OpenVPN with OTP one time password by google authenticator working all the time part 4

<< Back to part 3 <<

5. Testing with pamtester :

We will need a tool named pamtester to debug when working with pam modules.

# yum install pamtester

By default, linux PAM package installed with lot of services :

OpenVPN with OTP one time password by google authenticator working all the time part 3

<< Back to part 2 <<

4. Install google authenticator PAM module 

We need to install pam-devel package to rebuild the google lib PAM module.

# yum install pam-devel

Follow up : http://code.google.com/p/google-authenticator/ to download libpam-google-authenticator source code.

# wget http://google-authenticator.googlecode.com/files/libpam-google-authenticator-1.0-source.tar.bz2

# tar xvf libpam-google-authenticator-1.0-source.tar.bz2

# cd libpam-google-authenticator-1.0-source.tar.bz2

# make install
...........
...........
cp pam_google_authenticator.so /lib64/security
cp google-authenticator /usr/local/bin

OpenVPN with OTP one time password by google authenticator working all the time part 2

<< Back to part 1 <<

3. Create user (Alice) certificate for authentication :

Generate Alice private key

# openssl genrsa -out alice.key 2048

Generate Alice certificate request

Notice : the common name (CN) should match the username = alice

# openssl req -out alice.req -key alice.key -new -days 365

Sign Alice request by using rootCA

# openssl x509 -in alice.req -out alice.cert -days 365 -req -CA rootCA.cert -CAkey rootCA.key -CAcreateserial

OpenVPN with OTP one time password by google authenticator working all the time

So why OpenVPN but not l2tp or pptp or ipsec ?

The good thing :

- It can be run at tcp:80 or tcp:443. No more worry about firewall or behind NAT.

- Also can be used with http proxied.

- SSLv3 + PKI Cert Authentication.

- Totally free.

- Multiple platforms supported : Windows, Linux, Mac, Ios, Android ...

The bad thing :

- Some vpn solution like l2tp or pptp is supported natively by Windows, when using OpenVPN you need to manually install the client.

Fix yahoo smtp mail error code 554 Message not allowed PH01 not accepted for policy reasons

Blocked by yahoo smtp server

For some reasons, my mail server has been denied by yahoo smtp server, I can not send email to yahoo.com domain, the mail log is something like this :

B078B14A8008: to=someone@yahoo.com, relay=mta5.am0.yahoodns.net[66.196.118.34]:25, delay=2.9, delays=0.04/0/0.78/2.1, dsn=5.0.0, status=bounced (host mta5.am0.yahoodns.net[66.196.118.34] said: 554 Message not allowed - [PH01] Email not accepted for policy reasons. Please visit http://postmaster.yahoo.com/errors/postmaster-27.html [120] (in reply to end of DATA command))

I have tried changing my mail server using another IP but no luck. I also tried contacting with yahoo webmaster but no responses.

Config log4net send log to elasticsearch with fluentd and kibana - realtime and centralization - part 2

<< Back to part 1 <<

1. Config Log4net to push log with syslog format :

On the Log4net machine, config the appender like this :

<appender name="UdpAppender" type="log4net.Appender.UdpAppender">
  <remoteAddress value="10.90.7.195" />
  <remotePort value="5140" />
  <layout type="log4net.Layout.PatternLayout, log4net">
   <conversionPattern value="&lt;190&gt;%date{MMM dd HH:mm:ss} %P{log4net:HostName} %logger: %thread %level %logger Inside-Log %P{log4net:HostName} [[%message" />
  </layout>
  <filter type="log4net.Filter.LevelRangeFilter">
   <param name="LevelMin" value="INFO" />
   <param name="LevelMax" value="ERROR" />
  </filter>
</appender>

Config log4net send log to elasticsearch with fluentd and kibana - realtime and centralization.

This post will help you to config Apache log4net Library to output log to a centralization logging system, which can be used to watch realtime log events + searching + analysis ...

I will use 2 machines in this scenario :

- The Log4net machine with IP = 10.90.7.194, this machine act as the source log generator (installed or used with some application which has implemented Apache Log4net Lib). The Log4net will be configed to send log stream using syslog format on UDP protocol.

Postfix log centralize and analysis in realtime with fluentd elasticsearch and kibana - part 5

<< Back to Part 4 <<

5. Advanced configuration :

If you follow the previous part, you can now should have postfix log events displaying in Kibana, but there are some advanced trick that you may get interested in.

Postfix log centralize and analysis in realtime with fluentd tdagent elasticsearch and kibana - part 4

<< Back to part 3 <<

4. Config Kibana to show Postfix log event

So far so good, from previous posts we already have event logs stored in Elasticsearch, now we need to use Kibana to display interesting dashboards. 

Kibana is a great tool which connects directly to Elasticsearch, it all based on html, javascript and css and without any server side scripting => Kibana run directly in your browser and connects your browser to Elasticsearch on port tcp:9200.

Postfix log centralize and analysis in realtime with fluentd tdagent elasticsearch and kibana - part 3

<< Back to part 2 <<

3. Config Elasticsearch

Elasticsearch is a very strong and flexible search engine based on Apache lucene, it supports load balance and fail over by using shards and replicas technique - this helps to scale out to very big model with multiple clustered nodes. 

In this post, Elasticsearch will act as the search engine and is the final destination of the log stream. The installation and configuration is quite simple and easy.