Posted in June 22, 2009 ¬ 7:22 amh.
mick
Just a quick note about sftp.
It makes good security sense to change the ssh port on servers that are Internet accessable. To take advantage of this using ssh is quite straight forward as their is a parameter -p to support this eg:
ssh -p 3432 mick@mickvaites.com
Unfortunately the same is not true for sftp (secure file transfer). [...]
Read the rest of this entry »
Posted in June 15, 2009 ¬ 11:26 pmh.
mick
Note to self:
These are the ssh escape commands from within an ssh connected session.
%~?
Supported escape sequences:
~. – terminate connection (and any multiplexed sessions)
~B – send a BREAK to the remote system
~C – open a command line
~R – Request rekey (SSH protocol 2 only)
~^Z – suspend ssh
~# – list forwarded [...]
Read the rest of this entry »
Posted in May 6, 2009 ¬ 2:54 pmh.
mick
Zebra is a look a like IOS front end for routing on Linux and *BSD systems. It became popular are routed went commercial (might be slightly wrong over that).
I was looking to get dynamic routing installed on FreeBSD and initially installed zebra from the port. However after considerable effort to get it up and running [...]
Read the rest of this entry »
Posted in May 1, 2009 ¬ 4:29 pmh.
mick
Not new information but all the same useful for either secure traffic or bypassing web cache restrictions.
First example is a socks proxy to allow you to secure web traffic over a wifi link or just avoiding web caching filters.
From unix, linux, *BSD or MacOSX type in :
ssh -N name@ssh_server -D 9999
or from windows download plink.exe [...]
Read the rest of this entry »
Posted in April 24, 2009 ¬ 3:03 amh.
mick
At the core of all investigation in relation to a networks is the need to sniff packets. If you have a switch with SPAN port capabilities then you can listen in from where ever you wish. However if for whatever reason this is not practical a network wiretap may be the answer.
From the PC under [...]
Read the rest of this entry »
Posted in April 3, 2009 ¬ 12:00 pmh.
mick
I was looking to install some remote services to my server connected to my home ADSL line. The problem I have is that I have got a dynamic IP address with my DSL line. After trying a number of the public services with varying degrees of sucess and flexibility I decided to build my own [...]
Read the rest of this entry »
Posted in February 3, 2009 ¬ 12:00 pmh.
mick
There are a number of ways of tackling spam coming into an ISPs mail servers each with it’s own issues.
1. Sender Verification.
Prior to an email being allowed to enter your mail server; the mail server associated with the senders domain is looked up and a “ring back” is attempted to see if the mail server [...]
Read the rest of this entry »