Squeeze maximum usage out of your network resource

October 2nd, 2007 tony Posted in Networking No Comments »

(Via RootPrompt.org.)

If you have UNIX-based programming experience, then you’ve probably worried at some point about enhancing your network throughput. In this article, learn some useful techniques to squeeze the most out of your bandwidth, and get a big performance boost with some of the methods described here.

AddThis Social Bookmark Button

Access Your Linux Box Remotely With NoMachine

October 2nd, 2007 tony Posted in Networking No Comments »

(Via RootPrompt.org.)

Article says it works better than VNC.”What about linux? If you want this type of service and performance, you have to look at another proprietary product. I’m talking about nx protocol by NoMachine. However unlike RDP, the core libraries for NX are released under GPL and NoMachine does distribute free binaries for most modern systems.” Terminally Incoherent Blog Archive Access Your Linux Box Remotely With NoMachine

AddThis Social Bookmark Button

Preventing Brute Force Attacks With BlockHosts On Debian Etch

October 1st, 2007 tony Posted in Networking No Comments »

(Via HowtoForge.)

In this article I will show how to install and configure BlockHosts on a Debian Etch system. BlockHosts is a Python tool that observes login attempts to various services, e.g. SSH, FTP, etc., and if it finds failed login attempts again and again from the same IP address or host, it stops further login attempts from that IP address/host. By default, BlockHosts supports services that use TCP_WRAPPERS, such as SSH, i.e. services, that use /etc/hosts.allow or /etc/hosts.deny, but it can also block other services using iproute or iptables.

Full story

AddThis Social Bookmark Button

Change your Network card MAC ( Media Access Control) address Using macchanger

January 4th, 2007 david23 Posted in How-Tos, Networking No Comments »

Media Access Control address, a hardware address that uniquely identifies each node of a network. In IEEE 802 networks, the Data Link Control (DLC) layer of the OSI Reference Model is divided into two sublayers: the Logical Link Control (LLC) layer and the Media Access Control (MAC) layer. The MAC layer interfaces directly with the network medium.Consequently, each different type of network medium requires a different MAC layer. On networks that do not conform to the IEEE 802 standards but do conform to the OSI Reference Model, the node address is called the Data Link Control (DLC) address.

Read Full article here

AddThis Social Bookmark Button

Network Bandwidth Monitoring Tools

December 21st, 2006 david23 Posted in How-Tos, Networking, Ubuntu No Comments »

This is list of Network Bandwidth Monitoring Tools for Ubuntu Users includes bmon bwbar,bwm,bwm-ng,iftop,iperf,ipfm speedometer,cbm,ibmonitor,pktstat,mactrack,MRTG,Cacti.This tutorial also contains how to install and configure each tool with examples and screenshots.This is very useful for all Linux users and admins

Read Full article here

AddThis Social Bookmark Button

XANDROS SERVER…WOW!

June 22nd, 2006 Dave Posted in How-Tos, Installation, Networking No Comments »

When I first read about XANDROS SERVER, I thought this might be a marriage made in heaven. The Press Release said that this was a Linux based server for System Admins with little or no Linux experience. Mine was a little different. I had Linux experience, however no server or server set-up experience.


XANDROS has an excellent reputation for making Linux simple and has done much to bring many new users to the table. While setting up an internal server would present its challenges, it would be a GREAT learning experience. The results of that experience follow.


I must first note that this is in NO way a commercial for XANDROS. It is a review of a product that could appear on your network tomorrow!


Before talking about the install or the included programs, I should mention that as a server product, there are certain minimums that should be met. While I say this as if you are going to have to run out for a newer computer, that is not the case. In fact, many people running Linux today have everything needed. 512 to 2 GB RAM, Hard Drive with 40 GB to 120 GB, CD ROM and a VGA Monitor capable of 800X600 or higher.


The machine I would use for a server meets the criteria. Using a SEMPRON 2800+ with 1GB of RAM and 120 GB Hard Drive with an excellent video card, I felt that I was set to begin.


Opening the package, I found three disks. First, the installation disk. Secondly, application CD containing a host of software including; IBM-DB2, Oracle-10G, MySQL ab, SugarCRM and Jboss Application Server. The third disk contained advanced e-mail and calendar platforms featuring, feature rich webmail and wireless connectivity. In addition there is seamless integration with Microsoft Outlook, Lotus Notes and other PIM tools.


Before I go any further, I must mention that the XANDROS Server package is NOT free software. There is a charge that covers the aforementioned licenses.


Having no server experience, I was glad to see the documentation that accompanies the package. I read the small “GETTING STARTED GUIDE” which is 51 pages and felt like I could install and setup without problem, however being a little intimidated by the word SERVER, I opted to delve into the “ADMINISTRATORS GUIDE.” This 552 page manual is written for someone who really wants to go to the index and be pointed to the answer.


Installation started with the familiar XANDROS install. Booting from the install CD, I was quickly guided through the process. After being greeted by the familiar splash screen and clicking next, I was led to the Licensing Agreement, which I quickly accepted. Entering the Serial Number, I clicked on NEXT and was opened selections for almost every kind of server I had ever heard of. While this server was to work on my home network, the options were many. DHCP, file, firewall, FTP, print, time and VPN servers as well as DNS, mail and Web servers. The object was to select those items you would like or needed. I left all selected knowing I would only use a few.


Once this selection was complete, it was partition time. Since I wanted to use the entire hard drive for the server, I selected “Take over disk or partition.” Many other options are available including resizing a Windows partition.


The next screen gave me a Disk Configuration window giving me the opportunity to select the disk or partition to use. I should mention at this point that RAID is supported, however if you do not have RAID, you can select BIOXRADI and then click Remove BIOS RAID.


Network configuration includes DHCP, Static or you can elect to disable the network connection.


As you continue through the setup, you configure passwords, complete the Administration Configuration, configure your server accounts, specify whether or not this will be the primary server. While this all sounds very complicated to the uninitiated, the process takes less than 10 minutes and once the install started whirring, my system took 19 minutes for the install.


I have to commend XANDROS for the excellent documentation that made me feel as if I knew what was going to happen before it did! I had read through the areas of documentation pertaining to my uses. The server would be used as an FTP server.


For me, I believe the hardest part of the entire process was making sure that I had passwords written down (something I seldom do) to insure that I was able to access the server as both the admin and a user.


Setting up the FTP server was a piece of cake. I took the Administrator Guide, went to FTP and within 10 minutes was confident that my set-up was going to work. Again, let me point out that I have no server experience, so some of the looks of terror I know I displayed were just thoughts of having something go wrong and I was firmly convinced that I might have to start over.


To say when I tried the FTP Server and had it work without flaw the first time that I was ecstatic would be an understatement. I had the same feeling in the pit of my stomach when my first Linux install went as planned.


I have been using the server for about a week and it has worked flawlessly. Not only do I use the server, my wife uses her XP machine to access it as well.


How do I rate the XANDROS SERVER? To use a basketball term, “It’s a slam dunk.” Small networks and large alike could benefit from the simplicity of install and maintenance of this server and the stability of Linux.




AddThis Social Bookmark Button

CAN IT GET ANY EASIER?

June 16th, 2006 Dave Posted in How-Tos, Installation, Networking No Comments »

Linux just keeps getting better and better! After the success with Wi-fi in Mepis, I had to try with Ubuntu 6.06. The results were GREAT!


I tried an old Linksys card and it failed, however after installing a D-Link WDA-2320 card things changed in a hurry. First, I booted from the CD and as a live CD went to System>Admin>Network and saw the card. Made sure it was active and after clicking on the card opened Properties and set the ESSID and entered my encription key.


Once this was completed, I was wireless! I then installed Ubuntu 6.06 and when the install completed, I retraced my steps and found that the Wi-fi card was already configured and ready to go.


I have said many times that when we begin making wi-fi simple, Linux will take another step forward. I think we have just made a quantum leap!




AddThis Social Bookmark Button

A GEEK IS A GEEK IS A …..

January 28th, 2006 Dave Posted in Command Line, Desktop, Desktop, File Sharing, Installation, Kernel Hacking, Networking, Printing, Questions, XWindow No Comments »

A Geek is a Geek is a Geek! There, I’ve said it and I feel somewhat better. I have been a Linux geek for sometime and have loved the journey into a world I had never known. Going to a place where I could modify programs, write my own, work with command line or icons. It has been a major learning experience. For that I am known in the family as a “GEEK”!

I am continuing with my Linux learning while getting involved with another project. This week, I was given two Mac G3s (beige case..I think…color blind you know) and a Power PC which my Google search tells me is a Mac clone.

I have fired up, or attempted, all three. One G3 and the Power PC both come up with no problem, the third appears to have a bad video board. OK, so they fire up, do they work? Well, the one G3 appears to have some programs on it and I went to the library today to see what I could find on the unit. I also have a copy of UBUNTU PPC burning as I write this.

The Power PC has beautiful graphics, boots very quickly and appears to have everything I could want on it with one caveat…it is password protected. Everything looks good at boot, but when I attempt to access anything…I am requested to enter a password. I have tried several I have been told are common, but to no avail. I am thinking about reloading the Mac OS on this machine and then going from there with upgrades or whatever

As crazy as this sounds, I wanted a G3 for the sole purpose of installing Yellow Dot Linux. I have heard many good things about the distro, but have never had the hardware to run the system. In researching, I find that Fedora Core is also a great distro for PPC use as is Suse and the list goes on.

I am going to document my progress (or lack thereof) and will be posting about in the coming weeks or possibly months.

I don’t want anyone to think that this is my only project. I will continue to work with new distros and do all the things we do with Geektime, but this is a new challenge and at my age, I need a new challenge everyday. It’s why I get out of bed every day!


AddThis Social Bookmark Button

Great Linux Book for Christmas

December 14th, 2005 Dave Posted in Books, File Sharing, How-Tos, Networking No Comments »

There is something that is exciting about seeing your son’s picture on the cover of a book. It’s even more exciting when he is a true Linux Geek and was responsible for me getting started and continues to keep the old man sharp!

The new book is RUN YOUR OWN WEB SERVER USING LINUX AND APACHE” authored by Stuart Landridge and my son Tony Steidler-Dennison.

The book from Sitepoint.com covers a variety of information including:

Setup

Learn to install Linux (Fedora), Apache 2.0, PHP 5 & MySQL 4.1

Day-to-Day Usage

Using the GNOME Desktop Graphical User Interface

Surf the Linux file system and handle file permissions like a pro

Working with the command line and shell

Automate routine tasks using cron and anacron

Administration

Setting up new users & groups

Install and use Webmin for admin tasks

Configuring Apache 2.0 using the HTTP Config Tool

Optimize server settings for maximum performance

Securely manage your server remotely via SSH and VNC

Manage backups, log file rotation, and traffic reporting

Security

Configure your machine’s firewall using Firestarter

Use Tripwire and snort to ensure that your server is not compromised

Disable unnecessary services to improve security

This is simply the most practical hands-on guide to web server management.

Head on over to Sitepoint today and treat your favorite Geek or yourself to some great reading!


AddThis Social Bookmark Button

nmap as a Security Sanner

August 4th, 2005 ilaiy Posted in Networking No Comments »

nmap is used to find the open ports in any system. It has many features which one can use for security analysis. It could also be used to determine the possible vuleribilty in any of the systems or subnet. This could also be used to test your firewall configuration. If you are using linux it comes inbuilt in your OS you could install it in your windows box.

Usage

nmap /

Download
http://www.insecure.org/nmap/nmap_download.html

Options

TCP Scan
If you would like to do a basic TCP scan. The result you see below are the
open
ports on one paticular system showing the open ports.

nmap -sT 192.168.1.196

Interesting ports on 192.168.1.196:
(The 1653 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp filtered NFS-or-IIS
5000/tcp filtered UPnP

UDP scan

UDP is a very unreliable protocol as you would never have a three way hand
shake. A typical UDP scan could be used as follows.You would need to be root
or
admin to run a UDP scan.

[ilaiy@localhost ~]$ sudo nmap -sU 192.168.1.196
Password:

Starting nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2005-03-04 16:37 CST
Interesting ports on 192.168.1.196:
(The 1468 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
123/udp open|filtered ntp
135/udp open|filtered msrpc
137/udp open|filtered netbios-ns
138/udp open|filtered netbios-dgm
139/udp open|filtered netbios-ssn
445/udp open|filtered microsoft-ds
500/udp open|filtered isakmp
1031/udp open|filtered iad2
1167/udp open|filtered phone
1900/udp open|filtered UPnP
MAC Address: 00:09:00:00:00:00 (Netgear)

Nmap run completed — 1 IP address (1 host up) scanned in 8.526 seconds

We could also have other type of scans like

SYN scan - This is used to send in SYN traffic and wait to see if you get an
ack
back from the system

nmap -sS 192.168.1.196

PING scan - This is usually used to find what machines are reachable in a
paticular subnet

nmap -sP 192.168.1.0/24

Now to make things a little more complicated we would include some tweaks
which
hacker use to prevent from getting noticed they prefer not to ping us but
still
check if you have the port open

nmap -sS -P0 192.168.1.0/24

Adding another layer we could use a decoy which would be useful when you
would
like to jump your scan from a few systems before and then your IP. In the
example below we are trying to scan 192.168.1.196 and use the decoys as
192.168.1.7&8&9

nmap -sS -P0 -D 192.168.1.7,192.168.1.8,192.168.1.9 192.168.1.196

Now adding another step if we know what port we intend to exploit say it is
135
and you would like to see if that paticular system has that port open we
could
use

nmap -sS -P0 -p 135 192.168.1.196

[ilaiy@localhost ~]$ sudo nmap -sS -P0 -p 135 192.168.1.196
Password:

Starting nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2005-03-04 16:53 CST
Interesting ports on 192.168.1.196:
PORT STATE SERVICE
135/tcp filtered msrpc

Nmap run completed — 1 IP address (1 host up) scanned in 2.114 seconds

If you would like to fingerprint or get to know what the OS is running on
the
remote system you could use

[ilaiy@localhost ~]$ sudo nmap -sS -P0 -O -p 135 192.168.1.176

Starting nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2005-03-04 16:56 CST
Warning: OS detection will be MUCH less reliable because we did not find at
least 1 open and 1 closed TCP port
Interesting ports on 192.168.1.176:
PORT STATE SERVICE
135/tcp open msrpc
MAC Address: 00:0E:00:00:00:00 (Intel)
Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)

Nmap run completed — 1 IP address (1 host up) scanned in 12.618 seconds
[ilaiy@localhost ~]$

AddThis Social Bookmark Button

WiFi in Libranet

May 27th, 2005 tony Posted in How-Tos, Networking No Comments »

Several months ago, I made several bad choices in a row. With a dead WiFi card, I found myself in Best Buy, trying to fill that need for living wirelessly. After several unsuccessful attempts to find a card on the shelves that was compatible with Linux, I settled for a DLink DWL-650. This was the third card I’d purchased. I’d already returned the other two and was ready to cash in the wireless life if the card didn’t work.

It took several evenings, but I was able to get the card working in Fedora Core 2. Then, as inevitably as the sunrise, I had the need to try another distribution. Several, in fact. All worked well as distributions on an older Dell Inspiron 1100. None, however, worked well with my “Windows only” WiFi card.

Today, the first day of a four-day weekend, I gave wireless one more shot with Libranet. I’d tried that distribution - a longtime favorite Debian-based package - a few weeks ago, with no luck. One more shot, I decided, and I’d have to break down and dig up a good Linux-friendly WiFi card.

The install was fine. In fact, Libranet has only gotten better in the past few years. Sound, video, ethernet - all worked flawlessly after the distro installation. But the wireless card was still dead. So, I dug around a bit in the Libranet adminmenu app.

In the network configuration wizard, I found an entry for the card, without a connection. I selected the card and clicked “Add connection for selected card.” There in the resulting menu was the key to WiFi: ndiswrapper.

ndiswrapper was the original answer to solving the wireless puzzle in the Fedora Core 2 installation. It’s a tool that uses the native Windows drivers for wireless cards within Linux. I dug for a few minutes through my desk, looking for the original install disc provided with the card. Surprisingly, I found it and dropped it in the drive. I selected ndiswrappers in the Libranet networking wizard menu and pointed to the folder on the CD containing the NET33X.INF file (driver/Drivers). I selected the .INF file which Libranet then copied and installed. Immediately, I knew I was on the right track. A single light on the card had begun to flash.

I then stepped through setting up the card to work with my network in the network settings screen. Network type (Managed), ESSID, DHCP, WEP, and DNS - the task was fairly quick. When I saved the setting, I noticed another encouraging sign - the flashing light on the card was still flashing, but the second light had come on solid, as well.

For sanity’s sake, I unplugged the wired connection, and opened Firefox, pointing it to Google. And … there it was - the ‘net without wires. A quick checkbox in the network settings windows assured that the interface would come up when the system booted. “Too good to be true,” I thought, and rebooted the laptop just to test. I laughed out loud as both lights on the card lit up during boot.

I’ve worked with ndiswrapper before, but it’s always been a bit of a chore. Versions are tied to kernel versions - if you’re off by a single digit, the package just won’t work. It’s also required that you have .sys and .cat files that are included with the driver disc, in the same folder as the .INF file. In other words, you can’t just copy the .INF file to the Linux system - the card will flash, but never bring up the actual wifi interface, no matter how many times you may try.

The beauty of Libranet is in the configuration. All the behind-the-scenes ndiswrapper configuration is done by the system itself. All you’ll need to do is point to the drivers folder, then set up the connection as you would with any other wireless card.

So, writing from the living room in the midst of my small wireless cloud, I’m finally again a happy and mobile man.


AddThis Social Bookmark Button

AND THE WINNER IS…

February 27th, 2005 Dave Posted in Books, Desktop, Installation, Networking, Simply Mepis No Comments »

It hit the mirrors just before “OSCAR” night and appears that Warren may be in the offing for an award.

We’re talking about the much anticipated update of Simply Mepis. For weeks the various boards have been talking about this release and the Beta was highly downloaded as Mepis users tried out the newest version. I had been checking daily and Friday night saw the post and immediately downloaded.

For those not familiar with Simply Mepis, it is a Debian based release that downloads as a “Live CD.” This allows the user to test their hardware and insure compatability. In fact, some users never install the system on their hard drive and use it only as a “Live CD.” Either way, simplicity is the key to the wonderful world of Linux via Simply Mepis.

Version 3.3 has a long list of features including: KDE 3.3.2 desktop, Open Office 1.1.3 (with Word Perfect document support), the very popular Firefox 1.0 browser, GAIM, Xchat, Skype (the highly popular Voip system used at Geektimelinux) Mplayer plugin, Scribus, Synaptic and a host of other new or revised programs. In addition, there is support for older equipment with a 2.4.29 Kernel version or 2.6.10 for newer equipment. New choices of video drivers and an improved installer supporting more hard drive configurations.

For the experienced users, Simply Mepis provides the renowned APT package system from the Debian project, so with Synaptic and Kpackage one can easily add new software and update existing software in moments. In fact, over 10,000 packages can be downloaded for free from the Debian Package pool and the Mepis pool.

How does it work? GREAT! All hardware, sound, network and print was detected and configured without flaw. Checking the local networking options, the Shared Files on the Windows machine my wife uses was detected with ease. Warren has even included Kweather, which puts your local weather near the time on your screen.

If you are looking for a quick and simple way to a Debian based Linux distribution, Simply Mepis is the answer. After installation,the CD can be used as a rescue and repair disk for Mepis and also for computers still using Windows.

AddThis Social Bookmark Button

XANDROS DESKTOP 3 DELUXE

January 11th, 2005 Dave Posted in Books, Desktop, File Sharing, Installation, Networking, Printing 1 Comment »

I’ve been running the new Deluxe Edition of XANDROS Desktop OS since Christmas. As those familiar with this site are aware, this is not the first XANDROS distro that has been on a machine in the lab, and I guarantee it will not be the last.

If you check the various Linux sites, you will find that everyone is reviewing this distro and the conclusion of all is the same, THIS IS TRULY A DESKTOP DISTRO WORTHY OF THE NAME!

I started using XANDROS back with Version 2.0 and was impressed with the ease of installation, selection of software and the overall simplicity of the system. Version 2.5 Business further convinced me that newbies and old timers should check out this product and now I can’t tell enough people about Desktop 3 Deluxe. From a look, feel and usability standpoint, this distro is exceptional.

Installation is slick and easy. While I could bore you with the details, the install is not much more than booting from the CD-ROM, answering a few questions and waiting for the install to finish. The exception is if you intend to dual boot with a Windows machine. That will require a little more thought, however the documentation from XANDROS is clear and concise.

The Deluxe version is a two CD distro. The first disc containing the installation, while Disc 2 contains additional value-added software such as Gimp 2.0.5 image editor, Firefox 1.0 web browser, Ximian Evolution 1.4.6. kernel sources, development tools and the Gtk+ 2.4 toolkit.

The desktop contains icons for Trash, Home, Quick Start Guide, Web Browser and Xandros Networks. A quick click on the Xandros Networks icon and your system is updated.

In checking my system (an old 1.2G Athlon) all hardware had been detected automatically including a CUPS Printer on my lab’s network.

One of the programs included with Deluxe 3.0 is Crossover Office 4.1. I have used several versions of Crossover Office, but this one features some new programs including iTunes 4.6. If you are just coming into the Linux environment and can’t give up IE, there’s good news, with Crossover office you can still use IE. Office XP also runs well.

XANDROS has another key feature worthy of mentioning, “Drag and Drop” CD/DVD burning support. All you need to do is click one of the icons labeled “Create music CD”, “Create data disc”, or “Blank Disc” and you’re started. Simply drag the files you want to burn to the XFM. It’s as simple as that. Another feature for those with lap top computers with built in wireless cards, XANDROS should configure automatically.

Since XANDROS is built on a Debian kernel, APT-GET is available. If you have never used this program, it’s as simple as opening a console, changing to ROOT, and typing: APT-GET UPDATE. When you are returned to the Root Prompt, type APT-GET UPGRADE. This will upgrade your system with all the new programs available in the XANDROS Repository. Another feature of APT-GET is the Install function. To use APT-GET to Install, type APT-GET INSTALL (Program Name). If available, it will be installed on your hard drive. To further enhance the number of programs available, go to the XANDROS Network icon and click. Once there, click on Edit -> Set Application Source and enable Debian Unsupported site. This will open the door to many more programs.

Put it all together; Simplicity of Installation, Network capabilities, Power and Polish in an elegant package and you have XANDROS DESKTOP 3 DELUXE.

AddThis Social Bookmark Button