» tagged pages
» logout

sorted by: recent | see : popular
Content Tagged with Server + Ubuntu

Howto setup PPTP server (VPN) on Ubuntu 7.10

What is PPTP?

PPTP stands for Point to Point Tunneling Protocol. It was developed by a consortium including Microsoft and is used for establishing VPN (Virtual Private Network) tunnels across the Internet. This allows remote users to securely and inexpensively access their corporate network from anywhere on the Internet.


PPTP uses a client-server model for establishing VPN connections. Most Microsoft operating systems ship with a PPTP client, so there is no need to purchase third-party client software. PPTP has the additional advantage over other VPN technologies of being easy to setup.
What is Poptop?

Before Poptop, no solution existed if you wish to connect PPTP clients to Linux servers. Using Poptop, Linux servers can now function seamlessly in a PPTP VPN environment. This enables administrators to leverage the considerable benefits of both Microsoft and Linux operating systems.

The current release version supports Windows 95/98/Me/NT/2000/XP PPTP clients and Linux PPTP clients.

Poptop is free software, licensed under the terms of the GNU GPL.

Features of Poptop include:

* Microsoft compatible authentication and encryption (MSCHAPv2, MPPE 40 - 128 bit RC4 encryption)
* Support for multiple client connections
* Seamless integration into a Microsoft network environment (LDAP, SAMBA) using RADIUS plugin
* Works with Windows 95/98/Me/NT/2000/XP PPTP clients
* Works with Linux PPTP client
* Poptop is, and will remain, totally free under the GNU General Public License

How to install Poptop (PPTPD)?

* Use this command:

sudo apt-get install pptpd -y

* Edit the /etc/pptpd.conf file like this

nano /etc/pptpd.conf

The file looks like this:

###############################################
# $Id: pptpd.conf 4255 2004-10-03 18:44:00Z rene $
#
# Sample Poptop configuration file /etc/pptpd.conf
#
# Changes are effective when pptpd is restarted.
###############################################

# TAG: ppp
# Path to the pppd program, default ‘/usr/sbin/pppd’ on Linux
#
#ppp /usr/sbin/pppd

# TAG: option
# Specifies the location of the PPP options file.
# By default PPP looks in ‘/etc/ppp/options’
#
option /etc/ppp/pptpd-options

# TAG: debug
# Turns on (more) debugging to syslog
#
#debug

# TAG: stimeout
# Specifies timeout (in seconds) on starting ctrl connection
#
# stimeout 10

# TAG: noipparam
# Suppress the passing of the client’s IP address to PPP, which is
# done by default otherwise.
#
#noipparam

# TAG: logwtmp
# Use wtmp(5) to record client connections and disconnections.
#
logwtmp

# TAG: bcrelay
# Turns on broadcast relay to clients from interface
#
#bcrelay eth1

# TAG: localip
# TAG: remoteip
# Specifies the local and remote IP address ranges.
#
# Any addresses work as long as the local machine takes care of the
# routing. But if you want to use MS-Windows networking, you should
# use IP addresses out of the LAN address space and use the proxyarp
# option in the pppd options file, or run bcrelay.
#
# You can specify single IP addresses seperated by commas or you can
# specify ranges, or both. For example:
#
# 192.168.0.234,192.168.0.245-249,192.168.0.254
#
# IMPORTANT RESTRICTIONS:
#
# 1. No spaces are permitted between commas or within addresses.
#
# 2. If you give more IP addresses than MAX_CONNECTIONS, it will
# start at the beginning of the list and go until it gets
# MAX_CONNECTIONS IPs. Others will be ignored.
#
# 3. No shortcuts in ranges! ie. 234-8 does not mean 234 to 238,
# you must type 234-238 if you mean this.
#
# 4. If you give a single localIP, that’s ok - all local IPs will
# be set to the given one. You MUST still give at least one remote
# IP for each simultaneous client.
#
# (Recommended)
#localip 192.168.0.1
#remoteip 192.168.0.234-238,192.168.0.245
# or
localip 192.168.101.1 remoteip 192.168.101.200-245
* Now you will need to add a user and password in the /etc/ppp/chap-secrets file. The user will login with this user and password

nano /etc/ppp/chap-secrets

* add a user like this:

# Secrets for authentication using CHAP
# client server secret IP addresses

user pptpd password “*”


The "*" can be a IP address (Ex. 222.222.222.222) and the client will be able to connect only from this IP address or you can put * and the client will be able to connect from anyware

* Kill the pptpd service and start it

killall pptpd

pptpd

Ubuntu: OnlyUbuntu Tutorials

Howto Dump and view the cache of BIND9 DNS server

Bind 9 makes it fairly easy to dump and view the cache of a caching BIND DNS server. All you have to do is run under root:


rndc dumpdb -cache

This will create a file called named_dump.db in the /var/cache/bind/ directory. You can easily open this .db with your favorite text editor.

** If your instance of BIND is chrooted, for example to /var/lib/named/, then the cache dump file will be located in the /var/lib/named/var/cache/bind/ directory.

** The dumpdb feature of rndc has other options including a -all or -zone flag. Check 'rndc --help' for more information.

Ubuntu: OnlyUbuntu Tutorials

Howto setup PPTP server (VPN) on Ubuntu 7.10

What is PPTP?

PPTP stands for Point to Point Tunneling Protocol. It was developed by a consortium including Microsoft and is used for establishing VPN (Virtual Private Network) tunnels across the Internet. This allows remote users to securely and inexpensively access their corporate network from anywhere on the Internet.


PPTP uses a client-server model for establishing VPN connections. Most Microsoft operating systems ship with a PPTP client, so there is no need to purchase third-party client software. PPTP has the additional advantage over other VPN technologies of being easy to setup.
What is Poptop?

Before Poptop, no solution existed if you wish to connect PPTP clients to Linux servers. Using Poptop, Linux servers can now function seamlessly in a PPTP VPN environment. This enables administrators to leverage the considerable benefits of both Microsoft and Linux operating systems.

The current release version supports Windows 95/98/Me/NT/2000/XP PPTP clients and Linux PPTP clients.

Poptop is free software, licensed under the terms of the GNU GPL.

Features of Poptop include:

* Microsoft compatible authentication and encryption (MSCHAPv2, MPPE 40 - 128 bit RC4 encryption)
* Support for multiple client connections
* Seamless integration into a Microsoft network environment (LDAP, SAMBA) using RADIUS plugin
* Works with Windows 95/98/Me/NT/2000/XP PPTP clients
* Works with Linux PPTP client
* Poptop is, and will remain, totally free under the GNU General Public License

How to install Poptop (PPTPD)?

* Use this command:

sudo apt-get install pptpd -y

* Edit the /etc/pptpd.conf file like this

nano /etc/pptpd.conf

The file looks like this:

###############################################
# $Id: pptpd.conf 4255 2004-10-03 18:44:00Z rene $
#
# Sample Poptop configuration file /etc/pptpd.conf
#
# Changes are effective when pptpd is restarted.
###############################################

# TAG: ppp
# Path to the pppd program, default ‘/usr/sbin/pppd’ on Linux
#
#ppp /usr/sbin/pppd

# TAG: option
# Specifies the location of the PPP options file.
# By default PPP looks in ‘/etc/ppp/options’
#
option /etc/ppp/pptpd-options

# TAG: debug
# Turns on (more) debugging to syslog
#
#debug

# TAG: stimeout
# Specifies timeout (in seconds) on starting ctrl connection
#
# stimeout 10

# TAG: noipparam
# Suppress the passing of the client’s IP address to PPP, which is
# done by default otherwise.
#
#noipparam

# TAG: logwtmp
# Use wtmp(5) to record client connections and disconnections.
#
logwtmp

# TAG: bcrelay
# Turns on broadcast relay to clients from interface
#
#bcrelay eth1

# TAG: localip
# TAG: remoteip
# Specifies the local and remote IP address ranges.
#
# Any addresses work as long as the local machine takes care of the
# routing. But if you want to use MS-Windows networking, you should
# use IP addresses out of the LAN address space and use the proxyarp
# option in the pppd options file, or run bcrelay.
#
# You can specify single IP addresses seperated by commas or you can
# specify ranges, or both. For example:
#
# 192.168.0.234,192.168.0.245-249,192.168.0.254
#
# IMPORTANT RESTRICTIONS:
#
# 1. No spaces are permitted between commas or within addresses.
#
# 2. If you give more IP addresses than MAX_CONNECTIONS, it will
# start at the beginning of the list and go until it gets
# MAX_CONNECTIONS IPs. Others will be ignored.
#
# 3. No shortcuts in ranges! ie. 234-8 does not mean 234 to 238,
# you must type 234-238 if you mean this.
#
# 4. If you give a single localIP, that’s ok - all local IPs will
# be set to the given one. You MUST still give at least one remote
# IP for each simultaneous client.
#
# (Recommended)
#localip 192.168.0.1
#remoteip 192.168.0.234-238,192.168.0.245
# or
localip 192.168.101.1 remoteip 192.168.101.200-245
* Now you will need to add a user and password in the /etc/ppp/chap-secrets file. The user will login with this user and password

nano /etc/ppp/chap-secrets

* add a user like this:

# Secrets for authentication using CHAP
# client server secret IP addresses

user pptpd password “*”


The "*" can be a IP address (Ex. 222.222.222.222) and the client will be able to connect only from this IP address or you can put * and the client will be able to connect from anyware

* Kill the pptpd service and start it

killall pptpd

pptpd

Ubuntu: Only Ubuntu

Howto Dump and view the cache of BIND9 DNS server

Bind 9 makes it fairly easy to dump and view the cache of a caching BIND DNS server. All you have to do is run under root:


rndc dumpdb -cache

This will create a file called named_dump.db in the /var/cache/bind/ directory. You can easily open this .db with your favorite text editor.

** If your instance of BIND is chrooted, for example to /var/lib/named/, then the cache dump file will be located in the /var/lib/named/var/cache/bind/ directory.

** The dumpdb feature of rndc has other options including a -all or -zone flag. Check 'rndc --help' for more information.

Ubuntu: Only Ubuntu

Set Up a Debian or Ubuntu Machine as a Maildrop (Imap)

rs, will walk you through the process of generating the key. We've set it up to be valid for 5,000 days, so you'll need to re-run this command in 14 years or so. SSL prompts you to enter some information about yourself, which can pretty much be made up, except for "Common Name", which should be the full name of your server. The e-mail addr

fetchmail: del.icio.us/tag/fetchmail

Howto Disable CTRL-ALT-DEL in Ubuntu 8.04 (Hardy Heron) Server

Any user that has physical access to the keyboard can simply use the Ctrl+Alt+Delete key combination to reboot the server without having to log on. Sure, someone could simply unplug the power source, but you should still prevent the use of this key combination on a production server. This forces an attacker to take more drastic measures to reboot the server, and will prevent accidental reboots at the same time.

(...)
Read the rest of Howto Disable CTRL-ALT-DEL in Ubuntu 8.04 (Hardy Heron) Server (61 words)


© admin for Ubuntu Geek, 2008. | Permalink | 6 comments | Add to del.icio.us digg
Who's linking ? Technorati BlogPulse Google
Want more on these topics ? Browse the archive of posts filed under Security.

Related Articles

Ubuntu: Ubuntu Geek - Ubuntu Tutorials,Howto's,Tips and Tricks

Page 1 | Next >>