Upgrade Asus Eee PC Series 1025C with 4GB RAM and SSD 256 GB

I have a netbook Asus Eee PC Series 1025C. It already 5 years old and equipped with Intel® Atom™ N2800 (Dual Core; 1.86GHz) Processor, 2GB RAM and SATA HDD 320 GB. The challenge is I want to upgrade this netbook so it can be faster to run.

The limitations are processor is support only 32 bit OS and maximum RAM usable is 3 GB only. So, I just changed the DDR3 RAM from 2 GB to 4GB and HDD to SSD. I was using Ubuntu Linux before, but in this time I tried to install Windows 7 32 bit and Microsoft Office 2016 with original license.

I failed when tried to install Windows 10 bit, it won't work because problem with display driver for Asus Eeee PC 2015C not supported by Asus or Intel. They don't give update for their display driver to compatible with Windows 10.

The SSD is Silicon Power A56 256 GB. The read write result test using winsat command shows that the SSD performance increased significantly than using HDD.

How to Set Quota on CLoudLinux 7.5 kvm Image With XFS

I just installed CloudLinux 7.5 kvm images, downloaded from CloudLinux website, then failed to update Quota on the WHM. They already set it with XFS file system.

Updating Quota Files......
quotacheck: Cannot find filesystem to check or filesystem not mounted with quota option.

Then I did this.

Check /etc/fstab makes sure that the quota is enabled on the partition

UUID=xxx-xxx / xfs     defaults,uquota 0 0

Check the quota option for XFS filesystem.

# mount| grep ' / '

You will see something like this.

/dev/sda1 on / type xfs (rw,relatime,attr2,inode64,noquota)

If you see the "noquota" option, then you need to go to next step.

Edit /etc/default/grub add rootflags=uquota

GRUB_CMDLINE_LINUX="crashkernel=auto biosdevname=0 net.ifnames=0 rhgb quiet rootflags=uquota"

Reconfig grub

# grub2-mkconfig -o /boot/grub2/grub.cfg
# reboot

After the server started.

# mount| grep ' / '

Then the XFS will change like this.

/dev/sda1 on / type xfs (rw,relatime,attr2,inode64,usrquota)

Fix WHM quota

# /scripts/fixquotas
# reboot

Recover Crashed Ubuntu VM On Proxmox VE

One of our VM server accidentally crash and the partition table was deleted. It is using Ubuntu 14.04 on VMDK container. Here are what we did to recover the server.

Prerequisite: Ubuntu NON-EFI, ext4 partition

Convert vmdk to qico2
# qemu-img convert -f vmdk -O qcowq file.vmdk file.qcow2

Download ISO System Rescue CD from http://www.system-rescue-cd.org/ then treat as CD-ROM in the crashed VM, and then in the VM Console interface, boot from CD-ROM.

Run Test-disk

1. Select the disk
2. Select partition format: INTEL
3. Analyze
4. Deep search
5. Select the righ partition
6. Write
7. Quit & reboot

Reload Using Ubuntu live CD
- fdisk recover extender partition (change type) from f to 5
- write, reboot

Rescue:
Install boot on /dev/sda, then reboot.

All done.

NOTES:
Mount to see files:
# qemu-nbd -c /dev/nbd0 file.qcow2
# partprobe /dev/nbd0
# mount /dev/nbd0 /mnt/nbd0

Avast Business Installer Installation Failed: Unable to Load Policy

Our team just installed Management console for Avast Business Antivirus, Avast Business Antivirus Pro and Avast Business Antivirus Pro Plus On local server (on-premise) on Windows 2008 Server R2. The server got IP Public, so all PC outside the office can install the Avast Business Installer generated from the console.

Unfortunately, we got error 'Installation Failed: Unable to Load Policy' during setup process.

After discuss with support from Avast reseller in Indonesia, we also discuss with support directly from Avast. They said there are a few things we can try to correct it. 

1. Was there any Avast products on the server before? If yes, please remove using Avast clear to make sure everything is removed. Download from https://www.avast.com/uninstall-utility
2. Make sure to remove all Anti-Virus programs before installation.
3. Disable any local firewalls that may be preventing the program from running.
4. Please make sure to download a new copy once you have made sure the other items are correct. 
5. Login to business.avast.com portal (note: we use another address because our console installed in our own portal) and navigate to Add New Device > Customize > Choose options > Download.

Avast support suggest doing the full installer. Also, after downloading and before installing "right click" on the file and select "Properties". Sometimes there will be a Security option at the bottom, make sure to unblock the program as shown in the screenshot below. 

The client/cloud server communication is completed using the following ports. To ensure proper communication to the cloud portal please make sure all ports below are open and also the whitelisting of *.avast.com.

- http/80 (updates) 

- https/443 (FFL encryption key negotiation) 

- TCP, UDP/ 443, 53 for secure DNS 

- *.avast.com

- 77.234.40.0/21 Update servers

After I tried the solutions, they dont work!

Then I tried to check all ports used to communicate between client and server, and got that Avast use 8080/8090 for server/client stuff. After out network admin open the port, then the installation work seamlessly.

How to Replace and Rewrite Sender Address in Postfix

I am setting up Postfix on a Linux server because I want to send mail independently. I need to change sender address because the default sender is from user@server.local.

This config changes sender addresses from both local originated, and relayed SMTP mail traffic:

# nano /etc/postfix/main.cf:
sender_canonical_classes = envelope_sender, header_sender
sender_canonical_maps =  regexp:/etc/postfix/sender_canonical_maps
smtp_header_checks = regexp:/etc/postfix/header_check

Rewrite envelope address from email originating from the server

# nano /etc/postfix/sender_canonical_maps:
/.+/    newsender@example.com

Rewrite from address in SMTP relayed e-mail

# nano /etc/postfix/header_check:
/From:.*/ REPLACE From: newsender@example.com

Mikrotik Beep Song Indonesia: Apose

Sunday morning, composing "Apose" folk song from Biak, Papua, Indonesia on Mikrotik using beep command.

# Mikrotik beep song "Apose"
# Wahyu Wijanarko - http://wahyu.com
:beep length=300ms frequency=783.99
:delay 350ms
:beep length=300ms frequency=1046.50
:delay 350ms
:beep length=300ms frequency=1318.51
:delay 700ms
:beep length=300ms frequency=1174.66
:delay 175ms
:beep length=300ms frequency=1318.51
:delay 350ms
:beep length=300ms frequency=1174.66
:delay 175ms
:beep length=300ms frequency=1046.50
:delay 700ms
:beep length=300ms frequency=783.99
:delay 350ms
:beep length=300ms frequency=1046.50
:delay 350ms
:beep length=300ms frequency=1318.51
:delay 700ms
:beep length=300ms frequency=1318.51
:delay 175ms
:beep length=300ms frequency=1174.66
:delay 175ms
:beep length=300ms frequency=1318.51
:delay 175ms
:beep length=300ms frequency=1396.91
:delay 175ms
:beep length=300ms frequency=1174.66
:delay 700ms
:beep length=300ms frequency=783.99
:delay 350ms
:beep length=300ms frequency=987.77
:delay 350ms
:beep length=300ms frequency=1174.66
:delay 700ms
:beep length=300ms frequency=1396.91
:delay 175ms
:beep length=300ms frequency=1567.98
:delay 350ms
:beep length=300ms frequency=1396.91
:delay 175ms
:beep length=300ms frequency=1318.51
:delay 700ms
:beep length=300ms frequency=1174.66
:delay 175ms
:beep length=300ms frequency=1318.51
:delay 350ms
:beep length=300ms frequency=1174.66
:delay 175ms
:beep length=300ms frequency=1046.50
:delay 1400ms
:beep length=300ms frequency=783.99
:delay 350ms
:beep length=300ms frequency=1046.50
:delay 350ms
:beep length=300ms frequency=1396.91
:delay 350ms
:beep length=600ms frequency=1318.51
:delay 1400ms
:beep length=300ms frequency=783.99
:delay 350ms
:beep length=300ms frequency=987.77
:delay 350ms
:beep length=300ms frequency=1174.66
:delay 350ms
:beep length=600ms frequency=1046.50
:delay 1400ms
:beep length=300ms frequency=783.99
:delay 350ms
:beep length=300ms frequency=1046.50
:delay 350ms
:beep length=300ms frequency=1396.91
:delay 350ms
:beep length=600ms frequency=1318.51
:delay 1400ms
:beep length=300ms frequency=783.99
:delay 350ms
:beep length=300ms frequency=987.77
:delay 350ms
:beep length=300ms frequency=1174.66
:delay 350ms
:beep length=600ms frequency=1046.50

How to Block Youtube and Facebook Using Mikrotik DNS Cache

Create script to check DNS cache in Mikrotik, put ni system - scheduler, make it run every 1 minute.

:local ADDRLIST "BLOCKWEBSITE"
:local DOMAIN "youtube.com|facebook.com|fbcdn.net"
# Find CNAME record
:local DOMAINNAME
:foreach i in=[/ip dns cache all find where (name~"($DOMAIN)") && (type="CNAME") ] do={
  :set DOMAINNAME [/ip dns cache all get $i data];
  :set DOMAIN "$DOMAIN|$DOMAINNAME";
   delay delay-time=10ms
}
# Find A record
:foreach i in=[/ip dns cache all find where (name~"($DOMAIN)") && (type="A") ] do={
  :local DOMAINIP [/ip dns cache get $i address];
  delay delay-time=10ms
  :if ( [/ip firewall address-list find where address=$DOMAINIP] = "") do={
    /ip firewall address-list add address=$DOMAINIP list=$ADDRLIST timeout="00:10:00" comment=[/ip dns cache get $i name];
  }
}

Block request to public DNS outside Mikrotik

/ip firewall nat
add chain=dstnat action=dst-nat to-addresses=192.168.123.8 to-ports=53 protocol=tcp dst-port=53
add chain=dstnat action=dst-nat to-addresses=192.168.123.8 to-ports=53 protocol=udp dst-port=53

Block the desired IPs that already listed in address list

/ip firewall filter
add action=drop chain=forward comment="Block Website" disabled=no dst-address-list=BLOCKWEBSITE

Gmail Check mail from other Gmail accounts (using POP3) Error

I tried using Gmail to check another Gmail account using POP3. The, I got email notification from them.

Sign-in attempt prevented.
Someone just tried to sign in to your Google Account from an app that doesn't meet modern security standards.

Details:
Saturday, February 13, 2016 7:22 PM (Eastern Standard Time)
United States*

We strongly recommend that you use a secure app, like Gmail, to access your account. All apps made by Google meet these security standards. Using a less secure app, on the other hand, could leave your account vulnerable.

Some users that user Gmail to fetch or backup another Gmail account experienced Gmail blocking Gmail with error in POP3 server. I also tried and get the error:

[AUTH] Web login required: https://support.google.com/mail/answer/14257

The solution is just simple, that is by "Allow less secure apps: ON".



They said that some non-Google apps and devices use less secure sign-in technology, which could leave your account vulnerable. You can turn off access for these apps (which we recommend) or choose to use them despite the risks.

How to Recover Lenovo C460 Power-on and BIOS (Supervisor) Password

We got problem when our client in Papua have their computer locked by Power-on passwrod and BIOS (Supervisor) password on Lenovo All-in-one Desktop C460. The problem doubled when the user forgot both of the passwords.

Normally, if you forgot Power-on password, just press F1 when computer starts, and you can reset the password in BIOS security setting. In old computer, reset BIOS or Power-on password is very easy just pull the CMOS battery on the motherboard.

From what I just read on some web forum, the solution is by call Lenovo Support to have reset them with cost about US$ 55. Some users also have experience that Lenovo Support replaced their PC with new one, because it still in warranty period. Ok, they can afford support, but in Papua area, there is no Lenovo Support service, and need to send the PC to Jakarta.



Lenovo C460 CMOS data stored in MXIC 25L6406E located on the motherboard, and we can reset (flash) them using reset BIOS reset hardware.

Just download BIOS software for C460 from Lenovo Support and good luck!

Alexa Pro Certified Increase My Website Rank

In my personal view, Alexa is a standout amongst the most famous web ranking system in this decade. In spite of the way that the Alexa positioning does not reflect web traffic precisely, it is still imperative for website admins to enhance the rank. I have web that get more than 20,000 visits a day, and only got rank more than 200,000. That's maybe because Alexa rank the website by gather data from users who access the web and have Alexa Toolbar in their browser. My web visitors mostly use mobile phone.

Last month (October 2015), I tried to use their pro service (Basic Plan) to get my website certified. It need 3 days to my website certified in the Alexa dashboard, and took almost 1 month to show to public that my web is certified. In their certified metric, my web increased it rank significanly from 210,531 to 27,639.

So, my conclusion from my personal experience is: Alexa Pro can increase rank for website with more traffic but have less visitors-with-Alexa-Toolbar.

Install Ubuntu 14.04 LTS on IBM Server x3530M4 7160 A2A

We problem installing Ubuntu 14.04 LTS on IBM Server x3530M4 7160-A2A. We also tried CentOS 6.6-x86_64 minimal without any good result. They said that the problem was in EFI BIOS, but we already update everything without result.

The installation finished, but when we restarted the server it won’t boot. Both Ubuntu and CentOS installed the UEFI in the right place. It just don’t boot. We tried to install Windows 2008 Server R2, and it works.

Then, after last time installed once again Ubuntu using same way with default steps on installation wizard, installation finisher without error. I reboot the server and put IBM Server Guide in external CD ROM then did steps to install Windows 2008 Server R2. Using wizard on IBM Server Guide, I follow steps to define the hard drive and I select default RAID, and restart. After restart, I watched TV and I forgot to insert Windows Server CD. But, voila! The Ubuntu Server boot normally. So, it seem that the IBM doesn’t detect the HDD and it recovered after I select RAID on Server Guide wizard. Lucky for us, after more than 3 weeks..

Bing Bot SSL SNI Support

When I migrated some website to use HTTPS, I noticed that not all browsers have SNI support and my website that migrated to SSL use shared IP address, so only browsers that support SNI can access the website.

The challenge is to make sure that my website is still exists in search result on the major search engines. Google Bot already support SNI, and how about Bing Bot? To make sure that Bing Bot support SNI, I read the log of my server and I got similar with this from the log file.

157.55.39.152 "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"

So, I got conclusion that Bing Bot 2.0 support SNI when crawl HTTPS website, and I checked in their search result that my HTTPS website with SNI is there.

Full Outer Join in MySQL

In this case, I have 2 tables that need to join and show data in both tables even there is no data in one of the tables. For example, I have first table with data:

table1
id|male
1|Richard
2|Andy
3|Bagyo

and the other table

table2
id|female
2|Jane
3|Sulastri
4|Linda

I want to show the data like this:

id|male|id|female
1|Richard|-|-
2|Andy|2|Jane
3|Bagyo|3|Sulastri
-|-|4|Linda

By default, currently MySQL don’t support FULL OUTER JOIN. To achieve this, you can combine LEFT JOIN and RIGHT JOIN.

SELECT *
FROM `table1`
LEFT OUTER JOIN `t2` ON `t1`.`id` = `t2`.`id`

UNION

SELECT *
FROM `t1`
RIGHT OUTER JOIN `t2` ON `t1`.`id` = `t2`.`id`;

We can think of a UNION as meaning "run both of these queries, then stack the results on top of each other", with some rows will come from the first query and some from the second. UNION in MySQL will eliminate exact duplicates, so the result of the UNION only lists the same data once.

lftp Fatal error: Certificate verification: Not trusted

When I use lftp to transfer file between my Linux machine and my hosting server, I type the command in my Linux shell:

# lftp -u myuser,mypassword example.com
lftp myuser@example.com:~>ls
cd: Fatal error: Certificate verification: Not trusted

The problem is the server certificate it not valid on the server. To override this error forever, I just created file in my home folder.

# vim .lftp/rc
set ssl:verify-certificate no

Then, I got next error from lftp console.

Access failed : 521 Data connection cannot be opened with this PROT setting.

In tne file “.lftp/rc” I added more lines with:

set ftp:ssl-force true
set ftp:ssl-protect-data true

The problem then gone, and I can transfer the data from and to server without problem.

Windows 8.1 Keyboard Keys Switched

I just installed Windows 8.1 in the new PC and realized that the key @ and " swapped on keyboard. I contacted the PC vendor and they will exchange with brand new keyboard. Before take the keyboard to the shop for exchange, I tried using another keyboard and got same result.

The I searched over Internet and got information about language settings.

 

Go to PC Settings and select Time and Language.

 

I changed Country or region to Indonesia and my keyboard buttons work normally.





You will be get different result if you in the another country or with another type of keyboard.

How Google Know Almost Everything About Me

There are so many posts and articles in The Internet and maybe anyone already know that Google collect almost all our online data, including our location, contacts, search preferences, etc.

Few days ago, when I used my Android phone to book flight and got ticket by email, Google parsed my email and know when, where and how I will go.

I did not familiar with Solo City area, so I used my gadget to find Adisumarmo Airport, Boyolali Regency (SOC). Google give me exact location and nearest route from my place, and also told me that my flight will depart at 17.40 GMT!

That technology make my life easier, but it also scary me. There are so many good persons at Google, but I also afraid that there are some bad guy over there. Just hope that everything okay with our online data and privacy. I write this post in waiting room of SOC Airport, of course I pray for a safe and nice flight to my destination.

Random Contacs Missing from Android Phone

When on vacation, I got problem that my contacts were missing on Android phone. I store them all as Google contact. So, I checked what happen and then realized that I use more than 1 Google accounts synced contacts data to my phone contacts, and I found them tried to syncing almost forever.

What I did just open my contacts in Android phone, and using menu, then go to Accounts. I disabled Sync Contacts in the Sync settings of each Google accounts and only activate sync contacts with 1 Google accounts that considered as primary by me.

I restarted device, and missing contacts problem in my Android phone then gone.

How to Upgrade Firmware Samsung Galaxy Note 3 Neo

For some reason the firmware of our devices will be upgraded periodically. I have Samsung Galaxy Neo 3 (SM-N750) that check the update regularly. I did upgrade using phone, and then at the last update I got error and the phone ask me to upgrade using Samsung Kies. I downloaded Samsung Kies 3 that suitable for Samsung Galaxy Note 3 Neo. After connect the device to the PC using cable, I got my phone connected with Kies 3.

Then, Samsung Kies software give me notification that my Samsung Galaxy Note 3 Neo need a firmware upgrade. I clicked ‘'update” button.

The software give me caution and ask me to checked that I have read all information on upgrade process and sign agreement by clicking radio button in their form.

Then, Samsung Kies prepare for firmware upgrade by downloading firmware upgrade components.

Samsung Kies downloaded file for firmware upgrade. The software ask me to not disconnect cable connected to the PC to avoid interrupted upgrade.

During upgrade process, the Samsung device will be restarted few times. Then Samsung Kies will give information that upgrade process succesfully completed.

Just restart device, disconnect and reconnect the cable, and upgrade is done.

How To Set Squid 3 Prefer IPv4 Network

If you have Squid 3 server and your server connected to IPv6 network, Squid 3 will prefer to access IPv6 as default. When the IPv6 network is unreachable, it will tried to access the IPv4 address.

To make Squid 3 prefer IPv4 instead of IPv6, just put these lines in squid.conf:

dns_v4_first on

This configuration line controls whether IPv4 or IPv6 connection is attempted first when contacting servers and peers. Then, restart squid 3 service, or, if you want to reload configuration seamlessly, type command:

squid3 –k reconfigure

Squid will still perform both IPv6 and IPv4 DNS lookups before connecting to the destination server.

How to Make Ubuntu Prefer A (IPv4) DNS Lookup Over AAAA (IPv6)

I have Ubuntu server with both IPv6 and IPv4. IPV6 queries made before IPV4 and they where wasting resources, and also there is still no route to some network. After read from some web resources, I got that  it's the standard to prioritize IPv6 over IPv4.

I did changed my /etc/gai.conf (gai stands for getaddrinfo, the standard system call for resolving host names). For sites which prefer IPv4 connections change the last line to:

precedence ::ffff:0:0/96 100

And then, my Ubuntu server query A records (IPv4) before AAAA records (IPv6) when access domains.