48 ping
35 joe
32 exit
17 ps

There you go. The ouput isn't surprising. I did lots of ssh to my servers and wine (ahaaa!! surprise!), I played windows games a lot for the last 4 months. Now I stop playing 'em completely. It is boring when you always win. :P


clamav 0.93 released

I just feel like it was yesterday I upgraded my clamav to 0.92.1. Now it is version 0.93. I gotta upgrade it ASAP. Thanks to the spirit of OSS. The excitement will never end. :)

Changes since 0.92.1:
  * libclamav:
- New logic in scan limits: provides much more efficient protection against
DoS attacks but also results in different command line and config options
to clamscan and clamd (see below)
- New/improved modules: unzip, SIS, cabinet, CHM, SZDD, text normalisator,
entity converter
- Improved filetype detection; filetype definitions can be remotely updated
- Support for .cld containers (which replace .inc directories)
- Improved pattern matcher and signature formats
- More efficient scanning of HTML files
- Many other improvements

* clamd:
- NEW CONFIG FILE OPTIONS: MaxScanSize, MaxFileSize, MaxRecursion, MaxFiles
- ** THE FOLLOWING OPTIONS ARE NO LONGER SUPPORTED **: MailMaxRecursion,
ArchiveMaxFileSize, ArchiveMaxRecursion, ArchiveMaxFiles,
ArchiveMaxCompressionRatio, ArchiveBlockMax

* clamscan:
- NEW CMDLINE OPTIONS: --max-filesize, --max-scansize
- REMOVED OPTIONS: --block-max, --max-space, --max-ratio

* freshclam:
- NEW CONFIG OPTION CompressLocalDatabase
- NEW CMDLINE SWITCH --no-warnings
- main.inc and daily.inc directories are no longer used by ClamAV; please
remove them manually from your database directory

Please note the new config file options.

Well... happy upgrading!. :)


Tuesday, April 01, 2008

Yakuake - An easy access console

Yakuake (Yet Another Kuake KDE terminal emulator) is a KDE console application that I use the most for months now. Before, I used to use konsole but after installing yakuake, I rarely use konsole anymore. The most important feature is the quick easy access to it by pressing a key. The key is configurable. I can't remember what is the default key for it but I choose F8 because the default is used by another application.


Installing yakuake
Debian - use synaptic or aptitude or apt-get install yakuake
Mandriva - use graphical rpmdrake or urpmi yakuake
other distros - please consult your distro documentation.

I have read a Linux mag (don't know which) that it is favorite among KDE developers and will be replacing konsole. I don't know whether this is true. Anyone can confirm this?

References:
Yakuake home page (new update)
Yakuake - An easy access konsole for KDE
More info : http://www.kde-apps.org/content/show.php?content=29153


Tuesday, March 25, 2008

dbmail 2.2.10 released

I have just upgraded my dbmail to 2.2.10. There are bugs fixed. So upgrade is highly recommended.

Changes since 2.2.9:

- - PostgreSQL 8.3 compatibility (# 676).
- - Duplicate key errors and other insertion problems ( #685, #686).

Download:
http://www.dbmail.org/download/2.2/dbmail-2.2.10.tar.gz

Debian etch backport:
deb http://debian.nfgd.net/debian stable main

Full changelog:
http://git.dbmail.eu/?p=paul/dbmail;a=shortlog;h=v2.2.10

Refer my previous post on how to upgrade dbmail (without database schema change).


Wednesday, February 27, 2008

Transparent proxy with squid 2.6

I have upgraded my squid from 2.5 STABLE13 to 2.6 STABLE18. Transparent proxy is setup differently in this version. You need this directives in squid.conf (usually in /etc or /usr/local/etc or /usr/local/squid/etc, check with your distro).

acl our_networks src 192.168.2.0/24 127.0.0.1
http_access allow our_networks
http_port 192.168.2.1:3128 transparent
always_direct allow all

where 192.168.2.1 is your proxy server IP address.


If you have flushed your iptables, create new rule:

iptables -t nat -A PREROUTING -i eth0 -p tcp –dport 80 -j REDIRECT –to-port 3128

where 3128 is the port where squid is running.
References:
http://www.deckle.co.za/squid-users-guide/Transparent_Caching/Proxy