≡ Menu

Instal OpenBSD to Secure Web Server part Configure the File Structure and the Network

by on January 18, 2006

Now on with the install. First, clear the possibility that OpenBSD recognized an existing partition on your hard-drive by typing the following:

The ?z? command zeroes the partitions, leaving only C. Author Note: Thanks to Joel Dinel for the partition zeroing hint.

Now you can add the file structure. This consists of /(root), /var, /swap, /usr, and /home. File size is an important consideration:

  • The root / must be at least 150m; 500m is recommended.
  • /tmp can be as small as 150m. Performance can increase if this is larger.
  • /var should be larger for a server because /var/www and /var/mail can fill up quickly (especially if you expect to handle larger mail attachments).
  • swap should be twice the size of the RAM you have or twice the size of the RAM you expect to have.
  • 512MB of RAM makes a swap space of 1,024MB ideal. One gig of RAM makes two gigs of swap space.
  • /usr and /home need to be larger if you are creating a desktop workstation with X Windows.

I am using a 10GB hard drive. You should use values that make sense for your situation. Keep in mind that the values for offset will differ depending on the size of your hard drive. The following instructions create the basic file structure for the operating system:

TYPE: a a. ENTER. offset:[63]. ENTER. size:500m. ENTER. FS type: [4.2BSD]. ENTER. mount point:[none] /. ENTER. TYPE: a b. ENTER. offset:[614880]. ENTER. size: [19386045] 1024m. ENTER. FS type: [swap]. ENTER. TYPE: a d. ENTER. offset: [2712528]. ENTER. size: [17288397] 500m. ENTER. FS type: [4.2BSD]. ENTER. mount point: [none] /tmp. ENTER. TYPE: a e. ENTER. offset: [3327408]. ENTER. size: [16673517] 3g. ENTER. FS type: [4.2BSD]. ENTER. mount point: [none] /var. ENTER. TYPE: a f. ENTER. offset:[5425056]. ENTER. size: [14575869] 2g. ENTER. FS type: [4.2BSD]. ENTER. mount point: [none] /usr. ENTER. TYPE: a g. ENTER. offset: [9619344]. ENTER. size: [10381581] 2g. ENTER. FS type: [4.2BSD]. ENTER. mount point: [none] /home. ENTER. Now that you have created the file structure, write the changes:

TYPE: p. ENTER. This shows the partitions you are about to create. Leave a little extra space for future changes (like RAM upgrades, or log files filling /var) or leave the size of the g partition unspecified and g will use up the rest of your hard disk:

TYPE: q. ENTER. Write new label? Choose y. ENTER. Now, cycle through the options you have created. Hit ENTER until the /home directory appears, then type ?done?.

The next step destroys all existing data on these partitions:

Are you sure that you?re ready to proceed? TYPE: y. ENTER. You will be prompted for a system hostname. Use any name you like. I used the name ftknox.

The following steps guide you through configuring the network using DHCP:

  • Configure the network? Choose yes. ENTER.
  • If you are using an Ethernet card that is supported by OpenBSD, then you should be prompted to initialize an interface. Press ENTER.
  • Symbolic (host) name for vr0? TYPE: ?([ftknox] dlink530TX)?. ENTER. You should see the speed options for your Ethernet card.
  • Do you want to change the media options? Choose no. ENTER.
  • IPv4 address for vr0? (or ?none? or ?dhcp?) TYPE: dhcp. ENTER.
  • Enter your DNS domain name and the address of your DNS nameserver.
  • Default IPv4 route? Choose dhcp. ENTER.
  • Edit hosts with ed? Choose no. ENTER.
  • Do you want to do any manual network configuration? Choose no. ENTER.
  • Password for root account? Do not use any word in any language. Numbers and letters and special characters are best in combination.

Now that the network and file structure configuration is done, it is time to access an (F)TP server to install the operating system:

Where are the install sets? (or ?done?) TYPE: f ENTER. HTTP/FTP proxy URL? (e.g., ?http://proxy:8080?. or ?none?) Choose none. ENTER. Display the list of known FTP servers? Choose yes. ENTER. Find the server that is closest to you (heeding the warnings from the introduction regarding international distribution):

  • Server? (IP address, hostname, list#, ?done? or ???) TYPE: ?ftp.openbsd.org?. ENTER.
  • Does the server support passive mode FTP? Choose yes. ENTER.
  • Server directory? Choose pub/OpenBSD/3.6/i386. ENTER.
  • Login? Choose anonymous. ENTER.

The following sets are available:

  • File name? (or ?done?) [bsd.mp] TYPE all. ENTER.
  • File name? (or ?done?) TYPE: ?-game36.tgz?. ENTER.
  • File name? (or ?done?) TYPE: ?done?. ENTER.
  • Ready to install sets? TYPE: ?yes? ENTER.

And away you go. You are now installing the entire OpenBSD operating system over the Internet to your host (server) computer. So depending on your connection speed, this could take minutes or hours. If it works, you will see various messages about getting somefile.tgz, followed by a percentage. Of course, 100 percent is the target.

Then you will be prompted with the following questions:

  • Where are the install sets? (or ?done?) TYPE: done ENTER.
  • Start sshd(8) by default? Choose yes. ENTER.
  • Do you expect to run the X window System? Choose either yes or no. ENTER. (*/ I personally believe that X Windows has no place on a server, but you may think differently.*)
  • Change the default console to com0? Choose no ENTER.
  • Set your time zone. This one?s self-explanatory.

You should now have a congratulations screen and a root prompt. Take your boot floppy out of the a: drive and TYPE halt. Reboot your machine to start using OpenBSD. You will notice that because you started sshd by default that it will have generated a new dsa and rsa host key. This is excellent. OpenSSH runs seamlessly with OpenBSD because the same people make both. For further information, read the OpenSSH FAQ. The afterboot section of the man pages offers a wealth of information that you should read as well:

TYPE: "man afterboot". One of the strengths of OpenBSD is the high quality of its man pages. Make sure you read these before attempting to post a question on any OpenBSD forum. (Browsing Hint: Page Up and Page Down move you through the man pages; ENTER scrolls one line; TYPE ?q? to quit.)

Set Up SU

To use SU, you must first create a regular user, which you will regularly log in as:

  1. Log in as root.
  2. TYPE: ?adduser?.
  3. Choose your favorite shell. I use the default [sh].
  4. Use the default login class.
  5. Use the default Home partition: [/home].

Continue using the defaults, unless you have a special situation. I choose not to send a message to myself and to be prompted for passwords by default. One thing I do change is the password encryption method. Blowfish is my algorithm of choice (and is likely the default). Enter username and full name when prompted.

Now continue as root:

  1. TYPE: ?vi /etc/group?.
  2. The top line should read: ?wheel:*0:root?.
  3. TYPE ?i? to enter vi insert mode.
  4. Move to the end of the first line using the right arrow.
  5. Add a comma and the username of the user you just created. (e.g., wheel:*0:root,user1)
  6. Press ESC and TYPE ?:wq? to write the file and exit vi.

Test this out:

  1. Press CTRL-ALT-F2 to open a new login screen.
  2. Log in as the new user you just created.
  3. TYPE ?su?.
  4. Enter your root password.

You should once again have a root prompt ?#?. Use this prompt to install the ports and package collections. The following section shows you how.

{ 1 comment }

Install OpenBSD to Secure Web Server Part Introduction

by on January 18, 2006

The OpenBSD team prides itself on producing one of the most?if not the most?secure operating systems in the world. If you are concerned about keeping the sensitive data within your organization protected, consider OpenBSD. As a member of the 4.4BSD-lite family of operating systems, OpenBSD sets itself apart by claiming to be ?secure by default?. The basis for this claim is the diligence of the OpenBSD code auditing team and the inclusion of military grade cryptography in the base system (including Kerbos, OpenSSH, and IPSec). OpenSSH runs best with this OpenBSD (as it was developed by the OpenBSD team).You can install OpenBSD in a couple of ways. The easiest method is to order the OpenBSD CD-ROM from the OpenBSD ordering page. The OpenBSD team, headed by Theo de Raadt, relies on the sale of these CD-ROM packages for its financial survival, so it prefers that users choose this method. Installation via CD-ROM is outlined in detail inside the CD case.The second?and faster?way of installing OpenBSD is over the Internet via FTP or HTTP. Though this install is free, a post-installation courtesy is to order the CD-ROM anyway, make a donation to OpenBSD, and / or buy a limited edition OpenBSD T-shirt or poster.

This tutorial demonstrates a network install of the OpenBSD operating system, along with PHP4 and MySQL. It presents an advanced system administrator build, which assumes basic knowledge of the VI editor.

[Author?s Note: Because OpenBSD is a Canadian-made product, export of the security suite and source code is not restricted in any way. However, while U.S. readers can download (import) OpenBSD, exporting or re-exporting cryptographic software from the US is still a serious criminal offence. For those of you living in the US, do not attempt to export the OpenBSD operating system once you?ve downloaded it. If you are an American citizen located outside the US, do not download OpenBSD from an American site. You have been warned! Of course, downloading OpenBSD from an American site to an American location is fine. Always choose the server nearest you.]

Create OpenBSD Boot Floppy

OpenBSD runs on a number of hardware platforms. The following directions are somewhat specific to ?IBM PC? aka ?Intel/AMD? architecture machines. To install OpenBSD over the network, your host computer needs either a floppy or a CD-ROM drive and an Ethernet card that OpenBSD can recognize. So check your hardware first. If you use an Intel-based system, your information is under i386.To create a bootable CD-ROM, you need a CD burner and CD creation software. To simplify the multi-step process of creating the floppy boot install disk on Windows, which is somewhat involved, I developed an installer package. I did not alter the boot installer in any way, but if you prefer to receive the software directly from the OpenBSD site, you?ll find it in the tools section of the 3.6 release site. Navigate to your relevant hardware and download the necessary files.

To complete the example install, you need 1-3 floppy disks and a standard 1.44M floppy drive on your Windows computer. For a standard build, you need only the first disk. The second disk is for special RAID and SCUSI situations, and the third is for laptops. This tutorial uses Windows 2000, but floppy disk creation should work seamlessly with Windows NT and XP as well. If you use an older DOS system or Windows 95/98, then you must use the fdimage.exe file included in the downloadable openbsd36_floppy_install.zip file (with documentation).

The following steps will guide you through a Windows 2000, XP, and NT OpenBSD boot floppy creation:

  1. Download the OpenBSD 3.6 floppy images.
  2. Format your floppy disk: My computer ?> 3 1/2 floppy A: ?> right click ?> format.
  3. Place the directory openbsd36_floppy_install on your c: drive as C:openbsd36_floppy_install.
  4. Open a dos prompt and type:
  5. Now that openbsd36_floppy_creation is your working directory type:

For a standard Intel architecture, you need only the first disk. If the first disk does not take you to the install screen (or you are using a laptop), you may have to make one or two more floppy boot disks. Again, format your second and third floppy disks then type the following, respectively (see Figure 1):

 
Figure 1. OpenBSD Floppy Creation (Win2000)

Put your newly created floppy boot installer in the a: drive of the computer on which you want to install OpenBSD. Make sure your CMOS is set up to boot from floppy first, and then boot from hard drive second.

To complete the install, you need an Ethernet card that OpenBSD supports. The networking setup procedure is quite straightforward. The following instructions explain how to set up DHCP for a DSL connection. At each listed prompt, just follow the instructions:

  1. Would you like to (I)nstall, (U)pgrade, or (S)hell? Choose I. ENTER.
  2. Terminal type? ENTER
  3. Do you wish to select a keyboard-encoding table? Choose no. ENTER.
  4. Proceed with install? Press y. ENTER.
  5. Which one is the root disk? Choose ?(or ?done?)[wd0]?. ENTER.
  6. Do you want to use *all* of wd0 for OpenBSD? Choose no. ENTER.
  7. fdisk: 1>q. ENTER.
  8. Initial label editor (Enter ??? for help at this prompt.)
  9. TYPE: ?>??. ENTER.

The tools you see are part of the OpenBSD label/partition editor. The disk label editor screen might not look pretty, but it is very powerful. The most important commands for a basic install are ?a? for add partition, ?d? for delete partition, ?p? for print label, and ?q? for quit. OpenBSD requires a manual file system setup. During this process ?m? is for megabytes and ?g? is for gigabytes. This tutorial assumes you are installing OpenBSD on a system dedicated to OpenBSD. (For dual boot issues, see the FAQ.)

{ 0 comments }

Install OpenBSD 3.6

by on January 18, 2006

Buat yang pengen belajar OpenBSD gw selipin di bawah gimana caranya instalasi OPenBSD buat pertama kali….btw tutorianya gw ambil dari blognya om Tri, en dia juga yang ngajarin gw, tangkyu yee omm 🙂

setelah booting via cd maka akan tampil pertanyaan :

pilihan ?I? di gunakan untuk install openBSD ke system kemudian pilihan ?U? untuk Upgrade system nya tanpa merubah konfigurasi terdahulu, dan kemudian pilihan ?S? untuk masuk kedalam shell nya, biasanya di gunakan untuk maintenance dll.

Setelah itu akan tampil :

kita coba instal menggunakan standar instalasi untuk pilihan terminal dan keyboard mapping-nya jadi ya tinggal tekan enter aja.

karena kita sudah menyiapkan segalanya dan kondisi persiapan untuk instalasi sudah siap maka kita tinggal tekan ?y? untuk melanjutkan proses instalasi

Kemudian kita masuk ke bagian tersulit dari proses instalasi ini, yaitu pembagian partisi harddrive yang akan kita gunakan. harddrive yang kebetulan di kenal adalah wd0 maka kita tinggal tekan enter untuk melanjutkan proses instalasi tersebut

berhubung saya akan menggunakan semua partisi untuk di gunakan dengan system openBSD maka saya pilih ?yes? dalam pemilihan tersebut.

lanjut ke dalam penentuan partisi, yang saya pakai standar isntalasi sesuai dengan yang ada di site openBSD

dan lanjut ke proses format atau menentukan mount point yang akan di gunakan setelah pengalokasian partisi tersebut. Setelah proses tersebut selesai maka akan berlanjut ke penentuan hostname yang akan digunakan oleh komputer tersebut.

lalu berlanjut ke seting up network yang akan di gunakan, seperti tampilan di bawah ini :

dan berlanjut ke proses menge-set password root di komputer tersebut.

berlanjut ke pemilihan media instalasi, berhubung kita memiliki CD openBSD maka kita akan melanjutkan proses instalasi tersebut dengan pilihan media instalasinya adalah cdrom

dan berlanjut ke pemilihan file-set yang akan di install kedalam system tersebut, di dalam proses ini saya akan install semua file-set yang tersedia.

dan setelah itu akan tampil proses instalasi seperti di bawah ini.

kemudian lanjut ke proses finishing dari instalasi tersebut :

selesai sudah standar instalasi untuk openBSD.

taken from : tridianto.wordpress.com

{ 1 comment }

Dikosan d'Amanahs

by on January 17, 2006

Foto – foto ini di jepretin ama yang namanya ian, nah ceritanya dia dateng kekosan sambil bawa banyak Film dvd trus kita2 beli dvd dia dengan sarat dia kudu motoiin kita kita 😀
Amanah

Amanah
{ 0 comments }

Foto-Foto absis BulTang (Bulu Tangkis)

by on January 17, 2006

Olah ragalah biar tubuh kita lebih sehat 😀 (padahal gw jarang banget olah raga) tapi sebisa mungkin gw sempet2in buat ngegerakin badan deh, biat otot2 nya agak gerak dikid.

Nah setiap hari Senin ama Kemis malem gw sama temen2 gw ada acara bulutangkis di daerah Gg. Sawo, lumayan lah walaupun lapangannya outdoor, kita disanah maennya gratis nga di pungut bayaran.

Yang di bawah ini foto2 gw ma temen2 gw sehabis maen badminton, masih pada basah ama keringet hmmpphh lumayan baunya? :))

Bulu Tangkis Bulu Tangkis Bulu Tangkis
{ 0 comments }

Pindah Hosting Ganti MT ke WP

by on January 17, 2006

Hiksss….postingan blog gw ilang de sebagian untung cuman sedikid yang ilang 🙁 , kenapah bisa ilang karena tempat hostingan gw lama nga tau kenapa dari kemaren nga bisa diakses, ya mungkin ama Admin yang baru akun gw di ilangin, tapi gw juga sadar seh karena gw cuman numpang doang.

Dan sekarang gw pindah hostingan di tempat yang baru, yaa pikir gw mendingan gw pindah aje lahh walaupun kudu bayar yang penting gw nga jadi pengemis ( gaya bangeett ) terus gw juga mindahin data blog gw yang sebelomnya pa MovableTive gw pindahin ke WordPress ya biar agak refresin dikid gito locchh.

Okay dahh

Mudah mudahhan di tempat yang baru dan Blog Engine yang baru juga nantinya nga ada masalah yang serius-serius biar nga puyengg 😀

{ 0 comments }
Next Posts Previous Posts

Categories

@2021 www.ASEP.id

WP Admin