<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Sokolov blog &#187; Linux</title>
	<atom:link href="http://blog.sokolov.me/category/linux/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.sokolov.me</link>
	<description>всякие заметки, в-основном freebsd,linux</description>
	<lastBuildDate>Wed, 14 Dec 2011 16:39:52 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Linux: CMake, Kernel module etc</title>
		<link>http://blog.sokolov.me/2011/12/14/linux-c-note/</link>
		<comments>http://blog.sokolov.me/2011/12/14/linux-c-note/#comments</comments>
		<pubDate>Wed, 14 Dec 2011 15:20:29 +0000</pubDate>
		<dc:creator>pavel</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Cmake]]></category>
		<category><![CDATA[Kernel Module]]></category>

		<guid isPermaLink="false">http://blog.sokolov.me/?p=1105</guid>
		<description><![CDATA[Linux: Как написать модуль ядра: The Kernel Newbie Corner: Your First Loadable Kernel Module &#124; Linux.com. http://www.tldp.org/LDP/lkmpg/2.6/html/ CMake: Отличные примеры, в т.ч. компиляции модуля ядра через CMAKE: How to use cmake]]></description>
			<content:encoded><![CDATA[<p><strong>Linux: Как написать модуль ядра:</strong><br />
<a href="https://www.linux.com/news/software/linux-kernel/23685-the-kernel-newbie-corner-your-first-loadable-kernel-module">The Kernel Newbie Corner: Your First Loadable Kernel Module | Linux.com</a>.</p>
<p><a href="http://www.tldp.org/LDP/lkmpg/2.6/html/">http://www.tldp.org/LDP/lkmpg/2.6/html/</a></p>
<p><strong>CMake:</strong><br />
Отличные примеры, в т.ч. компиляции модуля ядра через CMAKE: <a href='http://rachid.koucha.free.fr/tech_corner/cmake_manual.html'>How to use cmake</a></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.sokolov.me/2011/12/14/linux-c-note/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>how to install java on ubuntu 11.10</title>
		<link>http://blog.sokolov.me/2011/12/02/how-to-install-java-on-ubuntu-11-10/</link>
		<comments>http://blog.sokolov.me/2011/12/02/how-to-install-java-on-ubuntu-11-10/#comments</comments>
		<pubDate>Fri, 02 Dec 2011 19:46:54 +0000</pubDate>
		<dc:creator>pavel</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://blog.sokolov.me/?p=1092</guid>
		<description><![CDATA[OpenJDK 7 Java Runtime sudo apt-get install openjdk-7-jre install Java for browser – firefox/chrome&#8230; sudo apt-get install icedtea6-plugin Источник: how to install java on ubuntu 11.10.]]></description>
			<content:encoded><![CDATA[<p><strong>OpenJDK 7 Java Runtime</strong></p>
<pre>sudo apt-get install openjdk-7-jre</pre>
<p><strong>install Java for browser – firefox/chrome&#8230;</strong></p>
<pre>sudo apt-get install icedtea6-plugin</pre>
<p>Источник: <a href="http://blog.sudobits.com/2011/09/12/how-to-install-java-on-ubuntu-11-10/">how to install java on ubuntu 11.10</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.sokolov.me/2011/12/02/how-to-install-java-on-ubuntu-11-10/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Как узнать какие файлы открывает программа при запуске</title>
		<link>http://blog.sokolov.me/2011/11/17/%d0%ba%d0%b0%d0%ba-%d1%83%d0%b7%d0%bd%d0%b0%d1%82%d1%8c-%d0%ba%d0%b0%d0%ba%d0%b8%d0%b5-%d1%84%d0%b0%d0%b9%d0%bb%d1%8b-%d0%be%d1%82%d0%ba%d1%80%d1%8b%d0%b2%d0%b0%d0%b5%d1%82-%d0%bf%d1%80%d0%be%d0%b3/</link>
		<comments>http://blog.sokolov.me/2011/11/17/%d0%ba%d0%b0%d0%ba-%d1%83%d0%b7%d0%bd%d0%b0%d1%82%d1%8c-%d0%ba%d0%b0%d0%ba%d0%b8%d0%b5-%d1%84%d0%b0%d0%b9%d0%bb%d1%8b-%d0%be%d1%82%d0%ba%d1%80%d1%8b%d0%b2%d0%b0%d0%b5%d1%82-%d0%bf%d1%80%d0%be%d0%b3/#comments</comments>
		<pubDate>Thu, 17 Nov 2011 16:44:47 +0000</pubDate>
		<dc:creator>pavel</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Без рубрики]]></category>

		<guid isPermaLink="false">http://blog.sokolov.me/?p=1072</guid>
		<description><![CDATA[strace -f -e trace=open]]></description>
			<content:encoded><![CDATA[<p><code>strace -f -e trace=open <filename></filename></code></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.sokolov.me/2011/11/17/%d0%ba%d0%b0%d0%ba-%d1%83%d0%b7%d0%bd%d0%b0%d1%82%d1%8c-%d0%ba%d0%b0%d0%ba%d0%b8%d0%b5-%d1%84%d0%b0%d0%b9%d0%bb%d1%8b-%d0%be%d1%82%d0%ba%d1%80%d1%8b%d0%b2%d0%b0%d0%b5%d1%82-%d0%bf%d1%80%d0%be%d0%b3/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Kubuntu KDE Переключение мониторов Lenovo ThinkPad X220</title>
		<link>http://blog.sokolov.me/2011/11/10/kubuntu-kde-monitors-lenovo-x220/</link>
		<comments>http://blog.sokolov.me/2011/11/10/kubuntu-kde-monitors-lenovo-x220/#comments</comments>
		<pubDate>Thu, 10 Nov 2011 19:17:19 +0000</pubDate>
		<dc:creator>pavel</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[lenovo]]></category>
		<category><![CDATA[thinkpad]]></category>
		<category><![CDATA[xrandr]]></category>

		<guid isPermaLink="false">http://blog.sokolov.me/?p=1078</guid>
		<description><![CDATA[1. Создаем обработчик события fn-f7: echo "event=ibm/hotkey HKEY 00000080 00001007" > /etc/acpi/events/lenovo-fn-f7 echo "action=/usr/bin/autoswitch.sh" >> /etc/acpi/events/lenovo-fn-f7 2. Рестартуем ACPI sudo service acpid restart 3. Содержимое /usr/bin/autoswitch.sh: #!/bin/bash # # # http://www.thinkwiki.org/wiki/Sample_Fn-F7_script screen_change() { VGA1_CONNECTED=$( $SU xrandr -q &#124; grep "VGA1 connected" ) echo `date` ${VGA1_CONNECTED} >> /tmp/333 if [ -n "${VGA1_CONNECTED}" ]; then echo "VGA1 [...]]]></description>
			<content:encoded><![CDATA[<p><strong>1. Создаем обработчик события fn-f7:</strong></p>
<p><code>echo "event=ibm/hotkey HKEY 00000080 00001007" > /etc/acpi/events/lenovo-fn-f7<br />
echo "action=/usr/bin/autoswitch.sh" >> /etc/acpi/events/lenovo-fn-f7<br />
</code></p>
<p><strong>2. Рестартуем ACPI</strong></p>
<p><code>sudo service acpid restart</code></p>
<p><strong>3. Содержимое /usr/bin/autoswitch.sh:</strong></p>
<p><code>#!/bin/bash<br />
#<br />
#<br />
# http://www.thinkwiki.org/wiki/Sample_Fn-F7_script</p>
<p>screen_change() {<br />
    VGA1_CONNECTED=$( $SU xrandr -q | grep "VGA1 connected" )</p>
<p>    echo `date` ${VGA1_CONNECTED} >> /tmp/333</p>
<p>    if [ -n "${VGA1_CONNECTED}" ]; then<br />
        echo "VGA1 is connected"<br />
        xrandr --output VGA1 --auto &#038;&#038; xrandr --output LVDS1 --off<br />
    else<br />
        echo "VGA1 is not  connected"<br />
        xrandr --output LVDS1 --auto &#038;&#038; xrandr --output VGA1 --off<br />
    fi<br />
}</p>
<p># based on /etc/acpi/screenblank.sh (Ubuntu 7.10)<br />
# . /usr/share/acpi-support/power-funcs         # for getXuser<br />
getXuser() {<br />
       user=`finger| grep -m1 ":$displaynum " | awk '{print $1}'`<br />
       if [ x"$user" = x"" ]; then<br />
               user=`finger| grep -m1 ":$displaynum" | awk '{print $1}'`<br />
       fi<br />
       if [ x"$user" != x"" ]; then<br />
               userhome=`getent passwd $user | cut -d: -f6`<br />
               export XAUTHORITY=$userhome/.Xauthority<br />
       else<br />
               export XAUTHORITY=""<br />
       fi<br />
}<br />
# end of getXuser from /usr/share/acpi-support/power-funcs<br />
#<br />
for x in /tmp/.X11-unix/*; do<br />
   displaynum=`echo $x | sed s#/tmp/.X11-unix/X##`<br />
   getXuser;<br />
   if [ x"$XAUTHORITY" != x"" ]; then<br />
       export DISPLAY=":$displaynum"<br />
      screen_change<br />
   fi<br />
done<br />
</code></p>
<h3>Материалы по теме:</h3>
<p>ThinkPad fn-F7: <a href="http://www.thinkwiki.org/wiki/Sample_Fn-F7_script">http://www.thinkwiki.org/wiki/Sample_Fn-F7_script</a></p>
<p>xrandr -q | grep &#8216;VGA1 connected&#8217; \ &amp;&amp; xrandr &#8212;output LVDS1 &#8212;off &#8212;output VGA1 &#8212;auto \ || xrandr &#8212;output LVDS1 &#8212;auto &#8212;output VGA1 &#8212;off</p>
<p>Источник: <a href="http://debback.blogspot.com/2010/01/blog-post.html">Верхом на Debian GNU Linux: Простое переключение мониторов</a>.</p>
<p>Еще кое-чего по теме: <a href="http://www.helplinux.ru/wiki/kb:ubuntu-eeepc-switch-display">http://www.helplinux.ru/wiki/kb:ubuntu-eeepc-switch-display</a></p>
<p>И еще: <a href="http://www.thinkwiki.org/wiki/Xorg_RandR_1.2">http://www.thinkwiki.org/wiki/Xorg_RandR_1.2</a></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.sokolov.me/2011/11/10/kubuntu-kde-monitors-lenovo-x220/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Настройка vnc для коннекта к существующей сессии X</title>
		<link>http://blog.sokolov.me/2011/09/23/%d0%bd%d0%b0%d1%81%d1%82%d1%80%d0%be%d0%b9%d0%ba%d0%b0-xrdp-%d0%b4%d0%bb%d1%8f-%d0%ba%d0%be%d0%bd%d0%bd%d0%b5%d0%ba%d1%82%d0%b0-%d0%ba-%d1%81%d1%83%d1%89%d0%b5%d1%81%d1%82%d0%b2%d1%83%d1%8e%d1%89/</link>
		<comments>http://blog.sokolov.me/2011/09/23/%d0%bd%d0%b0%d1%81%d1%82%d1%80%d0%be%d0%b9%d0%ba%d0%b0-xrdp-%d0%b4%d0%bb%d1%8f-%d0%ba%d0%be%d0%bd%d0%bd%d0%b5%d0%ba%d1%82%d0%b0-%d0%ba-%d1%81%d1%83%d1%89%d0%b5%d1%81%d1%82%d0%b2%d1%83%d1%8e%d1%89/#comments</comments>
		<pubDate>Fri, 23 Sep 2011 17:00:20 +0000</pubDate>
		<dc:creator>den</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://blog.sokolov.me/?p=1019</guid>
		<description><![CDATA[Установка x11vnc: sudo apt-get install x11vnc x11vnc -usepw -shared -find -forever -clip xinerama1 &#038; -usepw использовать ~/.vnc/passwd (предложит создать в случае отсутствия) -shared разрешить более одного подключения -forever не выходить после успешного коннекта -find найти самостоятельно дисплей -clip xinerama1 &#8212; ограничить 1-м дисплеем попытался запустить из-под рута с параметром -unixpw, но навскидку не заработало Если [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Установка <a href="http://www.karlrunge.com/x11vnc/">x11vnc</a>: </strong><br />
<code><br />
sudo apt-get install x11vnc<br />
x11vnc -usepw -shared  -find -forever -clip xinerama1 &#038;<br />
</code></p>
<p>-usepw использовать ~/.vnc/passwd  (предложит создать в случае отсутствия)<br />
-shared разрешить более одного подключения<br />
-forever не выходить после успешного коннекта<br />
-find найти самостоятельно дисплей<br />
-clip xinerama1 &#8212; ограничить 1-м дисплеем<br />
попытался запустить из-под рута с параметром -unixpw, но навскидку не заработало</p>
<p><strong>Если очень хочется, то можно подрубить xrdp:</strong><br />
<code>sudo apt-get install xrdp</code></p>
<p>xrdp.conf:<br />
<code><br />
[globals]<br />
bitmap_cache=yes<br />
bitmap_compression=yes<br />
port=3389<br />
crypt_level=low<br />
channel_code=1</p>
<p>[xrdp1]<br />
name=x11vnc<br />
lib=libvnc.so<br />
username=ask<br />
password=ask<br />
ip=127.0.0.1<br />
port=5900<br />
</code></p>
<p><strong>TODO: <a href="http://www.nomachine.com/documentation/building-components.php">nxproxy </a>- сжатие X</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.sokolov.me/2011/09/23/%d0%bd%d0%b0%d1%81%d1%82%d1%80%d0%be%d0%b9%d0%ba%d0%b0-xrdp-%d0%b4%d0%bb%d1%8f-%d0%ba%d0%be%d0%bd%d0%bd%d0%b5%d0%ba%d1%82%d0%b0-%d0%ba-%d1%81%d1%83%d1%89%d0%b5%d1%81%d1%82%d0%b2%d1%83%d1%8e%d1%89/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>VLC Transcoding</title>
		<link>http://blog.sokolov.me/2011/07/03/vlc-transcoding/</link>
		<comments>http://blog.sokolov.me/2011/07/03/vlc-transcoding/#comments</comments>
		<pubDate>Sun, 03 Jul 2011 15:43:30 +0000</pubDate>
		<dc:creator>pavel</dc:creator>
				<category><![CDATA[IPTV]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Без рубрики]]></category>

		<guid isPermaLink="false">http://blog.sokolov.me/?p=937</guid>
		<description><![CDATA[Транскодинг из консоли: sudo apt-get install libfaac0 vlc udp://@239.195.0.7 --ttl 25 --sout '#transcode{vcodec=h264,acodec=aac,vb=200,ab=32,channels=1}:duplicate{dst=std{access=udp,dst=225.100.199.99:1234}}' UBUNTU codecs http://ubuntuforums.org/showthread.php?t=1117283 Воспроизведение CSA-потока с помощью VLC: vlc test_csa.ts --ts-csa-ck=5555555555555555 --ts-csa2-ck=5555555555555555]]></description>
			<content:encoded><![CDATA[<p><strong>Транскодинг из консоли:</strong><br />
<code><br />
sudo apt-get install libfaac0<br />
vlc  udp://@239.195.0.7 --ttl 25 --sout '#transcode{vcodec=h264,acodec=aac,vb=200,ab=32,channels=1}:duplicate{dst=std{access=udp,dst=225.100.199.99:1234}}'<br />
</code><br />
UBUNTU codecs <a href="http://ubuntuforums.org/showthread.php?t=1117283">http://ubuntuforums.org/showthread.php?t=1117283</a></p>
<p><strong>Воспроизведение CSA-потока с помощью VLC:</strong><code><br />
vlc test_csa.ts --ts-csa-ck=5555555555555555 --ts-csa2-ck=5555555555555555<br />
</code></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.sokolov.me/2011/07/03/vlc-transcoding/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Получение EPG с транспондеров</title>
		<link>http://blog.sokolov.me/2011/05/16/grab-epg/</link>
		<comments>http://blog.sokolov.me/2011/05/16/grab-epg/#comments</comments>
		<pubDate>Mon, 16 May 2011 09:43:35 +0000</pubDate>
		<dc:creator>pavel</dc:creator>
				<category><![CDATA[IPTV]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[EPG]]></category>

		<guid isPermaLink="false">http://blog.sokolov.me/?p=914</guid>
		<description><![CDATA[Устанавливаем tv_grab_dvb apt-get install php5-cli mysql-client php5-mysql php5-pgsql cd /usr/src svn co http://www.darkskiez.co.uk/svn/tv_grab_dvb/trunk tv_grab_dvb cd tv_grab_dvb/ make cp tv_grab_dvb /usr/local/bin/ Устанавливаем скрипт, который объединяет EPG со всех транспондеров в один файл wget -O/usr/local/bin/iptv_xmltv_from_dvb.php http://www.sokolov.me/iptv/linuxstreamer/iptv_xmltv_from_dvb.php chmod 755 /usr/local/bin/iptv_xmltv_from_dvb.php Шедулим в кроне */40 * * * * /usr/local/bin/iptv_xmltv_from_dvb.php -a0,1,2,3,4 -o /var/www/tvprogram.xml]]></description>
			<content:encoded><![CDATA[<p><strong>Устанавливаем tv_grab_dvb</strong><br />
<code>apt-get install php5-cli mysql-client php5-mysql php5-pgsql</p>
<p>cd /usr/src<br />
svn co http://www.darkskiez.co.uk/svn/tv_grab_dvb/trunk tv_grab_dvb<br />
cd tv_grab_dvb/<br />
make<br />
cp tv_grab_dvb /usr/local/bin/<br />
</code></p>
<p><strong>Устанавливаем скрипт, который объединяет EPG со всех транспондеров в один файл</strong><br />
<code>wget -O/usr/local/bin/iptv_xmltv_from_dvb.php  http://www.sokolov.me/iptv/linuxstreamer/iptv_xmltv_from_dvb.php<br />
chmod 755 /usr/local/bin/iptv_xmltv_from_dvb.php<br />
</code></p>
<p>Шедулим в кроне<br />
<code><br />
*/40    *       *       *       *       /usr/local/bin/iptv_xmltv_from_dvb.php -a0,1,2,3,4 -o /var/www/tvprogram.xml<br />
</code></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.sokolov.me/2011/05/16/grab-epg/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Обновление Ubuntu</title>
		<link>http://blog.sokolov.me/2011/04/20/ubuntu-upgrad/</link>
		<comments>http://blog.sokolov.me/2011/04/20/ubuntu-upgrad/#comments</comments>
		<pubDate>Wed, 20 Apr 2011 10:24:40 +0000</pubDate>
		<dc:creator>pavel</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://blog.sokolov.me/?p=889</guid>
		<description><![CDATA[Обновление на след. релиз: do-release-upgrade сначала скачиваем новый /etc/apt/sources.list apt-get clean apt-get update apt-get dist-upgrade Если будут ошибки зависимостей нужно будет запустить apt-get install -f &#038;&#038; dpkg --configure -a]]></description>
			<content:encoded><![CDATA[<p><strong>Обновление на след. релиз:</strong><br />
<code>do-release-upgrade </code></p>
<p>сначала скачиваем новый /etc/apt/sources.list<br />
<code><br />
apt-get clean<br />
apt-get update<br />
apt-get dist-upgrade<br />
</code></p>
<p>Если будут ошибки зависимостей нужно будет запустить<br />
<code><br />
apt-get install -f &#038;&#038; dpkg --configure -a<br />
</code></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.sokolov.me/2011/04/20/ubuntu-upgrad/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>защита sip от перебора</title>
		<link>http://blog.sokolov.me/2010/10/20/%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d0%b0-sip-%d0%be%d1%82-%d0%bf%d0%b5%d1%80%d0%b5%d0%b1%d0%be%d1%80%d0%b0/</link>
		<comments>http://blog.sokolov.me/2010/10/20/%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d0%b0-sip-%d0%be%d1%82-%d0%bf%d0%b5%d1%80%d0%b5%d0%b1%d0%be%d1%80%d0%b0/#comments</comments>
		<pubDate>Wed, 20 Oct 2010 18:29:04 +0000</pubDate>
		<dc:creator>kfx</dc:creator>
				<category><![CDATA[Asterisk]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[sip]]></category>

		<guid isPermaLink="false">http://blog.sokolov.me/?p=732</guid>
		<description><![CDATA[&#160; fail2ban &#8212; достаточно удобный способ защиты сервисов от перебора паролей и других атак на основе анализа log файлов приложений. представляет собой набор скриптов на phyton имеется в портах freebsd и пекетах debian,ubuntu настройки специфичные для asterisk: The contents of /etc/fail2ban/filter.d/asterisk.conf should be the following: &#160; &#60;/code&#62; Next edit /etc/fail2ban/jail.conf to include the following section [...]]]></description>
			<content:encoded><![CDATA[<p>&nbsp;</p>
<p>fail2ban &#8212; достаточно удобный способ защиты сервисов от перебора паролей и других атак на основе анализа log файлов приложений.<br />
представляет собой набор скриптов на phyton</p>
<p>имеется в портах freebsd и пекетах debian,ubuntu</p>
<p>настройки специфичные для asterisk:</p>
<p>The contents of /etc/fail2ban/filter.d/asterisk.conf should be the following:</p>
<p>&nbsp;</p>
<div id="wpshdo_1" class="wp-synhighlighter-outer"><div id="wpshdt_1" class="wp-synhighlighter-expanded"><table border="0" width="100%"><tr><td align="left" width="80%"><a name="#codesyntax_1"></a><a id="wpshat_1" class="wp-synhighlighter-title" href="#codesyntax_1"  onClick="javascript:wpsh_toggleBlock(1)" title="Нажмите, чтобы показать или скрыть блок кода">Исходный код</a></td><td align="right"><a href="#codesyntax_1" onClick="javascript:wpsh_code(1)" title="Показать код отдельно"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/code.png" /></a>&nbsp;<a href="#codesyntax_1" onClick="javascript:wpsh_print(1)" title="Напечатать код"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/printer.png" /></a>&nbsp;<a href="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/About.html" target="_blank" title="Показать информацию о плагине"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/info.gif" /></a>&nbsp;</td></tr></table></div><div id="wpshdi_1" class="wp-synhighlighter-inner" style="display: block;"><span class="co0"># Fail2Ban configuration file</span><br />
<span class="co0">#</span><br />
<span class="co0">#</span><br />
<span class="co0"># $Revision: 250 $</span><br />
<span class="co0">#</span><br />
<br />
<span class="br0">&#91;</span>INCLUDES<span class="br0">&#93;</span><br />
<br />
<span class="co0"># Read common prefixes. If any customizations available -- read them from</span><br />
<span class="co0"># common.local</span><br />
<span class="co0">#before = common.conf</span><br />
<br />
<span class="br0">&#91;</span>Definition<span class="br0">&#93;</span><br />
<br />
<span class="co0">#_daemon = asterisk</span><br />
<br />
<span class="co0"># Option: &nbsp;failregex</span><br />
<span class="co0"># Notes.: &nbsp;regex to match the password failures messages in the logfile. The</span><br />
<span class="co0"># &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;host must be matched by a group named &quot;host&quot;. The tag &quot;&lt;HOST&gt;&quot; can</span><br />
<span class="co0"># &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;be used for standard IP/hostname matching and is only an alias for</span><br />
<span class="co0"># &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;(?:::f{4,6}:)?(?P&lt;host&gt;\S+)</span><br />
<span class="co0"># Values: &nbsp;TEXT</span><br />
<span class="co0">#</span><br />
<br />
failregex = NOTICE.<span class="sy0">*</span> .<span class="sy0">*</span>: Registration from <span class="st_h">'.*'</span> failed <span class="kw1">for</span> <span class="st_h">'&lt;HOST&gt;'</span> - Wrong password<br />
NOTICE.<span class="sy0">*</span> .<span class="sy0">*</span>: Registration from <span class="st_h">'.*'</span> failed <span class="kw1">for</span> <span class="st_h">'&lt;HOST&gt;'</span> - No matching peer found<br />
NOTICE.<span class="sy0">*</span> .<span class="sy0">*</span>: Registration from <span class="st_h">'.*'</span> failed <span class="kw1">for</span> <span class="st_h">'&lt;HOST&gt;'</span> - Username<span class="sy0">/</span>auth name mismatch<br />
NOTICE.<span class="sy0">*</span> .<span class="sy0">*</span>: Registration from <span class="st_h">'.*'</span> failed <span class="kw1">for</span> <span class="st_h">'&lt;HOST&gt;'</span> - Device does not match ACL<br />
NOTICE.<span class="sy0">*</span> .<span class="sy0">*</span>: Registration from <span class="st_h">'.*'</span> failed <span class="kw1">for</span> <span class="st_h">'&lt;HOST&gt;'</span> - Peer is not supposed to register<br />
NOTICE.<span class="sy0">*</span> .<span class="sy0">*</span>: Registration from <span class="st_h">'.*'</span> failed <span class="kw1">for</span> <span class="st_h">'&lt;HOST&gt;'</span> - ACL error <span class="br0">&#40;</span>permit<span class="sy0">/</span>deny<span class="br0">&#41;</span><br />
NOTICE.<span class="sy0">*</span> <span class="sy0">&lt;</span>HOST<span class="sy0">&gt;</span> failed to authenticate <span class="kw2">as</span> <span class="st_h">'.*'</span>$<br />
NOTICE.<span class="sy0">*</span> .<span class="sy0">*</span>: No registration <span class="kw1">for</span> peer <span class="st_h">'.*'</span> \<span class="br0">&#40;</span>from <span class="sy0">&lt;</span>HOST<span class="sy0">&gt;</span>\<span class="br0">&#41;</span><br />
NOTICE.<span class="sy0">*</span> .<span class="sy0">*</span>: Host <span class="sy0">&lt;</span>HOST<span class="sy0">&gt;</span> failed MD5 authentication <span class="kw1">for</span> <span class="st_h">'.*'</span> <span class="br0">&#40;</span>.<span class="sy0">*</span><span class="br0">&#41;</span><br />
NOTICE.<span class="sy0">*</span> .<span class="sy0">*</span>: Failed to authenticate user .<span class="sy0">*@&lt;</span>HOST<span class="sy0">&gt;</span>.<span class="sy0">*</span><br />
<br />
<span class="co0"># Option: &nbsp;ignoreregex</span><br />
<span class="co0"># Notes.: &nbsp;regex to ignore. If this regex matches, the line is ignored.</span><br />
<span class="co0"># Values: &nbsp;TEXT</span><br />
<span class="co0">#</span><br />
ignoreregex =</div></div><br />
&lt;/code&gt;<br />
Next edit /etc/fail2ban/jail.conf to include the following section so that it uses the new filter. This does a 3-day ban on the IP that performed the attack. It is recommend to set the bantime in the [DEFAULT] section so if affects all attacks. It is also recommend to turn on an iptables ban for ssh, httpd/apache, and ftp if they are running on the system. Be sure to edit the sendmail-whois action to send notifications to an appropriate address:</p>
<div id="wpshdo_2" class="wp-synhighlighter-outer"><div id="wpshdt_2" class="wp-synhighlighter-expanded"><table border="0" width="100%"><tr><td align="left" width="80%"><a name="#codesyntax_2"></a><a id="wpshat_2" class="wp-synhighlighter-title" href="#codesyntax_2"  onClick="javascript:wpsh_toggleBlock(2)" title="Нажмите, чтобы показать или скрыть блок кода">Исходный код</a></td><td align="right"><a href="#codesyntax_2" onClick="javascript:wpsh_code(2)" title="Показать код отдельно"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/code.png" /></a>&nbsp;<a href="#codesyntax_2" onClick="javascript:wpsh_print(2)" title="Напечатать код"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/printer.png" /></a>&nbsp;<a href="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/About.html" target="_blank" title="Показать информацию о плагине"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/info.gif" /></a>&nbsp;</td></tr></table></div><div id="wpshdi_2" class="wp-synhighlighter-inner" style="display: block;"><span class="br0">&#91;</span>asterisk-iptables<span class="br0">&#93;</span><br />
enabled  = <span class="kw2">true</span><br />
filter   = asterisk<br />
action   = iptables-allports<span class="br0">&#91;</span><span class="re2">name</span>=ASTERISK, <span class="re2">protocol</span>=all<span class="br0">&#93;</span><br />
mail-whois<span class="br0">&#91;</span><span class="re2">name</span>=ASTERISK, <span class="re2">dest</span>=root, <span class="re2">sender</span>=sip3<span class="sy0">@</span>unetcom.ru<span class="br0">&#93;</span><br />
logpath  = <span class="sy0">/</span>var<span class="sy0">/</span>log<span class="sy0">/</span>asterisk<span class="sy0">/</span>full<br />
maxretry = <span class="nu0">4</span><br />
bantime = <span class="nu0">259200</span></div></div>
<p>To change this format, open /etc/asterisk/logger.conf and add the following line under [general] section (You may have to create this before the [logfiles] section). This causes the date and time to be formatted as Year-Month-Day Hour:Minute:Second, [2008-10-01 13:40:04] is an example.</p>
<p><div id="wpshdo_3" class="wp-synhighlighter-outer"><div id="wpshdt_3" class="wp-synhighlighter-expanded"><table border="0" width="100%"><tr><td align="left" width="80%"><a name="#codesyntax_3"></a><a id="wpshat_3" class="wp-synhighlighter-title" href="#codesyntax_3"  onClick="javascript:wpsh_toggleBlock(3)" title="Нажмите, чтобы показать или скрыть блок кода">Исходный код</a></td><td align="right"><a href="#codesyntax_3" onClick="javascript:wpsh_code(3)" title="Показать код отдельно"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/code.png" /></a>&nbsp;<a href="#codesyntax_3" onClick="javascript:wpsh_print(3)" title="Напечатать код"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/printer.png" /></a>&nbsp;<a href="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/About.html" target="_blank" title="Показать информацию о плагине"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/info.gif" /></a>&nbsp;</td></tr></table></div><div id="wpshdi_3" class="wp-synhighlighter-inner" style="display: block;"><span class="br0">&#91;</span>general<span class="br0">&#93;</span><br />
<span class="re2">dateformat</span>=<span class="sy0">%</span>F <span class="sy0">%</span>T</div></div><br />
для применения изменений перезапустим логгер<br />
<div id="wpshdo_4" class="wp-synhighlighter-outer"><div id="wpshdt_4" class="wp-synhighlighter-expanded"><table border="0" width="100%"><tr><td align="left" width="80%"><a name="#codesyntax_4"></a><a id="wpshat_4" class="wp-synhighlighter-title" href="#codesyntax_4"  onClick="javascript:wpsh_toggleBlock(4)" title="Нажмите, чтобы показать или скрыть блок кода">Исходный код</a></td><td align="right"><a href="#codesyntax_4" onClick="javascript:wpsh_code(4)" title="Показать код отдельно"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/code.png" /></a>&nbsp;<a href="#codesyntax_4" onClick="javascript:wpsh_print(4)" title="Напечатать код"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/printer.png" /></a>&nbsp;<a href="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/About.html" target="_blank" title="Показать информацию о плагине"><img border="0" style="border: 0 none" src="http://blog.sokolov.me/wp-content/plugins/wp-synhighlight/themes/default/images/info.gif" /></a>&nbsp;</td></tr></table></div><div id="wpshdi_4" class="wp-synhighlighter-inner" style="display: block;">asterisk <span class="re5">-rx</span> <span class="st0">&quot;logger reload&quot;</span></div></div></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.sokolov.me/2010/10/20/%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d0%b0-sip-%d0%be%d1%82-%d0%bf%d0%b5%d1%80%d0%b5%d0%b1%d0%be%d1%80%d0%b0/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>DVB-карты</title>
		<link>http://blog.sokolov.me/2010/09/17/dvb-%d0%ba%d0%b0%d1%80%d1%82%d1%8b/</link>
		<comments>http://blog.sokolov.me/2010/09/17/dvb-%d0%ba%d0%b0%d1%80%d1%82%d1%8b/#comments</comments>
		<pubDate>Fri, 17 Sep 2010 11:34:20 +0000</pubDate>
		<dc:creator>pavel</dc:creator>
				<category><![CDATA[IPTV]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://blog.sokolov.me/?p=690</guid>
		<description><![CDATA[DVB-S2 карты двухтюнерные]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.dvbshop.net/product_info.php/info/p2318_Mystique-SaTiX-S2-V2-CI-Dual--2xDVB-S2-CI-HDTV-MPEG4-H-264.html/XTCsid/okfkect594c9qqkhfns5u1j51n1vhk40">DVB-S2 карты двухтюнерные</a></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.sokolov.me/2010/09/17/dvb-%d0%ba%d0%b0%d1%80%d1%82%d1%8b/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

