2019

Cài đặt Fail2ban cho zimbra trên centos 7

hansamu 09/26/2019

Cài đặt epel-repo

# yum update
# yum install epel-release

1 2	# yum update # yum install epel-release

Cài đặt fail2ban

yum install fail2ban

1	yum install fail2ban

backup các file mặc định của fail2ban

# cp /etc/fail2ban/action.d/iptables-allports.conf /etc/fail2ban/action.d/iptables-allports.conf.backup
# mv /etc/fail2ban/jail.conf /etc/fail2ban/jail.conf.backup

1 2	# cp /etc/fail2ban/action.d/iptables-allports.conf /etc/fail2ban/action.d/iptables-allports.conf.backup # mv /etc/fail2ban/jail.conf /etc/fail2ban/jail.conf.backup

Tạo file /etc/fail2ban/filter.d/zimbra.conf với nội dung sau

vi /etc/fail2ban/filter.d/zimbra.conf

1	vi /etc/fail2ban/filter.d/zimbra.conf

# Fail2Ban configuration file
#
# Author:
#
# $Revision: 1 $
#

[Definition]

# Option: failregex
# Notes.: regex to match the password failures messages in the logfile. The
# host must be matched by a group named "host". The tag "<HOST>" can
# be used for standard IP/hostname matching and is only an alias for
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
# Values: TEXT
#
failregex = \[ip=<HOST>;\] account - authentication failed for .* \(no such account\)$
\[ip=<HOST>;\] security - cmd=Auth; .* error=authentication failed for .*, invalid password;$
;oip=<HOST>;.* security - cmd=Auth; .* protocol=soap; error=authentication failed for .* invalid password;$
\[oip=<HOST>;.* SoapEngine - handler exception: authentication failed for .*, account not found$
WARN .*;ip=<HOST>;ua=ZimbraWebClient .* security - cmd=AdminAuth; .* error=authentication failed for .*;$
NOQUEUE: reject: RCPT from .*\[<HOST>\]: 550 5.1.1 .*: Recipient address rejected:

# .*\[ip=<HOST>;\] .* - authentication failed for .* \(invalid password\)
#
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.
# Values: TEXT
#
ignoreregex =

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

# Fail2Ban configuration file

#

# Author:

#

# $Revision: 1 $

#

[Definition]

# Option: failregex

# Notes.: regex to match the password failures messages in the logfile. The

# host must be matched by a group named "host". The tag "<HOST>" can

# be used for standard IP/hostname matching and is only an alias for

# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)

# Values: TEXT

#

failregex = \[ip=<HOST>;\] account - authentication failed for .* $no such account$$

\[ip=<HOST>;\] security - cmd=Auth; .* error=authentication failed for .*, invalid password;$

;oip=<HOST>;.* security - cmd=Auth; .* protocol=soap; error=authentication failed for .* invalid password;$

\[oip=<HOST>;.* SoapEngine - handler exception: authentication failed for .*, account not found$

WARN .*;ip=<HOST>;ua=ZimbraWebClient .* security - cmd=AdminAuth; .* error=authentication failed for .*;$

NOQUEUE: reject: RCPT from .*\[<HOST>\]: 550 5.1.1 .*: Recipient address rejected:

# .*\[ip=<HOST>;\] .* - authentication failed for .* $invalid password$

#

# Option: ignoreregex

# Notes.: regex to ignore. If this regex matches, the line is ignored.

# Values: TEXT

#

ignoreregex =

File này định nghĩa các patten […]

Fix lỗi “The sign-in method you’re trying to use isn’t allowed”

hansamu 09/02/2019

Case: tạo user trên AD windows 2016. sau đó log in trên màn hình console thì báo lỗi. Hướng xử lý như sau: Quay lại sử dụng user administrator

1) Open the Group Policy editor using gpmc.msc
2) Select your domain and expand Group Policy Objects then right click on "Default Domain Controller Policy"    and Click Edit
3) Under Computer Management, expand Policies and then select Windows Settings
4) Expand Security Settings and Select Local Policies and then click on User Rights Management
5) Right click on Allow Logon Locally and click on Properties
6) In the next screen you can Add the User of Group that you want

1

2

3

4

5

6

1) Open the Group Policy editor using gpmc.msc

2) Select your domain and expand Group Policy Objects then right click on "Default Domain Controller Policy" and Click Edit

3) Under Computer Management, expand Policies and then select Windows Settings

4) Expand Security Settings and Select Local Policies and then click on User Rights Management

5) Right click on Allow Logon Locally and click on Properties

6) In the next screen you can Add the User of Group that you want

[…]

Cài đặt cụm hadoop cluster 3 node – How to Install and Set Up a 3-Node Hadoop Cluster

hansamu 08/31/2019

I- Chuẩn bị 3 máy centos 7: <hostname>:<IP> – node-master: 192.168.151.171 – node1: 192.168.151.172 – node2: 192.168.151.173 Phần môi trường cần cài đặt trên 3 máy:

java jdk 1.8 trở lên
yum install -y epel-release vim curl wget telnet
disable firewall hoặc mở sẵn port
service iptables stop
chkconfig iptables off

1

2

3

4

5

java jdk 1.8 trở lên

yum install -y epel-release vim curl wget telnet

disable firewall hoặc mở sẵn port

service iptables stop

chkconfig iptables off

II- Kiến trúc […]

Thay đổi config trong postgres – Reload postgres configuration without restart

hansamu 08/31/2019

PostgreSQL có 2 file cấu hìnhL pg_hba.conf và postgresql.conf. Cả 2 file này đều nằm trong thư mục data của pg_home, hoặc đường dẫn: $PGDATA, hoặc /var/lib/pgsql/data pg_hba.conf: chứa thông […]

Create large ~1 GB random dataset in PostgreSQL

hansamu 08/27/2019

Chạy SQL sau để gen data lớn cho postgres

CREATE TABLE large_test (num1 bigint, num2 double precision, num3 double precision);

INSERT INTO large_test (num1, num2, num3)
  SELECT round(random()*10), random(), random()*142
  FROM generate_series(1, 20000000) s(i);

1

2

3

4

5

CREATE TABLE large_test (num1 bigint, num2 double precision, num3 double precision);

INSERT INTO large_test (num1, num2, num3)

SELECT round(random()*10), random(), random()*142

FROM generate_series(1, 20000000) s(i);

DevOps VN

DevOps là phải lười ~_~

Cài đặt Fail2ban cho zimbra trên centos 7

Cài đặt cụm hadoop cluster 3 node – How to Install and Set Up a 3-Node Hadoop Cluster

Thay đổi config trong postgres – Reload postgres configuration without restart

Create large ~1 GB random dataset in PostgreSQL

Thông báo khi có user SSH thành công qua email

Script nén log file, sau đó move sang thư mục backup

Tích hợp cảnh báo qua telegram với PRTG

Tìm hiểu về DRBD – hệ thống lưu trữ trên linux