Cgate.sh

#!/bin/bash
# Cgate.sh
# Base Centos 6.4
#==============================================================================================+
# Install server:                                                                              +
# DHCP Squid vsftp tftp samba pppoe bind apache mysql postgresql Ngios nrpe_plus               +
#                                                                                              +
# [root@Cgate ~]# nano /etc/sysconfig/network-scripts/ifcfg-eth0                   #Inner      +
# DEVICE="eth0"                                                                                +
# BOOTPROTO="static"                                                                           +
# HWADDR="00:0C:29:B3:E3:8D"                                                                   +
# NM_CONTROLLED="no"                                                                           +
# ONBOOT="yes"                                                                                 +
# IPADDR=192.168.233.128                                                                       +
# NETMASK=255.255.255.0                                                                        +
# GATEWAY=192.168.233.2                                                                        +
#==============================================================================================+
# [root@Cgate ~]# nano /etc/sysconfig/network-scripts/ifcfg-eth1                   #Exterior   +
# DEVICE="eth1"                                                                                +
# BOOTPROTO="static"                                                                           +
# HWADDR="00:0C:29:B3:E3:97"                                                                   +
# NM_CONTROLLED="no"                                                                           +
# ONBOOT="yes"                                                                                 +
# IPADDR=192.168.95.2                                                                          +
# NETMASK=255.255.255.0                                                                        +
#==============================================================================================+
#
#================================================================+
# Tips: Login				                                     +
#      Admin:root     Password:toor                              +
#+===============================================================+
# Tips: DHCP                                                     +
#       Ethernet eth1          UDP port 67                       +
#       Gateway: 192.168.95.2                                    +
#       DHCP Address: 192.168.95.50 - 192.168.95.100             +
#                                                                +
#+===============================================================+
# Tips: vsftd									                 +
#       User: equine00    Password: equine00                     +
#       User: equine01    Password: equine01                     +
#       User: equine02    Password: equine02                     +
#+===============================================================+
# Tips: tftp									                 +
#       UDP port 69									             +
#================================================================+
# Tips: rsync									                 +
#	password file:									             +
#	chicken00:chicken00									         +
#================================================================+
# Tips: Samba									                 +
#       Password None									         +
#================================================================+
# Tips: pptp_vpn								                 +
#       User: tiger00	    Password: tiger00                    +
#       User: tiger01	    Password: tiger01                    +
#================================================================+
# Tips: BIND					                                 +
#       UDP port 59                                              +
#       Zone: monkey.org								         +
#================================================================+
# Tips: Apache							                         +
#          Local    http://www.monkey.org	                     +
#          Local    http://bbs.monkey.org                        +
#          Local    http://mail.monkey.org	                     +
#          Local    http://ftp.monkey.org:8080	                 +
#================================================================+
# Tips: MySQL							                         +
#       TCP port 3306                                            +
#       User: root		Password: toor		     	             +
#       User: djang	    Password: django					     +
#       phpMyAdmin      http://www.monkey.org/phpmyadmin         +
#================================================================+
#
#
#==========================================================================+
#以下手动修改:                                                             +
#                                                                          +
#(1)修改postgresql 帐户                                                    +
# su - postgres                                                            +
# psql postgres                                                            +
# alter user postgres with password 'postgres';                            +
#                                                                          +
#(2)                                                                       +
# 修改phpMyAdmin                                                           +
# nano /var/www/phpmyadmin/libraries/config.default.php                    +
# $cfg['blowfish_secret'] = 'ba17c1ec07d65003';                            +
#==========================================================================+
#
########################################
# Close Selinux                        #
########################################
setenforce 0
cp -rf /etc/selinux/config /etc/selinux/config.backup
echo "SELINUX=disabled" >/etc/selinux/config



yum install -y net-snmp net-snmp-utils nmap tcpdump traceroute wget ntp
/usr/sbin/ntpdate ntp.api.bz
clock -w



########################################
# DHCP+NAT_Squid                       #
########################################

yum install -y dhcp squid
echo 'subnet 192.168.95.0 netmask 255.255.255.0 {
	range 192.168.95.50 192.168.95.100;
	ddns-update-style               none;
	ignore client-updates;
	default-lease-time              259200;
	max-lease-time                  518400;
	option  routers                 192.168.95.2;
	option  domain-name             "Cgate";
	option  domain-name-servers     192.168.95.2;
	}' >/etc/dhcp/dhcpd.conf

echo 'acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl localnet src 192.168.95.0/24 # RFC1918 possible internal network
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 3128 transparent
hierarchy_stoplist cgi-bin ?
coredump_dir /var/spool/squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320

visible_hostname www.monkey.org
cache_dir ufs /var/spool/squid 100 16 256
cache_access_log /var/log/squid/access.log
cache_store_log /var/log/squid/store.log
dns_nameservers 192.168.95.2
' >/etc/squid/squid.conf

echo '#!/bin/bash
echo "1" >/proc/sys/net/ipv4/ip_forward
iptables -F
iptables -X
iptables -Z
iptables -t nat -F
iptables -t nat -X
iptables -t nat -Z
iptables -A INPUT -i eth1 -j ACCEPT
inet=$(ifconfig eth0|grep "inet addr:"|cut -d: -f2|awk -F"  " '\'{print \$1}\'')
iptables -t nat -A POSTROUTING -o eth0 -s 192.168.95.0/24 -j SNAT --to-source $inet
#iptables -t nat -A POSTROUTING -o eth0 -s 192.168.95.0/24 -j MASQUERADE
iptables -t nat -A PREROUTING -i eth1 -s 192.168.95.64/29 -p tcp --dport 80 -j REDIRECT --to-ports 3128
#netmask:192.168.95.64-72

iptables -t nat -A PREROUTING -i eth0 -d $inet -p tcp --dport 2220 -j DNAT --to-destination 192.168.95.50:22

onet=$(ifconfig eth1|grep "inet addr:"|cut -d: -f2|awk -F"  " '\'{print \$1}\'')
echo "This is Cgate OS; Author:CaoGuo
inet:$inet
onet:$onet" >/etc/issue
' >/root/iptables.rules
echo 'sh /root/iptables.rules
/usr/sbin/ntpdate ntp.api.bz' >>/etc/rc.local



########################################
# Master_DNS                           #
########################################
yum install -y bind bind-utils

echo 'options {
        listen-on port 53 { 192.168.95.2; };
        #listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        recursion yes;
        #forward only;
        #forwarders { 192.168.179.2; };
        dnssec-enable yes;
        dnssec-validation yes;
        #dnssec-lookaside auto;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

include "/etc/named.rfc1912.zones";

zone "monkey.org" IN {
        type master;
        file "monkey.org";
        allow-update {none;};
};

zone "95.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.95.zone";
        allow-update { none; };
};' >/etc/named.conf


echo '$TTL 60
@       IN SOA  cgate.monkey.org. dns-admin.cgate.monkey.org. (
                                        2011012403      ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
@       IN      NS      cgate.monkey.org.
cgate   IN      A       192.169.95.2
        IN      MX      1       ns1.monkey.org.
ns1     IN      A       192.168.95.2

www     CNAME   ns1.monkey.org.
bbs     CNAME   ns1.monkey.org.
mail    CNAME   ns1.monkey.org.
ftp     CNAME   ns1.monkey.org.' >/var/named/monkey.org

echo '$TTL 1800
@       IN SOA  cgate.monkey.org. dns-admin.cgate.monkey.org. (
                                        2011012402      ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
95.168.192.in-addr.arpa.        IN      NS      ns1.monkey.org.


2      IN      PTR     ns1.monkey.org.' >/var/named/192.168.95.zone

echo 'OPTIONS="-4"' >>/etc/sysconfig/named
chown root.named /var/named/monkey.org
rndc-confgen -r /dev/urandom -a
chown root:named /etc/rndc.key
chmod 644 /etc/rndc.key
tail /var/named/data/named.run




########################################
# vsftpd_virtual                       #
########################################
yum install -y vsftpd
useradd vsftp -s /sbin/nologin

echo "anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
chroot_local_user=YES
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/chroot_list
listen=YES
pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES
pasv_min_port=61440
pasv_max_port=61450

ascii_upload_enable=YES
ascii_download_enable=YES

guest_enable=YES
guest_username=vsftp
user_config_dir=/etc/vsftpd/conf" >/etc/vsftpd/vsftpd.conf

touch /etc/vsftpd/chroot_list
rm -rf /home/vsftp/equine00 /home/vsftp/equine01 /home/vsftp/equine02
mkdir /home/vsftp/equine00 /home/vsftp/equine01 /home/vsftp/equine02

rm -rf /etc/vsftpd/conf/
mkdir /etc/vsftpd/conf/

echo -e "equine00\nequine00\nequine01\nequine01\nequine02\nequine02" >/etc/vsftpd/conf/vsftpd_login
db_load -T -t hash -f /etc/vsftpd/conf/vsftpd_login /etc/vsftpd/conf/vsftpd_login.db
chmod 600 /etc/vsftpd/conf/vsftpd_login && chmod 600 /etc/vsftpd/conf/vsftpd_login.db
echo "auth required pam_userdb.so db=/etc/vsftpd/conf/vsftpd_login
account required pam_userdb.so db=/etc/vsftpd/conf/vsftpd_login" >/etc/pam.d/vsftpd

echo "local_root=/home/vsftp/equine00
write_enable=YES
anon_umask=022
anon_world_readable_only=NO
anon_upload_enable=YES
anon_mkdir_write_enable=YES
anon_other_write_enable=YES" >/etc/vsftpd/conf/equine00

echo "local_root=/home/vsftp/equine01
write_enable=YES
anon_umask=022
anon_world_readable_only=NO
anon_upload_enable=YES
anon_mkdir_write_enable=YES
anon_other_write_enable=YES" >/etc/vsftpd/conf/equine01

echo "local_root=/home/vsftp/equine02
write_enable=YES
anon_umask=022
anon_world_readable_only=NO
anon_upload_enable=YES
anon_mkdir_write_enable=YES
anon_other_write_enable=YES" >/etc/vsftpd/conf/equine02

chown -R vsftp.vsftp /home/vsftp/*
chmod 700 /home/vsftp/*



########################################
# NFS                                  #
########################################
yum install -y rpcbind nfs-utils
mkdir /home/nfs &>/dev/nul
echo "/home/nfs	*(rw)" >/etc/exports
# Client Ubuntu
# apt-get install -y nfs-common
# apt-get install -y rpcbind
# showmount -e 192.168.95.2
# mount -t nfs 192.168.61.128:/home/nfs /root/nfs




########################################
# Samba_passwd_None                    #
########################################
yum install -y samba samba-client samba-common
echo "[global]

workgroup       = Workgroup
netbios name    = Cgate
server string   = Samba Server Version %v
unix charset    = utf8
display charset = utf8
dos charset     = cp950
log file        = /var/log/samba/log.%m
max log size    = 50
load printers   = No
security        = share
load printers   = no

[temp]

comment         = Temporary file space
path            = /tmp
writable        = yes
browseable      = yes
guest ok        = yes" >/etc/samba/smb.conf

# smbclient -L 192.168.95.2
# smbclient //192.168.95.2/temp -c "ls"
# mkdir /root/smbfs
# mount -t smbfs //192.168.95.2/temp /root/smbfs/




########################################
# tftpd                                #
# chmod 006 bootlog                    #
########################################

yum -y install tftp-server syslinux
echo "service tftp
{
        socket_type             = dgram
        protocol                = udp
        wait                    = yes
        user                    = root
        server                  = /usr/sbin/in.tftpd
        server_args             = -s /var/lib/tftpboot -p -c -u root -U 077
        disable                 = no
        per_source              = 11
        cps                     = 100 2
        flags                   = IPv4
}" >/etc/xinetd.d/tftp



########################################
# rsync                                #
########################################
yum install -y rsync

echo "uid=root
gid=root
#hosts allow=192.168.95.0/24
#hosts deny=0.0.0.0/32
use chroot=yes
max connections=10
pid file=/var/run/rsyncd.pid
lock file=/var/run/rsync.lock
log file=/var/log/rsyncd.log
timeout=600
port=873

[backup]
path=/home/backup
comment=rsync files
ignore errors
read only=yes
list=yes
auth users=chicken00
secrets file=/etc/rsyncd.secrets" >/etc/rsyncd.conf

echo "chicken00:chicken00" >/etc/rsyncd.secrets
chmod 655 /etc/rsyncd.secrets
/usr/bin/rsync --daemon
echo "/usr/bin/rsync --daemon" >>/etc/rc.local
#echo "chicken00">/etc/rsyncd.secrets
#chmod 600 /etc/rsyncd.secrets
#rsync -vzrtopg --delete --progress chicken@192.168.190.133::backup $(pwd)/backup-$(date +%Y-%m-%d) --password-file=/etc/rsyncd.secrets




########################################
# subversion                           #
########################################
yum -y install subversion
mkdir -p /home/svn/repos
svnadmin create /home/svn/repos
echo "develop=develop00" >>/home/svn/repos/conf/passwd
echo -e "[/]\ndevelop=rw" >>/home/svn/repos/conf/authz
echo "anon-access = none
#使非授权用户无法访问

auth-access = write
#使授权用户有写权限

password-db = password
authz-db = authz
#访问控制文件

realm = /home/svn/repos
#认证命名空间,subversion会在认证提示里显示,并且作为凭证缓存的关键字.采用默认配置. 以上语句都必须顶格写, 左侧不能留空格, 否则会出错.
" >>/home/svn/repos/conf/svnserv.conf

#启动svn服务
svnserve -d -r /home/svn/repos --listen-port 3690
echo "svnserve -d -r /home/svn/repos" >>/etc/rc.local
#客户端命令:
#svn --username=develop --password=develop00 import svn://192.168.105.128						#导入
#svn --username=develop --password=develop00 checkout svn://192.168.105.128						#导出
#svn --username=develop --password=develop00 log svn://192.168.105.128 -r 5:10					#查看日志
#svn --username=develop --password=develop00 info svn://192.168.105.128							#查看
#svn --username=develop --password=develop00 ls svn://192.168.105.128/home/svn/repos/ 			#查看目录列表
#svn --username=develop --password=develop00 cat svn://192.168.105.128/home/svn/repos/server.sh 	#查看文件内容
#svn --username=develop --password=develop00 mkdir svn://192.168.105.128/home/svn/repos/log		#创建目录
#svn --username=develop --password=develop00 delete svn://192.168.105.128/home/svn/repos/server.sh	#删除文件




########################################
# PPTPD_VPN                            #
########################################
rm -rf /etc/pptpd.conf
rm -rf /etc/ppp/
yum remove -y ppp
yum install -y ppp perl
rpm -ivh http://lccss.googlecode.com/files/pptpd-1.3.4-1.el6.nux.i686.rpm && \
cp -rf /etc/pptpd.conf /etc/pptpd.conf.bk

echo "localip 10.0.0.2
remoteip 10.0.0.100-120" >>/etc/pptpd.conf


echo "ms-dns 10.0.0.253
ms-dns 10.0.0.254" >>/etc/ppp/options.pptpd


echo "# Secrets for authentication using CHAP
# client        server  secret                  IP addresses
tiger00           pptpd   tiger00                 *
tiger01           pptpd   tiger01                 *" >/etc/ppp/chap-secrets

echo 1 >/proc/sys/net/ipv4/ip_forward
sed -i "s@^logwtmp@#logwtmp@g" /etc/pptpd.conf

service pptpd start

#=======没尝试=========#
#rm -r /dev/ppp
#mknod /dev/ppp c 108 0

#Centos client:
#yum install -y pptp-setup
#pptpsetup --create vpn --server 192.168.134.147 --username tiger00 --password tiger00 --encrypt --start


########################################
# Apache_MySQL_Django+mod_wsgi         #
########################################

yum install -y httpd php php-mysql mysql mysql-server mysql-devel mod_wsgi python MySQL-python postgresql-server psycopg2 nmap tcpdump traceroute wget

###phpinfo###
echo "<?php
	phpinfo();
?>" >/var/www/html/phpinfo.php

###Python CGI###
touch /var/www/cgi-bin/test.cgi
chmod a+x /var/www/cgi-bin/test.cgi
echo '#!/usr/bin/env python
print "Content-Type: text/html\n"
print "<html><head><title>Test CGI</title></head>"
print "<body>"
print "<h1>Test CGI! It is Work!</h1>"
print "</body></html>"' >/var/www/cgi-bin/test.cgi


###DATABASE###
service mysqld start
echo "grant all privileges on *.* to 'root'@'localhost' identified by 'toor' with grant option;
grant all privileges on *.* to 'root'@'%' identified by 'toor' with grant option;
CREATE DATABASE django;
GRANT ALL ON django.* TO 'django'@'localhost' IDENTIFIED BY 'django';
flush privileges;" >/tmp/Cgate.sql
mysql </tmp/Cgate.sql


mkdir -p /var/www/html/www.monkey.org
mkdir -p /var/www/html/bbs.monkey.org
mkdir -p /var/www/html/mail.monkey.org
mkdir -p /var/www/html/ftp.monkey.org

mkdir -p /var/www/html/www.monkey.org/django
mkdir -p /var/www/html/www.monkey.org/phpmyadmin

chown -R apache:apache /var/www/html/www.monkey.org
chown -R apache:apache /var/www/html/bbs.monkey.org
chown -R apache:apache /var/www/html/mail.monkey.org
chown -R apache:apache /var/www/html/ftp.monkey.org
echo 'www.monkey.org' >/var/www/html/www.monkey.org/index.htm
echo 'bbs.monkey.org' >/var/www/html/bbs.monkey.org/index.htm
echo 'mail.monkey.org' >/var/www/html/mail.monkey.org/index.htm
echo 'ftp.monkey.org' >/var/www/html/ftp.monkey.org/index.htm
sed -i 's/^/#/g' /etc/httpd/conf.d/welcome.conf
#修改http.conf该行,禁止浏览目录
#Options -Indexes FollowSymLinks

echo 'Listen 8080
ServerName *:80
ServerName *:8080
NameVirtualHost *:80
NameVirtualHost *:8080

<VirtualHost *:80>
    ServerName www.monkey.org
    DocumentRoot /var/www/html/www.monkey.org
    DirectoryIndex index.htm index.php
    ErrorLog logs/www.monkey.org-error_log
    CustomLog logs/www.monkey.org-access_log common
	
    WSGIScriptAlias /django /var/www/html/www.monkey.org/django/django.wsgi
    <Directory /var/www/html/www.monkey.org>
        Order allow,deny
        Allow from all
    </Directory>
</VirtualHost>
#用做默认跳到此页面

<VirtualHost *:80>
    ServerAdmin webmaster@dummy-host.example.com
    DocumentRoot /var/www/html/bbs.monkey.org
    ServerName bbs.monkey.org
    DirectoryIndex index.htm
    ErrorLog logs/bbs.monkey.org-error_log
    CustomLog logs/bbs.monkey.org-access_log common

    <Directory /var/www/html/bbs.monkey.org>
        Order allow,deny
        Allow from all
        Deny from 192.168.96.63
        #allow优先,开放所有,拒绝特定
        Options -Indexes FollowSymLinks
        AllowOverride None
    </Directory>
</VirtualHost>

<VirtualHost *:80>
    ServerAdmin webmaster@dummy-host.example.com
    DocumentRoot /var/www/html/mail.monkey.org
    ServerName mail.monkey.org
    DirectoryIndex index.htm
    ErrorLog logs/mail.monkey.org-error_log
    CustomLog logs/mail.monkey.org-access_log common

    <Directory /var/www/html/mail.monkey.org>
        Order deny,allow
        Deny from all
        Allow from 192.168.95.63
        #deny优先,拒绝所有,开放特定
        Options -Indexes FollowSymLinks
        AllowOverride None
    </Directory>
</VirtualHost>

<VirtualHost *:8080>
    ServerAdmin webmaster@dummy-host.example.com
    DocumentRoot /var/www/html/ftp.monkey.org
    ServerName ftp.monkey.org
    DirectoryIndex index.htm
    ErrorLog logs/ftp.monkey.org-error_log
    CustomLog logs/ftp.monkey.org-access_log common

    <Directory /var/www/html/ftp.monkey.org>
        Order allow,deny
        Allow from all
    </Directory>
</VirtualHost>' >/etc/httpd/conf.d/http_extend.conf



###phpMyAdmin###
cd /tmp
wget http://jaist.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.5.7/phpMyAdmin-3.5.7-all-languages.tar.gz
tar zxvf phpMyAdmin-3.5.7-all-languages.tar.gz
rm -rf /var/www/html/www.monkey.org/phpmyadmin
mv phpMyAdmin-3.5.7-all-languages /var/www/html/www.monkey.org/phpmyadmin
service mysqld start




###Django###
cd /tmp
wget https://www.djangoproject.com/m/releases/1.5/Django-1.5.tar.gz
tar zxvf Django-1.5.tar.gz
cd Django-1.5
python setup.py build
python setup.py install

mkdir -p /var/www/html/www.monkey.org/django
echo '#!/usr/bin/env python
import os, sys
sys.path.append("/usr/lib/python2.6/site-packages/django")
sys.path.append("/var/www/html/www.monkey.org/django/mysite")
os.environ["DJANGO_SETTINGS_MODULE"] = "mysite.settings"
import django.core.handlers.wsgi
application = django.core.handlers.wsgi.WSGIHandler()' >/var/www/html/www.monkey.org/django/django.wsgi

cd /var/www/html/www.monkey.org/django
django-admin.py startproject mysite
echo "LoadModule wsgi_module modules/mod_wsgi.so" >/etc/httpd/conf.d/wsgi.conf

#Links: http://code.google.com/p/modwsgi/wiki/IntegrationWithDjango

###postgresql###
#echo "
#local   all         all                               md5
#host    all         all         127.0.0.1/32          md5
#host    all         all         ::1/128               md5
#host    all         all         192.168.95.0/24       md5" >/var/lib/pgsql/data/pg_hba.conf

#cat /var/lib/pgsql/data/postgresql.conf | egrep -v "^#|^$" | grep  ^'[a-z]' | sed 's/#.*$//g'
#echo "listen_addresses = '*'
#max_connections = 100
#shared_buffers = 32MB
#logging_collector = on
#log_directory = 'pg_log'
#log_filename = 'postgresql-%a.log'
#log_truncate_on_rotation = on
#log_rotation_age = 1d
#log_rotation_size = 0
#datestyle = 'iso, mdy'
#lc_messages = 'en_US.UTF-8'
#lc_monetary = 'en_US.UTF-8'
#lc_numeric = 'en_US.UTF-8'
#lc_time = 'en_US.UTF-8'
#default_text_search_config = 'pg_catalog.english'" >/var/lib/pgsql/data/postgresql.conf


#################################
#          NRPE                 #
#################################
yum install -y wget gcc glibc glibc-common gd gd-devel make net-snmp net-snmp-utils openssl openssl-devel xinetd
cd /tmp/
useradd nagios -s /sbin/nologin
wget http://nchc.dl.sourceforge.net/project/nagiosplug/nagiosplug/1.4.16/nagios-plugins-1.4.16.tar.gz
wget http://prdownloads.sourceforge.net/sourceforge/nagios/nrpe-2.13.tar.gz

tar zxvf nagios-plugins-1.4.16.tar.gz
tar zxvf nrpe-2.13.tar.gz
cd /tmp/nagios-plugins-1.4.16
./configure --prefix=/opt/nagios
make && make install
chown nagios:nagios /opt/nagios
chown -R nagios:nagios /opt/nagios/libexec

cd /tmp/nrpe-2.13
./configure --prefix=/opt/nagios
make all
make install-plugin
make install-daemon
make install-daemon-config
sed -i 's@allowed_hosts=127.0.0.1@allowed_hosts=127.0.0.1,192.168.94.131@' /opt/nagios/etc/nrpe.cfg

/opt/nagios/bin/nrpe -c /opt/nagios/etc/nrpe.cfg -d
echo "/opt/nagios/bin/nrpe -c /opt/nagios/etc/nrpe.cfg -d" >>/etc/rc.local
netstat -tnlp | grep nrpe
/opt/nagios/libexec/check_nrpe -H localhost -c check_load



#################################
#Start server                   #
#################################
service dhcpd start
chkconfig dhcpd on

service squid start
chkconfig squid on

service named start
chkconfig named on

service vsftpd start
chkconfig vsftpd on

service smb start
service nmb start
chkconfig smb on
chkconfig nmb on

service rpcbind start
chkconfig rpcbind on
service nfs start
chkconfig nfs on
service nfslock start
chkconfig nfslock on

service pptpd start
chkconfig pptpd on

service httpd start
chkconfig httpd on

service snmpd start
chkconfig snmpd on

service mysqld restart
chkconfig mysqld on

service postgresql initdb
service postgresql start
chkconfig postgresql on

service xinetd start
chkconfig xinetd on

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值