Thursday, December 23, 2004

Nightmare ..

That is the day when i think i really need to use windows . hahahaha .. Why ? We have a power failure in our data centre and suddenly when my Freebsd boot up , it say "drive is not mounted cleanly " .. after a whole day i'm waiting , it still fail . I read through internet how to build the server back . but it seem not to help . Most people posting as an expert so i cant get their guides .
Take a shortcut , i build my DNS server to a separate server using Windows 2000. Since my freebsd only use pentium 3 with 256 ram . If I install windows 2000 to this server , everything looks like in flashback mode ( slow movement and action). It tooks me only 2 days to build the server . since i've learn how to manage DNS from MCSE training class ..
Eventhough the problem has been solve after building the dns server , but to me , we are now 100% happy Windows family . I read through internet about dns vulnerability and many of it tells about windows . Oh man , i'm too lazy to do all the patches . I decide to fully patch my windows dns server and sleep tightly :) .
In the same time , i still want to build back my Freebsd server . I read through internet how to build Freebsd server . During that time is 5.1 . After 2 weeks struggle finally i succeed to build the server . That is my first success in Opensource . Let me tell the truth , I feels so happy . But still nothing . I can only see login text and password . During installation , I select to install GUI . But unluckily after complete the installation , when i run startx , it says that my Display configuration is problem . So still cannot use GUI to manage my server . (Still using original server pentium 3).
I ignore to configure the GUI but concentrate to configure named service . Looking all the needed file such as named.conf , dns table file , how to configure SOA and how to manage the service . Yeaahhhh .. after a month facing the text mode , finally i got the reply from internet DNS test (www.checkdns.net) your dns configured properly .. Oh mannn. That is 2nd success and now i can admit that i've truly success building back my Freebsd server (Master DNS). I shutdown the Windows dns server since it does not satisfied me . The more challenge i get , the more excited the success .. I build back 2nd dns server and it tooks only 3 day since i've learn from the first server . Now everything looks easier . Learn from mistake . But , both dns works in master master . I still cannot make it as master slave . But i leave the server since i have involve with network and security projects ..

Saturday, October 23, 2004

My first Opensource Server

I start learning Opensource seriously around year 2004 . During that time , i need to maintain 2 Freebsd server (Version 4.7) which used for external DNS . It was so pain since I'm a Windows lover that fall in love with 'mouse' .. Always need mouse and GUI to meet my server .
Unfortunately , the Freebsd server does not come with gui . I try to install Xwindows . But i'm too far to do that . Finally i decide to learn just DNS part . I start using easy editor to edit file . Since everything is in terminal , I lost all the GUI beauty and start digging in pain the DNS configuration from the server . From time to time I start to understand about named, dns table , and most importand is basic how DNS work in internet .
When my Office publish a new public server , i need to update the dns table . during that time , i thought i need to restart machine everytime i change the table .. hehehe . Finally i know i just need to restart named service ..
We have 2 dns server and act as Master slave . So i just need to update to master only . That's only my experience using Opensource about a year ...

Monday, December 22, 2003

My Background and bla.. bla .. blaa..

Hi everybody . I will share about my experience in IT . I am an IT officer working with Malaysia Government . I use to deal with IT everyday . As i can say from 8 am till 6 pm is all about IT .
This blog is not to condemn any products or technology . But i just want to share my experience migrating my environtment from Windows to Open Source . I start working at year 2000 . I deal with windows user and technology . I am technician during that time . I need to install Windows 98 , Windows Me , Windows XP and Windows 2000 (Server and Desktop). I am die hard fan of Windows ... hehehe
One day I read about security in internet . During that time it was a famous tool such as Winnuke , POD , Boink , Papa smurf and so on . I am so interested to learn about it . But the more deep i learn to more interesting to Linux . Because most of the article told about vulnerabilities of windows and attacking using linux . Sounds good is it .
It looks like a war in cyber . I also start playing with MIRC and join some channel . People in MIRC also always test their skills take others as their guenea pig .sometimes work sometime not. hehehe . including me . I start playing with hacking tools for windows but seems not so interesting . I met some friend that good in Linux and they teach me some linux basic . I start using BitchX after learning Linux.
I learn more about linux from my friend from Penang . His nickname is KANE . Thanks a lot man .. he told me to learn more about TCPIP if you really want to be good in networking and security . But i'm so stubborn . I just want to nuke people :) . hahahaha . so my knowledge about linux just around that . After some time I get bored with mirc and i stop learning linux .
Year 2003 i've been hired by Malaysia government to be IT person . That was a great opputunity . I've a lot of chance to enhance my skill .During that time , my skill is just like a technician . As earlier , i told that i always deal with desktop but just some basic server technology . I realize that i love network so much .In my new office i learn many technologies about server .
But as a new person , nobody will trust you . My first job is to backup the server . And I believe the job that all people hates . Because we have to wait until 5.30 pm to start backup . Since that time we only use windows backup . so need to turn off all the service such as SQL and exchange before fully backup . Most of the time , I do it during weekend and differential mode during daily . I need to backup all the MSSQL database and Microsoft Exchange .
My boss starting to trust on me and give me more chalenging task . I have to maintain ministry email system .. It is Microsoft Exchange 2000 . That was a tough job for me during that time . since i dont have any experience about how email works and so on . I learn from internet and friends . After 3 month working , i have a chance to attend Microsoft training (MCSE module) . Oh mannn .. believe me . I'm so blurrr!!! what the hack is Active directory ?? Mail transport agent ? mx record . I'm so stressed to catch up all this thing . Luckily we have a maintenance contract for the server . I feel a little bit release since i can rely to this vendor . I learn as much as i can from the vendor and get familiar about active directory and Microsoft Exchange . I hunt all the seminar and product launching for Microsoft product . I was so obsessed about Microsft technology .
Sept 2003 , I get a tech ed voucher . Wowwwww.. this is great . I went to the Tech-Ed and learn more about security and messaging . I'm so adore to Steve Riley .. he talks about security just like a peanut .. hehehe . I get excited with new Microsoft product . Microsoft ISA server 2000 for Proxy and firewall .
More and more products of microsoft .. Active directory , exchange , ISA , IIS , microsoft SQL . Since in my agency , there is only 2 person and we need to manage more than 20 server , so I have a lot of chance to explore and study the Microsoft product in my agency .
Unfortunately , blaster blast us!!! all the server get attacked by the blaster worm including ISA server get hanged!! before we use ISA firewall , we use freebsd server as a gateway to internet . even though it is a pentium III pc , but all the while internet access is good and no problem . so during blaster attack , we switch back internet gateway using freebsd and block ping . It is amazed that the server can stay alive eventhough being attack by blaster badly . I use tcpdump to identify which pc get infected by the blaster . After all the pc been patched , we switch back to use microsoft ISA for content filtering purpose . We implement Microsoft ISA and combine with active directory authentication . Since that incident , I believe Open Source is better in security (i mean BSD product)
Basically during that time 95% of my IT environtment rely on Microsoft technology ....