First thing first I need do install samba file server and clamav anti-virus, after configurating my samba share i have made 2 directory’s in /home

1. virus
2. logs

the virus folder contains the infected files found during scanning and the logs folder contains the report of the scanning witch is send bu email to you.

and added a script in crontab in the root account.

#!/bin/bash
TIME=$(date '+%Y-%m-%d-%T')
/usr/bin/clamdscan --move /home/virus/quarantine -v /home/samba > /home/logs/samba/dailyscan.$TIME
virus=`cat /home/logs/samba/dailyscan.$TIME | grep "Infected files" | awk '{print $3}'`
virus=`cat /home/logs/samba/dailyscan.$TIME | grep "Total errors:" | awk '{print $3}'`
if [ "$virus" != "0" ]; then
mail -u root -s "Virus on Samba File Server : Hostname `hostname`" you@mail.com </home/logs/samba/dailyscan.$TIME
else if [ "$error" != "0" ]; then
mail -u root -s "Error on virus scan Interliner.eu: Hostname `hostname`" you@mail.com </home/logs/samba/dailyscan.$TIME
fi
fi

and set the script to run once a day, in my case in 11:00pm, because the businesses it is not in the hours . The reson is that i made it run once a day because it task’s 2 hours to finish the scanning, You can change this

If this fails, follow the Debian MPPE HOWTO, then return here.

Note: see pptpd.conf(5) for more details on the other options.Note: you will need to restart pptpd to make changes to /etc/pptpd.conf effective:

Note: this method has all the usernames in one file. There are other ways, including authentication using Radius, or using Samba. Check the mailing list (subscribe, archives).Note: you do not need to restart pptpd, a change to chap-secrets is effective for the next connection.

Comments

If you have comments on this document, please send them to the author at james.cameron at hp.com. But if you need help, use the mailing list (subscribe, archives) so that we can share the load.

Sursa

http://wiki.koeln.ccc.de/index.php/Ubuntu_PXE_Install

dupa accea m-am hotarat sa fac aia pe linux am loat o statie normala de lucru pe care cam caraie windows-ul si ma instalat ubuntu server 7.10 impreuna cu OpenLDAP si Samba Domain Controller si pot sa spun ca merge foarte ok pe langa asta am mai instalat DHCPd si un proxy server nu de alta dar sa poata antivirusul sa faca update pt ca am cam taiat net-ul din sala de info stau prea mult elevii pe hi5 sau asculta muzica de pe youtube si imi mananca banda cea de toate zilele 32kb/s sper sa se rezolve problema aia cu banda de net, na ma rog eu orcum o sa am net si apropo de windows, serverul de Ael care ruleaza pe windows a crapat acuam cateva zile nush dc nu a fost instalat nimica alceva in afara de Ael pe sistemul respectiv…intro zi de luni am mers la lucru si cand acolo explorer-ul de la windows 2003 pornea si se oprea singru era clar trebuie reparat dar mi-am bagat picioarele in el si am hotarat sa pun Ael-ul pe linux joi cand ajung la lucru o sa am cu ce sa ma joc partea a2a ii ca pe forumul de la edu toti zic sa nu se faca aia dar macar nu moare sistemul intro luna pt ca nu a fost oprit

pt cei care doresc sa instaleze opeldap + samba domain controller va recoman ubuntuforum

Change my example obove file with your scriptfile name.

chmod +x file

update-rc.d file defaults

to remove a script:

First you most remove the original script in /etc/init.d Then, to remove the links in /etc/rcrunlevel.d run (as root):

update-rc.d file remove

defaults is used, update-rc.d will make links to start the service in runlevels 2345, and stop the service in runlevels 016.

To start the script folding in runlevels 0123 and stop in 456, run (as root):

update-rc.d file start 0123 stop 456

IP Address 10.0.0.1

Range: 10.0.0.1 to 10.0.0.30

Subnet Mask: 255.255.255.224

DNS Servers: 193.226.98.1, 193.226.98.2

Domains:r2d2.dositei.ro

Gateway Address: 10.0.0.1

sudo apt-get install dhcp3-server

sudo cp /etc/default/dhcp3-server /etc/default/dhcp3-server_backup

nano /etc/default/dhcp3-server

Find this line

INTERFACES=”"

Replace with the following line

INTERFACES=”eth0″

Save the edited file

sudo cp /etc/dhcp3/dhcpd.conf /etc/dhcp3/dhcpd.conf_backup

rm /etc/dhcpd.conf

nano /etc/dhcp3/dhcpd.conf

copy and paste the code

ddns-update-style none;

log-facility local7;

subnet 10.0.0.0 netmask 255.255.255.224 {
range 10.0.0.1 10.0.0.30;
option domain-name-servers 193.226.98.1, 193.226.98.2;
option domain-name “r2d2.dositei.ro”;
option routers 10.5.0.1;
option broadcast-address 10.0.0.31;
default-lease-time 600;
max-lease-time 7200;
}

sudo /etc/init.d/dhcp3-server restart

#deb cdrom:[Ubuntu-Server 7.10 _Gutsy Gibbon_ - Release i386 (20071016)]/ gutsy main restricted
# See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to
# newer versions of the distribution.

deb http://us.archive.ubuntu.com/ubuntu/ gutsy main restricted
deb-src http://us.archive.ubuntu.com/ubuntu/ gutsy main restricted

## Major bug fix updates produced after the final release of the
## distribution.
deb http://us.archive.ubuntu.com/ubuntu/ gutsy-updates main restricted
deb-src http://us.archive.ubuntu.com/ubuntu/ gutsy-updates main restricted

## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team, and may not be under a free licence. Please satisfy yourself as to
## your rights to use the software. Also, please note that software in
## universe WILL NOT receive any review or updates from the Ubuntu security
## team.
deb http://us.archive.ubuntu.com/ubuntu/ gutsy universe
deb-src http://us.archive.ubuntu.com/ubuntu/ gutsy universe
deb http://us.archive.ubuntu.com/ubuntu/ gutsy-updates universe
deb-src http://us.archive.ubuntu.com/ubuntu/ gutsy-updates universe

## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team, and may not be under a free licence. Please satisfy yourself as to
## your rights to use the software. Also, please note that software in
## multiverse WILL NOT receive any review or updates from the Ubuntu
## security team.
deb http://us.archive.ubuntu.com/ubuntu/ gutsy multiverse
deb-src http://us.archive.ubuntu.com/ubuntu/ gutsy multiverse
deb http://us.archive.ubuntu.com/ubuntu/ gutsy-updates multiverse
deb-src http://us.archive.ubuntu.com/ubuntu/ gutsy-updates multiverse

## Uncomment the following two lines to add software from the ‘backports’
## repository.
## N.B. software from this repository may not have been tested as
## extensively as that contained in the main release, although it includes
## newer versions of some applications which may provide useful features.
## Also, please note that software in backports WILL NOT receive any review
## or updates from the Ubuntu security team.
deb http://us.archive.ubuntu.com/ubuntu/ gutsy-backports main restricted universe multiverse
deb-src http://us.archive.ubuntu.com/ubuntu/ gutsy-backports main restricted universe multiverse

## Uncomment the following two lines to add software from Canonical’s
## ‘partner’ repository. This software is not part of Ubuntu, but is
## offered by Canonical and the respective vendors as a service to Ubuntu
## users.
deb http://archive.canonical.com/ubuntu gutsy partner
deb-src http://archive.canonical.com/ubuntu gutsy partner

deb http://security.ubuntu.com/ubuntu gutsy-security main restricted
deb-src http://security.ubuntu.com/ubuntu gutsy-security main restricted
deb http://security.ubuntu.com/ubuntu gutsy-security universe
deb-src http://security.ubuntu.com/ubuntu gutsy-security universe
deb http://security.ubuntu.com/ubuntu gutsy-security multiverse
deb-src http://security.ubuntu.com/ubuntu gutsy-security multiverse

Preliminary Note

In this tutorial I use the hostname openhell.org with the IP address 192.168.0.100. These settings might differ for you, so you have to replace them where appropriate.

Make sure that you are logged in as root (type in

sudo su

to become root), because we must run all the steps from this tutorial as root user. Also, if you want to use vi as your text editor (as suggested by this tutorial), you should run

apt-get install vim-full

The vim-full package makes sure that the vi text editor behaves as expected (without vim-full, you might experience some strange behaviour in the vi text editor).

2 Install MySQL And phpMyAdmin

This can all be installed with one single command:

apt-get install mysql-server mysql-client libmysqlclient15-dev phpmyadmin apache2

You will be asked two questions:

New password for the MySQL “root” user: <– yourrootsqlpassword (password of your choice)
Web server to reconfigure automatically: <– apache2

3 Install PureFTPd With MySQL Support

For Ubuntu 7.10 there is a pre-configured pure-ftpd-mysql package available. Install it like this:

apt-get install pure-ftpd-mysql

Then we create an ftp group (ftpgroup) and user (ftpuser) that all our virtual users will be mapped to. Replace the group- and userid 2001 with a number that is free on your system:

groupadd -g 2001 ftpgroup
useradd -u 2001 -s /bin/false -d /bin/null -c “pureftpd user” -g ftpgroup ftpuser

4 Create The MySQL Database For PureFTPd

Now we create a database called pureftpd and a MySQL user named pureftpd which the PureFTPd daemon will use later on to connect to the pureftpd database:

mysql -u root -p

CREATE DATABASE pureftpd;
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO ‘pureftpd’@'localhost’ IDENTIFIED BY ‘ftpdpass’;
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO ‘pureftpd’@'localhost.localdomain’ IDENTIFIED BY ‘ftpdpass’;
FLUSH PRIVILEGES;

Replace the string ftpdpass with whatever password you want to use for the MySQL user pureftpd. Still on the MySQL shell, we create the database table we need (yes, there is only one table!):

USE pureftpd;

CREATE TABLE ftpd (
User varchar(16) NOT NULL default ”,
status enum(’0′,’1′) NOT NULL default ’0′,
Password varchar(64) NOT NULL default ”,
Uid varchar(11) NOT NULL default ‘-1′,
Gid varchar(11) NOT NULL default ‘-1′,
Dir varchar(128) NOT NULL default ”,
ULBandwidth smallint(5) NOT NULL default ’0′,
DLBandwidth smallint(5) NOT NULL default ’0′,
comment tinytext NOT NULL,
ipaccess varchar(15) NOT NULL default ‘*’,
QuotaSize smallint(5) NOT NULL default ’0′,
QuotaFiles int(11) NOT NULL default 0,
PRIMARY KEY (User),
UNIQUE KEY User (User)
) TYPE=MyISAM;

quit;

As you may have noticed, with the quit; command we have left the MySQL shell and are back on the Linux shell.

BTW, (I’m assuming that the hostname of your ftp server system is server1.example.com) you can access phpMyAdmin under http://openhell.org/phpmyadmin/ (you can also use the IP address instead of server1.example.com) in a browser and log in as the user pureftpd. Then you can have a look at the database. Later on you can use phpMyAdmin to administrate your PureFTPd server.

5 Configure PureFTPd

Edit /etc/pure-ftpd/db/mysql.conf. It should look like this:

cp /etc/pure-ftpd/db/mysql.conf /etc/pure-ftpd/db/mysql.conf_orig
cat /dev/null > /etc/pure-ftpd/db/mysql.conf
vi /etc/pure-ftpd/db/mysql.conf

MYSQLSocket      /var/run/mysqld/mysqld.sock

#MYSQLServer     localhost

#MYSQLPort       3306

MYSQLUser       pureftpd

MYSQLPassword   ftpdpass

MYSQLDatabase   pureftpd

#MYSQLCrypt md5, cleartext, crypt() or password() - md5 is VERY RECOMMENDABLE uppon cleartext

MYSQLCrypt      md5

MYSQLGetPW      SELECT Password FROM ftpd WHERE User="L" AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "R")

MYSQLGetUID     SELECT Uid FROM ftpd WHERE User="L" AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "R")

MYSQLGetGID     SELECT Gid FROM ftpd WHERE User="L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "R")

MYSQLGetDir     SELECT Dir FROM ftpd WHERE User="L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "R")

MySQLGetBandwidthUL SELECT ULBandwidth FROM ftpd WHERE User="L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "R")

MySQLGetBandwidthDL SELECT DLBandwidth FROM ftpd WHERE User="L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "R")

MySQLGetQTASZ   SELECT QuotaSize FROM ftpd WHERE User="L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "R")

MySQLGetQTAFS   SELECT QuotaFiles FROM ftpd WHERE User="L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "R")

Make sure that you replace the string ftpdpass with the real password for the MySQL user pureftpd in the line MYSQLPassword! Please note that we use md5 as MYSQLCrypt method, which means we will store the users’ passwords as an MD5 string in the database which is far more secure than using plain text passwords!

Then create the file /etc/pure-ftpd/conf/ChrootEveryone which simply contains the string yes:

echo “yes” > /etc/pure-ftpd/conf/ChrootEveryone

This will make PureFTPd chroot every virtual user in his home directory so he will not be able to browse directories and files outside his home directory.

Also create the file /etc/pure-ftpd/conf/CreateHomeDir which again simply contains the string yes:

echo “yes” > /etc/pure-ftpd/conf/CreateHomeDir

This will make PureFTPd create a user’s home directory when the user logs in and the home directory does not exist yet.

Afterwards, we restart PureFTPd:

/etc/init.d/pure-ftpd-mysql restart

6 Populate The Database And Test

To populate the database you can use the MySQL shell:

mysql -u root -p

USE pureftpd;

Now we create the user exampleuser with the status 1 (which means his ftp account is active), the password secret (which will be stored encrypted using MySQL’s MD5 function), the UID and GID 2001 (use the userid and groupid of the user/group you created at the end of step two!), the home directory /home/www.example.com, an upload and download bandwidth of 100 KB/sec. (kilobytes per second), and a quota of 50 MB:

INSERT INTO `ftpd` (`User`, `status`, `Password`, `Uid`, `Gid`, `Dir`, `ULBandwidth`, `DLBandwidth`, `comment`, `ipaccess`, `QuotaSize`, `QuotaFiles`) VALUES (‘exampleuser’, ’1′, MD5(‘secret’), ’2001′, ’2001′, ‘/home/www.example.com’, ’100′, ’100′, ”, ‘*’, ’50′, ’0′);

quit;

Now open your FTP client program on your work station (something like WS_FTP or SmartFTP if you are on a Windows system or gFTP or FileZilla on a Linux desktop) and try to connect. As hostname you use server1.example.com (or the IP address of the system), the username is exampleuser, and the password is secret.

If you are able to connect – congratulations! If not, something went wrong.

Now, if you run

ls -l /home

you should see that the directory /home/www.example.com (exampleuser‘s home directory) has been automatically created, and it is owned by ftpuser and ftpgroup (the user/group we created at the end of step two):

root@server1:~# ls -l /home
total 8
drwxr-xr-x 2 administrator administrator 4096 2007-10-18 11:35 administrator
drwxr-xr-x 2 ftpuser ftpgroup 4096 2007-10-29 14:29 www.example.com
root@server1:~#

7 Database Administration

For most people it is easier if they have a graphical front-end to MySQL; therefore you can also use phpMyAdmin (in this example under http://openhell.org/phpmyadmin/) to administrate the pureftpd database.

Whenever you want to create a new user, you have to create an entry in the table ftpd so I will explain the columns of this table here:

ftpd Table:

• User: The name of the virtual PureFTPd user (e.g. exampleuser).
• status: 0 or 1. 0 means the account is disabled, the user cannot login.
• Password: The password of the virtual user. Make sure you use MySQL’s MD5 function to save the password encrypted as an MD5 string:
• 
• UID: The userid of the ftp user you created at the end of step two (e.g. 2001).
• GID: The groupid of the ftp group you created at the end of step two (e.g. 2001).
• Dir: The home directory of the virtual PureFTPd user (e.g. /home/www.example.com). If it does not exist, it will be created when the new user logs in the first time via FTP. The virtual user will be jailed into this home directory, i.e., he cannot access other directories outside his home directory.
• ULBandwidth: Upload bandwidth of the virtual user in KB/sec. (kilobytes per second). 0 means unlimited.
• DLBandwidth: Download bandwidth of the virtual user in KB/sec. (kilobytes per second). 0 means unlimited.
• comment: You can enter any comment here (e.g. for your internal administration) here. Normally you leave this field empty.
• ipaccess: Enter IP addresses here that are allowed to connect to this FTP account. * means any IP address is allowed to connect.
• QuotaSize: Storage space in MB (not KB, as in ULBandwidth and DLBandwidth!) the virtual user is allowed to use on the FTP server. 0 means unlimited.
• QuotaFiles: amount of files the virtual user is allowed to save on the FTP server. 0 means unlimited.

8 Anonymous FTP

If you want to create an anonymous ftp account (an ftp account that everybody can login to without a password), you can do it like this:

First create a user ftp (with the homedir /home/ftp) and group ftp:

groupadd ftp
useradd -s /bin/false -d /home/ftp -m -c “anonymous ftp” -g ftp ftp

Then create the file /etc/pure-ftpd/conf/NoAnonymous which contains the string no:

echo “no” > /etc/pure-ftpd/conf/NoAnonymous

With this configuration, PureFTPd will allow anonymous logins.

Restart PureFTPd:

/etc/init.d/pure-ftpd-mysql restart

Then we create the directory /home/ftp/incoming which will allow anonymous users to upload files. We will give the /home/ftp/incoming directory permissions of 311 so that users can upload, but not see or download any files in that directory. The /home/ftp directory will have permissions of 555 which allows seeing and downloading of files:

cd /home/ftp
mkdir incoming
chown ftp:nogroup incoming/
chmod 311 incoming/
cd ../
chmod 555 ftp/

Now anonymous users can login, and they can download files from /home/ftp, but uploads are limited to /home/ftp/incoming (and once a file is uploaded into /home/ftp/incoming, it cannot be read nor downloaded from there; the server admin has to move it into /home/ftp first to make it available to others).

9 Links

• PureFTPd: http://www.pureftpd.org
• MySQL: http://www.mysql.com
• phpMyAdmin: http://www.phpmyadmin.net
• Ubuntu: http://www.ubuntu.com

# CDROMs are managed through the apt-cdrom tool.
deb http://http.us.debian.org/debian stable main contrib non-free
deb http://non-us.debian.org/debian-non-US stable/non-US main contrib non-free
deb http://security.debian.org stable/updates main contrib non-free

# Uncomment if you want the apt-get source function to work
deb-src http://http.us.debian.org/debian stable main contrib non-free
deb-src http://non-us.debian.org/debian-non-US stable/non-US main contrib non-free

Sumber asal : www.debian.org