/l3/trainings/nt-lnet/2006-02-18/fbsd2/root :1 :2 :3 :4 :5 :6 :7 :8 :9 :10 :11 :12 :13 :14 :15 :16 :17 :18 :19 :20 :21 :22 :23 :24 |
|
#ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key
2048 fa:21:16:74:17:76:d8:9c:1d:e4:31:84:57:59:8d:89 /etc/ssh/ssh_host_rsa_key.pub |
#ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key
2048 fa:21:16:74:17:76:d8:9c:1d:e4:31:84:57:59:8d:89 /etc/ssh/ssh_host_rsa_key.pub |
#ssh-keyscan 192.168.15.3
connect (`192.168.15.3'): Permission denied |
#ssh-keyscan 192.168.15.4
connect (`192.168.15.4'): Permission denied |
#ssh-keyscan 192.168.15.5
connect (`192.168.15.5'): Permission denied |
#ssh-keyscan 192.168.15.22
|
#ssh-keyscan 192.168.15.21
connect (`192.168.15.21'): Permission denied |
#ping google.com
PING google.com (192.168.15.254): 56 data bytes 64 bytes from 192.168.15.254: icmp_seq=0 ttl=64 time=0.301 ms 64 bytes from 192.168.15.254: icmp_seq=1 ttl=64 time=0.284 ms 64 bytes from 192.168.15.254: icmp_seq=2 ttl=64 time=0.292 ms 64 bytes from 192.168.15.254: icmp_seq=3 ttl=64 time=0.293 ms ^C --- google.com ping statistics --- 4 packets transmitted, 4 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.284/0.292/0.301/0.006 ms |
#ping goooooooooooogle.com
PING goooooooooooogle.com (192.168.15.254): 56 data bytes 64 bytes from 192.168.15.254: icmp_seq=0 ttl=64 time=0.314 ms 64 bytes from 192.168.15.254: icmp_seq=1 ttl=64 time=0.282 ms 64 bytes from 192.168.15.254: icmp_seq=2 ttl=64 time=0.295 ms 64 bytes from 192.168.15.254: icmp_seq=3 ttl=64 time=0.278 ms ^C --- goooooooooooogle.com ping statistics --- 4 packets transmitted, 4 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.278/0.292/0.314/0.014 ms |
#ping mail.ru
PING mail.ru (194.67.57.26): 56 data bytes 64 bytes from 194.67.57.26: icmp_seq=0 ttl=114 time=130.087 ms 64 bytes from 194.67.57.26: icmp_seq=1 ttl=114 time=128.438 ms 64 bytes from 194.67.57.26: icmp_seq=2 ttl=114 time=134.333 ms 64 bytes from 194.67.57.26: icmp_seq=3 ttl=114 time=128.394 ms 64 bytes from 194.67.57.26: icmp_seq=4 ttl=114 time=127.996 ms 64 bytes from 194.67.57.26: icmp_seq=5 ttl=114 time=130.319 ms ^C --- mail.ru ping statistics --- 6 packets transmitted, 6 packets received, 0% packet loss round-trip min/avg/max/stddev = 127.996/129.928/134.333/2.156 ms |
#ssh-keygen -t dsa -f key
Generating public/private dsa key pair. Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in key. Your public key has been saved in key.pub. The key fingerprint is: be:bb:58:11:62:47:87:66:c7:c3:96:cd:ff:ad:01:86 root@fbsd2 |
#cd /usr/ports/
|
#ssh-keygen -t dsa
Generating public/private dsa key pair. Enter file in which to save the key (/root/.ssh/id_dsa): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /root/.ssh/id_dsa. Your public key has been saved in /root/.ssh/id_dsa.pub. The key fingerprint is: b0:9d:32:a1:d6:3b:10:a7:dd:e5:39:52:b2:f4:c4:c0 root@fbsd2 |
#cat /root/.ssh/id_dsa.pub | ssh m01 `cat >> ~/ssh/authorized_ke
[root@fbsd2:~]# cat /root/.ssh/id_dsa.pub | ssh m01 cat >> ~/ssh/authorized_key [root@fbsd2:~]# cat /root/.ssh/id_dsa.pub | ssh m01 'cat >> ~/ssh/authorized_ke root@fbsd2:~]# cat /root/.ssh/id_dsa.pub | ssh m01 ' y ssh: connect to host fbsd1.unix.nt port 22: Permission denied |
#ipfw show
00030 27 1652 allow tcp from any to me dst-port 22 setup 00030 6 384 allow tcp from any to me dst-port 25 setup 00030 0 0 allow tcp from any to me dst-port 80 setup 00035 1195 188695 allow tcp from any to any established 00040 0 0 allow udp from any to me dst-port 53 in keep-state 00050 320 28728 allow udp from me to any keep-state 01000 74 10532 unreach port udp from any to any 01200 37 2856 allow icmp from me to any keep-state 64000 9 600 count log logamount 10 ip from any to any 65000 5 320 reset tcp from any to any 65535 9 632 deny ip from any to any |
#ipfw add 20 allow tcp from me to any setup
00020 allow tcp from me to any setup |
#cat /root/.ssh/id_dsa.pub | ssh m01 'cat >> ~/ssh/authorized_ke
ys' The authenticity of host 'fbsd1.unix.nt (192.168.15.21)' can't be established. DSA key fingerprint is 3e:b1:81:3d:cb:49:64:b9:ac:78:7f:b0:ea:d1:7f:76. Are you sure you want to continue connecting (yes/no)? y Please type 'yes' or 'no': yes Warning: Permanently added 'fbsd1.unix.nt' (DSA) to the list of known hosts. Password: bash: /root/ssh/authorized_keys: No such file or directory |
#cat /root/.ssh/id_dsa.pub | ssh m01 'cat >> ~/ssh/authorized_ke
[root@fbsd2:~]# cat /root/.ssh/id_dsa.pub | ssh m01 'cat >> ~//ssh/authorized_k yroot@fbsd2:~]# cat /root/.ssh/id_dsa.pub | ssh m01 'cat >> ~/ssh/authorized_ke [root@fbsd2:~]# cat /root/.ssh/id_dsa.pub | ssh m01 'cat >> ~/.ssh/authorized_k root@fbsd2:~]# cat /root/.ssh/id_dsa.pub | ssh m01 'cat >> ~/. e Password: |
#ssh -l m01
usage: ssh [-1246AaCfgkMNnqsTtVvXxY] [-b bind_address] [-c cipher_spec] [-D port] [-e escape_char] [-F configfile] [-i identity_file] [-L [bind_address:]port:host:hostport] [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port] [-R [bind_address:]port:host:hostport] [-S ctl_path] [user@]hostname [command] |
#ssh m01
Enter passphrase for key '/root/.ssh/id_dsa': Last login: Sat Mar 4 12:52:24 2006 from fbsd1.unix.nt Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.0-RELEASE (Kernel) #0: Sat Mar 4 11:18:53 EET 2006 Welcome to FreeBSD! Before seeking technical support, please use the following resources: o Security advisories and updated errata information for all releases are at http://www.FreeBSD.org/releases/ - always consult the ERRATA section for your release first as it's updated frequently. ... http://www.FreeBSD.org/search/. If the doc distribution has been installed, they're also available formatted in /usr/share/doc. If you still have a question or problem, please take the output of `uname -a', along with any relevant error messages, and email it as a question to the questions@FreeBSD.org mailing list. If you are unfamiliar with FreeBSD's directory layout, please refer to the hier(7) manual page. If you are not familiar with manual pages, type `man man'. You may also use sysinstall(8) to re-enter the installation and configuration utility. Edit /etc/motd to change this login announcement. l3-agent is already running: pid=690; pidfile=/root/.lilalo/l3-agent.pid |
#exit
exit Connection to fbsd1.unix.nt closed. |
#cat /root/.ssh/id_dsa.pub | ssh m01 'cat >> ~/.ssh/authorized_k
@fbsd2:~]# cat /root/.ssh/id_dsa.pub | ssh m01 'cat >> ~/ssh/authorized_ke eys't@fbsd2:~]# ipfw add 20 allow tcp from me to any setup [root@fbsd2:~]# ipfw show 00020 3 192 allow tcp from me to any setup 00030 30 1844 allow tcp from any to me dst-port 22 setup 00030 6 384 allow tcp from any to me dst-port 25 setup 00030 0 0 allow tcp from any to me dst-port 80 setup 00035 1427 237747 allow tcp from any to any established 00040 0 0 allow udp from any to me dst-port 53 in keep-state 00050 380 34076 allow udp from me to any keep-state 01000 80 11467 unreach port udp from any to any 01200 37 2856 allow icmp from me to any keep-state 64000 9 600 count log logamount 10 ip from any to any 65000 5 320 reset tcp from any to any 65535 9 632 deny ip from any to any |
#ssh 192.168.15.21
Enter passphrase for key '/root/.ssh/id_dsa': Last login: Sat Mar 4 15:11:07 2006 from fbsd2.linux.nt Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.0-RELEASE (Kernel) #0: Sat Mar 4 11:18:53 EET 2006 Welcome to FreeBSD! Before seeking technical support, please use the following resources: o Security advisories and updated errata information for all releases are at http://www.FreeBSD.org/releases/ - always consult the ERRATA section for your release first as it's updated frequently. ... http://www.FreeBSD.org/search/. If the doc distribution has been installed, they're also available formatted in /usr/share/doc. If you still have a question or problem, please take the output of `uname -a', along with any relevant error messages, and email it as a question to the questions@FreeBSD.org mailing list. If you are unfamiliar with FreeBSD's directory layout, please refer to the hier(7) manual page. If you are not familiar with manual pages, type `man man'. You may also use sysinstall(8) to re-enter the installation and configuration utility. Edit /etc/motd to change this login announcement. l3-agent is already running: pid=690; pidfile=/root/.lilalo/l3-agent.pid |
#exit
exit Connection to 192.168.15.21 closed. |
#ssh 192.168.15.21
Enter passphrase for key '/root/.ssh/id_dsa': Last login: Sat Mar 4 15:16:41 2006 from fbsd2.linux.nt Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.0-RELEASE (Kernel) #0: Sat Mar 4 11:18:53 EET 2006 Welcome to FreeBSD! Before seeking technical support, please use the following resources: o Security advisories and updated errata information for all releases are at http://www.FreeBSD.org/releases/ - always consult the ERRATA section for your release first as it's updated frequently. ... http://www.FreeBSD.org/search/. If the doc distribution has been installed, they're also available formatted in /usr/share/doc. If you still have a question or problem, please take the output of `uname -a', along with any relevant error messages, and email it as a question to the questions@FreeBSD.org mailing list. If you are unfamiliar with FreeBSD's directory layout, please refer to the hier(7) manual page. If you are not familiar with manual pages, type `man man'. You may also use sysinstall(8) to re-enter the installation and configuration utility. Edit /etc/motd to change this login announcement. l3-agent is already running: pid=690; pidfile=/root/.lilalo/l3-agent.pid |
#exit
exit Connection to 192.168.15.21 closed. |
#ipfw show
00020 5 320 allow tcp from me to any setup 00030 37 2292 allow tcp from any to me dst-port 22 setup 00030 6 384 allow tcp from any to me dst-port 25 setup 00030 0 0 allow tcp from any to me dst-port 80 setup 00035 1852 325697 allow tcp from any to any established 00040 0 0 allow udp from any to me dst-port 53 in keep-state 00050 496 44412 allow udp from me to any keep-state 01000 85 12148 unreach port udp from any to any 01200 37 2856 allow icmp from me to any keep-state 64000 9 600 count log logamount 10 ip from any to any 65000 5 320 reset tcp from any to any 65535 9 632 deny ip from any to any |
#cd /etc/re
remote resolv.conf |
#cd /etc/resolv.conf
bash: cd: /etc/resolv.conf: Not a directory |
#les /etc/resolv.conf
bash: les: command not found |
#less /etc/resolv.conf
|
#dig ggb.com.ua NS
; <<>> DiG 9.3.1 <<>> ggb.com.ua NS ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11101 ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 3 ;; QUESTION SECTION: ;ggb.com.ua. IN NS ;; ANSWER SECTION: ggb.com.ua. 345600 IN NS ns3.domino.net.ua. ggb.com.ua. 345600 IN NS ns1.domino.net.ua. ggb.com.ua. 345600 IN NS ns2.domino.net.ua. ;; ADDITIONAL SECTION: ns1.domino.net.ua. 86400 IN A 212.40.45.130 ns2.domino.net.ua. 86400 IN A 204.91.10.86 ns3.domino.net.ua. 86400 IN A 212.109.44.47 ;; Query time: 297 msec ;; SERVER: 192.168.15.254#53(192.168.15.254) ;; WHEN: Sat Mar 4 16:15:37 2006 ;; MSG SIZE rcvd: 141 |
#dig ggb.com.ua MX
; <<>> DiG 9.3.1 <<>> ggb.com.ua MX ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 39408 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;ggb.com.ua. IN MX ;; Query time: 2268 msec ;; SERVER: 192.168.15.254#53(192.168.15.254) ;; WHEN: Sat Mar 4 16:16:23 2006 ;; MSG SIZE rcvd: 28 |
#dig mail.ru MX
; <<>> DiG 9.3.1 <<>> mail.ru MX ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11712 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 1 ;; QUESTION SECTION: ;mail.ru. IN MX ;; ANSWER SECTION: mail.ru. 21600 IN MX 10 mxs.mail.ru. ;; AUTHORITY SECTION: ... mail.ru. 21600 IN NS ns3.mail.ru. mail.ru. 21600 IN NS ns4.mail.ru. mail.ru. 21600 IN NS ns5.mail.ru. mail.ru. 21600 IN NS ns.mail.ru. ;; ADDITIONAL SECTION: mxs.mail.ru. 21600 IN A 194.67.23.20 ;; Query time: 133 msec ;; SERVER: 192.168.15.254#53(192.168.15.254) ;; WHEN: Sat Mar 4 16:16:46 2006 ;; MSG SIZE rcvd: 168 |
#less /etc/resolv.conf
|
#dig ru NS
; <<>> DiG 9.3.1 <<>> ru NS ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50394 ;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;ru. IN NS ;; ANSWER SECTION: ru. 345567 IN NS ns9.ripn.net. ru. 345567 IN NS sunic.sunet.se. ru. 345567 IN NS auth60.ns.uu.net. ru. 345567 IN NS ns.ripn.net. ru. 345567 IN NS ns1.relcom.ru. ru. 345567 IN NS ns2.nic.fr. ru. 345567 IN NS ns2.ripn.net. ru. 345567 IN NS ns5.msk-ix.net. ;; Query time: 1 msec ;; SERVER: 192.168.15.254#53(192.168.15.254) ;; WHEN: Sat Mar 4 16:20:06 2006 ;; MSG SIZE rcvd: 210 |
#host ns.kg
ns.kg has address 195.38.160.36 |
#whois 195.38.160.36
OrgName: RIPE Network Coordination Centre OrgID: RIPE Address: P.O. Box 10096 City: Amsterdam StateProv: PostalCode: 1001EB Country: NL ReferralServer: whois://whois.ripe.net:43 NetRange: 195.0.0.0 - 195.255.255.255 CIDR: 195.0.0.0/8 ... phone: +996 312 664488 nic-hdl: VY6-RIPE source: RIPE # Filtered % Information related to '195.38.160.0/19AS8511' route: 195.38.160.0/19 descr: ASIAINFO Network descr: Bishkek, Kyrgyzstan origin: AS8511 mnt-by: AS8511-MNT source: RIPE # Filtered |
#dig iukr.com.ua
; <<>> DiG 9.3.1 <<>> iukr.com.ua ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42592 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;iukr.com.ua. IN A ;; ANSWER SECTION: iukr.com.ua. 43200 IN A 62.149.2.7 ;; AUTHORITY SECTION: iukr.com.ua. 43200 IN NS ns2.dns.com.ua. iukr.com.ua. 43200 IN NS ns.dns.com.ua. ;; Query time: 91 msec ;; SERVER: 192.168.15.254#53(192.168.15.254) ;; WHEN: Sat Mar 4 16:21:19 2006 ;; MSG SIZE rcvd: 84 |
#host 212.113.39.146
146.39.113.212.in-addr.arpa domain name pointer iukr-lan02.utel.net.ua. |
#whois 212.113.39.146
OrgName: RIPE Network Coordination Centre OrgID: RIPE Address: P.O. Box 10096 City: Amsterdam StateProv: PostalCode: 1001EB Country: NL ReferralServer: whois://whois.ripe.net:43 NetRange: 212.0.0.0 - 212.255.255.255 CIDR: 212.0.0.0/8 ... nic-hdl: UNOC-RIPE mnt-by: AS6877-MNT source: RIPE # Filtered % Information related to '212.113.36.0/22AS6877' route: 212.113.36.0/22 descr: Utel-Certain-Route-36/22 descr: Internet Service, Ukraine origin: AS6877 mnt-by: AS6877-MNT source: RIPE # Filtered |
#whois 192.168.15.254
OrgName: Internet Assigned Numbers Authority OrgID: IANA Address: 4676 Admiralty Way, Suite 330 City: Marina del Rey StateProv: CA PostalCode: 90292-6695 Country: US NetRange: 192.168.0.0 - 192.168.255.255 CIDR: 192.168.0.0/16 NetName: IANA-CBLK1 ... OrgAbuseHandle: IANA-IP-ARIN OrgAbuseName: Internet Corporation for Assigned Names and Number OrgAbusePhone: +1-310-301-5820 OrgAbuseEmail: abuse@iana.org OrgTechHandle: IANA-IP-ARIN OrgTechName: Internet Corporation for Assigned Names and Number OrgTechPhone: +1-310-301-5820 OrgTechEmail: abuse@iana.org # ARIN WHOIS database, last updated 2006-03-03 19:10 # Enter ? for additional hints on searching ARIN's WHOIS database. |
#whois
usage: whois [-aAbdgiIklmQrR6] [-c country-code | -h hostname] [-p port] name ... |
#whois ua
Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. UA.ASCOLOGISTIC.COM UA.NET UA.EDU UA.COM UA To single out one record, look it up with "xxx", where xxx is one of the ... prohibited without the prior written consent of VeriSign. You agree not to use electronic processes that are automated and high-volume to access or query the Whois database except as reasonably necessary to register domain names or modify existing registrations. VeriSign reserves the right to restrict your access to the Whois database in its sole discretion to ensure operational stability. VeriSign may restrict or terminate your access to the Whois database for failure to abide by these terms of use. VeriSign reserves the right to modify these terms at any time. The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. |
#whois .ua
Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. No match for nameserver "UA". >>> Last update of whois database: Sat, 4 Mar 2006 02:48:44 EST <<< NOTICE: The expiration date displayed in this record is the date the registrar's sponsorship of the domain name registration in the registry is currently set to expire. This date does not necessarily reflect the expiration date of the domain name registrant's agreement with the sponsoring ... prohibited without the prior written consent of VeriSign. You agree not to use electronic processes that are automated and high-volume to access or query the Whois database except as reasonably necessary to register domain names or modify existing registrations. VeriSign reserves the right to restrict your access to the Whois database in its sole discretion to ensure operational stability. VeriSign may restrict or terminate your access to the Whois database for failure to abide by these terms of use. VeriSign reserves the right to modify these terms at any time. The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. |
#whois ru
Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. RU.UIB.NO RU.RU.RU RU.RHOST.RU RU.PORNO-FOTOK.NET RU.IDIG.NET RU.EUTOCN.COM ... prohibited without the prior written consent of VeriSign. You agree not to use electronic processes that are automated and high-volume to access or query the Whois database except as reasonably necessary to register domain names or modify existing registrations. VeriSign reserves the right to restrict your access to the Whois database in its sole discretion to ensure operational stability. VeriSign may restrict or terminate your access to the Whois database for failure to abide by these terms of use. VeriSign reserves the right to modify these terms at any time. The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. |
#whois .ru
Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. No match for nameserver "RU". >>> Last update of whois database: Sat, 4 Mar 2006 02:48:44 EST <<< NOTICE: The expiration date displayed in this record is the date the registrar's sponsorship of the domain name registration in the registry is currently set to expire. This date does not necessarily reflect the expiration date of the domain name registrant's agreement with the sponsoring ... prohibited without the prior written consent of VeriSign. You agree not to use electronic processes that are automated and high-volume to access or query the Whois database except as reasonably necessary to register domain names or modify existing registrations. VeriSign reserves the right to restrict your access to the Whois database in its sole discretion to ensure operational stability. VeriSign may restrict or terminate your access to the Whois database for failure to abide by these terms of use. VeriSign reserves the right to modify these terms at any time. The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. |
#whois .com
Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. No match for nameserver "COM". >>> Last update of whois database: Sat, 4 Mar 2006 02:48:44 EST <<< NOTICE: The expiration date displayed in this record is the date the registrar's sponsorship of the domain name registration in the registry is currently set to expire. This date does not necessarily reflect the expiration date of the domain name registrant's agreement with the sponsoring ... prohibited without the prior written consent of VeriSign. You agree not to use electronic processes that are automated and high-volume to access or query the Whois database except as reasonably necessary to register domain names or modify existing registrations. VeriSign reserves the right to restrict your access to the Whois database in its sole discretion to ensure operational stability. VeriSign may restrict or terminate your access to the Whois database for failure to abide by these terms of use. VeriSign reserves the right to modify these terms at any time. The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. |
#whois google.com
Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. GOOGLE.COM.VN GOOGLE.COM.UA GOOGLE.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM GOOGLE.COM.MX GOOGLE.COM.IS.NOT.HOSTED.BY.ACTIVEDOMAINDNS.NET GOOGLE.COM.IS.APPROVED.BY.NUMEA.COM ... prohibited without the prior written consent of VeriSign. You agree not to use electronic processes that are automated and high-volume to access or query the Whois database except as reasonably necessary to register domain names or modify existing registrations. VeriSign reserves the right to restrict your access to the Whois database in its sole discretion to ensure operational stability. VeriSign may restrict or terminate your access to the Whois database for failure to abide by these terms of use. VeriSign reserves the right to modify these terms at any time. The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. |
#whois fsb.ru
% By submitting a query to RIPN's Whois Service % you agree to abide by the following terms of use: % http://www.ripn.net/about/servpol.html#3.2 (in Russian) % http://www.ripn.net/about/en/servpol.html#3.2 (in English). domain: FSB.RU type: CORPORATE descr: Corporate domain for Federal Security Service nserver: ns1.fsb.ru. 213.24.76.2 nserver: ns2.fsb.ru. 194.226.94.138 state: REGISTERED, DELEGATED org: Federal Security Service of Russian Federation phone: +7 095 9149084 fax-no: +7 095 9149084 e-mail: admin@fsb.ru registrar: RTCOMM-REG-RIPN created: 1998.07.06 paid-till: 2006.08.01 source: TC-RIPN Last updated on 2006.03.04 17:29:23 MSK/MSD |
#whreis bind
bash: whreis: command not found |
#wheris bind
bash: wheris: command not found |
#fin . -name bind
bash: fin: command not found |
#find . -name bind
|
#cd /usr/ports/
|
#fing . -name 'bind'
bash: fing: command not found |
#cd /usr/ports/
|
#ls
.cvsignore arabic emulators mbone sysutils CHANGES archivers finance misc textproc COPYRIGHT astro french multimedia ukrainian INDEX-6 audio ftp net vietnamese INDEX-6.bz2 benchmarks games net-im www INDEX-6.db biology german net-mgmt x11 KNOBS cad graphics net-p2p x11-clocks LEGAL chinese hebrew news x11-fm MOVED comms hungarian palm x11-fonts Makefile converters irc polish x11-servers Mk databases japanese portuguese x11-themes README deskutils java print x11-toolkits Templates devel korean russian x11-wm Tools distfiles lang science UPDATING dns mail security accessibility editors math shells |
#cd dns
|
#ls
Makefile libidn adns maradns ares mdnsd bind8 mydns bind84 noip bind9 nsd bind9-dlz nslint bind9-sdb-ldap nsping checkdns odsclient crossip p5-BIND-Conf_Parser ... gresolver sleuth h2n sqldjbdns hesiod staticcharge host tinystats idnkit totd inadyn updatedd ipcheck walker ldapdns zonecheck ldns zonenotify libdjbdns |
#pwd
/usr/ports/dns |
#ls | grep bind
bind8 bind84 bind9 bind9-dlz bind9-sdb-ldap |
#man bind
|
#named -v
BIND 9.3.1 |
#vi /etc/rc.conf
34a35 > inetd_enable="YES" |
#vi /etc/namedb/named.conf
|
#vi /etc/namedb/named.conf
|
#/etc/rc.d/named restart
|
#dig mail.ru
; <<>> DiG 9.3.1 <<>> mail.ru ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27690 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 0 ;; QUESTION SECTION: ;mail.ru. IN A ;; ANSWER SECTION: mail.ru. 21600 IN A 194.67.57.26 ;; AUTHORITY SECTION: mail.ru. 18855 IN NS ns1.mail.ru. mail.ru. 18855 IN NS ns2.mail.ru. mail.ru. 18855 IN NS ns3.mail.ru. mail.ru. 18855 IN NS ns4.mail.ru. mail.ru. 18855 IN NS ns5.mail.ru. mail.ru. 18855 IN NS ns.mail.ru. ;; Query time: 134 msec ;; SERVER: 192.168.15.254#53(192.168.15.254) ;; WHEN: Sat Mar 4 17:02:31 2006 ;; MSG SIZE rcvd: 148 |
#dig @127.0.0.1 mail.ru
|
#tail /var/log/messages
Mar 4 13:59:17 fbsd2 kernel: Trying to mount root from ufs:/dev/ad1s1a Mar 4 13:59:18 fbsd2 savecore: no dumps found Mar 4 13:59:54 fbsd2 sm-mta[444]: NOQUEUE: SYSERR(root): /etc/mail/sendmail.cf: line 97: fileclass: cannot open '/etc/mail/local-host-names': No such file or directory Mar 4 13:59:55 fbsd2 kernel: fxp0: promiscuous mode enabled Mar 4 13:59:56 fbsd2 xinetd[525]: xinetd Version 2.3.14 started with libwrap loadavg options compiled in. Mar 4 13:59:56 fbsd2 xinetd[525]: Started working: 3 available services Mar 4 13:59:56 fbsd2 kernel: fxp0: promiscuous mode disabled Mar 4 14:00:03 fbsd2 login: ROOT LOGIN (root) ON ttyv0 Mar 4 16:28:20 fbsd2 kernel: ipfw: limit 10 reached on entry 64000 Mar 4 16:48:53 fbsd2 login: ROOT LOGIN (root) ON ttyv1 |
#vi /etc/namedb/named.conf
|
#/etc/rc.d/named restart
|
#vi /etc/rc.con
|
#vi /etc/rc.conf
|
#/etc/rc.d/named restart
named not running? (check /var/run/named/pid). wrote key file "/etc/namedb/rndc.key" wrote key file "/var/named/etc/namedb/rndc.key" Starting named. |
#cd /etc/namedb
|
#ls
PROTO.localhost-v6.rev make-localhost named.root PROTO.localhost.rev master rndc.key dynamic named.conf slave |
#sh make-localhost
Enter your domain name: ff.unix.nt |
#/etc/rc.d/named restart
Stopping named. Starting named. |
#hostname
fbsd2 |
#dig mail.ru
; <<>> DiG 9.3.1 <<>> mail.ru ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8276 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 0 ;; QUESTION SECTION: ;mail.ru. IN A ;; ANSWER SECTION: mail.ru. 21176 IN A 194.67.57.26 ;; AUTHORITY SECTION: mail.ru. 18431 IN NS ns2.mail.ru. mail.ru. 18431 IN NS ns3.mail.ru. mail.ru. 18431 IN NS ns4.mail.ru. mail.ru. 18431 IN NS ns5.mail.ru. mail.ru. 18431 IN NS ns.mail.ru. mail.ru. 18431 IN NS ns1.mail.ru. ;; Query time: 1 msec ;; SERVER: 192.168.15.254#53(192.168.15.254) ;; WHEN: Sat Mar 4 17:09:35 2006 ;; MSG SIZE rcvd: 148 |
#dig mail.ru @127.0.0.1
; <<>> DiG 9.3.1 <<>> mail.ru @127.0.0.1 ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19775 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 0 ;; QUESTION SECTION: ;mail.ru. IN A ;; ANSWER SECTION: mail.ru. 21151 IN A 194.67.57.26 ;; AUTHORITY SECTION: mail.ru. 18406 IN NS ns.mail.ru. mail.ru. 18406 IN NS ns1.mail.ru. mail.ru. 18406 IN NS ns2.mail.ru. mail.ru. 18406 IN NS ns3.mail.ru. mail.ru. 18406 IN NS ns4.mail.ru. mail.ru. 18406 IN NS ns5.mail.ru. ;; Query time: 3 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Sat Mar 4 17:10:00 2006 ;; MSG SIZE rcvd: 148 |
#dig unix.nt @127.0.0.1
; <<>> DiG 9.3.1 <<>> unix.nt @127.0.0.1 ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41995 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;unix.nt. IN A ;; ANSWER SECTION: unix.nt. 604800 IN A 192.168.15.254 ;; AUTHORITY SECTION: unix.nt. 604800 IN NS unix.nt. ;; Query time: 3 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Sat Mar 4 17:10:12 2006 ;; MSG SIZE rcvd: 55 |
#vi /etc/resolv.conf
|
#dig mail.ru
; <<>> DiG 9.3.1 <<>> mail.ru ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25396 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 0 ;; QUESTION SECTION: ;mail.ru. IN A ;; ANSWER SECTION: mail.ru. 20967 IN A 194.67.57.26 ;; AUTHORITY SECTION: mail.ru. 18222 IN NS ns5.mail.ru. mail.ru. 18222 IN NS ns.mail.ru. mail.ru. 18222 IN NS ns1.mail.ru. mail.ru. 18222 IN NS ns2.mail.ru. mail.ru. 18222 IN NS ns3.mail.ru. mail.ru. 18222 IN NS ns4.mail.ru. ;; Query time: 1 msec ;; SERVER: 192.168.15.22#53(192.168.15.22) ;; WHEN: Sat Mar 4 17:13:04 2006 ;; MSG SIZE rcvd: 148 |
#vi /etc/resolv.conf
|
#dig mail.ru
; <<>> DiG 9.3.1 <<>> mail.ru ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31638 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 0 ;; QUESTION SECTION: ;mail.ru. IN A ;; ANSWER SECTION: mail.ru. 20824 IN A 194.67.57.26 ;; AUTHORITY SECTION: mail.ru. 18079 IN NS ns4.mail.ru. mail.ru. 18079 IN NS ns5.mail.ru. mail.ru. 18079 IN NS ns.mail.ru. mail.ru. 18079 IN NS ns1.mail.ru. mail.ru. 18079 IN NS ns2.mail.ru. mail.ru. 18079 IN NS ns3.mail.ru. ;; Query time: 1 msec ;; SERVER: 192.168.15.22#53(192.168.15.22) ;; WHEN: Sat Mar 4 17:15:27 2006 ;; MSG SIZE rcvd: 148 |
#vi /etc/namedb/named.conf
|
#cd /etc/rc.conf
bash: cd: /etc/rc.conf: Not a directory |
#cd /etc/rd.conf
bash: cd: /etc/rd.conf: No such file or directory |
#cd /etc
|
#ls
X11 login.conf pwd.db aliases login.conf.db rc amd.map mac.conf rc.bsdextended apmd.conf mail rc.con auth.conf mail.rc rc.conf bash_completion make.conf rc.cong bluetooth manpath.config rc.d crontab manpath.config.bak rc.firewall csh.cshrc master.passwd rc.firewall6 csh.login motd rc.initdiskless ... hosts pccard_ether ssh hosts.allow periodic ssl hosts.equiv pf.conf sysctl.conf hosts.lpd pf.os syslog.conf inet.conf phones termcap inetd.conf portsnap.conf ttys isdn ppp usbd.conf localtime printcap wall_cmos_clock locate.rc profile login.access protocols |
#cd /etc/rc.conf
bash: cd: /etc/rc.conf: Not a directory |
#cd /etc/named
bash: cd: /etc/named: No such file or directory |
#cd /etc/namedb
|
#ls
PROTO.localhost-v6.rev make-localhost named.root PROTO.localhost.rev master rndc.key dynamic named.conf slave |
#cd master
|
#vi topzone
|
#ls
localhost-v6.rev localhost.rev topzone |
Время первой команды журнала | 14:25:28 2006- 3- 4 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Время последней команды журнала | 15:16:54 2006- 3- 4 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Количество командных строк в журнале | 101 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Процент команд с ненулевым кодом завершения, % | 9.90 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Процент синтаксически неверно набранных команд, % | 4.95 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Суммарное время работы с терминалом *, час | 0.86 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Количество командных строк в единицу времени, команда/мин | 1.96 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Частота использования команд |
|
В журнал автоматически попадают все команды, данные в любом терминале системы.
Для того чтобы убедиться, что журнал на текущем терминале ведётся, и команды записываются, дайте команду w. В поле WHAT, соответствующем текущему терминалу, должна быть указана программа script.
Команды, при наборе которых были допущены синтаксические ошибки, выводятся перечёркнутым текстом:
$ l s-l bash: l: command not found |
Если код завершения команды равен нулю, команда была выполнена без ошибок. Команды, код завершения которых отличен от нуля, выделяются цветом.
$ test 5 -lt 4 |
Команды, ход выполнения которых был прерван пользователем, выделяются цветом.
$ find / -name abc find: /home/devi-orig/.gnome2: Keine Berechtigung find: /home/devi-orig/.gnome2_private: Keine Berechtigung find: /home/devi-orig/.nautilus/metafiles: Keine Berechtigung find: /home/devi-orig/.metacity: Keine Berechtigung find: /home/devi-orig/.inkscape: Keine Berechtigung ^C |
Команды, выполненные с привилегиями суперпользователя, выделяются слева красной чертой.
# id uid=0(root) gid=0(root) Gruppen=0(root) |
Изменения, внесённые в текстовый файл с помощью редактора, запоминаются и показываются в журнале в формате ed. Строки, начинающиеся символом "<", удалены, а строки, начинающиеся символом ">" -- добавлены.
$ vi ~/.bashrc
|
Для того чтобы изменить файл в соответствии с показанными в диффшоте изменениями, можно воспользоваться командой patch. Нужно скопировать изменения, запустить программу patch, указав в качестве её аргумента файл, к которому применяются изменения, и всавить скопированный текст:
$ patch ~/.bashrc |
Для того чтобы получить краткую справочную информацию о команде, нужно подвести к ней мышь. Во всплывающей подсказке появится краткое описание команды.
Если справочная информация о команде есть, команда выделяется голубым фоном, например: vi. Если справочная информация отсутствует, команда выделяется розовым фоном, например: notepad.exe. Справочная информация может отсутствовать в том случае, если (1) команда введена неверно; (2) если распознавание команды LiLaLo выполнено неверно; (3) если информация о команде неизвестна LiLaLo. Последнее возможно для редких команд.
Большие, в особенности многострочные, всплывающие подсказки лучше всего показываются браузерами KDE Konqueror, Apple Safari и Microsoft Internet Explorer. В браузерах Mozilla и Firefox они отображаются не полностью, а вместо перевода строки выводится специальный символ.
Время ввода команды, показанное в журнале, соответствует времени начала ввода командной строки, которое равно тому моменту, когда на терминале появилось приглашение интерпретатора
Имя терминала, на котором была введена команда, показано в специальном блоке. Этот блок показывается только в том случае, если терминал текущей команды отличается от терминала предыдущей.
Вывод не интересующих вас в настоящий момент элементов журнала, таких как время, имя терминала и других, можно отключить. Для этого нужно воспользоваться формой управления журналом вверху страницы.
Небольшие комментарии к командам можно вставлять прямо из командной строки. Комментарий вводится прямо в командную строку, после символов #^ или #v. Символы ^ и v показывают направление выбора команды, к которой относится комментарий: ^ - к предыдущей, v - к следующей. Например, если в командной строке было введено:
$ whoami
user
$ #^ Интересно, кто я?в журнале это будет выглядеть так:
$ whoami
user
Интересно, кто я? |
Если комментарий содержит несколько строк, его можно вставить в журнал следующим образом:
$ whoami
user
$ cat > /dev/null #^ Интересно, кто я?
Программа whoami выводит имя пользователя, под которым мы зарегистрировались в системе. - Она не может ответить на вопрос о нашем назначении в этом мире.В журнале это будет выглядеть так:
$ whoami user
|
Комментарии, не относящиеся непосредственно ни к какой из команд, добавляются точно таким же способом, только вместо симолов #^ или #v нужно использовать символы #=
1 2 3 4Группы команд, выполненных на разных терминалах, разделяются специальной линией. Под этой линией в правом углу показано имя терминала, на котором выполнялись команды. Для того чтобы посмотреть команды только одного сенса, нужно щёкнуть по этому названию.
LiLaLo (L3) расшифровывается как Live Lab Log.
Программа разработана для повышения эффективности обучения Unix/Linux-системам.
(c) Игорь Чубин, 2004-2008