介紹
GParted 是 GNOME 的硬碟分割軟體。是個能取代 Partition Magic 的工具，目前它甚至已經能處理 Windows 上的 NTFS。GParted 也有 GParted LiveCD 和 GParted LiveUSB 可以讓您用一片光碟片或 USB隨身碟 就能處理硬碟分割。
 |
| 直接選第一個選項即可進入光碟預載的系統 |
 |
| 使用預設選項 |
 |
| 選擇語系打入「30」台灣地區-繁體中文 |
 |
| 直接使用預設「ENTER」 |
 | |
| 第一眼看到的畫面，右下角的 logo 感到特別熟悉！！ 這個畫面大約會停留1秒後會自動跳到下個畫面 |
 |
| 介面很簡單、清楚、直覺 |
 |
| 選擇不同硬碟的方式 |
 |
| 調整分割區大小 |
 |
| 最後按下 apply 結束編輯。 按下後會有提示要作備份，由於備份是事前工作，這邊忽略他 至於怎麼備份，這應該不用介紹了 ＠＠ |
ROOT =/usr/sbin
POLFILE =/etc/tripwire/tw.pol
DBFILE =/var/lib/tripwire/$(HOSTNAME).twd
REPORTFILE =/var/lib/tripwire/report/$(HOSTNAME)-$(DATE).twr
SITEKEYFILE =/etc/tripwire/site.key
LOCALKEYFILE =/etc/tripwire/$(HOSTNAME)-local.key
EDITOR =/bin/vi
LATEPROMPTING =false
LOOSEDIRECTORYCHECKING =false
MAILNOVIOLATIONS =true
EMAILREPORTLEVEL =3
REPORTLEVEL =3
MAILMETHOD =SENDMAIL
SYSLOGREPORTING =false
MAILPROGRAM =/usr/sbin/sendmail -oi -tGLOBALEMAIL ="root@localhost,root@192.168.1.25"
(
rulename = "Invariant Directories",
severity = $(SIG_MED)
)
{
/ -> $(SEC_INVARIANT) (recurse = 0) ;
/home -> $(SEC_INVARIANT) (recurse = 0) ;
/etc -> $(SEC_INVARIANT) (recurse = 0) ;
}
[atrpms] name=Red Hat Enterprise Linux $releasever - $basearch - ATrpms baseurl=http://dl.atrpms.net/el$releasever-$basearch/atrpms/stable gpgkey=http://ATrpms.net/RPM-GPG-KEY.atrpms gpgcheck=1 enabled=1
[dovecot-check] enabled = true
#過濾名稱，對應filter.d/*.conf
filter = dovecot-check
#iptables設定
action = iptables-multiport[name=dovecot-check, port="pop3,pop3s,imap,imaps", protocol=tcp]
sendmail-whois[name=dovecot, dest=xxx@example.com, sender=xxx@example.com]
#需要掃描的記錄檔
logpath = /var/log/secure
#排除的ip、網域
ignoreip = 168.192.0.1 192.168.1.0/24
#阻擋的時間，-1表示永久阻擋
bantime = 86400
#監視的log時間區段
findtime = 300
#最高嘗試錯誤次數
maxretry = 3
[Definition]
#掃描log檔時的過濾規則 failregex = (?: Authentication failure|Aborted login|Disconnected).*rip=(?:::f{4,6}:)?(?P<host>\S*), .* #排除部份 ignoreregex = (?: Disconnected: Logged out).*
fail2ban-regex [log路徑] [filter路徑]fail2ban-regex /var/log/dovecot.log /etc/fail2ban/filter.d/dovecot-check.conf
service fail2ban start
{start|stop|status|restart} fail2ban-client reloadiptables –Lfail2ban-client status fail2ban-client status [jail.conf 設定的名稱]fail2ban-client statusdovecot-check
chkconfig fail2ban on
POSTQUEUE(1) POSTQUEUE(1)
NAME
postqueue - Postfix queue control
SYNOPSIS
postqueue [-v] [-c config_dir] -f
postqueue [-v] [-c config_dir] -i queue_id
postqueue [-v] [-c config_dir] -p
postqueue [-v] [-c config_dir] -s site
--以下略--
看被Queue的信:是版本的問題嗎？
postqueue -q
強迫將Queue信寄出:
postqueue -f
刪除所有被Queue的信:
postsuper -d ALL
刪除某封Queue的信:
postsuper -d queue_id
刪除所有正在 deferred 佇列中的郵件 ( 刪除曾經發送失敗的信 ):
postsuper -d ALL deferred
知道這些就好辦了，直接到相對應的資料夾把信刪掉即可。
※ Mail Queue 所在的目錄 ※※※
/var/spool/mqueue
/var/spool/postfix -- 底下列出 postfix 的子目錄
》active
目前正在準備發送的信件。（在 message id 後會多加一個 * 號）
Messages that the queue manager has opened for delivery. Only a limited number of messages is allowed to enter the active queue (leaky bucket strategy, for a fixed delivery rate).
》bounce
每一位收件者的傳送狀態，並記載為何會被退信
Per-recipient status information about why mail is bounced. These files are maintained by the bounce(8) daemon.
》corrupt
信件損毀導致無法傳送的信件
Unreadable or damaged queue files are moved here for inspection. 》defer
暫時無法被傳送的信件，並記載為何會被延遲傳送。這種情形最常發生在你的 Mail Server 被列入灰名單（GrayList）的時候，你會看到訊息為「 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.」
Per-recipient status information about why mail is delayed. These files are maintained by the defer(8) daemon.
》deferred
無法被傳送的信件會放置在此目錄，但 Mail Server 還是會嘗試幫你繼續送，只是必須等 Backoff time。Mail that could not be delivered upon the first attempt. The queue manager implements exponential backoff by doubling the time between delivery attempts.
》hold
被暫時停止發送的信件，如要發送出去，需要由手動（在 message id 後會多加一個 ! 號）
Messages that are kept "on hold" are kept here until someone sets them free.
》incoming
從外部或本地寄送到本機的信件。
Inbound mail from the network, or mail picked up by the local pickup(8) daemon from the maildrop directory.
使用 GNU Screen 回復被中斷的遠端存取作業階段
SSH 斷線了怎麼辦？沒關係，還有 Screen 幫你保留！
screen
#screen 開啟一個新的作業階段，如果連線中斷，此作業階段依舊會被保留住。
$ screen -ls復原作業階段：
There are screens on:
13454.pts-2.mail (Attached)
13670.pts-4.mail (Detached)
2 Sockets in /var/run/screen/S-zongyan..
其中，13670.pts-4.mail (Detached)代表中斷的作業階段。
#screen -r [作業階段識別號]切換到Attached的作業階段：
例如：
#screen -r 13670.pts-4.mail
#screen -d -r [作業階段識別號]離開作業階段方式：
例如：
#screen -d -r 13454.pts-2.mail
#exit
※要是我們要新加入的一些非預設的，程式(例如www)所產生的紀錄檔怎麼辦?
/var/log/httpd-access.log 640 5 * @T00 Z /var/run/httpd.pid 30
/var/log/httpd-error.log 640 5 * @T00 Z /var/run/httpd.pid 30
第一欄是紀錄檔的位置, 第二欄是紀錄檔的權限 (mode)，5 表示在硬碟
內保留過去六次處理的紀錄（log.0.gz~ log.5.gz）, 比六次還舊的紀錄
就把他砍了。* 表示不管紀錄檔的大小。 @T00 表示每天零點零分的時候
處理這個檔案，Z 表示把處理過的檔案壓縮起來, 節省空間。
※為什麼後面要加上/var/run/httpd.pid 30？
因為 newsyslog 在系統 default 的 contable (/etc/crontab) 裡被預先
設定為每一個小時啟動一次，然而在 newsyslog.conf 裡設定讓 apache log
自動 rotate，不過發現 newsyslog 後接下來的 apache log 都不會寫入了，
只留下一行 newsyslog[66253]: logfile turned over
這個問題出在當 newsyslog rotate log之後，沒有送個 SIGHUP 給 apache，
導致 apache的log 寫到不知道什麼地方去，所以要在 newsyslog.conf 裡面
有關 httpd-access.log 及 httpd-error.log 的部份後面加上要 KILL -HUP
的 pid 檔，才能正常運作。
==== 20120425 ====
為什麼httpd.pid的sig_num 要設定為30？ 不能設定其他值嗎？
hwakeye 在下面有作解釋
=====
flags This optional field is made up of one or more characters that
specify any special processing to be done for the log files
matched by this line. The following are valid flags:
B indicates that the log file is a binary file, or has some
special format. Usually newsyslog(8) inserts an ASCII
message into a log file during rotation. This message is
used to indicate when, and sometimes why the log file was
rotated. If B is specified, then that informational mes-
sage will not be inserted into the log file.
C indicates that the log file should be created if it does
not already exist, and if the -C option was also speci-
fied on the command line.
D indicates that newsyslog(8) should set the UF_NODUMP flag
when creating a new version of this log file. This
option would affect how the dump(8) command treats the
log file when making a file system backup.
G indicates that the specified logfile_name is a shell pat-
tern, and that newsyslog(8) should archive all filenames
matching that pattern using the other options on this
line. See glob(3) for details on syntax and matching
rules.
J indicates that newsyslog(8) should attempt to save disk
space by compressing the rotated log file using bzip2(1).
N indicates that there is no process which needs to be sig-
naled when this log file is rotated.
U indicates that the file specified by path_to_pid_file
will contain the ID for a process group instead of a
process. This option also requires that the first line
in that file be a negative value to distinguish it from a
process ID.
Z indicates that newsyslog(8) should attempt to save disk
space by compressing the rotated log file using gzip(1).
- a minus sign will not cause any special processing, but
it can be used as a placeholder to create a flags field
when you need to specify any of the following fields.
# cd /usr/ports/editors/vim-lite/
# sudo make install clean # cp /usr/local/share/vim/vim73/vimrc_example.vim /usr/local/share/vimrc
| Freebsd 和套件有關的指令 無次要群組 |
 | |
| 作者或來源 瘦河馬 | 2009-10-27 15:52:24 |
| 關鍵字 1freebsd 2port
此文完整連結 http://note.tc.edu.tw/179.html
| |