Report earning buat AFD ini juga ga beda ama ads unit atau ads for content, jadi ga ada yang perlu dijelasin masalah reportnya. Oia, kemaren temen2 ada yang nanya, kok opsi di GA nya cuman ada 2, itu biasanya gara2 dulu pas apply, applynya GA untuk Indonesia, jadi cuman tersedia 2 opsi aja. Kalo mau banyak opsinya yah daftar GA internasional, blognya pun musti in English..

Well, ada pantangannya buat AFD, ga boleh sama sekali optimizing atau promotion. Semua backlink yang nyisa pas situs kita online dulu musti dihapusin satu-satu juga. Soalnya bisa disimpulkan sebagai promosi. Direct link musti dibuang, jadi cuman bisa ngandelin fresh visit. Repot yak? Ga juga! Kan kita ga perlu ngapa2in, cukup panggil tukang parkir trus titipin deh domainnya. Palingan per hari dapet 1 ampe 2$ aja.. Yang hebat tuh devina, anak kaskus yang jago tweak AFD, per hari dia bisa ngasi earning sampai 16$ lebih. Entah cara yang dipake ama dia apa. Yang pasti AFD emang nguntungin banget dan yang pasti AMAN! soalnya ga rawan fraud click.

Kalo niat mainan AFD, ada bagusnya jangan ada yang tau nama domainnya, takutnya diusilin trus dibikinin backlink ama orang. Resikonya GA kita kena ban. Udah capek2 apply, kena ban, kan bisa NGAMUK!

Oia, syarat AFD ini, minimal domain kita sudah berumur 1 bulan, supaya aman. Domain baru yang langsung di parking biasanya ga efektif. Sambil curhat boleh yah? Domain gw yang dulu di parking tanpa jasa parking, cuman make tulisan “For Sale, contact bla..bla..bla..” sambil masang GA, kena suspend ama registrarnya tanpa pemberitahuan. Kayanya emang ga boleh kaya gitu

Ya udah, sukses aja buat kalian yang mau mainan AFD!

Dan lagi, ternyata banyak jurusan di Unpad yang belum ngurus akreditasi yang baru ke DIKTI, yang akhirnya akan terancam di anulir (kaya main bola aja), maksudnya gini, semua lulusan jurusan tersebut, dari awal ampe terakhir, bakal kehilangan titel mereka dan dianggap ga pernah kuliah alias ijazahnya dibatalkan. Serem yak? Jurusan gw dah ngurus akreditasi belum yak? Serem neh!

Mungkin mentang-mentang mahasiswa ga tau apa-apa, jadi unpad diem doang kayanya. Padahal kalo dah diangkat jadi isu nasional, malu juga Unpad! Keenakan bikin jurusan ama nerima mahasiswa seh! Urusan sepele kaya ngurus akreditasi aja ga diberesin beresin.. Ya udah lah.. gw seh taunya buruan wisuda, trus bersantai dengan artian ga mikir ngejar2 dosen lagi.

/me OFF

dev tun
port 1194
proto udp
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
persist-key
persist-tun
server 10.8.0.0 255.255.255.0
keepalive 10 30
client-to-client
comp-lzo
ifconfig-pool-persist ipp.txt
status /etc/openvpn/openvpn-status.log
verb 3
push "redirect-gateway"

and the openvpn client config is below:

dev tun
client
proto udp
persist-tun
persist-key
resolv-retry infinite
mute-replay-warnings
remote REMOTE.HOST 1194
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client1.crt
key /etc/openvpn/client1.key
comp-lzo
verb 3

The problem:
Using the above config files I continuously got errors like this on the server syslog:

May 1 00:00:00 hostname ovpn-openvpn[22563]: client1/X.Y.Z.W:1194 MULTI: bad source address from client [10.10.1.11], packet dropped

where X.Y.Z.W is my public IP and 10.10.1.11 is the Lan IP of the machine that makes the connection to the openvpn server.

The solution:
finally, here’s the solution for all that problematic configuration:

open your .conf file and edit it! Please add two lines on the bottom below:

dev tun
port 1194
proto udp
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
persist-key
persist-tun
server 10.8.0.0 255.255.255.0
keepalive 10 30
client-to-client
comp-lzo
ifconfig-pool-persist ipp.txt
status /etc/openvpn/openvpn-status.log
verb 3
push "redirect-gateway"
client-config-dir ccd
route 10.10.1.0 255.255.255.0

once again, remember to add the two lines:

client-config-dir ccd
route 10.10.1.0 255.255.255.0

Then I created the /etc/openvpn/ccd/ dir and put inside a file named client1 with the following contents:

# cat /etc/openvpn/ccd/client1
iroute 10.10.1.0 255.255.255.0

Client configuration stays the same.

All should be fine now and in your server logs you will now see entries like this:

May 1 00:00:00 hostname ovpn-openvpn[27096]: client1/X.Y.Z.W:1194 MULTI: Learn: 10.10.1.11 -> client1/X.Y.Z.W:1194

Remember to load you NAT again!
credit to VOID

You can follow my step-by-step tutorial below,

You need Tunnelier for this tutorial! Download it and install! I’m using CentOS 5 64bit for this tutorial..

first step is to make sure that tun/tap are enabled.

ls -al /dev/net/tun

if you see that the status is yellow then it’s mean has been enabled, so go to next step.

wget http://dag.wieers.com/rpm/packages/rpmforge-release/rpmforge-release-0.3.6-1.el5.rf.x86_64.rpm
rpm -Uvh rpmforge-release-0.3.6-1.el5.rf.x86_64.rpm
yum install openvpn

Then we will setup openvpn client from here..

cp -r /usr/share/doc/openvpn-2.0.9/easy-rsa/ /etc/openvpn/
cd /etc/openvpn/easy-rsa/2.0
chmod 755 *
source ./vars
./vars
./clean-all
./build-ca

you’ll be ordered to fill some question, you can fill with whatever you want, but i suggest you to only fill the common name only.
fill the common name with hostname: name.yourdomain.com
usually the character limit only 6 chars, so better you write down your hostname on notepad and copy/paste to the terminal.

./build-key-server server

you need to fill the form just like before, but now fill the common name with “server” (without quote)
please empty the challange pass, it will confuse you if you fill it because it will require you to double password.
fill all with Y.

./build-dh

now go to the openvpn directory!

cd /etc/openvpn

check what files exist on that directory.

ls

now edit the server.conf

vim server.conf

if you have no nano/vim text editor, so install it first!

yum install nano
yum install vim

edit the content of server.conf like below:

local YOUR.IP.PUT.HERE
port YOURPORT
proto udp
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
#-ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 4.2.2.1"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status server-tcp.log
verb 3
;crl-verify /etc/openvpn/easy-rsa/2.0/keys/crl.pem

now start the openvpn service!

service openvpn start

Now enable ipforward and make a new rules for NAT iptables so you can browse the internet using your VPN

echo 1 > /proc/sys/net/ipv4/ip_forward

To enable NAT, make sure you using VPS or DS, if you using OpenVZ, here’s the command:

iptables -t nat -A POSTROUTING -s 1.2.3.0/24  -j SNAT --to YOUR.IP.PUT.HERE

and if you use DS or XEN, here’s the command:

iptables -t nat -A POSTROUTING -s 1.2.3.0/24 -o eth0 -j MASQUERADE

Now create the client certificate:

cd /etc/openvpn/easy-rsa/2.0
source ./vars
./vars
./build-key yourclientname

download the ca.crt and the client.crt also client.key on /etc/openvpn/easy-rsa/2.0/keys , use your SFTP and download them all, after that, put them to C:\Program Files\OpenVPN\config

If done, make the config ovpn for client,
create new file using notepad named yourclientname.ovpn and don’t forget to save as .ovpn
the content:

client
dev tun
proto udp
remote YOUR.IP.PUT.HERE YOURPORT
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
cert yourclientname.crt
key yourclientname.key
;auth-user-pass
comp-lzo
verb 3

don’t forget to put your IP with replacing the “YOUR.IP.PUT.HERE” with your IP!
put the file .ovpn to folder config like the ca.crt before, then running the openvpn gui
don’t forget to disconnect the SSH terminal first!

NOTE:
For Windows 7 client, go to C:\Program Files\OpenVPN\bin\
right click the openvpn-gui-1.0.3.exe, then choose “Run as Administrator”

credit to 2298, oiseng, oner, and paijrut for helping me out!

So, here’s the simple yum command to remove it.

# yum remove openvpn-as

Just in case you no longer maintain it and want to remove it. By the way, good luck!

#yum update php

But, finally i figure out that PHP 5.2 must be manually install and update through repo update. As long as you’re using the standard PHP packages on your CentOS server you won’t need to do anything extra. If you’re using extra PHP packages that aren’t part of the standard CentOS repositories (like php-mcrypt) you’ll have to remove them or find updated versions of them.

Add the development repositories

First thing we need to do is add the development repositories to yum. When we add the development repository we’re going to configure it so it only pulls PHP packages. To start we’ll need create a new yum repository configuration file (use your favorite editor)

# /etc/yum.repos.d/CentOS-Testing.repo

Copy/paste the following into this file:

# CentOS-Testing:
# !!!! CAUTION !!!!
# This repository is a proving grounds for packages on their way to CentOSPlus and CentOS Extras.
# They may or may not replace core CentOS packages, and are not guaranteed to function properly.
# These packages build and install, but are waiting for feedback from testers as to
# functionality and stability. Packages in this repository will come and go during the
# development period, so it should not be left enabled or used on production systems without due
# consideration.
[c5-testing]
name=CentOS-5 Testing
baseurl=http://dev.centos.org/centos/$releasever/testing/$basearch/
enabled=1
gpgcheck=1
gpgkey=http://dev.centos.org/centos/RPM-GPG-KEY-CentOS-testing
includepkgs=php*

Make sure to remove any spaces at the start of each line, then save and close the file and you’re done.

Update PHP packages

Before updating your PHP packages you’ll want to get a list of what you currently have installed. To get a list of current PHP packages run the following:

# rpm -qa |grep php

Now you can use yum to update the PHP packages on your system:

# yum update

You should be shown a list of packages that are going to be updated. Compare it to the list of PHP packages on your system. Note any packages that are not in the list. You’ll need to remove these packages or find updates for them because they won’t work after you update to PHP 5.2.x. If that is acceptable type “y” to continue and let yum update the packages.

Once yum has completed restart Apache:

# service httpd restart

Now you have PHP 5.2 installed on your CentOS 5 64bit and of course my phpMyAdmin now working!

Brasa bego beneran megang VPS sendiri. Yah, akhirnya gw bisa punya VPS sendiri dan bener-bener VPS yang masih telanjang, kaga ada WHM ama cpanelnya sama sekali. Maklum, nyari murahnya doang.

Asli, kepala botak dah, bolak-balik konaksi ke server gw putus nyambung, lagi asik nginstal, tau2 terminal SSH2 gw ketutup sendiri. Entah karena timed out atau emang koneksi DC, maklum.. di warnet.

Pas konaksi lagi enak, eh malah konak ke server gw susahnya setengah mati. Sia-sia dah.. mo belajar jadi susah

Btw, tadinya di solusVM baru diinstallin OS CentOS 5 32bit, cuman karena ngobrol ama oiseng kalo openvpn bagusnya di 64bit yah udah, install CentOS 5.5 64bit dah.

Nah, karna maksud awal gw beli VPS ini buat jadi webhost gw, otomatis gw musti install web server dulu.. Baca sana sini, nemu tutorial si duduts di RootZone.net tentang installing LiteSpeed Web Server. Dah gw ikutin ampe terakhir, tapi kaga jalan dah.. aneh.. apa yang salah yak?

Yah, pokoknya malem ini kepala gw puyeng setup unmanaged VPS di 2host.com ini. Mudah-mudahan besok ada pencerahan.

Jujur aja, selama ini (kurang lebih 5 tahun) gw hidup dengan bergantung pada internet. Semua sandang papan yang gw dapet selama kuliah gw dapet 70% dari kerjaan gw di internet, entah bikinin situs orang, bikinin desain, ato dagang (kaos, jaket, dsb). Dari situ gw bisa hidup puas tanpa ngandelin bokap nyokap gw.

Yang aneh selama ini adalah, nyokap selalu dijejali oleh GENGSI dari para istri karyawan dan tetangga-tetangga gw di kampung yang pikirannya sempit. Bahwa menjadi buruh (baca: pegawai) adalah pekerjaan TERAMAN di dunia. Memang mungkin aman, tapi.. kreatifitas, daya juang, dan gairah serta motivasi gw terhambat! Bagaikan di kebiri! Coba aja tanya ama mereka yang kerja dari jam 8 pagi sampai 4 sore, mereka menghabiskan hidup mereka untuk pekerjaan! Hidup aman? yah mungkin lewat tunjangan ini dan itu, tapi secara mental, mereka terpuruk!

Itu hal yang sampai sekarang gw hindari. Bokap gw dengan moderat membebaskan gw dari semua beban itu! Kenapa? Karena beliau sendiri merasakan bagaimana kreatifitasnya di kebiri oleh waktu kerja yang ketat dimana jatah cuti cuman 30 hari maksimal dalam setahun! Sedangkan gw? Bisa cuti kapanpun gw mau!

Gw pengen hidup santai tapi bisa tetap menghidupi diri gw dan keluarga gw (nantinya).

Cuman, sebagai anak berbakti dan ga pengen muka orang tua gw tercoreng cuman gara-gara anaknya tidak punya pekerjaan yang pasti dan tidak bisa DI BERI LABEL, mangkanya mulai pertengahan tahun ini, gw mencoba peruntungan gw sebagai BURUH.

Semoga TUHAN memberi jalan buat gw! dan tentunya tidak mengijinkan gw mengebiri kreatifitas gw sendiri.

So, i do some research and found these 3 stuff to secure our WordPress Blog.

1. WordPress FireWall, it will check every access to our blog, and identify all possible attempts for malicious attack such as SQL injection etc.
2. Login LockDown, it prevents brute force attack to WordPress login form, after 3 failed attempts to login, access to login form from those IP address will be blocked for about 1 hour (configured from admin panel).
3. WordPress AntiVirus, it will check whether the template we currently use contain harmful code (exploit/spam injection/frame injection etc) or not. Scanning process can be done manually or scheduled in daily basis.

That’s all my plugins to secure my WordPress Blog. No plugins will secure you from attacker at 100% accuracy. But, at least it a worth to try.

Link to each plugin above:

WordPress Firewall, WordPress AntiVirus, WordPress Login LockDown

and also some images,

Well, let’s start!

1. First, you need to visit [THIS LINK] to see the latest YM! version.
2. If you see the latest version there with this format “10.0.0.1270“, we need to seperate this code version into two part. The version number and the build number like below 1000_1270 remember to seperate with the underscore.
3. Now we play with the URI or URL, copy this link http://download.yimg.com/ycs/msg/dl/msgrX/us/ymsgrBBBB_BBBB_us.exe and replace the X with the current YM! version which is version 10, then replace the BBBB_BBBB with the number we create on the step two.
4. We’ll get the final URI or URL like below, http://download.yimg.com/ycs/msg/dl/msgr10/us/ymsgr1000_1270_us.exe

That’s all. Now you can create your own offline Yahoo! Messenger without worry. So simple and easy to follow.

Here’s the latest version of Yahoo! Messenger v.10.0.0.1270