<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Ronnie Muhadi &#187; My Linux</title>
	<atom:link href="http://blog.muhadi.com/category/my-linux/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.muhadi.com</link>
	<description>Just ordinary people</description>
	<lastBuildDate>Sat, 20 Mar 2010 11:59:16 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>update mirror debian ke debian 4.0 a.k.a.etch</title>
		<link>http://blog.muhadi.com/2007/04/25/update-mirror-debian-ke-debian-40-akaetch-3/</link>
		<comments>http://blog.muhadi.com/2007/04/25/update-mirror-debian-ke-debian-40-akaetch-3/#comments</comments>
		<pubDate>Tue, 24 Apr 2007 20:47:36 +0000</pubDate>
		<dc:creator>Ronnie Muhadi</dc:creator>
				<category><![CDATA[My Linux]]></category>
		<category><![CDATA[My Tips]]></category>

		<guid isPermaLink="false">http://blog.muhadi.com/2007/04/25/update-mirror-debian-ke-debian-40-akaetch-3/</guid>
		<description><![CDATA[Sekarang udah waktunya mengupdate mirror debianku dari sarge ke etch.
langkah langkahnya seperti membuat mirror baru yaitu:
apt-get install debmirror gnupg
Lalu import signing key dari debian master nya untuk verifikasi GPG dari paket paket nya :
gpg &#8211;recv-keys 2D230C5F
lalu buat script sederhana. misal update-mirror.sh yang isinya :
#!/bin/sh
/usr/bin/debmirror \
&#8211;debug \
&#8211;verbose \
&#8211;progress \
&#8211;nosource \
&#8211;ignore-release-gpg \
&#8211;host=debian.indika.net.id \
&#8211;dist=etch &#8211;arch=i386 \
&#8211;method=rsync \
&#8211;root=:debian /mnt/backup/mirror/debian [...]]]></description>
			<content:encoded><![CDATA[<p>Sekarang udah waktunya mengupdate mirror debianku dari sarge ke etch.</p>
<p>langkah langkahnya seperti membuat mirror baru yaitu:</p>
<p><font style="BACKGROUND-COLOR: #c0c0c0">apt-get install debmirror gnupg</font></p>
<p>Lalu import signing key dari debian master nya untuk verifikasi GPG dari paket paket nya :</p>
<p><font style="BACKGROUND-COLOR: #c0c0c0">gpg &#8211;recv-keys 2D230C5F</font></p>
<p>lalu buat script sederhana. misal update-mirror.sh yang isinya :</p>
<p><font style="BACKGROUND-COLOR: #c0c0c0">#!/bin/sh</font></p>
<p><font style="BACKGROUND-COLOR: #c0c0c0">/usr/bin/debmirror \<br />
&#8211;debug \<br />
&#8211;verbose \<br />
&#8211;progress \<br />
&#8211;nosource \<br />
&#8211;ignore-release-gpg \<br />
&#8211;host=debian.indika.net.id \<br />
&#8211;dist=etch &#8211;arch=i386 \<br />
&#8211;method=rsync \<br />
&#8211;root=:debian /mnt/backup/mirror/debian &gt; /var/log/debmirror/debian-etch.log 2&gt; /var/log/debmirror/debian-etch.err &amp;</font></p>
<p>Dalam hal ini metode yang digunakan adalah rsync. dan arsitektur yang akan di mirror adalah i386.</p>
<p>Kemudian jalankan <font style="BACKGROUND-COLOR: #c0c0c0">./update-mirror.sh</font></p>
<p>Dan pantau log nya dengan cara :</p>
<p><font style="BACKGROUND-COLOR: #c0c0c0">tail /var/log/debmirror/debian-etch.log</font></p>
<p>Jangan lupa !. Anda butuh sekitar 9 GB untuk membuat mirror tersebut.</p>
<p>Happy mirroring :p.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.muhadi.com/2007/04/25/update-mirror-debian-ke-debian-40-akaetch-3/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Minimalist load balancer</title>
		<link>http://blog.muhadi.com/2006/10/13/minimalist-load-balancer/</link>
		<comments>http://blog.muhadi.com/2006/10/13/minimalist-load-balancer/#comments</comments>
		<pubDate>Fri, 13 Oct 2006 05:16:42 +0000</pubDate>
		<dc:creator>Ronnie Muhadi</dc:creator>
				<category><![CDATA[My Linux]]></category>
		<category><![CDATA[My Tips]]></category>

		<guid isPermaLink="false">http://blog.muhadi.com/?p=82</guid>
		<description><![CDATA[From lartc.org section 4.2.2
# ip route default nexthop via gw_1 nexthop via gw_2
&#160;
  
]]></description>
			<content:encoded><![CDATA[<p>From lartc.org section 4.2.2</p>
<p># <strong>ip route default nexthop via gw_1 nexthop via gw_2</strong></p>
<p>&nbsp;</p>
<p> <img src='http://blog.muhadi.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> </p>
]]></content:encoded>
			<wfw:commentRss>http://blog.muhadi.com/2006/10/13/minimalist-load-balancer/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Simple Source Based Routing</title>
		<link>http://blog.muhadi.com/2006/10/13/simple-source-based-routing/</link>
		<comments>http://blog.muhadi.com/2006/10/13/simple-source-based-routing/#comments</comments>
		<pubDate>Fri, 13 Oct 2006 05:14:24 +0000</pubDate>
		<dc:creator>Ronnie Muhadi</dc:creator>
				<category><![CDATA[My Linux]]></category>
		<category><![CDATA[My Tips]]></category>

		<guid isPermaLink="false">http://blog.muhadi.com/?p=81</guid>
		<description><![CDATA[Kadang kadang anda memiliki lebih dari satu router atau dengan kata lain anda memiliki lebih dari satu provider internet, dan anda menginginkan sebuah subnet untuk lewat provider yang berbeda dengan subnet yang lain. Untuk itu anda membutuhkan sebuah Source Based Routing di dalam router utama.
Misalnya :
# /sbin/ip rule add from $IP table $TBL
# /sbin/ip route [...]]]></description>
			<content:encoded><![CDATA[<p>Kadang kadang anda memiliki lebih dari satu router atau dengan kata lain anda memiliki lebih dari satu provider internet, dan anda menginginkan sebuah subnet untuk lewat provider yang berbeda dengan subnet yang lain. Untuk itu anda membutuhkan sebuah Source Based Routing di dalam router utama.</p>
<p>Misalnya :</p>
<p><strong># /sbin/ip rule add from $IP table $TBL<br />
# /sbin/ip route add default dev eth0 via $GW table $TBL</strong></p>
<p>Dimana:</p>
<ul dir="ltr" style="MARGIN-RIGHT: 0px">
<li>$IP adalah sebuah alamat IP yang harus menggunakan gateway berbeda dari default. Anda juga bisa menggunakan netmask misal : 10.9.8.0/24 berarti semua packet yang beraslal dari 10.9.8.x akan di arahkan ke gateway yang sudah di definisikan.</li>
<li>$GW adalah gateway yang didefinisikan berbeda dengan default gateway.</li>
<li>$TBL adalah sebuah nomer table bebas. Antara 1-249. Karena 250-255 di reserve. Jika anda lebih suka dengan nama dari pada angka antara 1 &#8211; 249 maka anda terlebih dahulu anda harus mengesetnya di /etc/iproute2/rt_tables.</li>
</ul>
<p>Misalnya :</p>
<p>di /etc/iproute2/rt_tables</p>
<p><strong>200 kpde</strong></p>
<p>maka source based routingnya menjadi :</p>
<p><strong># /sbin/ip rule add from 10.9.8.0/24 table kpde<br />
# /sbin/ip route add default dev eth0 via 202.10.10.10 table kpde</strong></p>
<p>Untuk melihat tabel routing yang sudah dibuat :</p>
<p><strong># /sbin/ip route show table</strong></p>
<p><strong>atau :</strong></p>
<p><strong># /sbin/ip route show 200</strong></p>
<p>atau :</p>
<p><strong># /sbin/ip route show kpde</strong></p>
<p>Setiap gateway non-default memerlukan nomer table yang berbeda.<br />
Info lebih lanjut hubungi pihak yang berwenang atau tinggal :</p>
<p><strong>#man ip</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.muhadi.com/2006/10/13/simple-source-based-routing/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>split file  di linux pake rar</title>
		<link>http://blog.muhadi.com/2006/10/07/split-file-di-linux-pake-rar/</link>
		<comments>http://blog.muhadi.com/2006/10/07/split-file-di-linux-pake-rar/#comments</comments>
		<pubDate>Sat, 07 Oct 2006 16:24:58 +0000</pubDate>
		<dc:creator>Ronnie Muhadi</dc:creator>
				<category><![CDATA[My Linux]]></category>
		<category><![CDATA[My Tips]]></category>

		<guid isPermaLink="false">http://blog.muhadi.com/?p=83</guid>
		<description><![CDATA[rar a -m0 -v1000m q quraan.tar.gz
a = append archieve
-v = volume per part nya, contoh diatas per file 1000 MB
q = nama file archive nya
output = q.part1.rar q.part2.rar q.part3.rar q.part4.rar
Cara menggabungka ya pake winrar di windows atau rar d q.partq.rar di linux.
]]></description>
			<content:encoded><![CDATA[<p><strong><em>rar a -m0 -v1000m q quraan.tar.gz</em></strong></p>
<p>a = append archieve</p>
<p>-v = volume per part nya, contoh diatas per file 1000 MB</p>
<p>q = nama file archive nya</p>
<p>output = <strong><em>q.part1.rar q.part2.rar q.part3.rar q.part4.rar</em></strong></p>
<p>Cara menggabungka ya pake <a href="http://www.rarlab.com/" target="_blank">winrar</a> di windows atau <strong><em>rar d q.partq.rar</em></strong> di linux.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.muhadi.com/2006/10/07/split-file-di-linux-pake-rar/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Setting mod_ssl di apache di Debian Sarge</title>
		<link>http://blog.muhadi.com/2006/07/06/setting-mod_ssl-di-apache-di-debian-sarge/</link>
		<comments>http://blog.muhadi.com/2006/07/06/setting-mod_ssl-di-apache-di-debian-sarge/#comments</comments>
		<pubDate>Thu, 06 Jul 2006 11:24:00 +0000</pubDate>
		<dc:creator>Ronnie Muhadi</dc:creator>
				<category><![CDATA[My Linux]]></category>
		<category><![CDATA[My Tips]]></category>

		<guid isPermaLink="false">http://blog.muhadi.com/?p=84</guid>
		<description><![CDATA[Install paket mod_ssl ala debian  
apt-get install libapache-mod-ssl libapache-mod-ssl-doc
Aktifkan modul SSL nya dengan cara
apache-modconf apache enable mod_ssl
lalu di /etc/apache/httpd.conf isi dengan konfigurasi
&#60;IfModule mod_ssl.c&#62;
# These will make apache listen to port 443 in addition to the
# standard port 80. HTTPS requests use port 443.
Listen 80
Listen 443
# Some MIME-types for downloading Certificates and CRLs
AddType application/x-x509-ca-cert .crt
AddType [...]]]></description>
			<content:encoded><![CDATA[<p>Install paket mod_ssl ala debian <img src='http://blog.muhadi.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> <br />
apt-get install libapache-mod-ssl libapache-mod-ssl-doc</p>
<p>Aktifkan modul SSL nya dengan cara<br />
apache-modconf apache enable mod_ssl</p>
<p>lalu di /etc/apache/httpd.conf isi dengan konfigurasi<br />
&lt;IfModule mod_ssl.c&gt;<br />
# These will make apache listen to port 443 in addition to the<br />
# standard port 80. HTTPS requests use port 443.<br />
Listen 80<br />
Listen 443</p>
<p># Some MIME-types for downloading Certificates and CRLs<br />
AddType application/x-x509-ca-cert .crt<br />
AddType application/x-pkcs7-crl .crl</p>
<p># Semaphore:<br />
# Configure the path to the mutual exclusion semaphore the<br />
# SSL engine uses internally for inter-process synchronization.<br />
SSLMutex file:/var/run/mod_ssl_mutex</p>
<p># Inter-Process Session Cache:<br />
# Configure the SSL Session Cache: First either `none&#8217;<br />
# or `dbm:/path/to/file&#8217; for the mechanism to use and<br />
# second the expiring timeout (in seconds).<br />
SSLSessionCache dbm:/var/run/mod_ssl_scache<br />
SSLSessionCacheTimeout 300<br />
SSLSessionCache none</p>
<p># Pseudo Random Number Generator (PRNG):<br />
# Configure one or more sources to seed the PRNG of the<br />
# SSL library. The seed data should be of good random quality.<br />
SSLRandomSeed startup file:/dev/urandom 512<br />
SSLRandomSeed connect file:/dev/urandom 512</p>
<p># Logging:<br />
# The home of the dedicated SSL protocol logfile. Errors are<br />
# additionally duplicated in the general error log file. Put<br />
# this somewhere where it cannot be used for symlink attacks on<br />
# a real server (i.e. somewhere where only root can write).<br />
# Log levels are (ascending order: higher ones include lower ones):<br />
# none, error, warn, info, trace, debug.<br />
SSLLog /var/log/apache/ssl_engine.log<br />
SSLLogLevel info<br />
&lt;/IfModule&gt;</p>
<p>&nbsp;</p>
<p>
Lalu buat sertifikat SSL nya<br />
dengan langkah2 sbb:</p>
<p>Buat Private Key<br />
$ openssl genrsa -des3 -rand file1:file2:file3:file4:file5 -out server.key 1024<br />
file1,file2 dll merupakan nama file sembarang di linux anda yang digunakan untuk menggenerate bilangan acak.</p>
<p>Buat CSR (Certificate Signing Request)<br />
$ openssl req -new -key server.key -out server.csr<br />
maka akan menghasilkan serentetan pertanyaan yang harus anda jawab<br />
Using configuration from /usr/local/ssl/openssl.cnf<br />
Enter PEM pass phrase:Enter pass phrase here<br />
You are about to be asked to enter information that will be incorporated<br />
into your certificate request.<br />
What you are about to enter is what is called a Distinguished Name or a DN.<br />
There are quite a few fields but you can leave some blank<br />
For some fields there will be a default value,<br />
If you enter &#8216;.&#8217;, the field will be left blank.<br />
&#8212;&#8211;<br />
Country Name (2 letter code) [AU]:ID<br />
State or Province Name (full name) [Some-State]:Jawa Timur<br />
Locality Name (eg, city) []:Gresik<br />
Organization Name (eg, company) [Internet Widgits Pty Ltd]:MahaRadjaReza Corp.<br />
Organizational Unit Name (eg, section) []:.MahaRadjaReza Corp.<br />
Common Name (eg, YOUR name) []:www.muhadi.com<br />
Email Address []:ronnie@muhadi.com</p>
<p>Please enter the following &#8216;extra&#8217; attributes<br />
to be sent with your certificate request<br />
A challenge password []:<br />
An optional company name []:</p>
<p>
Buat Self-Signed Certificate<br />
$ openssl x509 -req -days 60 -in server.csr -signkey server.key -out server.crt<br />
angka 60 menunjukkan masa berlaku certificate (60 hari )</p>
<p>Install Private Key dan Certificate<br />
dengan cara membuat konfigurasi virtual host pada apache dengan contoh isi:</p>
<p># SSL Virtual Hosts<br />
&lt;IfDefine SSL&gt;</p>
<p>&lt;VirtualHost _default_:443&gt;<br />
ServerAdmin <a href="mailto:ronnie@muhadi.com">ronnie@muhadi.com</a><br />
DocumentRoot /usr/local/apache/share/htdocs<br />
ServerName <a href="http://www.muhadi.com">www.muhadi.com</a><br />
ScriptAlias /cgi-bin/ /usr/local/apache/share/htdocs/cgi-bin/<br />
SSLEngine on<br />
SSLCertificateFile /usr/local/apache/etc/ssl.crt/server.crt<br />
SSLCertificateKeyFile /usr/local/apache/etc/ssl.key/server.pem<br />
SetEnvIf User-Agent &#8220;.*MSIE.*&#8221; nokeepalive ssl-unclean-shutdown<br />
CustomLog /usr/local/apache/var/log/ssl_request_log \<br />
&#8220;%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \&#8221;%r\&#8221; %b&#8221;<br />
&lt;/VirtualHost&gt;</p>
<p>&lt;/IfDefine&gt;</p>
<p>
lalu restart apache anda</p>
<p>jangan lupa cek lognya di<br />
/usr/local/apache/var/log/ssl_request_log<br />
/usr/local/apache/var/log/error.log</p>
<p>
Jika tidak ada kata2 ajaib Error maka instalasi mod_ssl sukses.</p>
<p>&nbsp;</p>
<p><strong>Selamat Berjuang</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.muhadi.com/2006/07/06/setting-mod_ssl-di-apache-di-debian-sarge/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
