꿈을 꾸는 블루비

1.awstats 패키지를 설치한다

# apt-get install awstats

2. /etc/awstats/awstats.호스트네임.conf 로 설정 파일을 다음과 같이 만든다.

/etc/awstats/awstats.blueb.net.conf

LogFile="/var/log/apache2/blueb.net.access.log"
LogFormat=1
DNSLookup=1
DirData="/var/lib/awstats/"
DirCgi="/cgi-bin"
DirIcons="/icon"
SiteDomain="blueb.net"
AllowToUpdateStatsFromBrowser=1
AllowFullYearView=3

3. /var/lib/awstats 권한을 확인한다.
기본적으로 www-data 사용자로 생성이 되기 때문에 따로 권한 설정할 필요가 없다.
(수집된 로그 데이터가 저장되는 저장소이다.)

4.그림파일들을 복사한다.

# cp -r /usr/share/awstats/icon /var/www/icon

5. 로그정보를 업데이트 한다.

# /usr/lib/cgi-bin/awstats.pl -config=blueb.net -update

6. 브라우저로 확인해본다.

http://blueb.net/cgi-bin/awstats.pl?config=blueb.net

7. 한시간 단위로 업데이트 된 로그정보를 보기 위해 crontab 에 설정하고 마무리

# crontab -e
00 * * * * /usr/lib/cgi-bin/awstats.pl -config=blueb.net -update

Apt-get Install

1) tomcat 패키지를 찾습니다.

sudo apt-cache search tomcat

2) 찾은 모든 tomcat 패키지를 설치 합니다.

sudo apt-get install tomcat5.5-webapps
sudo apt-get install tomcat5.5-admin
sudo apt-get install tomcat5.5

3) 완료

apt-get help Ubuntu to configure almost everything and create a script put inside init.d folder for Tomcat auto startup script. we can start/stop/restart Tomcat with following command

/etc/init.d/tomcat5.5 start
/etc/init.d/tomcat5.5 stop
/etc/init.d/tomcat5.5 restart

apt-get help to create a share folder in /usr/share also, please access

cd /usr/share/tomcat5.5

and issue a ls -lh in /usr/share/tomcat5.5 to find out the rest of the Tomcat location.

drwxr-xr-x bin
drwxr-xr-x common
lrwxrwxrwx conf -> /etc/tomcat5.5
lrwxrwxrwx doc -> ../doc/tomcat5.5
lrwxrwxrwx logs -> /var/lib/tomcat5.5/logs
drwxr-xr-x server
lrwxrwxrwx shared -> /var/lib/tomcat5.5/shared
lrwxrwxrwx temp -> /var/lib/tomcat5.5/temp
lrwxrwxrwx webapps -> /var/lib/tomcat5.5/webapps
lrwxrwxrwx work -> /var/lib/tomcat5.5/work

Manually Install


This is even more easy that apt-get

1) http://tomcat.apache.org/ 에 접속하여 Tomcat을 다운로드 합니다.

2) Unzip it with tar -zxvf Tomcatxxx.tar

tar -zxvf apache-tomcat-6.0.16.tar.gz

3) No make or configuration required, just change to tomcat bin folder to start or stop Tomcat

:~/Desktop/apache-tomcat-6.0.16/bin$ sh startup.sh
:~/Desktop/apache-tomcat-6.0.16/bin$ sh shutdown.sh

4) Done

Personally i more prefer to install application manually, because it give full control of where application folder should be store.

- http://www.mkyong.com/tomcat/how-to-install-tomcat-in-ubuntu/

넥스트라인 기술지원부 김삼수(kiss@nextline.co.kr)



VSFTP 환경설정(vsftpd.conf)



VSFTP

리눅스에서 사용하는 FTP 서버용 소프트웨어는 proftp, vsftp가 주로 사용됩니다. Proftp에 비해서 속도와 보안, 성능이 뛰어나며 무엇보다 안정성을 보장할 수 있는 프로그램입니다.

설정파일경로 : /etc/vsftpd/vsftpd.conf

출처 : http://1kko.com/2460502

지난 2일간 우분투를 경험하며 설정한 결과, 나중을 위해서, 또 다른분들을 위해서라도 정리를 해놓는것이 편리할 것이라 생각을 했습니다. 그동안 검색을 하느라 많은 시간을 들였는데, 정작 써놓고 보니 몇줄 되지 않네요.
처음에는 제가 알아볼 수 있도록 써놨지만, 포스팅을 하려고 마음먹은 후 이미 알고 있는 것도 추가하고, 주석도 달고 제목도 달았습니다. 부디 보기에 편하셨으면 좋겠네요.

여기서 찾지 못하는 답은 검색해보면 나올것이라 생각합니다.

설치한 우분투 버전은 Ubuntu 6.06 LTS x86 - Server Edition 입니다.
다운로드 링크: http://www.ubuntu.com/getubuntu/download
----------------------------------------------------------------------------
처음 부팅 후 root(루트) 패스워드 지정

$sudo passwd root
Password: <- 현재 로그인한 유저의 비밀번호 입력
New Password: <- root의 새로운 password
Re-Enter Password: <- root의 새로운 password 재입력

이후 일반 유저에서 root로 가려면
$su -
Password:

----------------------------------------------------------------------------
내부 IP를 따로 사용해야 할 경우

/etc/networking/interfaces의 내용중 comment부분을 아래처럼 치환

# iface eth1 inet dhcp
iface eth1 inet static
address 192.168.32.132
netmask 255.255.255.0
network 192.168.32.0
broadcast 192.168.32.255
gateway 192.168.32.2

이후 networking 데몬 restart.

$sudo /etc/init.d/networking restart

-----------------------------------------------------------------------------
iso이미지를 마운트하기

*가끔 패키지 설치시에 ubuntu-server CD를 요구하는 경우가 있을때 유용하다

$sudo mount -t iso9660 -o loop myimage.iso /cdrom

----------------------------------------------------------------------------
FTP Server 설치

$sudo apt-get install vsftpd
ftp 설정파일 위치 -> /etc/vsftpd.conf

보안을 위해 vsftpd.conf를 수정
$sudo vi /etc/vsftpd.conf

::수정할 부분::
anonymous_enable=NO //기본값이 YES 이므로 NO로 변경
local_enable=YES //주석 제거
write_enable=YES //주석 제거
chroot_local_user=YES //주석제거 상위디렉토리 접금 제한

vsftp데몬 재시작
$sudo /etc/init.d/vsftpd restart

-----------------------------------------------------------------------------
APM 설치

$sudo apt-get install mysql-common
$sudo apt-get install mysql-server
$sudo apt-get install apache2
$sudo apt-get install php5
$sudo apt-get install php5-mysql

Apache2 설정파일 위치
/etc/apache2/apache2.conf <-기본 설정 파일
/etc/apache2/ 하위에 보면 각종 설정파일이 분리되어 있습니다.

Apache2 데몬 재시작 명령어
$sudo apache2ctl restart

-----------------------------------------------------------------------------
SSH(secure shell) 설치

$sudo apt-get install ssh

보안을 위해 /etc/ssh/sshd_config에서
PermitRootLogin 항목을 yes(default)에서 no로 바꿔준다

----------------------------------------------------------------------------
webmin 설치

webmin은 apt-get에 포함되어 있지 않으므로 따로 받아 설치한다.

$wget http://belnet.dl.sourceforge.net/sourceforge/webadmin/webmin_1.290.deb
$sudo dpkg -i webmin_1.290.deb

http://servername:10000

%080317추가 안될경우 홈페이지 참고: http://www.webmin.com/deb.html
-----------------------------------------------------------------------------
설치 후 관리

$sudo apt-get upgrade //기존 패키지 Upgrade
$sudo apt-get update //새로운 패키지 정보 Update

-----------------------------------------------------------------------------
ab : Apache HTTP Server Benchmarking tools

-----------------------------------------------------------------------------
아파치 포트 변경

/etc/apache2/httpd.conf에서
Listen 80을 원하는 포트로 변경

-----------------------------------------------------------------------------
아파치 VirtualHost 설정

/etc/apache2/httpd.conf에서

<VirtualHost *>
ServerName my.domain.com
ServerAdmin me@my.domain.com
DocumentRoot /home/www/
#특정 directory에만 옵션을 줄 때. (textcube를 위해 추가한 항목)
<Directory "/home/www/tc">
Options FollowSymLinks
AllowOverride FileInfo
</Directory>
</VirtualHost>

-----------------------------------------------------------------------------
Putty에서 한글 사용

Window > Appearance > Font settings에서 굴림체로 변경
Window > Translation > Character set translaton on received data에서 UTF-8로 변경

$export LANG=ko_KR.UTF-8

-----------------------------------------------------------------------------
색상이 나오지 않을때 및 alias 고정 지정방법

홈디렉토리의 .profile을 수정

# ~/.profile: executed by Bourne-compatible login shells.

if [ "$BASH" ]; then
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi
fi

mesg n

#alias 를 고정으로 지정하기
alias ll="ls -l"

-----------------------------------------------------------------------------
midnight commander (mc)설치방법

ubuntu universe 패키지에만 포함되어 있으므로 /etc/apt/source.list를 수정한다

끝에 universe를 추가해 준다.

deb http://kr.archive.ubuntu.com/ubuntu/ dapper main restricted universe
deb-src http://kr.archive.ubuntu.com/ubuntu/ dapper main restricted universe

패키지리스트 업데이트 후 설치
$sudo apt-get update; apt-get install mc

-----------------------------------------------------------------------------
원하는 패키지(꾸러미) 찾는 방법

$apt-cache search pkgname

-----------------------------------------------------------------------------
ACPI로 강제 설정방법. (자동 전원꺼짐이 되지 않을 때)

/boot/grub/menu.lst 중 acpi=force를 추가

title Ubuntu, kernel 2.6.15-26-server
root (hd0,0)
kernel /vmlinuz-2.6.15-26-server root=/dev/hda2 ro quiet splash acpi=force
initrd /initrd.img-2.6.15-26-server
savedefault
boot

-----------------------------------------------------------------------------
Samba 설치

$sudo apt-get install samba

-----------------------------------------------------------------------------
samba에서 euc-kr을 사용하여야 할 때

/etc/samba/smb.conf에서 아래 항목을 추가한다.

unix charset = euc-kr

-----------------------------------------------------------------------------
convmv로 EUC-KR 파일명을 UTF-8로 변환하기

apt-get install convmv
convmv --notest -f euc-kr -t utf-8 -r <directory>

일정기간 지난 파일 삭제 명령서

- 7일 지난 파일 찾기 예

find [디렉토리] -ctime +7 -exec rm -f {} \;

특정용량 이상되는 파일 찾기(용량단위 파일 검색)

- 10MB 이상 되는 파일 찾기 예

find [디렉토리] -size +1000k -exec ls -al {} \;

Global Filter Capabilities
- IIS5 격리 모드 사용시

• Is Installed As Global Filter > check
• Deny Postdata SQL injection > check
  

Cookie
- Deny Cookie SQL Injection > check
ContentType
- multipart/form-data 추가
URL Scanning
- URL Allowd starts > 공백추가
Headers
- Deny Header SQL Injection > check
SQL Injection
- SQL Injection Keywords

• ; 제거
• <script 추가(POST 데이터 필터)
• <form 추가
• <object 추가

Referrer
- Referrer URL RFC Compliant > 체크해제(파라미터 값중 한글 차단)

http://www.aqtronix.com/

윈도우 서버용 무료 웹방화벽 WebKnight

AQTRONIX WebKnight - Application Firewall for Web Servers

• What is it?
• Features
• Download
• Install
• F.A.Q.

What is it?

AQTRONIX WebKnight is an application firewall for IIS and other web servers and is released under the GNU General Public License. More particularly it is an ISAPI filter that secures your web server by blocking certain requests. If an alert is triggered WebKnight will take over and protect the web server. It does this by scanning all requests and processing them based on filter rules, set by the administrator. These rules are not based on a database of attack signatures that require regular updates. Instead WebKnight uses security filters as buffer overflow, SQL injection, directory traversal, character encoding and other attacks. This way WebKnight can protect your server against all known and unknown attacks. Because WebKnight is an ISAPI filter it has the advantage of working closely with the web server, this way it can do more than other firewalls and intrusion detection systems, like scanning encrypted traffic.

Features

These are some features of WebKnight.

• Open Source
  WebKnight is free software under the terms of the GNU General Public License.
• Logging
  By default all blocked requests are logged. In addition all allowed requests can be logged as well, or you can run WebKnight in logging only mode. This last operation mode allows you to see the attacks in the log files without blocking them. WebKnight can also prevent blocked attacks from being logged to the web server log files. This way your web server log files will be kept clean and accurate.
• Customizable
  The firewall can be customized for any need, including blocking certain 0-day exploits before the vendor released a patch.
• Compatible with Web-Based Applications
  WebKnight is compatible with Frontpage Extensions, WebDAV, Flash, Cold Fusion, Outlook Web Access, Outlook Mobile Access, SharePoint...
• HTTP Error Logging
  WebKnight can be configured to log the HTTP errors from the web server. This way you can log common errors like '404 Not Found' or more severe ones like '500 Server Error' to the logfile. Doing so allows you to detect errors in scripts or attacks on them. You can also use it to simply find broken links in your web site or configuration mistakes.
• SSL Protection
  Unlike traditional firewalls, WebKnight can protect encrypted sessions over HTTPS.
• Third-Party Application Protection
  WebKnight not only protects the web server, but can also be configured to protect third-party web server applications, e-commerce web sites or your custom web site.
• RFC compliant
  WebKnight is RFC compliant and also includes the ability to scan the requests for RFC compliance.
• Low Total Cost of Ownership (TCO)
  WebKnight comes with a Windows Installer package and remote installation scripts making it easy to deploy WebKnight in your enterprise. WebKnight also comes with a graphical user interface for changing WebKnight settings.
• Run-Time Update
  Changes to the settings of WebKnight do not require restarting the web server and can thus be done without disrupting any services for your users. For performance reasons, detecting these changes only occurs every 1 minute.

New in WebKnight 2.0

• Improved scanning
  The scanning engine has been improved and extended. It is now also possible to scan the Referrer header and User Agent header for certain exploits or data.
• Authentication scanning
  Authentication scanning allows to scan for brute force attacks on accounts or DoS attacks on system accounts. It can also scan for weak passwords.
• Connection control/monitoring
  You can block or monitor traffic coming from certain ip addresses or ranges. You can also monitor access to certain important files or limit the number of requests coming from a single IP address.
• Blocking robots
  A large robot database makes it possible for blocking or only allowing certain types of robots. It is also possible to set up a bot trap for bad robots and to block aggressive robots.
• Prevent hot linking
  Hot linking or direct linking to certain types of files (like images or file downloads), can be prevented.

Download

WebKnight is a free open source tool that comes to the rescue in many occasions and it helps administrators in their jobs, but to keep up this good work, please consider a donation.

• WebKnight 2.2 (Release date: 2008.09.02)
  This release is ready for IIS 7 and 64-bit. Fixed a few minor issues and extended scanning for SQL injection in the referrer, extended cookie scanning and certain XSS attacks. It is now also possible to monitor or block an IP address after an alert has been triggered. A new version of the config utility, log reader application and updated robots database is also included in this release.


• Robots.xml: the latest version of the Robots.xml file used by WebKnight. Download and overwrite the existing file in your WebKnight folder to have the latest database of known robots. WebKnight will automatically detect the new file and load it.


• Older WebKnight downloads

How to install

Installation in IIS with Windows Installer: (for IIS 6.0 see note below!) (for IIS 7.0 see note below!)

Double click the file WebKnight.msi. This will launch Windows Installer and install WebKnight on the local machine. This method will install WebKnight as a global filter on the local machine. If Windows Installer is not installed on your system, you can download it directly from Microsoft:
Windows Installer 2.0 Redistributable for Windows NT 4.0 and 2000
Windows Installer 2.0 Redistributable for Windows 95, 98, and Me

Installation in IIS with scripts:

To install/uninstall WebKnight on the local or remote machine you can use the file install.vbs/uninstall.vbs from the setup folder. This method will install WebKnight as a global filter on the selected host or localhost.

Manual installation as a global filter in IIS:

1. Copy all the files in the Setup folder to a local folder on the server (e.g. C:\Program Files\AQTRONIX WebKnight).
2. Open the IIS snap-in.
3. Right-click the server name (not the site name) (in IIS 6 right-click Web Sites) under Internet Information Services in the MMC, and then select Properties.
4. Verify that WWW Service is displayed in the Master Properties drop-down list, and click the Edit button. For IIS 6 go to next step.
5. Choose the ISAPI Filters tab, and then click the Add button.
6. In the Filter Properties window, type WebKnight, and enter the full path to WebKnight.dll in the Executable box.
7. Select OK to close each dialog.
8. Review any settings of WebKnight, by running config.exe that you copied locally.
9. Restart IIS.

Manual installation as a site filter in IIS:

1. Copy all the files in the Setup folder to a local folder on the server (e.g. C:\Program Files\AQTRONIX WebKnight\W3SVC1). Note: it is important to have a unique folder for each WebKnight installation!
2. Open the IIS snap-in.
3. Right-click the site name (not the server name) under Internet Information Services in the MMC, and then select Properties.
4. Choose the ISAPI Filters tab, and then click the Add button.
5. In the Filter Properties window, type WebKnight, and enter the full path to WebKnight.dll in the Executable box.
6. Select OK to close each dialog.
7. Review any settings of WebKnight, by running config.exe that you copied locally. (Make sure global filter capabilities are disabled: uncheck 'Is Installed As Global Filter')
8. For IIS 6 you need to make sure that each site for which you installed WebKnight as a site filter, has its own application pool. This is because only one instance of WebKnight can be run in any application pool. By default all sites are run in the DefaultAppPool and can only contain one instance of WebKnight, so you can only have one site filter, unless you specify a different application pool for any additional site on which you are running WebKnight as a site filter.
9. Restart IIS.

If you want to import your settings from urlscan, you can do that by copying the file urlscan.ini to the WebKnight directory. Delete WebKnight.xml (or rename it) and your settings from urlscan.ini will be imported in a new WebKnight.xml file when you restart your web server. This can be useful if you experienced problems with your urlscan installation and you had to customize the settings of urlscan and want to keep using these settings. If you want to load the default settings again, you can do that by deleting the files WebKnight.xml and urlscan.ini in the directory WebKnight and a new WebKnight.xml will be made with the default settings when you restart your web server.

Installation is IIS 5 and previous: You don't need to do anything extra, just follow one of the installation methods above.

Installation in IIS 6.0: to run WebKnight as a global filter in IIS 6.0, you have two options:

1. Run IIS in IIS 5.0 Isolation mode (recommended)
2. Continue running IIS in worker process mode but without the global filtering capabilities of WebKnight, and you need a unique log file per process. So you have to make sure you:
   • uncheck 'Is Installed As Global Filter' under Global Filter Capabilities
   • check 'Per Process Logging' under Logging (each application pool will load its own instance of WebKnight, if you only have one pool, this is not required.)
   • Make sure the account NETWORK SERVICE (or whatever account(s) you set the application pool(s) to use) has change permission on the WebKnight folder and subfolders
   • Restart IIS after doing the above changes.

Warning: There is a known issue with running WebKnight 1.3 and previous versions in IIS 6. You need to uncheck "Change Server Header" and uncheck "Remove Server Header" (in "Headers" section). WebKnight 2.0 does not have this issue.

Installation in IIS 7.0

• Allow ISAPI filters in IIS7 (by default this is not installed)
• The MSI package provided with WebKnight 2.2 and later supports IIS 7 (do not use the install.vbs script). Previous versions of WebKnight can only be installed manually and also unless you uncheck "Is Installed As Global Filter" in the global filter capabilities. If in addition you want to install a 32-bit version of WebKnight on a 64-bit operating system, you need to set the 32bitness precondition for the isapi filter (see your IIS documentation).
• The IIS account needs to have change permission on the WebKnight folder (see the install note for installing WebKnight in IIS6 when using Worker Process mode).
• WebKnight is not yet ready for IPv6, but this is currently not a major issue because the Internet is still using IPv4 (only the localhost loopback uses IPv6)

Non-IIS: Look at the documentation of your web server (Note: only web servers with ISAPI filter support can run WebKnight).

---

Published: 20/08/2002	Document Type: General
Last modified: 2/09/2008	Target: General
Visibility: Public	Language: English

우분투 8.10 코드명 Intrepid Ibex
2008. 10. 30 정식 출시 한다고 합니다.

새로운기능

3G 무선모뎀 지원
암호화된 패스워드로 보호된 개인디렉토리 설치
컴퓨터를 일시적으로 사용하고 싶은 이용자의 게스트계정
BBC 제공의 빌트인 콘텐츠 등

향상 및 지원

‘젠’ 가상화 지원 향상
우분투를 관리하는 ‘랜드스케이프’ 콘솔
개인화된 가상머신 구축 가능한 소프트웨어
스토리지시스템의 데이터 보호가 가능해지는 소프트웨어 기반 RAID 지원 등

Apache + PHP사용시 원격 MSSQL 데이터베이스에 접근 하는 방법중 FreeTDS를 이용한 방법이 있습니다.

설치법도 간단하고 간단한 설정법으로 한글깨짐현상도 해결할 수 있습니다.

FreeTDS 설치

/usr/local/src# wget http://ibiblio.org/pub/Linux/ALPHA/freetds/stable/freetds-stable.tgz

/usr/local/src# tar xvfpz freetds-stable.tgz

/usr/local/src/freetds# ./configure
--prefix=/usr/local/freetds
--with-tdsver=8.0
--disable-odbc
--disable-debug
--enable-dbmfix
--enable-msdblib

/usr/local/src/freetds# make
/usr/local/src/freetds# make install

configure 단계에서 'Directory /usr/local/freetds is not a FreeTDS installation directory' 라는 메시지가 나올경우
# cp /usr/local/src/freetds/include/tds.h /usr/local/freetds/include/
또는
# cp /usr/local/src/freetds/src/tds/.libs/tds.h /usr/local/freetds/include/
tds.h 파일을 설치된 디렉토리에 복사한다.


freetds.conf 파일에 client charset=EUC-KR을 추가하여 한글깨짐 현상을 막을 수 있습니다..

[global]
client charset = EUC-KR

PHP 설치

/usr/local/src/php# ./configure
--prefix=/usr/local
--with-apxs2=/usr/local/bin/apxs
--with-mssql=/usr/local/freetds
--with-sybase=/usr/local/freetds
--with-mysql

/usr/local/src/php# make
/usr/local/src/php# make install

dmesg :부팅시 메시지 보기

cat /proc/version :리눅스 버전 확인

cat /etc/issue :리눅스 버전 확인

cat /proc/cpuinfo :CPU 정보 확인

df -u :디스크 사용량 보기

free -m :메모리 사용량 보기

top :메모리 사용량 보기

ps -aux :현재 실행중인 프로세스 보기

우분투 8.04에 ModSecurity를 설치 하고 부터 텍스트큐브의 파일첨부 기능이 먹통이 되었다.
파일 첨부시 자동으로 로그아웃되는 현상이 벌어지는것인데

플래시의 파일업로드(FileReference)를 사용하게 되면 Header거 서버에 보내는 방식이 표준이 아니기 때문에 ModSecurity가 차단을 해버려 세션 정보가 갱신되고 로그아웃 되는 현상이다
이를 해결하기 위해 지금도 정보를 찾고 있지만 방법이 없다.

일반적인 방법은 apache conf 파일의 SetFilterEngine 항목을 Off로 해서 해결할 수 있지만

현재 우분투 8.04는 ModSecurity를 자동패키지를 지원하지 않기에 수동으로 설치를 했더니
apache conf 파일에는 존재 하지 않는다.
ModSecurity를 모듈을 disabled 했지만 여전히 같은 증상이다.

이것 때문에 벌씨 2틀째 고생중이다.
서버를 새로 설치해야만 하는 건가?? ㅡ.ㅡ

설치 파일 :
http://etc.inittab.org/~agi/debian/libapache-mod-security2/mod-security2-common_2.1.5-1_all.deb
http://etc.inittab.org/~agi/debian/libapache-mod-security2/libapache2-mod-security2_2.1.5-1_i386.deb

1. libapache2-mod-security2_2.1.5-1_i386.deb를 apt 저장소에 다운로드한다.

/var/cache/apt/archives# wget http://etc.inittab.org/~agi/debian/libapache-mod-security2/mod-security2-common_2.1.5-1_all.deb
/var/cache/apt/archives# wget http://etc.inittab.org/~agi/debian/libapache-mod-security2/libapache2-mod-security2_2.1.5-1_i386.deb

2. dpkg를 이용하여 설치한다.

/var/cache/apt/archives# dpkg -i mod-security2-common_2.1.5-1_all.deb libapache2-mod-security2_2.1.5-1_i386.deb

3. 아파치 모듈 디렉토리로 이동 하면 mod-security2.load.dpkg-new 파일 확인 할 수 있다.
이 파일의 이름을 mod-security2.load 변경후 a2enmod 명령어를 통해 enabled 시켜준다.

/etc/apache2/mods-available# mv mod-security2.load.dpkg-new mod-security2.load
/etc/apache2/mods-available# a2enmod mod-security2

4. 아파치 재실행

/etc/apache2/mods-available# apache2 -k restart

2.번 항목에서 설치시 의존성 문제가 있다고 나오긴 하지만 일단 무시하고 위의 방법데로하면
문제 없이 로드됩니다. 잘되는건지는 모르겠지만 ㅠ.ㅠ

php 에서
phpinfo() 함수로 확인 해보면 Loaded Modules 항목에 mod_security2가 로드 된것이 확인 됩니다.

참고 : http://www.dedibox-news.com/sujet-4549-mod-security2-debian-adresse-paquet-3-trucs

우분투 8.04 LTS 버전이 정식 출시되었습니다.

우분투 8.04 다운로드
http://www.ubuntu.com/getubuntu/download

우분투 한국 사용자 모임 FTP 사이트
ftp://ftp.ubuntu.or.kr/8.04/

1. ntpdate가 install 되어있지 않았을 경우 install 한다.

#apt-get install ntpdate

2. ntp는 123/udp port를 쓰므로 이 port가 막혀 있을 경우,/etc/services 에 ntp 123/udp => 를 추가

3. 서버 시간을 한국시간으로 세팅하기 위해 /etc/localtime을 링크해 생성해 준다.

# ln -sf /usr/share/zoneinfo/Asia/Seoul /etc/localtime

4. # ntpdate [ntp server name] 을 입력하여 ntp server로부터 시간을 얻어온다.

root# ntpdate time.kriss.re.kr
25 Apr 09:04:38 ntpdate[10175]: step time server 210.98.16.100 offset -46845.363136
root#

ntp server list

• time.bora.net
• time.nuri.net
• ntp.ewha.net
• time.kriss.re.kr

5. 시간 확인

# date
Fri Apr 25 09:23:47 KST 2008

KST 로 보여야 한국시간으로 설정된것이다.

메일 발송시 속도도 느리고 아래와 같은 로그 내용이 보인다면 hostname 을 변경해줘야 합니다.

Apr 24 02:51:15 ubuntu sendmail[1823]: My unqualified host name (ubuntu) unknown; sleeping for retry
Apr 24 02:51:16 ubuntu sm-msp-queue[1817]: unable to qualify my own domain name (ubuntu) -- using short name
Apr 24 02:52:15 ubuntu sendmail[1823]: unable to qualify my own domain name (ubuntu) -- using short name
Apr 24 02:52:15 ubuntu sendmail[1823]: My unqualified host name (ubuntu) unknown; sleeping for retry
Apr 24 02:53:15 ubuntu sendmail[1823]: unable to qualify my own domain name (ubuntu) -- using short name

호스트 네임 변경 방법

#hostname blueb.net

그리고 아래의 것들을 추가 수정해줍니다.

/etc/hosts 에도 아이피와 도메인 주소 추가

127.0.0.1 localhost
000.000.000.000 blueb.net

/etc/mail/local-host-names 에 도메인 주소 추가

blueb.net
localhost