d

 How To Implement SPF In Postfix

Published on 2007-02-09 - by Falko Timme , ©HowtoForge

This tutorial shows how to implement SPF (Sender Policy Framework) in a Postfix 2.x installation. The Sender Policy Framework is an open standard specifying a technical method to prevent sender address forgery (see http://www.openspf.org/Introduction). There are lots of SPF extensions and patches available for Postfix, but most require that you recompile Postfix. Therefore we will install the postfix-policyd-spf-perl package from openspf.org which is a Perl package and can be implemented in existing Postfix installations (no Postfix compilation required).

File info:

• Source: www.howtoforge.com

 Securing A Website With Client SSL

Published on 2006-09-06 - by SecurityMonkey, ©Information Technology Toolbox, Inc.

Let’s assume that you have an Apache webserver and a website that you want VERY finite access controls on. You could do it a number of ways, right?

You could craft a clever login page and use cookies, session IDs, etc.

You could use a simple authentication method like .htaccess.

Or, you could create a custom SSL certificate and give that certificate to very specific users that should have access to your site. In a perfect world, only these users could communicate with your site AND the connection would be secured via the magic of SSL.

File info:

• Source: http://blogs.ittoolbox.com/

 Hardening HTAccess, Part 1

Published on 2006-07-11 - by Robert Hansen, ©SecurityFocus

Htaccess can be used to manage multiple usernames/passwords, thereby enhancing information protection on the web server by controlling access through HTTP protocols. When used in conjunction with a browser encryption method such as SSL, it is possible to make htaccess authentication a robust method of protecting directories. However, out of the box, htaccess is prone to several problems, namely: packet-sniffing, IP hijacking, replay attacks, and brute force. Cryptography, (SSL and one-time pads) can solve all but one of these problems - brute forcing.

File info:

• Source: www.securityfocus.com

 Hardening HTAccess, Part 2

Published on 2006-08-31 - by Robert Hansen, ©SecurityFocus

This article is the second in a three-part series that will provide a way to harden htaccess to make it more stable and lessen the chances of successful brute force attacks. The first installment offered a brief overview of htaccess, along with a look at a couple of hacking tools and methodologies to which htaccess is particularly susceptible. We particularly covered ways in which wwwhack can be used to infiltrate htaccess. In this article, we will explore a couple of ways of foiling wwwhack, namely headers masking and content masking.

File info:

• Source: www.securityfocus.com

 Hardening HTAccess, Part 3

Published on 2001-08-06 - by Robert Hansen, ©SecurityFocus

This is the third and final installment in a series devoted to hardening htaccess to make it more stable and lessen the chances of successful brute force attacks. The first installment offered a brief overview of htaccess, along with a look at a couple of hacking tools and methodologies to which htaccess is particularly susceptible. We particularly covered ways in which wwwhack can be used to infiltrate htaccess. In the second article, we explored a couple of ways of foiling wwwhack, namely headers masking and content masking. This installment will look at a few more issues involved with hardening htaccess.

File info:

• Source: www.securityfocus.com

 Apache 2.0 Installation Guide

Published on 2002 - by Ryan Spangler, ©Ryan Spangler

The Apache Web server is arguably the most popular Web server in use on the Internet today. Here are some of the reasons why Apache is so popular; you don’t have to be running Windows to run Apache. It was developed on various Unix/Linux/BSD platforms, and then recently ported to Win32. Internet Information Server, a Web server made by Microsoft for the Windows NT platform, is made for use in the "Windows-only" world. While IIS has many features, it’s lack of portability limits it’s market share.

Another reason for Apache’s widespread acceptance is its overall stability. While you can slow down an Apache Web server, you can rarely, if ever, kill one. The Apache Web server service is near bulletproof.

Lastly, it’s relatively fast. I say "relatively" as it’s relative to what you’re doing with it. If you’re hosting a pretty plain Web site with mostly static content, Apache is a fireball. If you throw tons of CGI scripts at it, while making database calls at the same time, you’re going to slow it down. Though much of the slowdown will come from your scripts themselves, and not from Apache.

File info:

• Source: www.packetwatch.net

 How To Set Up Database Replication In MySQL

Published on 2006-01-14 - by Falko Timme, ©Falko Timme

This tutorial describes how to set up database replication in MySQL™. MySQL™ replication allows you to have an exact copy of a database from a master server on another server (slave), and all updates to the database on the master server are immediately replicated to the database on the slave server so that both databases are in sync. This is not a backup policy because an accidentally issued DELETE command will also be carried out on the slave; but replication can help protect against hardware failures though.

File info:

• Source: www.howtoforge.com

 What Is VoIP

Published on 2005-09-02 - by Theodore Wallingford, ©O'Reilly Media, Inc

Voice over Internet Protocol (VoIP) is the family of technologies that allow IP networks to be used for voice applications, such as telephony, voice instant messaging, and teleconferencing. VoIP entails solutions at almost every layer of an IP network--from specialized voice applications (like Skype™) all the way down to low-level quality measures that keep those applications running smoothly.

File info:

• Source: www.oreillynet.com

 Security Primer for Mac OS X

Published on 2004-02-20 - by François Joseph de Kermadec, ©O'Reilly Media, Inc.

The recent security issues that have affected Windows™ users have led the media--and sometimes even Mac-specialized publications--to talk about the shortcomings of the Windows™ security scheme and to provide surprisingly detailed advice.

So far, Mac™ users indeed have been luckier. Mac OS X™ is relatively secure out of the box, and Apple™ has been good about providing easily installable security updates as needed.

Unfortunately, some Mac™ users forget that security is more than just applying the occasional patch. It is a continuously evolving quest that requires additional steps to make their systems more secure. Luckily, the Unix foundation of Mac OS X™, Darwin™, has provided us with powerful tools that we can leverage to help our computers remain secure in an otherwise dangerous world.

In this article, I'll take a hands-on approach to what I call security through common sense, the basic security steps that every single Mac™ user should take.

File info:

• Source: www.macdevcenter.com

 Getting Your Bluetooth Headset to Work in XP

Published on 2005-05-07 - by Wei-Meng Lee, ©O'Reilly Media, Inc.

If you are the owner of a Bluetooth headset, you will be glad to know that besides using it with your cellular phone, you can also use it together with your Windows XP™ PC. However, you may have attempted to pair up the headset with your PC only to find out that the built-in Bluetooth stack in Windows XP™ Service Pack 2 does not support the headset.

In this article I am going to show you the steps to prepare your PC so that it can work with your Bluetooth headset. I will be using the Billionton USB Bluetooth adapter as well as the Motorola HS820 Bluetooth headset.

File info:

• Source: www.windowsdevcenter.com

 Apache Web-Serving with Mac OS X: Part 1

Published on 2001-07-12 - by Kevin Hemenway, ©O'Reilly Media, Inc.

Apache is regarded as the most popular web server available today. With its incredible portability and support for anything you'd ever want to do, Apple wisely decided to ship Apache with its Unix-based operating system. With this web-serving powerhouse at your fingertips, I'll explain how you can impress your boss and solidify your love for Mac OS X™, all at the same time.

File info:

• Source: www.macdevcenter.com

 Upgrade Your Domains from Windows 2000 Active Directory to Windows Server 2003

Published on 2005-08-30 - by Mitch Tulloch, ©O'Reilly Media, Inc.

Windows Server 2003™ offers a lot of real benefits as far as Active Directory (AD) is concerned. These new features include:

• The ability to restructure your forest by renaming domains.
• Forest trusts for easier administration of multiforest scenarios.
• Enhancements in the Microsoft Management Console (MMC) used to manage Active Directory such as improved multiobject select support, saved queries, and drag-and-drop support.
• Many new policy settings for Group Policy and a single, centralized tool (the GPMC) for managing all aspects of Group Policy.
• Install From Media for fast deployment of domain controllers at branch offices.
• Universal group caching to eliminate the need for having a global catalog in every remote site.

To gain full advantage from these new features and others, you need to upgrade your existing Windows 2000™ domains to Windows Server 2003™, and raise your forest functional level to Windows Server 2003™ level. But before you throw in your CD, click Upgrade, and hope for the best, it's a good time to pause, step back, and think about what you plan to do. That's because upgrading your domains without proper planning can get you in pretty deep hot water, pretty fast. Below are half-a-dozen tips on what you should and shouldn't do when you migrate your domains from Windows 2000™ Active Directory to Windows Server 2003™.

File info:

• Source: www.windowsdevcenter.com

 Picking hardware for Media Center

Published on 2005-09-05 - by Wil Harris, ©bit-tech.net

It seems like not a week can go by without some company telling us that 'convergence is the future'. Whether it's the Xbox 360 and PlayStation3, or Media Center PCs, or the latest consumer convergence device, or even Intel's new Viiv PCs, one thing seems certain - the space under your TV is about to get a whole lot more intelligent, whichever device you end up putting there.

In this article, I'm going to be looking at the factors to consider when putting together a PC to run Windows Media Center Edition. The software is now available, legally, to buy OEM. This makes it accessible to self-builders for the first time - but the path to a fully functioning Media Centre PC is a fraught one.The hardware supported by WMCE is very limited, and some hardware requires specific drivers or driver revisions. Some hardware combinations don't work well, regardless of the hardware. How do you get it all to be quiet enough to stick under your TV?

File info:

• Source: www.bit-tech.net

 Compiling GD on Mac OS X HOWTO

Published on 2005-05-16 - by Matías Giovannini, ©Matías Giovannini

This document explains (in the prescriptive, somewhat haughty tone characteristic of other HOWTOS) in a step-by-step fashion the procedure for compiling and installing GD 2.0.33 (the latest version as of 2005-04-20) from sources on Panther (Mac OS X 10.3). However, this HOWTO also assumes a more-than-passing acquaintance with the Mac OS X Terminal application and the UNIX command line.

File info:

• Source: www.paginar.net

 Gmail on Home Linux Boxes using Postfix and Fetchmail

Published on 2005-06-04 - by Mike Chirico, ©Mike Chirico

If you have a Gmail account and would like to use it in conjunction with your personal computers, this tutorial will walk you through configuring and installing the latest version of Postfix with SASL authentication and TLS encryption necessary for connecting and relaying mail to smtp.gmail.com and configuring fetchmail with STARTTLS to fetch messages from your Gmail account to your local system. It will also discuss how to forward mail to other computers and how to automatically backup copies of email messages.

File info:

• Source: www.freshmeat.net