Informatique

NETAPP

NETAPP 8

Inodes

show

1
volume show –vserver <vserver name> -volume <volume name> -fields files

modify

1
volume modify –vserver <vserver name> -volume <volume name> -files <number of files>

Disk

Passage d’un disque “unassigned” en “spare”

1
CLUSTERCT01::> storage disk modify -disk <Disque-ID> -state spare

Locks

show

1
locks show -vserver <vserver name> -volume <volume name>

Delete

1
set diag
lock break -vserver <vserver name> -volume <volume name> -lif *

Halt

1
::> cluster ha modify -configured false
::> storage failover modify -node  * -enabled false

::> halt -node node-02 -inhibit-takeover true
::> halt -node node-01 -ignore-quorum-warnings true 

::> cluster ha modify -configured true
::> storage failover modify -node * -enabled true

NETAPP 7

SIZE

1
netapp*> vol size nfs1 +200g

Inodes

1
netapp*> maxfiles nfs1 100000

Stats

1
netapp*> stats show volume:nfs1

System info

1
netapp> sysstat -A

chassis status

1
netapp> environment

NETCAT

Ecoute sur le port 8080

1
# netcat -l 8080

Send File

1
server1:~# netcat -l 8080 > /tmp/received_file
server2:~# netcat server1  8080 < /tmp/send_file

Scan de range

1
# netcat -z -v domain.com 1-1000
# netcat -z -v -n 192.168.0.1 1-1000

Webserver

1
while true; do nc -l -p 80 -q 1 < index.html ; done

NMAP

TUTO

Scan de range

1
# nmap -sP 172.23.45.0/24

Scan de port

1
# nmap -PN 8.8.8.8

Scan de port dans un range

ex: port ssh

1
# nmap  -p22 -PS 10.0.10.0/24

ex: range de port (udp et tcp)

1
# nmap  -p U:53,T:21-25,80,8080 -PS 10.0.10.0/24

Scan cypher

1
# nmap --script ssl-enum-ciphers -p 443 vulnerable.com

Analyse de vulnérabilité : cette commande utilise le moteur de script de Nmap

1
nmap --script <script name> 10.0.6.9

Detect FW

1
nmap -sA 10.0.0.69

Detect version

1
nmap -sV 10.0.0.69

nbd

Monter un qcow

1
modprobe nbd max_part=63
qemu-nbd -c /dev/nbd0 /path/to/image.qcow2
1
fdisk -l /dev/nbd0
1
mount /dev/nbd0p3 /mnt/vmroot
1
umount /mnt/vmroot 
qemu-nbd -d /dev/nbd0 
rmmod nbd

Snmpd

En cas de flood des logs :

1
error on subcontainer ‘ia_addr’ insert (-1)

1
sed -i 's/LSd/LS6d/g' /etc/default/snmpd

Conntrack

Commande :

  • List
    conntrack -L [table] [-z]
  • Get
    conntrack -G [table] parameters
  • Del
    conntrack -D [table] paramaters
  • Create
    conntrack -I [table] parameters
  • Show event
    conntrack -E [table] parameters
  • Flush
    conntrack -F [table]

Table full :

La variable actuelle

1
sysctl net.ipv4.netfilter.ip_conntrack_max

La modifier

1
sysctl -w net.ipv4.netfilter.ip_conntrack_max=12000

en dur editer le fichier /etc/sysctl.conf

1
net.ipv4.netfilter.ip_conntrack_max=12000

Compter le nombre de sessions

1
wc -l /proc/net/ip_conntrack

Postfix

TIPS

  • Temporairement bloquer les mails vers un domaine

/etc/postfix/main.cf:

1
smtpd_recipient_restrictions = 
    check_recipient_access hash:/etc/postfix/hold

/etc/postfix/hold:

1
gmail.com        HOLD
blah.com         HOLD

rehash

1
postsuper -r ALL

Gestion de l a queue

Lister les messages en Queue :

1
postqueue -p

Supprimer un message en Queue :

1
postsuper -d DBB3H5D1

Supprimer un message en Queue selon le from :

1
postqueue -p | tail -n +2 | awk 'BEGIN { RS = "" } /www-data@plop\.net/ { print $1 }' | tr -d '*!' | postsuper -d -

Supprimer tous les messages en Queue :

1
postsuper -d ALL

Mettre un messages en attente (hold) :

1
postsuper -h DBB3H5D1

Remettre un messages en mode normale (actif) :

1
postsuper -H DBB3H5D1

Remettre en Queue un message :

1
postsuper -r DBB3H5D1

Pour remettre en Queue tous les messages :

1
postsuper -r ALL

Afficher le contenu d’un message :

1
postcat -q DBB3H5D1

Forcer l’envoie des messages en Queue (flush) :

1
postqueue -f

Limiter la cadence d envois de mails

1
# cat /etc/postfix/transport
wanadoo.fr slow:
laposte.net slow:
orange.fr slow:
aol.com slow:
1
# postmap /etc/postfix/transport

edit /etc/postfix/master.cf 

1
slow    unix    -       -       n       -       5       smtp
        -o syslog_name=postfix-slow
        -o smtp_destination_concurrency_limit=3
        -o slow_destination_rate_delay=1

edit /etc/postfix/main.cf

1
transport_maps = hash:/etc/postfix/transport

#slow 
slow_destination_recipient_limit = 20
slow_destination_concurrency_limit = 2

Fail2ban

bloquer les bruteforce web

/etc/fail2ban/jail.conf:

1
ignoreip = 127.0.0.1/8 89.31.146.164 89.31.146.163 89.31.149.185


[apache-wp-login]

enabled = true
filter = apache-wp-login
#action = iptables-multiport [name = apache-wp-login, port = "http, https" protocol = tcp]
port = http,https
logpath = /var/log/apache2/*/*.access.*.log
maxretry = 5
findtime = 60
bantime = 86400

/etc/fail2ban/filter.d/apache-wp-login.conf:

1
[INCLUDES]

before = common.conf

[Definition]
failregex = ^<HOST> -.*POST /wp-login.php HTTP.*
ignoreregex =

Unban

1
fail2ban-client set ssh unbanip 192.168.0.105

Mysql recover root password

Boot en “single mode”

1
2
# /etc/init.d/mysql stop
# mysqld_safe --skip-grant-tables &

Reset pass

1
mysql> use mysql; update user set password=PASSWORD("NEW-ROOT-PASSWORD") where User='root'; flush privileges;