there are many many ways to speed up your browsing experiences.


one of many ways is optimizing your DNS server list.
each and every file on the internet is located on a certain (sub)domain.
so, each and every request of any file from your browser will need to query DNS servers first, before it can be fetch to your browser.

as you can see, DNS play significan roles in your browsing experience. if you're using firefox and see a lot of 'looking up someslowdomainname.com' then your DNS is slow.

here's how i speed up DNS lookup a little bit. first, install dnsmasq to do dns queries and cache all the results. thus repetitive lookup will perform much faster because the result is already in cache.

then, tell dnsmasq to do the queries to opendns to let it filtered out phising and malware sites. but, opt-out the opendns guides and block my local ISP ads.
edit /etc/dnsmasq.conf and add this lines:

#http://winware.org/bogus-domains.txt
bogus-nxdomain=92.242.132.11 #telkom speedy indonesia ads
bogus-nxdomain=67.215.65.132 #opendns guides
#bogus-nxdomain=208.67.219.135 #opendns blocked pages
#bogus-nxdomain=64.94.110.11 #verisign

last, must not pass this one, tell the clients (i use wicd to manage my linux networks), including browsers, messengers, etc.. to query local dnsmasq instead of the far away opendns servers.
edit /etc/resolv.conf.head and add these lines:

nameserver 127.0.0.1 #query local dnsmasq
#dnsmasq will query these. also, in case dnsmasq fail, all apps will query these too:
nameserver 208.67.222.222 
nameserver 208.67.220.220

if you need more redundancy, in case all your dns fail, add this to /etc/resolv.conf.tail

#google's 
nameserver 8.8.8.8 
nameserver 8.8.4.4

wicd will automatically merge dns from your router/isp between resolv.conf.head and resolv.conf.tail


now... our dns is much faster... what else can we do to speed up browsing? what do you do?

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

one great thing about archlinux is the rc.conf which simplify services configuration a lot.

instead of messing with lots lots of rc.X files, you only need to configure one single file for all bootup process.

also, this way, you have full control which services should startup first and which services can start later.

i move kdm service to start earlier so that i can have X starts while other services starts in background.
this is how i arrange the services/daemons:

DAEMONS=(syslog-ng @network hal wicd kdm netfs crond laptop-mode compcache)

or, you could also put a lot of @ in front of each service so it starts in background, as more Arch user use like this:

DAEMONS=(syslog-ng @network hal wicd @netfs @crond @laptop-mode @compcache kdm)

how is yours arranged?

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

if you follow the instruction on kdemod installation, we're told to do 'pacman -S kdemod-minimal' to install minimal KDE.

but that need to download over 400Megs packages and that does not seems minimal for me. coz the Archlinux KDE minimal install, only need much much smaller packages:

pacman -S kdebase-workspace kdebase-konsole

so i guess, i can do the same thing with kdemod. which i did:

pacman -S kdemod-kdebase-workspace kdemod-kdebase-konsole

now, that's what i called a minimal install.

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

i dont know if it's documented coz i cant find this anywhere.

here's a list of url i used to netinstall linux (xen/kvm) using virt-manager:

• debian: http://ftp.riken.jp/Linux/debian/debian/dists/testing/main/installer-amd64/current/
• centos: http://ftp.riken.jp/Linux/centos/5/os/x86_64/
• opensuse: http://ftp.riken.jp/Linux/opensuse/distribution/openSUSE-current/repo/oss/
• mandriva: http://ftp.riken.jp/Linux/MandrivaLinux/official/current/x86_64/
  
• fedora: http://ftp.riken.jp/Linux/fedora/releases/12/Fedora/x86_64/os/

adjust it with your local mirror and the version you want to install.


--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

i hate compiling. even that gentoo, archlinux and freebsd makes it really very easy.
however easy it gets, i still hate compiling...

i got very recent laptop which have intermittent lan and wifi connection with default kernel.

this one-line is all it takes to upgrade fedora kernel without compiling:

su -c 'yum --enablerepo=rawhide update kernel*'

that's all it.
your kernel will be upgrade to the latest kernel from rawhide (fedora testing)

that fix my intermittent network connection.

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

happy new year! wish you all blessed and peace!

introducing xcompmgr - sample X compositing manager.

xcompmgr is a sample compositing manager for X servers supporting XFIXES, DAMAGE, and COMPOSITE extensions. It enables basic eye-effects.

imho, this is very hidden 'treasure' of linux freedesktop xapps.

it's not much know or used. but once i try it, i like it a lot!

well, maybe it's not comparable to compiz (fusion). it's not that feature full. and most important (for me) it's not that heavy weight compositing champion.
i can just run compiz, gnome/kde and all the glory on my Turion II laptop. but i rather let all resources goes to kvm to use/run/test other linux/win/solaris/firewall/servers/etc.
so, i try to keep bare minimal fancy X stuffs on my system. i use fedora lxde spins in this lappy.

i like compiz. but as i said, it's overkill for me. and i need all the resource i can get for kvm. so looks around to find the alternatives. xfce is the well known lightest desktop with compositing.

not anymore...
now with xcompmgr, you can use whatever your favourite lightweight window manager and still can have cool compositing desktop.
tested with fluxbox, awesome2, fvm2, and openbox (with lxde). all works good. it's very light, fast and use very low ram and cpu.

to test it, just install xcompmgr and run it inside X. if you like it, you can put it into autostart so that it start everytime X starts.

xcompmgr -c -f -F &
man xcompmgr

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

playing with fedora these few days.

yum is great with it's delta package system. which only download changed file instead of the whole package.

one thing i dont like is that yum do not know what dependencies have been installed and should be removed.

debian aptitude works out of the box.
and we can add --auto-orphans to mandriva urpme


some people suggest 'package-cleanup --leaves' to list leaf node (package that no other package depends on).

i try that, and it list libvirt which is needed by virt-manager. so i cant fully trust that.

more googling i found yum plugin remove with leaves package.

su -c 'yum install yum-plugin-remove-with-leaves'
yum remove --remove-leaves package-tobe-removed

still need to test this

 --
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

by request of users and FameWolf that tiredlessly gives positive feedbacks, here i present the making of my opensuse lxde livecd.

well... actually i dont see much to show...
anyway, here goes...

1. Create new appliance...
2. Choose ´Minimal X´
3. gives it cool name.
4. add repos. the only one required is lxde repo.
5. add packages. (see screenshot)
   
6. tune configurations
7. paste this into scripts

chkconfig --add boot.compcache
chkconfig boot.compcache on

yast2 sysconfig set DEFAULT_WM="startlxde"
yast2 sysconfig set DEFAULT_GUI="GTK"
yast2 sysconfig set DISPLAYMANAGER="slim"
yast2 sysconfig set DEFAULT_WM="startlxde"

echo 'default_user  polaris' >> /etc/slim.conf
#echo 'auto_login    yes' >> /etc/slim.conf
echo 'sessions startlxde,icewm' >> /etc/slim.conf
echo 'exec startlxde' >> /home/polaris/.xinitrc

usermod -G audio,video,floppy,cdrom,disk,dialout,modem,games,lp,pmount polaris

echo 'text/x-suse-ymu;/sbin/OneClickInstallUI' >> /etc/mailcap
echo 'text/x-suse-ymp;/sbin/OneClickInstallUI' >> /etc/mailcap

the scripts used to works on ´Run script at the end of the build´ section. now it wont works. so i duplicate it to first boot section.

that´s all it!

you can make your own distro or just download the ready to boot opensuse lxde livecd.

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

so you just registered a great domain name and have not (yet) any plan what to do with it.
what you do?

most people just do nothing and let their registrar make money by showing ads on their unused properties.

now you can take control of your own idle domain names. setup your own parked pages or redirect to parking services that can make yourself few buck even it's unused. you can even set it up for sales if you like...

i'll recommend one parking service if you have not got one yet: park or sell your domain names
yes that have my affiliate code.

well, if you only have a dozen domain or less, that's not too hard to maintain. just add your domain to your parking service and it's done.
but if you have more... it will takes a lot of time to add each and every domain you have to the parking service.


now, this is how i make it easy to add hundreds or even thousands of your domain name into parking service without you have to manually input them...

first, register to park or sell your domain names because they have great api that we need.

second, setup nsd name servers on your vps. why nsd? it slimmer, lighter, faster than bind and wont slow down your vps. here's i set it on debian:

aptitude install nsd3

third, configure nsd and setup php redirect script

replace the 'lid=' with your own code.

fourth, setup all your idle domains to use your new dns server. or, you can just point it to your php script.

that's it. now all your idle domains will be redirected to the parking service which will give you (not your registrar) few buck per month per domain without you need to set it up manually.


--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

this is the perfect mysql backup tool for me.


how to use it:

• create LocalUserWithMinimalReadOnlyRight on mysql with your favourite tool. i only give it SELECT, RELOAD, LOCK TABLES privileges.
• download backup-mysql.logrotate, edit the file, change the username and password
• put the files in /etc/logrotate.d/
• run this for the very first time:

for i in `mysql --batch -e 'show databases' | tail -n +2`; do
if [ ! -e /bak/mysql/$i ]; then mkdir -m 700 /bak/mysql/$i; fi
mysqldump --opt -u LocalUserWithMinimalReadOnlyRight $i | gzip -c > /bak/mysql/$i/$i.sql.gz
done

that's it. i will creates 5 daily backup, 4 weekly backup and 3 monthly backup.
for best result, make sure you put your backup on separate drive or even on a separate network/country/planet...

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

so you've been trying all possible ways to get google chrome installed in your mac and linux?

now you can get the native builds from google early access release. it's unreleased, beta and developer channel.

• google chrome for mac
• debian package for linux

and if you install the debian package on debian/ubuntu, it will also install google chrome repo to make sure you always get updated version of google chrome.

and if you want better privacy and using ubuntu, you can use chromium daily builds.
add this to your /etc/apt/source.list

deb http://ppa.launchpad.net/chromium-daily/ppa/ubuntu hardy main
# replace hardy with jaunty or whatever your ubuntu version is

personally, i hate 'daily' stuffs that i feel the need to update everyday...


after you get google chrome installed, check out some cool and hot themes to dress-up your browser.
--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

srware iron is a browser built from chromium source. some people might consider google chrome as spyware. so if you want a clean browser with chrome power, then use chromium or iron.

download for linux is here. and for mac is here.
--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

looking for the perfect linux desktop for office use?
so did i.

lucky me, i have access to susestudio. that allow me easily customize openSuse as i like it.

so far, i built openSuse lxde livecd, which is the linux minimal desktop that only have lxde and firefox. this one i use for most every computer i can put it on. then, add up apps that i need.
then from this, i made up kidSuse. the linux for kids. this is the one my kids (from 2yrs to 6yrs) are playing and learning with, everyday.

but i still missing something...
for office use, i can start with minimal desktop. but there's too much to add and when the internet slowing down, it could takes hours downloading all the packages...

so here's the Office Konnect distro for my own use. or if it suite you, it's free to take.

• Download Office Konnect Linux 0.1.2
• Download Office Konnect Linux 0.1.3

what's inside? the latest (preferred, stable) version of these apps:

• OpenOffice.org
• Koffice
  
• Kontact (KDE PIM) and all its components
• konqueror, kopete, okular, k3b, kde-utils, etc
• wine
  

well, because there're so many kde apps, i just use the kde desktop instead of other lightweight options.

that's all i can think of for my office use.
anything missing? critics, comments, suggestions are all welcome.
--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

this might be a late news.
but because people still gets here for this install google chrome on linux guide, so this short note only to tell you that you can now have chromium (which is the base for google chrome builds) on linux, mac and xp:

• chromium for linux
• chromium for mac
• chromium for windows xp
  

just download the latest snapshot, unzip and run.
simple as that.

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

yahoo, msn, aim, icq, etc... always changing their protocol and always causing connection problem for third party messenger apps like pidgin.

while linux distro always stick to one apps version at their release and do not upgrade to latest release.

then, recently yahoo change their protocol again.
all these causing all ubuntu users cant connect to yahoo messenger.
you can use getdeb and install the current version. but then you need to manually update pidgin everytime new version released. or everytime you encounter another connection problem.


the only good solution is to keep your pidgin always update to the latest release version. the instruction on pidgin site also not very up-to-date and will not install gpg key for the repo.

this will keep your pidgin always up-to-date:

sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys A1F196A8
echo deb http://ppa.launchpad.net/pidgin-developers/ppa/ubuntu \     `lsb_release --short --codename` main | \
    sudo tee /etc/apt/sources.list.d/pidgin-ppa.list
sudo aptitude update
sudo aptitude upgrade

that's it.
everytime you do 'sudo aptitude update && sudo aptitude upgrade' you will get the latest release version.

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

it seem like a docking launch bar that really catchy for everyone started by apple osx.
since then, everybody want it...

there're lots of launch bar for linux. not only 5 or even 10.
1. Avant Window Navigator

2. ksmoothdock

3. cairo dock

4. kooldock

5. kiba dock

6. engage 

7. menu bar

8. xqde

9. tuxbar

10. simdock; it's fast & simple. doesnt require xgl

11. wbar; another fast & simple dock.

12? kxdocker; discontinued. replaced by xqde.

13? gnome-dock; another dead one.

14. fbpanel; not purely launchbar, but can be configured to look like osx

too bad, none that i know of have menu launcher and easy gui configuration.

which one you use?

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

tools to check if your cpu support hardware virtualization:

• cpu-z  
• secureable
• AMD Virtualization™ Technology and Microsoft® Hyper-V™ System Compatibility Check Utility
  

or, in linux use this oneliner:

egrep ‘(vmx|svm)’ /proc/cpuinfo

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

how to automatically mount windows/linux samba shares? that is the question...

currently, there're two apps that i know can do this. use only one of them. or if you use both, make sure you use it on different folders.

1. fusesmb quick start:

sudo aptitude install fusesmb
sudo mkdir /mnt/Neighborhood
sudo chown yourusername:fuse /mnt/Neighborhood
fusesmb /mnt/Neighborhood -o allow_other

2. smbnetfs quick start:

sudo aptitude install smbnetfs
sudo mkdir /mnt/Neighborhood
sudo chown yourusername:fuse /mnt/Neighborhood
smbnetfs /mnt/Neighborhood

that is it.
to make it the apps run at startup, you can put it either in your .bashrc or your session manager autostart.

--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

now that tested and runs correctly, i dare myself to announce this public beta release of my opensuse minimal desktop livecd.

features:

• openSUSE 11.1
• LXDE with all its components
  
• Firefox 3.0.10 + Flash Player 10

huge thanks to all testers for the feedback.

download here.

all comments, complaints and critics are welcome.
--
tips & tricks on computers and gadgets
denny on IT ; let's doIT
documenting the brain

what's wrong with spamassassin? everybody else are using spamassassin for their mail server spam protection.
nothing wrong with it. it just use up too much resources. that's all.

what if we can built lighter system on lower resources system (think vps) with as good spam protection as spamassassin can provide..?

here's my attempt...

first thing first. install all at once.

sudo aptitude install postfix postgrey clamsmtp wget curl rsync gzip

then, configure postfix to use postgrey and clamsmtp.

add this to /etc/postfix/main.cf

smtpd_recipient_restrictions = permit_sasl_authenticated,
           permit_mynetworks,
           reject_unauth_destination,
           check_policy_service inet:127.0.0.1:60000

content_filter = scan:[127.0.0.1]:10026

add this to /etc/postfix/master.cf

# ClamSMTP anti virus scan filter (used by content_filter)
 scan      unix  -       -       n       -       16      smtp
   -o smtp_send_xforward_command=yes
   -o smtp_enforce_tls=no
 # For injecting mail back into postfix from the filter
 127.0.0.1:10025 inet  n -       n       -       16      smtpd
   -o content_filter=
   -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
   -o smtpd_helo_restrictions=
   -o smtpd_client_restrictions=
   -o smtpd_sender_restrictions=
   -o smtpd_recipient_restrictions=permit_mynetworks,reject
   -o mynetworks_style=host
   -o smtpd_authorized_xforward_hosts=127.0.0.0/8

restart postfix

sudo /etc/init.d/postfix restart

now, get scam and phishing signature for clamav from sanesecurity, msrbl, securiteinfo, and malwarepatrol.

$ wget ftp://seibercom.net/pub/scamp.tar.gz
$ tar zxvf scamp.tar.gz
$ vi scam.sh
# uncomment this:
# SIG_DB="/var/lib/clamav"
# IF your clamav version < 0.94 then uncomment this too:
# NO_LDB=1
# that's it. save. exit.
$ sudo cp scamp.sh /etc/cron.daily/
# run it once, the first time:
sudo /etc/cron.daily/scamp.sh

done.
you now got a lighter email server with great spam and virus protection.
enjoy less spam!

refs: http://wiki.dennyhalim.com/postfix


-- tips & tricks on computers and gadgets denny on IT ; let's doIT documenting the brain