Linux Expose

10 Best Linux Scurity

2010-03-01T23:00:00.000-08:00

1. BackTrack

BackTrack is intended for all audiences from the most savvy security professionals to early newcomers to the information security field. BackTrack promotes a quick and easy way to find and update the largest database of security tool collection to-date.

Download Here

2. Operator

Operator is a complete Linux (Debian) distribution that runs from a single bootable CD and runs entirely in RAM.

The Operator contains an extensive set of Open Source network security tools that can be used for monitoring and discovering networks.

This virtually can turn any PC into a network security pen-testing device without having to install any software. Operator also contains a set of computer forensic and data recovery tools that can be used to assist you in data retrieval on the local system.

Download http://www.ussysadmin.com/operator/

3. PHLAK

PHLAK (Professional Hacker's Linux Assault Kit) is a modular security distribution, geared to be used as a live CD. PHLAK was created to become the only tool security professionals would need to perform security analysis, penetration testing, forensics, and security auditing. PHLAK comes with two light GUIs (fluxbox and XFCE4), packages for printing, publishing, a little multimedia, many security tools, and a file cabinet full of security related documentation for your reading/educational purposes. This distro is based off of Morphix.

Download Here and Mirror Here

4. Auditor

Auditor although now underway merging with WHax is still an excellent choice.

The Auditor security collection is a Live-System based on KNOPPIX. With no installation whatsoever, the analysis platform is started directly from the CD-Rom and is fully accessible within minutes. Independent of the hardware in use, the Auditor security collection offers a standardised working environment, so that the build-up of know-how and remote support is made easier.

Download Here

5. L.A.S Linux

Local Area Security is a research group focused on information security related subjects. We are most known for L.A.S. Linux. Our live-CD security toolkit.

Local Area Security is a project that was started in 2002 to research information security related topics. During that time there was no real live-CD toolkit focused on information security.

Download Here

6. Knoppix-STD

STD is a Linux-based Security Tool. Actually, it is a collection of hundreds if not thousands of open source security tools. It's a Live Linux Distro, which means it runs from a bootable CD in memory without changing the native operating system of the host computer. Its sole purpose in life is to put as many security tools at your disposal with as slick an interface as it can.

Download Here

7. Helix

Helix is a live Linux CD carefully tailored for incident response, system investigation and analysis, data recovery, and security auditing. It is geared toward experienced users and system administrators working in small-to-medium, mixed environments where threats of data loss and security breaches are high.

Download Here

8. F.I.R.E

FIRE is a portable bootable cdrom based distribution with the goal of providing an immediate environment to perform forensic analysis, incident response, data recovery, virus scanning and vulnerability assessment.

Also provides necessary tools for live forensics/analysis on win32, sparc solaris and x86 linux hosts just by mounting the cdrom and using trusted static binaries available in /statbins.

Download Here

9. nUbuntu

nUbuntu or Network Ubuntu is a project to take the existing Ubuntu operating system LiveCD and Full Installer and remaster it with tools needed for penetration testing servers and networks. The main idea is to keep Ubuntu's ease of use and mix it with popular penetration testing tools. Besides usage for network and server testing, nUbuntu will be made to be a desktop distribution for advanced Linux users.

Download Here

10. INSERT Rescue Security Toolkit

INSERT stands for Inside Security Rescue Toolkit and is a Live CD derived from Knoppix. It is a small distribution around 60MB. Also available in German version. Version 1.3.6 of the Live CD is on the SecureDVD distribution.

Download Here

Download Top 5 Free Linux Game

2009-02-02T16:01:00.000-08:00

1. RACER:The Real Deal

Racer is a free car simulation game, It is using real car physics to get a realistic feeling. Cars, tracks, scenes and such can be created with relative simplicity in mind (compared to other driving simulations). The 3D and other file formats are, or should be, documented. Editors and support programs are also available to get a very flexible and expandable simulator. It uses OpenGL for rendering.

More info & Download

2.Cube 2: Sauerbraten

Free & Open Source… single and multi player 1st person shooter game with some satisfying fast old school game play. A large variety of game play modes from classic SP to fast one on one Multi player and objective based team play.

More Info & Download

3.AMERICA’s ARMY

America’s Army is one of the ten most popular PC action games played online. It provides players with the most authentic military experience available, from exploring the development of Soldiers in individual and collective training to their deployment in simulated missions in the War on Terror.

More Info & Download

4.Flight Gear (Open Source Flight Simulator)

FlightGear is an open-source project. This means as long as you abide by the terms of the GPL license you may freely download and copy FlightGear. Anyway can have easy and open access to the latest development source code. Being an open-source project, we have made our file formats open and easily accessible. We support standard 3D model formats and much of the simulator configuration is controlled through XML based ASCII files. Writing 3rd party extensions for FlightGear (or even directly modifying the FlightGear source code) is straightforward and doesn’t require a large amount of reverse engineering. This makes FlightGear an attractive option for use in private, commercial, research, or hobby projects.

FlightGear is known to run on Windows, Linux, Mac OS-X, FreeBSD, Solaris, and IRIX platforms allowing the user run on their platform of preference.

More Info & Download

5. OpenTTD: Business Simulator

OpenTTD is an open source clone of the Microprose game “Transport Tycoon Deluxe”, a popular game originally written by Chris Sawyer. It attempts to mimic the original game as closely as possible while extending it with new features.
More Info
& Download

Sumber:http://www.ixibo.com/2008/09/17/top-5-free-linux-games-download-now/

Set Up A Linux PlayStation 3 Media Server (CentOS 5.2)

2009-02-01T14:36:00.000-08:00

Introduction

The Sony PlayStation 3 is a DLNA compatible device, DLNA is a framework where home electronics can share digital media and content seamlessly. This tutorial is a followup to the previous howto on Ubuntu. Given that I like most others use CentOS as their server distribution of choice, I find it fitting to run my DLNA server on it as well. Although several other open source media servers exist, I chose to use Fuppes due to its ease of use as well as built in support for transcoding.

By following this howto you will be able to create a server that will allow you to play digital media stored on the server via a DLNA capable device such as the Sony PS3, Nokia N95, etc.

Requirements

* Sony PlayStation 3 or other DLNA capable device
* A computer running CentOS 5.2 with a network connection
* Wireless LAN (optional)
* Working Internet connection (to download packages)
* Media to be streamed

Installation

Download and install the Fuppes Centos rpm that I have packaged, the rpm is signed using my PGP key, and depends on packages that are provided by the rpmforge repository. You will need to install my PGP key as well as the rpmforge yum repository package.

wget http://www.topdog-software.com/oss/roundcube/andrew_topdog-software.com_key.txt
rpm --import andrew_topdog-software.com_key.txt
rpm -Uhv http://apt.sw.be/redhat/el5/en/i386/rpmforge/RPMS/rpmforge-release-0.3.6-1.el5.rf.i386.rpm
wget http://www.topdog-software.com/oss/fuppes/fuppes-0.7.2-627SVN.i386.rpm
yum localinstall fuppes-0.7.2-627SVN.i386.rpm

Configuration

* Edit the fuppes configuration file /etc/fuppes/fuppes.cfg and the the interface option, in my case I will be using the IP address 192.168.1.2

192.168.1.2

* Start fuppes and then point your browser to http://192.168.1.2:56596

/etc/init.d/fuppes start
* Select configuration on the menu on the left
* Under "ContentDirectory settings" -> Add objects, type the name of the directory you want to share media from (you can also share an itunes db) then click "submit query"
* Add as many directories as you want I added the following:

/srv/fuppes/Videos
/srv/fuppes/Music
/srv/fuppes/Pictures
* Rebuild the media database
* Select Options on the menu on the left
* Click "rebuild database"
* Monitor the status of the rebuild on the status page, you will see the counters increase as your media is indexed.
* Configure multicast route on your machine for the media server to be found by clients, create a file /etc/sysconfig/network-scripts/route-ethX with the following content (substitute the X for the interface you are using on your machine)

239.0.0.0/8 dev ethX

* Restart networking

service network restart

Testing
Sony PlayStation 3

Connect to your PS3 and go to Video and then select search for media servers, if all went well you should find your media server named fuppes, select that and go to a folder with videos select and play. Repeat this procedure for your music and pictures.

Nokia N95

Go to tools -> Connectivity -> Home media -> Browse media. You N95 will connect to the WLAN and begin searching and should find your fuppes media server, select it and you will see your folders, from there you can play your media and view your content or copy it to your device.

Xbox

Fuppes does support Xbox as well, using an M$ product? You are on your own.

Sample configuration files

* /etc/fuppes/fuppes.cfg

/srv/fuppes/Music
/srv/fuppes/Videos
/srv/fuppes/Pictures

192.168.1.2

56596

UTF-8

true
true
true

lame

true
true
true

0

file
false
true
4

AUDIO_ITEM
audio/mpeg
MP3

AUDIO_ITEM
application/octet-stream

mp3
audio/mpeg
MP3
chunked
vorbis
lame
192
44100

AUDIO_ITEM
application/octet-stream

mp3
audio/mpeg
MP3
chunked
musepack
lame
192
44100

AUDIO_ITEM
audio/x-wav

AUDIO_ITEM
audio/x-flac

mp3
audio/mpeg
MP3
chunked
flac
lame
192
44100

AUDIO_ITEM
audio/x-ms-wma
WMAFULL

jpeg
IMAGE_ITEM
image/jpeg

png
image/png
0
0

false

false

IMAGE_ITEM
image/bmp

IMAGE_ITEM
image/png

IMAGE_ITEM
image/gif

mpeg
VIDEO_ITEM
video/mpeg

VIDEO_ITEM
video/mp4

VIDEO_ITEM
video/avi

VIDEO_ITEM
video/x-ms-wmv

VIDEO_ITEM
video/x-ms-vob

VIDEO_ITEM
video/x-extension-vdr

vob
video/x-ms-vob

VIDEO_ITEM
application/x-flash-video

VIDEO_ITEM
video/x-ms-asf

PLAYLIST
audio/x-scpls

PLAYLIST
audio/x-mpegurl

UPnP/1.0 DLNADOC/1.00
PLAYSTATION3

true
50

AUDIO_ITEM_MUSIC_TRACK

stream

%s %v : 1 : Windows Media Connect
Windows Media Connect compatible (%s)
2.0

Xbox/2.0.\d+.\d+ UPnP/1.0 Xbox/2.0.\d+.\d+
Xenon
true

container
true

dma/1.0 $http://www.cybertan.com.tw/$
UPnP/1.0 DLNADOC/1.00
file
101

* /etc/fuppes/vfolder.cfg

sumber:http://howtoforge.com/set-up-a-linux-playstation-3-media-server-centos-5.2

How To Install VMware Server 2 On A Mandriva 2009.0 Desktop

2009-02-01T13:55:00.000-08:00

This tutorial provides step-by-step instructions on how to install VMware Server 2 on a Mandriva 2009.0 desktop system. With VMware Server you can create and run guest operating systems ("virtual machines") such as Linux, Windows, FreeBSD, etc. under a host operating system. This has the benefit that you can run multiple operating systems on the same hardware which saves a lot of money, and you can move virtual machines from one VMware Server to the next one (or to a system that has the VMware Player which is also free).

Also, with VMware Server you can let your old Windows desktop (that you previously converted into a VMware virtual machine with VMware Converter, as described in this tutorial: http://www.howtoforge.com/vmware_converter_windows_linux) run under your Mandriva desktop. This can be useful if you depend on some applications that exist for Windows only, or if you want to switch to Linux slowly.

I want to say first that this is not the only way of setting up such a system. There are many ways of achieving this goal but this is the way I take. I do not issue any guarantee that this will work for you!

1 Preliminary Note

I'm using the user name falko with the home directory /home/falko here - please adjust this appropriately.

2 Find Out Your Kernel Version

Before we go on and install additional software, it's a good idea to find out about your kernel version because in chapter 3 we will install the packages kernel-source and kernel-desktop586-devel which are needed by VMware Server (which we will install at the end of this tutorial). There might be multiple kernel-source and kernel-desktop586-devel packages available, and to select the right ones you need to know your kernel version.

To find out about your kernel version, open a terminal (Applications > Tools > Terminal ) and run

uname -r

The output should look like this:

[falko@localhost ~]$ uname -r
2.6.27-desktop586-0.rc8.2mnb
[falko@localhost ~]$

which means you have kernel 2.6.27-desktop586-0.rc8.2mnb installed.

3 Installing Additional Software

Now that we have added additional repositories, a lot more packages are available in our package manager for installation, especially a big deal of our needed packages. To install them, go to Applications > Install & Remove Software. The Software Management window opens. Please make sure that you select All in the two drop-down menus on the left to make sure that you can select from all packages that are available:

Browse the applications on the left (or even better, use the search field) and mark the following packages for installation:

* kernel-source
* kernel-desktop586-devel
* xinetd
* perl-devel
* gcc
* gcc-c++

Make sure you select the kernel-source and kernel-desktop586-devel packages that suit your installed kernel.

After the installation, click on Quit to leave the Software Management window.

4 Installing VMware Server

To download VMware Server, go to http://www.vmware.com/products/server/ and click on Download Now:

On the next page, log in with your existing VMware account or create a new one:

Follow the on-screen instructions. At the end, you should receive an email with a link to your download page. On the download page, you should see two license numbers, one for Windows and one for Linux. Write down or save the one for Linux and scroll down.

Then download the VMware Server for Linux TAR image (not the RPM image!) to your desktop (e.g. to /home/falko/Desktop):

Open a terminal (Applications > Tools > Terminal) and become root:

su

Then go to the location where you saved the VMware Server .tar.gz file, e.g. /home/falko/Desktop (replace falko with your own username!):

cd /home/falko/Desktop

Unpack the VMware Server .tar.gz file and run the installer:

tar xvfz VMware-server-*.tar.gz
cd vmware-server-distrib
./vmware-install.pl

The installer will ask you a lot of questions. You can always accept the default values simply by hitting .

If you see the following question, answer with yes:

Your kernel was built with "gcc" version "4.3.1", while you are trying to use
"/usr/bin/gcc" version "4.3.2". This configuration is not recommended and
VMware Server may crash if you'll continue. Please try to use exactly same
compiler as one used for building your kernel. Do you want to go with compiler
"/usr/bin/gcc" version "4.3.2" anyway? [no] <-- yes

When the installer asks you

In which directory do you want to keep your virtual machine files?
[/var/lib/vmware/Virtual Machines]

you can either accept the default value or specify a location that has enough free space to store your virtual machines.

At the end of the installation, you will be asked to enter a serial number:

Please enter your 20-character serial number.

Type XXXXX-XXXXX-XXXXX-XXXXX or 'Enter' to cancel:

Fill in your serial number for VMware Server.

After the successful installation, you can delete the VMware Server download file and the installation directory:

cd /home/falko/Desktop
rm -f VMware-server*
rm -fr vmware-server-distrib/

VMware Server 2 does not have a desktop application for managing virtual machines - this is now done through a browser (e.g. Firefox). You can access the management interface over HTTPS (https://:8333) or HTTP (http://:8222); the management interface can be accessed locally and also remotely. If you want to access it from the same machine, type https://127.0.0.1:8333 or http://127.0.0.1:8222 into the browser's address bar.

If you're using Firefox 3 and use HTTPS, Firefox will complain about the self-signed certificate, therefore you must tell Firefox to accept the certificate - to do this, click on the Or you can add an exception... link:

Click on Add Exception...:

The Add Security Exception window opens. In that window, click on the Get Certificate button first and then on the Confirm Security Exception button:

Afterwards, you will see the VMware Server login form. Type in root and your root password:

This is how the VMware Server web interface looks. The structure is similar to the old VMware Server 1 desktop application, so the usage of the web interface is pretty straightforward.

sumber:http://howtoforge.com/how-to-install-vmware-server-2-on-a-mandriva-2009.0-desktop

2009-02-01T04:42:00.000-08:00

Often *Nix (Linux or Unix) fans will hype the security of *Nix systems compared with Microsoft operating systems. However, Unix and Linux have their fair share of vulnerabilities and what really makes a secure system is an informed administrator. These books will help you discover where you're vulnerable and keep your *Nix system secure.

1. Linux Security Cookbook

This book is an excellent resource for users and administrators of Linux to help secure and monitor their systems. The Linux Security Cookbook provides a number of "recipes" you can follow to get the desired end result- a more secure system. It includes coverage of firewalls, permissions and authorization controls, intrusion detection and more. Linux users should read this book.
Read Review

2. Practical Unix & Internet Security - 3rd Edition

Practical Unix & Internet Security is one of the few "must-read" books that every Security Administrator should read. The 3rd Edition is updated to include newer technologies like LDAP, Samba and wireless technology. The book discusses aspects of good physical security as well as some of the legal issues and implications of a hacked system. The scripts and checklists are great tools.
Read Review

3. Hacking Linux Exposed - 2nd Edition

The Hacking Exposed books have set the bar for this genre of security book. For those who administer Linux boxes this book provides an in-depth look at specific hacks and vulnerabilities unique to the Linux operating system and the accompanying fixes and workarounds to protect yourself. Hacking Exposed is a must-read for security- this book is a must-read for Linux security.
Read Review

4. Hack Proofing Sun Solaris 8

Hack Proofing Sun Solaris 8 provides an excellent introduction to securing a Solaris 8 system. It covers everything from securing the installation out of the box, to securely implementing Solaris 8 as a web server, email server, firewall or router. Although this book doesn't relate to the most current release of Solaris, most people trying to learn about securing Solaris will still benefit.
Read Review

5. Linux For Non-Geeks

Linux is a well-known operating system among the techno-geeks of the world, but it has also gained significant popularity among average users. Linux For Non-Geeks by Rickford Grant provides a glimpse at this powerful operating system and how to use it effectively without having to become a guru.
Read Review

sumber:http://netsecurity.about.com/od/toppicks/tp/aatp090503c.htm

Top Ten Linux Hacking Tools

2009-01-29T15:00:00.000-08:00

This is a Cool Collection of Top Ten Linux Hacking Tools.

1. nmap - Nmap (”Network Mapper”) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. Nmap runs on most types of computers and both console and graphical versions are available.

2. Nikto - Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 3200 potentially dangerous files/CGIs, versions on over 625 servers, and version specific problems on over 230 servers. Scan items and plugins are frequently updated and can be automatically updated (if desired).

3. THC-Amap - Amap is a next-generation tool for assistingnetwork penetration testing. It performs fast and reliable application protocol detection, independant on the TCP/UDP port they are being bound to.

4. Ethereal - Ethereal is used by network professionals around the world for troubleshooting, analysis, software and protocol development, and education. It has all of the standard features you would expect in a protocol analyzer, and several features not seen in any other product.

5. THC-Hydra - Number one of the biggest security holes are passwords, as every password security study shows. Hydra is a parallized login cracker which supports numerous protocols to attack. New modules are easy to add, beside that, it is flexible and very fast.

6. Metasploit Framework - The Metasploit Framework is an advanced open-source platform for developing, testing, and using exploit code. This project initially started off as a portable network game and has evolved into a powerful tool for penetration testing, exploit development, and vulnerability research.

7. John the Ripper - John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix flavors, supported out of the box are Kerberos AFS and Windows NT/2000/XP/2003 LM hashes, plus several more with contributed patches.

8. Nessus - Nessus is the world’s most popular vulnerability scanner used in over 75,000 organisations world-wide. Many of the world’s largest organisations are realising significant cost savings by using Nessus to audit business-critical enterprise devices and applications.

9. IRPAS - Internetwork Routing Protocol Attack Suite - Routing protocols are by definition protocols, which are used by routers to communicate with each other about ways to deliver routed protocols, such as IP. While many improvements have been done to the host security since the early days of the Internet, the core of this network still uses unauthenticated services for critical communication.

10. Rainbowcrack - RainbowCrack is a general propose implementation of Philippe Oechslin’s faster time-memory trade-off technique. In short, the RainbowCrack tool is a hash cracker. A traditional brute force cracker try all possible plaintexts one by one in cracking time. It is time consuming to break complex password in this way. The idea of time-memory trade-off is to do all cracking time computation in advance and store the result in files so called “rainbow table”.

sumber:http://www.hungry-hackers.com/2008/05/top-10-linux-hacking-tools.html

Virtualization Applications

2009-01-27T16:24:00.000-08:00

1. Virtualbox

http://www.virtualbox.org/

This VM (virtual machine) application,owned by Sun Microsystems and created by a small company called innotek, is one of the most popular virtualization solutions
for Ubuntu. It's the third most popular method to run Windows apps on Linux, according to DesktopLinux.com (trailing Wine, which is not an emulator/virtualizer, and VMWare, which is proprietary). There's good reason: it has a bevy of features, including snapshots, shared folders, RDP, ability to use host USB, and a lot of
advanced hardware virtualization.
There are two versions of VirtualBox. Installing the open-source edition is easy: just install the package in the universe repositories. If you want to install the enhanced but closed-source version, you'll need to visit the website (above) and download the .deb.
2.VBoxGTK

http://www.xente.mundo-r.com/narf/vboxgtk/
If you're a Gnome or Xfce user who doesn't like using Qt applications on GTK-based systems, give VBoxGTK a whirl. It's still in beta (the site notes that "most of
VirtualBox features are not supported, and those that are will probably fail"),
but it's a good beginning and progressing rapidly. Right now, the developer is still
focusing on stability, and as a result, most of the VirtualBox features aren't available. Still, it boots operating systems, and it's GTK. T o install VBoxGTK, use the package in the universe repositories.

3.Qemu
http://bellard.org/qemu/

While not the most user friendly application on the virtualization market, QEMU is one of the oldest and most respected virtualization programs around. QEMU can not only virtualize an existing chip (like VirtualBox or VMWare), but can also emulate a hardware platform like PowerPC or SPARC. This makes it really popular with developers trying to port programs to other platforms - like the Android. Plus, there are tons of handy features like snapshots, VNC, and of course
standard features like sound, hard drive tweaking, and multiple CPUs. Code from it
has been used in almost all virtual machines today, including VirtualBox.
T o install QEMU, use the package in the universe repositories.

sumber:http://fullcirclemagazine.org/issue-19/ PDF:hal 32

Ubuntu GAMES

2009-01-27T03:35:00.000-08:00

Open Arena is the open source equivalent of Quake 3 Arena. Like Quake, Open Arena is a first person shooter that is heavily based around multi-player deathmatch arenas. ou fight it out in arenas, either online or against AI-controlled bots. There are several weapons you can use, such as the usual machine gun, shotgun, rocket launch and rail un. There are 4 modes you can play: deathmatch, team deathmatch, capture the flag,and tournament.

As soon as you install the game, you have the option of playing the game in either single player mode or multi-player mode. The single player mode is good for players who are new to the game. It gives you a chance to get used to the fast-paced gameplay, and explore the many arenas. The AI-control bots are fairly ntelligent and can put up a good ight. There are about 20 maps which you can play through. These are the same maps that are used on multiplayer, so the single player mode gives you the chance to explore each map before you play online.

Finally, the multi-player - the main part of Open Arena. This game, like Quake 3, as
designed with a focus on the online mode. You can play either over a LAN or over the internet. When you join a match, it is incredibly fast-paced. Stand still for a second, and your head will be shot off. Grab a gun, run and fire. Open Arena equires
no real tactics; unlike Counter Strike, you just have to go with the flow.There are about 70 servers for Open Arena, which are all fairly active.
Each server has different maps to play on, and different game modes. For players new to online FPS games, it is not the best game to start out with. Many players are very fast, and have very good aim. I was on one server, where every time I spawned I would be shot by a rail gun. This happened 20 times in a row!Open Arena has an active community of developers, always busy developing new versions of the game. In the past, they have
added new game modes, new graphics, and new maps. The latest version of the game is
0.8.0. However, on the Ubuntu repos, the latest stable version is 0.7.7. I would recommend installing 0.8.0, because it has all the new content, and most of the Open Arena servers will be using that version. You will be able to download the DEB file from PlayDeb.net.
Open Arena is an excellent free alternative to Quake. It is very well developed, and the game is perfectly balanced. Graphics are very dated, but with most online FPS games, it's more important to have a high frame rate than good looking graphics. I
would strongly recommend this game to any hardcore Linux gamers, especially FPS fans.
However, I would not recommend this to gamers new to FPS, it is just far too fast.

Sistem Requirements:

Intel Pentium II 233MHz
64MB RAM
OpenGL Graphics Card with
32MB VRAM (3D acceleration
enabled)
300MB HDD space

Sumber:PDF http://fullcirclemagazine.org/issue-19/ Page:27

Running Windows Programs On Ubuntu 8.10 With CrossOver Linux Pro 7.1.0

2009-01-24T20:34:00.000-08:00

This guide shows how you can use CrossOver Linux Pro 7.1.0 to run Windows applications on Ubuntu 8.10. CrossOver is based on Wine. It is not available for free, but maybe you are one of the lucky guys that grabbed a CrossOver copy for free a few days ago; otherwise you can install a 30-day trial version to test it.

This document comes without warranty of any kind! I do not issue any guarantee that this will work for you!

1 Installing CrossOver Linux Pro

Visit the Codeweavers web site and grab a trial version, or log in to your existing Codeweavers account. There's a CrossOver Pro .deb package available for Debian and Ubuntu systems - download that one to your hard drive (e.g. /home/falko/Desktop). The Open with GDebi Package Installer (default) option does not work here for some strange reason, it gives back an error.

Then open a terminal (Applications > Accessories > Terminal)...

.. and go to the directory where you've saved CrossOver Pro:

cd /home/falko/Desktop/

You can install it with the following command:

sudo dpkg -i crossover-pro_7.1.0-1_i386.deb

Afterwards, you can delete the .deb file to clean up your system:

rm -f crossover-pro_7.1.0-1_i386.deb

2 Installing Windows Applications

To install Windows applications, go to Applications > CrossOver > Install Windows Software:

The CrossOver Installation Wizard starts. You can now select to install one of the listed ("supported") applications, or you can select to install unsupported software if your desired Windows application is not listed. Please make sure that you have the installation media of your desired application (CD/DVD, setup.exe file, etc.) at hand because in most cases the wizard will ask for it. In this example I select to install Internet Explorer 6. Because CrossOver can download IE6 directly from the Internet, I don't need any installation media for this example.

Select Express Install or Advanced Install:

Afterwards, simply click your way through the wizard:

Click on Finish to complete the installation:

Afterwards, you can find your Windows application under Applications > Windows Applications (or there is an icon for it on the desktop):

If all goes well, your Windows application should start without problems:

sumber:http://howtoforge.com/running-windows-programs-on-ubuntu-8.10-with-crossover-linux-pro-7.1.0

Installing Ubuntu 8.10 On Your USB Flash Drive

2009-01-23T16:45:00.000-08:00

This guide shows how you can install Ubuntu 8.10 on a USB flash drive. Ubuntu 8.10 comes with a tool that lets you create a USB startup disk easily - this startup disk behaves like the Ubuntu 8.10 Live-CD. This is useful if you want to install Ubuntu on a computer that has no CD/DVD drive. When you create the USB startup disk, you can also specify that you want your USB system to be persistent between boots (i.e., it does not lose your settings, documents, etc.) - that way you get a fully usable OS that you can carry around in your pocket.

I do not issue any guarantee that this will work for you!

1 Creating The USB Startup Disk

Boot into your normal Ubuntu 8.10 system. After the desktop has started, plug in your USB flash drive and insert your Ubuntu 8.10 Live-CD into your CD drive (you can also create the startup disk from the Ubuntu 8.10 Live-CD .iso file - it's up to you which way you prefer). You should see their icons on the desktop. Then go to System > Administration > Create a USB startup disk...

... and type in your password:

The Make USB Startup Disk tool starts. It should make the right choices for the source CD and the target USB drive automatically (if you want to use the Ubuntu 8.10 .iso file, click on Other... and select it from your file system). If you just want to create a USB startup disk that you need for installing Ubuntu 8.10 on systems without a CD/DVD drive, select Discarded on shutdown, unless you save them elsewhere - the startup disk will then behave like the Live-CD, i.e., it will lose all settings and documents between reboots. If you want to have a "full" OS that saves your changes between reboots and that you can carry around in your pocket, select Stored in reserved extra space and specify how much space on your USB flash drive should be reserved for your documents and settings. Click on Make Startup Disk afterwards:

The USB startup disk is now being created. This can take a few minutes:

Click on Quit to finish the process:

That's it already!

2 Booting From The USB Flash Drive

You can now plug your USB flash drive into any other computer and start it. Make sure you enter its BIOS to check if booting from USB is enabled and that your USB device is the first device in the boot order.

When the system boots from the USB flash drive, it behaves exactly as if you would boot from the Ubuntu 8.10 Live-CD - first you have to select your language:

In the boot menu, select Try Ubuntu without any change to your computer (if you want to install Ubuntu on the system, you can also directly select Install Ubuntu):

This is how the desktop looks. If you want to install Ubuntu to the hard drive, click on the Install icon and follow the installation wizard. If you have chosen to make the startup disk persistent between reboots, you can now use the system like a normal desktop (i.e., it won't lose your documents and settings).

sumber:http://howtoforge.com/installing-ubuntu-8.10-on-your-usb-flash-drive

Installing VirtualBox 2.0 On An Ubuntu 8.10 Desktop

2009-01-22T17:51:00.000-08:00

This tutorial shows how you can install Sun xVM VirtualBox on an Ubuntu 8.10 desktop. With VirtualBox you can create and run guest operating systems ("virtual machines") such as Linux and Windows under a host operating system. There are two ways of installing VirtualBox: from precompiled binaries that are available for some distributions and come under the PUEL license, and from the sources that are released under the GPL. This article will show how to set up VirtualBox 2.0 from the precompiled binaries.

As of version 2.0 VirtualBox supports 32 and 64bit host and guest operating systems (if you want to install 64bit guests your processor must support hardware virtualization and, of course, the host operating system must be 64bit as well).

This document comes without warranty of any kind! I want to say that this is not the only way of setting up such a system. There are many ways of achieving this goal but this is the way I take. I do not issue any guarantee that this will work for you!

Installing VirtualBox From Precompiled Binaries

Open Firefox and go to http://www.virtualbox.org/wiki/Linux_Downloads. For Ubuntu 8.10, click on the i386 or AMD64 link (depending on if you have a 32 or 64 bit host operating system) right of Ubuntu 8.10 ("Intrepid Ibex"):

In the Firefox download dialogue, select Open with GDebi Package Installer (default):

After the VirtualBox has been downloaded, a Package Installer window opens. Click on Install Package:

If you see this message during the installation, click on Forward. I will address this issue later on (the message says that the user that runs VirtualBox - that's the user you're logged in as on your desktop - must be a member of the vboxusers group):

Click on Close afterwards to finish the installation and leave the Package Installer:

Now to add the desktop user (falko in this example) to the vboxusers group, we must open a terminal (Applications > Accessories > Terminal):

To add the user falko to the vboxusers group, we run

sudo usermod -G vboxusers -a falko

in the terminal and close it afterwards.

To start VirtualBox, go to Applications > System Tools > Sun xVM VirtualBox (if you don't see the VirtualBox launcher, log out of the desktop and back in again):

When you start VirtualBox for the first time, you are prompted to accept its license:

Afterwards, type in your name and email address to register your VirtualBox installation:

The registration confirmation window might be hidden behind the window with the registration form. If you have filled out the registration form and wonder why nothing happens, move the window with the registration form. Click on OK in the registration confirmation window:

That's it! You can now use VirtualBox to create virtual machines:

Sumber:http://howtoforge.com/installing-virtualbox-2.0.0-on-ubuntu-8.10-desktop

NAT Gateway, Iptables, Port Forwarding, DNS And DHCP Setup - Ubuntu 8.10 Server

2009-01-22T05:33:00.000-08:00

So you are too poor to afford another expensive router and want to do things yourself. You have found the right tutorial! This tutorial will show you how to set up an Ubuntu 8.10 router with NAT, port fowarding, a DNS server and a DHCP server.

Why Ubuntu you ask?

Not only is Ubuntu a great operating system, it's also very flexible and powerful enough to allow you to get up and running in no time! Note: Please restart your computer after every step. This will ensure everything is working correctly.

Some of the basic things we are going to need are...

DHCP -- dhcp3-server
DNS -- bind9
iptables -- included /w ubuntu

First things first

Your going to need 2 network cards. Take your first network card, and plug your WAN connection into it. You should know what network card this is, eth0 eth1 ect... If you don't know what it is, trial and error my friend.

Let's just say that your WAN card is going to be eth0 (if it's eth1, just do everything the same but ajust your config accordingly). We want to locate the file /etc/network/interfaces. Do a VI on the file such as

sudo vi /etc/network/interfaces

You should see in the file (if you have nothing setup yet):

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback

We are going to add this to the file. As a side note, if you don't know how to use VI use nano or learn VI.

auto eth0
iface eth0 inet dhcp

The auto eth0 code tells eth0 to start on boot, similar to running

sudo ifconfig eth0 up

The code iface eth0 inet dhcp tells the eth0 interface to look for a DHCP server and get its info from there. This is important if your hooked up to a cable modem, as you will want to get a public IP from your ISP.

The next step to take is to configure your network card eth1. This will be your "LAN" card.

If you remember, our /etc/network/interfaces configuration looked like

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
iface eth0 inet dhcp

We are going to VI into the interfaces file again and add a few more lines:

sudo vi /etc/network/interfaces

Add these lines to the bottom of the file.

auto eth1
iface eth1 inet static
address 172.17.207.121
netmask 255.255.255.0
broadcast 172.17.207.255
network 172.17.207.0

This just gives you a static IP address for your server on your LAN card.

Your file should now look like this.

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
iface eth0 inet dhcp
auto eth1
iface eth1 inet static
address 172.17.207.121
netmask 255.255.255.0
broadcast 172.17.207.255
network 172.17.207.0

Now, before we forget, let's edit your /etc/hosts file.

sudo vi /etc/hosts

Make the file look like mine, though if you call your server userve or myserver you can change it.

Also note the asus.local domain name, it's a good idea to use your own such as mydomain.local but you can use what I have for learning purposes.

We use .local because it's easy to remember and it's not public, so we will not interfere with anything.

127.0.0.1 localhost server.localhost
172.17.207.121 server.asus.local server asus.local

Now that we have our interfaces configured, we are going to install and set up a dhcp server. To install the dhcp server run the command

sudo apt-get install dhcp3-server

Let's edit the dhcpd.conf file. Start by running the command

sudo vi /etc/dhcp3/dhcpd.conf

Now if there is anything in that file, REMOVE IT.

Copy and paste this into your file, then write and quit.

ddns-update-style none;
option domain-name "whatever.local"; //change this to something you want.local such as mydomain.local
option domain-name-servers 172.17.207.121, 24.92.226.41; //you also might want to change that second dns server to your ISP's local DNS server
option routers 172.17.207.121;
default-lease-time 42300;
max-lease-time 84600;
authoritative;
log-facility local7;
subnet 172.17.0.0 netmask 255.255.255.0 {
range 172.17.207.1 172.17.207.100; //you can expand the range just by changing .100 to .254 or somthing like that
}

Now run the command

sudo /etc/init.d/dhcp3-server start

This will start your DHCP server and we can label this part DONE.

Moving on to... DNS

Bind is the DNS package that we will be using. To install this, we just simply run

sudo apt-get install bind9

This will download and install our bind server.

Start by running the command

vi /etc/bind/named.conf

Then remove everything in the file and look for my comments, usually indicated by //.

// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local
include "/etc/bind/named.conf.options";
// prime the server with knowledge of the root servers
zone "." {
type hint;
file "/etc/bind/db.root";
};
// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912
zone "asus.local" { //change asus.local to whatever you named your domain such as mydomain.local
type master;
file "/etc/bind/zones/asus.local.db"; //this file or foler does not exist so we will need to make it
};
zone "207.17.172.in-addr.arpa" {
type master;
file "/etc/bind/zones/rev.207.17.172.in-addr.arpa";//this file does not exist so we will also need to make it
};
zone "localhost" {
type master;
file "/etc/bind/db.local";
};
zone "127.in-addr.arpa" {
type master;
file "/etc/bind/db.127";
};
zone "0.in-addr.arpa" {
type master;
file "/etc/bind/db.0";
};
zone "255.in-addr.arpa" {
type master;
file "/etc/bind/db.255";
};
include "/etc/bind/named.conf.local";

Before we can make the two files asus.local.db and rev.207.17.172.in-addr.arpa, we need to edit another file. So

sudo vi /etc/bind/named.conf.options

Remove everything in the file and use this...

options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
forwarders {
24.92.226.41; //very important, change this to your LOCAL ISP's DNS server(s)
24.92.224.40;
};
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
};

Pay attention to the comments, they tell you to CHANGE our forwarders address(es) to your LOCAL ISP's DNS.

Next, cd over to your bind directory:

cd /etc/bind/
sudo mkdir zones
cd zones
sudo vi asus.local.db

(Or use your domain name such as mydomain.local.db.)

Once you are in the asus.local.db file or mydomain.local.db file (whatever you called it), copy and paste this, make the appropriate changes to your domain name.

$ORIGIN .
$TTL 4000 ;
asus.local. IN SOA server.asus.local. admin.asus.local. (
2007031001 ; serial
28800 ; refresh
3600 ; retry
604800 ; expire
38400 ; min
)
NS server.asus.local.
$ORIGIN asus.local.
IN A 172.17.207.121
www IN A 172.17.207.121 //an example
server IN A 172.17.207.121 //an example
macpro IN A 172.17.207.4 //an example

If you do an nslookup macpro, you will get 172.17.207.4 back as an answer, so change the domain names and IP's according to your settings.

Next, we are going to vi the rev.207.17.172.in-addr.arpa file that does not exist yet. But it will once we save it. So assuming you're still in the zones folder:

vi rev.207.17.172.in-addr.arpa

Copy and paste what I have here, making the appropriate changes.

$ORIGIN .
$TTL 28800 ; 8 hours
207.17.172.IN-ADDR.ARPA IN SOA server.asus.local. admin.asus.local. (
2008110601 ; serial
28800 ; refresh (8 hours)
7200 ; retry (2 hours)
604800 ; expire (1 week)
86400 ; minimum (1 day)
)
NS server.asus.local.
$ORIGIN 207.17.172.IN-ADDR.ARPA.
4 PTR macpro.asus.local.

So now if you did a reverse lookup on 172.17.207.4, you would get macpro.asus.local.

Now run the command to start named:

sudo /etc/init.d/named start

If it does not start, check the logs in /var/logs.

Last but not least, IPTABLES

First thing is first, we need to edit sysctl.conf in the folder /etc/, so:

sudo vi /etc/sysctl.conf

Uncomment line 28. That means removing the # in front of it. The line should be net.ipv4.ip_forward=1

Next, let's vi over to rc.local:

sudo vi /etc/rc.local

Add these two lines to the bottom of the file:

/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables --table nat -A POSTROUTING -o eth0 -j MASQUERADE

This will set up your gateway using iptables. You can use iptables to make this more secure than this basic setup.

To forward ports, you can add something like this to the end of the rc.local file.

/sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d jgibbs.dyndns.org --dport 3389 -j DNAT --to 172.17.207.4:3389

The long line above will port forward all incoming traffic on port 3389 to the IP 172.17.207.4, so I can remote desktop into my Windows box from outside my network.

You can do this with any ports you wish.

RESTART!

Sumber:http://howtoforge.com/nat-gateway-iptables-port-forwarding-dns-and-dhcp-setup-ubuntu-8.10-server

Free Web Ebook

2009-01-15T17:05:00.000-08:00

Build Your Own Website The Right Way Using HTML & CSS

Product Description
# Build Your Own Website The Right Way Using HTML & CSS teaches web development from scratch, without assuming any previous knowledge of HTML, CSS or web development techniques. This book introduces you to HTML and CSS as you follow along with the author, step-by-step, to build a fully functional web site from the ground up. However, unlike countless other “learn web design” books, this title concentrates on modern, best-practice techniques from the very beginning, which means you’ll get it right the first time. The web sites you’ll build will: Look good on a PC, Mac or Linux computer
more ......

Download

Accelerated DOM Scripting with Ajax, APIs, and Libraries (Accelerated)

Book Description
If you’re a web developer with previous JavaScript and DOM scripting experience, Accelerated DOM Scripting with Ajax, APIs, and Libraries is perfect for you to take your knowledge up to the next level.

This book is about JavaScript and using the document object model—the conduit to the HTML document. This book is not about learning how to program JavaScript from scratch. It starts with the assumption that you have done some JavaScript development before and understand the JavaScript syntax.
Read more...

link1
link2

AJAX: Creating Web Pages with Asynchronous JavaScript and XML (Bruce Perens’ Open Source Series)

Book Description

The Easy, Example-Based Guide to Ajax for Every Web Developer
Using Ajax, you can build Web applications with the sophistication and usability of traditional desktop applications and you can do it using standards and open source software. Now, for the first time,there’s an easy, example-driven guide to Ajax for every Web and open source developer, regardless of experience.
Read more...

Download

Professional Joomla!

From the Back Cover
As a major force in the world of affordable, advanced web site deployment, Joomla! has become the most important noncommercial Content Management System (CMS) in the world. The number of Joomla! downloads and add-ons continues to grow at lightning pace, spurring the need for a resource that explores the diverse needs of professional Joomla! developers. This book fills that void by covering the two main areas of the Joomla! field—development and deployment—with a focus on the new Joomla! version 1.5 and all the features it provides.
Read more ...

download

Professional Search Engine Optimization with PHP: A Developer’s Guide to SEO

Book Description
Maybe you’re a great programmer or IT professional, but marketing isn’t your thing. Or perhaps you’re a tech-savvy search engine marketer who wants a peek under the hood of a search engine optimized web site. Search engine marketing is a field where technology and marketing are both critical and interdependent, because small changes in the implementation of a web site can make you or break you in search engine rankings. Furthermore, the fusion of technology and marketing know-how can create web site features that attract more visitors.
Read more...

download

PHP 5 OOP

PHP has gained a following among non-technical web designers who need to add interactive aspects to their sites. Offering a gentle learning curve, PHP is an accessible yet powerful language for creating dynamic web pages.

download

sumber:http://www.netbks.com/

Install Ubuntu 8.10 via USB Flash Drive

2009-01-14T16:20:00.000-08:00

Everyone seems to be loving the new release of Ubuntu i.e. Ubuntu 8.10 Intrepid Ibex which launched yesterday.

It is a lot more secure and stable as compared to previous releases of Ubuntu. What I personally liked so far is the new 'Carry on a USB' feature which lets you download and install Ubuntu via a USB flash drive instead of burning it to a CD.

Here I have a little tutorial on how to install Ubuntu 8.10 via USB Flash Drive. I used the same tutorial to install Ubuntu on my Acer laptop without writing or burning it to a CD.

All you will be requiring is the Ubuntu 8.10 ISO which can be downloaded from http://ubuntu.com/ and a USB flash drive with at least 1GB of memory.

Here is what you need to do.

1. Connect your USB flash drive to your PC and format it in FAT32 by right clicking it and selecting format.
2. Download the Ubuntu 8.10 conversion script and execute it. A folder named Ubuntu810 shall be created.
3. Place the Ubuntu 8.10 ISO in the Ubuntu810 folder.
4. Select and run the Ubuntu810.bat file inside the Ubuntu810 folder and follow the onsreen instructions.
5. Once the script has finished, restart your PC and set your BIOS or Boot Menu to boot from the USB device, save your changes and reboot.

If everything goes well, you should now be able to test the LiveCD version of Ubuntu 8.10 Intrepid Ibex and even install it. This method is non-persistant so it won't save any changes you make while running Ubuntu in the LiveCD mode.

Thanks to PendriveLinux for the tutorial.

sumber: http://www.sizlopedia.com/2008/10/31/install-ubuntu-810-usb-flash-drive/

Setup Huawei E220 modem on Ubuntu 8.10( Intrepid Ibex)

2009-01-03T01:42:00.000-08:00

One of Intrepid Ibex special features is easy switching to various type of wireless internet access. You can switch from Wifi and Cellular (GPRS, 3G or HSDPA) network easily. On Intrepid Ibex, you can setup Huawei E220 modem connection on GUI mode.

Here’s the step:
1. When you plug Huawei E220/E270 modem, a notification will appear. Then click configure button.
Step 1

2. Next press forward.
Step 2

3. Select your country and your operator, usually it’s automatically detected and automatically configured.
Step 3

4. Then click apply.
Step 4

Then it’s finish. You can connect now. Just click on network manager and then connect.
Step 5

If you want to edit the setting, just go to:
System -> Preferences -> Network Configuration
Then select “Mobile Broadband” tab to edit or add a new connection.
Network Manager

There you can edit the setting of your username, password, APN etc.

sumber:
http://blog.iqbalir.com/archives/2008/11/easy-setup-huawei-e220-modem-on-intrepid-ibex/

Enhance Security with Port Knocking

2008-12-30T01:10:00.000-08:00

In the field of IT systems security, concept of” port knocking” is relatively new. However with the passage of time, it is getting popular day by day among system and security administrators.

Port knocking is a method of externally opening ports on a firewall by generating a connection attempt on a set of pre-specified closed ports. Once a correct sequence of connection attempts is received, the firewall rules are dynamically modified to allow the host which sent the connection attempts to connect over specified port (s).

The primary purpose of port knocking is to prevent an attacker from scanning a system for potentially exploitable services by doing a port scan. Until the correct knock sequence is used, the protected ports will appear closed– so attackers won’t be able to conduct an attack on those ports.

More specifically, Port knocking works on the concept that users wishing to attach to a network service must initiate a predetermined sequence of port connections or send a unique string of bytes before the remote client can connect to the eventual service.

For example, suppose that a remote client wants to connect to an FTP server. The administrator configures the port-knocking requirements ahead of time, requiring that connecting remote clients first connect to ports 2000, 4000, and 7107 before connecting to the final destination port, 21 on FTP server.

The administrator tells all legitimate clients about the correct” combination” of knocks to port knocking daemon running on FTP server and hence when they want to connect to FTP service, they simply send these knocks to the server and then start using FTP service.

The question arises, what is the basic advantage of the additional step of sending knocks and then connecting to FTP service? The answer is simple: The FTP service is not always running on the server, it will be started only when the correct port knocks are sent to server, and it will shut down once it receives another predefined sequence of port knocks.

The potential backdoor to business-critical services is only to be opened for a short time, when it’s required. Once the service is no longer needed, it is closed again, mitigating the vulnerability to attack.

One of the primary advantages to using port knocking is that it is platform, service, and application agnostic. Any operating system with the correct client and server software can take advantage of port knocking. If you need help finding a tool, you can find a list of port knocking implementations here. The site lists clients and daemons for pretty much any platform you’d care to use.

I selected knockd, which is considered to be one of the most famous and robust implementation of port knocking mechanism for Linux and UNIX. In this article, I will cover setting up port knocking on a Red Hat Enterprise Linux (RHEL) server, using knockd, a popular open source port knocking tool. Most importantly, I will try to extend the idea of port knocking beyond simple firewall modifications to more complex system administration tasks.

Note that knockd is available for other systems as well, so if you’re using Debian, Ubuntu, Mac OS X, or even Windows, you should be able to follow along with most of the advice herein to secure your system with knockd.
Flaws with Port Knocking

Before we begin, I should note that port knocking has some detractors. Some IT security professionals say that a predefined and fixed sequence of knocks is, in and of itself, a security flaw. To overcome this, some port knocker daemons have been modified to generate a random sequence of knocks, which can be used by clients to issue requests.

It’s also important to remember that port knocking is just one component of a successful security strategy. You’ll need to deploy other security mechanisms so that if an attacker is successful in providing the correct sequence, they are still faced with authentication and other barricades before connecting to a service.

Port Knocking: A Basic Overview

To start, let’s take a look at the basic functionality of a port knock server. knockd is a daemon that runs on a server, passively listening to network traffic. You configure knockd with a sequence of ports, the length of time between connection attempts, the type of packet that will be sent, and the command to be run when the correct sequence is given.

Once knockd” sees” a port sequence it has been configured to recognize, it will run the command it’s been configured to run. Note that you can use TCP, UDP, or a combination of both. Usually the action will be an iptables command, but not always.

So, to implement port knocking, we start with the installation of knockd and run it in the background. (Or foreground, if you wish, but we will usually want to run it in the background.)

Securing A MySQL Database Remote Connections with Port Knocks

Now that we know what port knocking is, let’s put it to use. In this scenario, I have a business-critical MySQL-based application running on RHEL. On occasion, I need to allow remote connections from a DBA who is performing basic database maintenance activities.

However, for security reasons, we don’t want to allow remote database connections at all times or from every IP address. Because we wanted tighter control over remote connections, we decided to explore port knocking so that remote connections would be open for a limited time only and from a specific IP address.

Let’s start with the firewall rule, just in case you’re not already a firewall wizard. To append a rule to one of the” chains,” you’ll use the -A option. The -I parameter tells iptables to insert the rule into a specific position in the chain. This is important because you may want specific rules to be processed first. Make sure you give it a rule number.

Now, to secure MySQL connections to my database server (172.16.2.183), I blocked network traffic on server’s MySQL port (default 3306) coming from all addresses. For this purpose, I executed following command:

iptables -A INPUT -p tcp -s 0/0 -d 172.16.2.183 --dport 3306 -j REJECT

You don’t want to be reissuing the command every time you restart the machine, so you’ll want to save the rule permanently, using iptables-save.

Getting and configuring knockd

The next step is to install the knockd server on the system you want to use it on. You can get the RPM from the RHEL network.

After installing knockd it’s time to customize your configuration. The knockd config file is found at /etc/knockd.conf

[options]
logfile=/var/log/knockd.log
[DB2clientopen]
sequence = 7050,8050,9050
seq_timeout = 10
tcpflags = syn
command = /sbin/iptables -I INPUT 1 -p tcp -s 192.168.2.201
--sport 1024:65535 -d 172.16.2.183 --dport 3306 -m state
--state NEW,ESTABLISHED -j ACCEPT
[DB2clientclose]
sequence = 9050,8050,7000
seq_timeout = 10
tcpflags = syn
command = /sbin/iptables -D INPUT 1

Let’s take a look at the format. The syntax is very simple, you give knockd option / value pairs, separated by =, and port numbers are separated by commas in the order you want the” knocks” to be received. Don’t forget to specify a logfile, you may need to review it later!

It should be obvious from the knockd.conf example that it has two types of actions that can be executed by the daemon, depending on the sequence it receives.

First, if it receives syn packets to port 7050, 8050, and 9050, knockd will insert the first iptables rule as rule number 1 in the INPUT chain. This will open the MySQL database port, so a remote connection can be made from 192.168.2.201– and only that IP address. It’s a good idea to specify the IP address whenever possible, so that if an attacker tries to connect while the port is open, they will still be denied.

On the other hand, if the server receives a knock sequence of 9050, 8050, and 7000, it will delete the rule so that all remote database connections will be closed down again.

I made sure that MySQL would know what address my DBA would be coming from, so I added my PC’s IP address to the server’s /etc/hosts file and created a test database called test1, and created a user called test1 as well with the appropriate grant privileges.

First, fire up the MySQL client with mysql-u root-p test1 and enter the following commands:

mysql> create user test;
mysql> grant all privileges on *.* to 'test@dbawin'
identified by 'polanipass' with grant option;

Next, restart knockd as a daemon.

/usr/sbin/knockd -d

It should be noted that, by default, knockd will start listening on eth0. If you need it to run on a different interface, you can configure it to do so using the -i option. For instance, to start knockd as a daemon on wlan0 you’d use /usr/sbin/knockd-i wlan0. If you’re always going to run knockd on a different interface, you can add this to your knockd.conf:

[options]
interface = wlan0

Knock, Knock, It’s Me!

Now, knockd isn’t very useful without a client, so let’s get a client to talk to knockd. I chose a Windows-based Cygwin client, but you can find a client for just about any client OS at the implementations page mentioned earlier.

To use the Windows client, you open a DOS prompt and run something similar to this command:

C:KNOCKKNOCKWINDOWS>knock.exe 172.16.2.183 9050 8050 7000

Of course, the IP address and ports will vary. Once the” knock” is issued, the knock daemon will execute the iptables command listed under the [DB2clientopen] section of knockd.conf and add the rule in INPUT chain to allow DB2 PC to connect to database running on server.

Now you can connect to your MySQL database with your favorite client and do whatever you need to do. Once you’re finished, it’s time to close the door.

If you send the close knock sequence, in this case a syn packet sent to ports 9050, 8050, and then 7000, the MySQL port will be closed and all connections will be terminated. If you try to reconnect to the server, your MySQL client will time out and you’ll eventually see an access error. This will be the case until you send the proper sequence to re-open the port.

So, now you see how you can use port knocking to increase security for remote MySQL connections. Of course, this is really database (and application) independent, so you can use port knocking to secure any database or application you want to connect to remotely.

If it’s too much hassle to open and close the connection each time you need to connect to the database, it might make more sense to set it up so that the port is open during specific hours. For example, if your database guru works 10 a.m. to 7 p.m., you could set up a script to open the port a bit before 10 a.m., and close the port a bit after 7 p.m.

This is not quite as secure, but it does mean that the port won’t be open 24/7, so it may block some automated and casual (i.e., not targeted) attacks. Also, if the port knocking is coupled with only allowing connections from specific IP addresses or IP address ranges, then you have an additional layer of security.

Performing Other System Administration Tasks with Knocks

But wait, that’s not all! Port knocking can be used to do more than set iptables rules. After configuring knockd to play doorkeeper, I decided to explore the feature and see if I could use it to make my life easier in other ways.

I decided I wanted to be able to restart my system remotely, just by” knocking” in the right sequence. I also configured knockd to kick off my backups to tape, so I don’t even need to log in to start the backup– just send a quick series of packets, and my data is safe another day.

Here’s my /etc/knockd.conf:

[options]
logfile=/var/log/knockd.log
[systemreboot]
sequence = 7050,8050,9050
seq_timeout = 10
tcpflags = syn
command = /usr/bin/reboot
[systembackup]
sequence = 9050,8050,7000
seq_timeout = 10
tcpflags = syn
command = /usr/bin/tar -cf /dev/rmt0 /home/root/

You can take this a lot farther, and set it up so that other admins (say, the junior admin who’s reliable but still a bit green) can perform complex actions just by using a knock client, or even just by running a shell script that sends the packets.

Summary

Port knocking is a very useful tool for systems security. It is because of its usefulness and robustness that the number of implementations, and users, are growing rapidly. If you can open a door into a closed black box for to perform some system administration tasks, even without requiring a login to the system, it can be very ideal for many environments.

sumber:http://www.linuxexposed.com/content/view/196/54/

Open Source Modelling Tools

2008-12-27T18:25:00.000-08:00

1. Dia

Dia is inspired by the commercial Windows program ‘Visio’, though more geared towards informal diagrams for casual use. It can be used to draw many different kinds of diagrams. It currently has special objects to help draw entity relationship diagrams, UML diagrams, flowcharts, network diagrams, and many other diagrams. It is also possible to add support for new shapes by writing simple XML files, using a subset of SVG to draw the shape.

More about Dia

2. ArgoUML

ArgoUML is the leading open source UML modeling tool and includes support for all standard UML 1.4 diagrams. It runs on any Java platform and is available in ten languages.

More about ArgoUML

3. StarUML

StarUML is an open source project to develop fast, flexible, extensible, feature rich, and freely-available UML/MDA platform running on Win32 platform. The goal of the StarUML project is to build a software modeling tool and also platform that is a compelling replacement of commercial UML tools such as Rational Rose.

More about StarUML

4. MagicDraw

MagicDraw is a visual UML modeling and CASE tool with teamwork support. Designed for Business Analysts, Software Analysts, Programmers, QA Engineers, and Documentation Writers, this dynamic and versatile development tool facilitates analysis and design of Object Oriented (OO) systems and databases. It provides the industry’s best code engineering mechanism (with full round-trip support for J2EE, C#, C++, CORBA IDL programming languages, .NET, XML Schema, WSDL), as well as database schema modeling, DDL generation and reverse engineering facilities.

More about MagicDraw

5. Kivio

Kivio is an easy to use diagramming and flowcharting application with tight integration to the other KOffice applications. It enables you to create network diagrams, organisation charts, flowcharts and more.

More about Kivio

6.OpenOffice Draw

DRAW - from a quick sketch to a complex plan, DRAW gives you the tools to communicate with graphics and diagrams.

More About OpenOffice Draw

sumber:
http://www.andrewsellick.com/73/100-great-free-and-open-source-tools-for-web-developers

3D Compiz On Via Unichrom

2008-11-02T19:07:00.000-08:00

Many linux users who have integrated VIA graphics suffer from lack of 3D acceleration when running certain programs like fast-paced games and windows emulator wine. Developers came up with at least 3 drivers: via-, unichrome- and openchrome-, none of them worked though, or at least did not stop their boxes from freezing or going to a hard lockup.

Read on to get 3D working on your via boxes.

Introduction

This guide will help you enable 3D if via-, unichrome- or openchrome- drivers do not work with your VIA graphics chipset.

Installation Instructions

*

Download the driver from http://www.viaarena.com/default.aspx?PageID=2&Type=3.
*

Choose your distro.
*

Then pick Integrated Graphics.
*

Pick the appropriate driver category. If you are not sure which one, check this site http://www.viaarena.com/default.aspx?PageID=5&ArticleID=68&P=5.
*

Click on "Click here to begin free download." Save it.
*

Unzip the file.
*

Make a backup of your xorg.conf.
*

CD to the directory where you unzipped the file to.
*

Execute the *.run file. example "sudo sh VIA_U710_UniChrome-GFX-v40072d.run"
*

Ctrl-Alt-Bckspce

Check for 3D

# glxinfo | grep render -> direct rendering: Yes

references:
https://help.ubuntu.com/community/UniChrome#Introduction

Screenshots of kpovmodeler

2008-07-07T02:04:00.000-07:00

Main Window

You see here the main window of the program:

* The hierarchical object tree in the top left corner
* The widget for direct manipulation of object attributes in the lower left corner
* Three configurable 3d views of the scene and one camera view

The scene is my favourite example scene where you can see two ants walking between some blades of grass.

Prototypes

The second screenshot shows the same scene as in screenshot one, but with the ant prototype selected.

Prototypes and object links are a powerfull feature of POV-Ray to construct large and complex scenes.

Textures

Textures can be previewed in the dialog view. This feature is very useful while creating textures to get a quick impression how the current texture will look like without rendering the whole scene.

Fisheye Camera

The camera supports complex projections like the fish eye projection.

Notice also the control points of the camera. Like all objects you can control the attributes of the camera (position and look_at) with control points in the 3d views.

Rendered Scene

A rendered scene with refraction and reflection effects.

References : http://www.kpovmodeler.org/index.php?option=com_content&view=category&layout=blog&id=2&Itemid=5&lang=en

Orkut An Epitome:Linux Always Rocks

2008-06-26T16:12:00.000-07:00

Cairo-Dock is an animated launch bar similar to SimDock or AWN. You can use it to launch applications and utilize small applets that live on the bar. It lacks some of the visual effects provided by AWN, but it my experience it runs a little faster.

This application is an continuation of the abandoned GNOME-Dock project. According to the Ubuntu Wiki:
Procedure For Installation :-

Add the repository to System->Administration->Software Sources->Third Party Software->Add:
deb http://repository.cairo-dock.org/ubuntu gutsy cairo-dock

Click Reload.
Click here to install if you have apt-url installed with firefox and you added the above repository or:
Open up synaptic:
System->Administration->Synaptic and search for cairo-dock and cairo-dock-plug-ins then click install.

Once Installed you can access Cairo Dock via Applications->System Tools->Cairo Dock
Cairo-Dock has an update function so you will not need a repository or need to download it again

Check here for more plugins and addons

Additonal Documentation is http://www.cairo-dock.org/ww_page.php?p=Accueil&lang=en

references :
http://computrgeek.wordpress.com/2008/05/27/howto-install-cairo-dock-in-ubuntu/

Jahshaka

2008-06-20T23:33:00.000-07:00

Jahshaka aims to become a cross-platform, open source, free, video editing, effects, and compositing suite. It is currently in alpha stage, supporting realtime effects rendering, but lacking useful implementations of many features such as the non-linear editing system. It is written using Trolltech's Qt, but its user interface is written using an OpenGL library to create GUIs.

Since it uses OpenGL and OpenML, it could be ported to many different platforms that have the necessary computing power.

Jahshaka is released under the GNU General Public License.

Jahshaka animation module running in Mac OS X
Developed by Jahshaka
Latest release 2.0 / 3 October 2006
OS Qt (Linux, Mac OS X, Windows)
Genre Digital video compositing, editing
License GPL
Website http://www.jahshaka.org/

references :http://en.wikipedia.org/wiki/Jahshaka

USB Knoppix 5.1.1 install

2008-06-19T16:51:00.000-07:00

USB Knoppix 5.1 This tutorial covers how to install and run Knoppix Linux from a USB Flash Pen Drive through Windows. Knoppix is based on Debian GNU/Linux and includes many useful applications such as Abiword, OpenOffice, Gimp, Konqueror, Mozilla, Apache, PHP, MySQL along with hundreds of other Open Source applications. This guide will show you how to make your own Portable Knoppix that you can then boot from any PC that supports USB boot.

Update: the script now moves the extracted files to the flash drive automatically. It has been tested to work in both XP and Vista.

Knoppix 5.1 Screenshot:

knoppix running from USB

You’ll need the following to create a Portable Knoppix:

* 1GB or Larger USB Flash Pen Drive
* Windows PC to perform the conversion (XP or Vista)
* Knoppix Linux ISO
* fixkp2.exe

1. Download fixkp2.exe and run, a USB-Knoppix folder is created
2. Download the Knoppix Linux ISO and move it to the USB-Knoppix folder
3. Click fixkp2.bat from the USB-Knoppix folder and follow the onscreen instructions
4. Reboot your PC and set your system BIOS or Boot Menu to boot from the USB device, save your changes and reboot
5. Upon reboot, you should have a successful launch of Knoppix Linux from your USB memory stick.

Note: If you need any additional help making your flash drive boot, check out our BIOS boot options section or Tools Section.

references:
http://www.pendrivelinux.com/2007/01/01/usb-knoppix-510/

Boot and run Linux from a USB flash memory stick

2008-06-19T16:44:00.000-07:00

Carry a portable Linux version with you on a USB flash pen drive. Easily bring your portable desktop with you wherever you go.

Portable USB Linux Desktop Screenshot with CompizUSB Linux installation enables you to install a portable Linux operating system on a flash drive or USB key no larger than your thumb. This portable Linux operating system can then be run from any computer that can boot from a flash device, allowing you to bring your operating system, desktop, applications, files, email, personal settings, favorites, games and more with you. It’s your own personal operating system you can carry in your pocket. On Pendrivelinux.com, we provide many simplified portable Linux flash drive installation tutorials. Making is easy for anyone to install, boot and run Linux portably from a Pen drive!

references:
http://www.pendrivelinux.com/

New KOffice Technologies

2008-06-18T03:02:00.000-07:00

In this week's edition of the Road to KDE 4, we'll take a look at the up and coming KWord 2.0 as part of the KOffice project. KWord 1.6.1 is already a powerful KDE-integrated word processor, but with KDE 4 technologies, KWord 2.0 promises to be among the most powerful free word processors available. Read on for more details.

KWord is part of the KOffice suite of applications which, with a few exceptions such as Kexi, has been visible thus far as a KDE-only application living under the shadow of the much larger OpenOffice.org suite. But this won't always be so, as the new KDE 4 technologies allow KOffice to exist as a native application on other platforms such as Windows and Mac OSX. Look out for more details on KDE support for these platforms in a future article.

One of the biggest assets of KOffice and KWord is its native support for the OASIS OpenDocument standard, which is shared by many office applications these days (including OpenOffice.org, Google Docs and others). Expect improved ODF document compatibility for KWord in the future as the developers strive for complete specification support.

Lets take a look at some screenshots from the development version of KWord. Notice the nice anti-aliasing of every element of the UI. On my system, it doesn't appear noticeably slower than KOffice 1.6.1. One of the most improved areas in KWord 2 is the text formatting and layouting, which definitely deserves some more exposure. It's not yet complete, but as you can see below, it's definitely much improved from previous versions. You really have to experience it yourself to appreciate how smooth moving, resizing and rotating Flake shapes is in this new version.

All manner of objects are being converted to the new Flake library, for instance KFormula elements, so you can insert nicely rendered math into your documents without any trouble. This support could make KWord as exciting to use for page layouts as KPresenter, as you are no longer restricted to dull, square document shapes. These changes should enable KWord 2 to behave as a respectable basic desktop publishing application.

Also noticeable in this early preview version is the lack of spell checking support, as this is being reworked for the upcoming Sonnet architecture for spelling and grammar corrections. (Which word did I misspell in my screenshot?)

But this is not the only improvement new to KOffice 2. Also in the works is scripting support for applications through the new and extensible scripting framework dubbed Kross. It has received a lot of work and looks to be one of the killer features of KOffice 2.

The following screenshot shows the new scripts menus in KWord:

Also notice how I moved the tear-off toolbars from the previous screenshot. I placed them by drag-and-drop, and they automatically tabbed up. This is all done very smoothly by Qt with no noticeable interface flickering.

Of course, the same scripting and rendering features have made their way into other KOffice apps as well. KSpread and scripting are a perfect fit, and there is a lot of power exposed to the advanced user.

For people interested in more details about Kross, check out this article on the development and usage of Kross in KSpread.

These are just some of the many improvements in the works for KWord and KOffice when the KDE 4 platform rolls out. Of course, these screenshots are of the development versions, which are quite unstable at the moment, but jugding by the level of activity today in the developer channels (like #koffice on irc.freenode.org) there is a large amount of momentum behind this release.

KOffice has a separate release schedule from KDE 4, so they may or may not release concurrently.

renferences :http://dot.kde.org/1168284615/

KDE ‘Kompose’ (OSX Expose)

2008-06-12T20:01:00.000-07:00

This evening I installed KDE to get a feel for what it has to offer since I’ve last used it. I haven’t used KDE since my Red Hat 9.0 days almost four years ago. I’ll say quite a lot has changed! I don’t know that I’ll replace my gnome desktop with KDE but its been a pleasant experience so far.

The Tutorial for the day is how to setup and run Kompose which offers you a very similar experience to OSX “Expose”. The KDE version already offers the upgrade OSX has in store for Leopard, but that’s another story. The main reason I’m including this tutorial is that I spent the last twenty minutes trying to find a similar tutorial and it was not an easy task.

Installing Kompose

sudo aptitude install kompose

Running Kompose

ALT-F2 : kompose

Configuring Kompose Shortcuts

Show Kompose (default): win + tab
Show Kompose (ungrouped): ctrl + shift + j

Show Kompose (grouped by desktop): ctrl + shift + i

Show Kompose (current desktop): ctrl + shift + k

Kompose makes it very easy to view all of the programs you have running on each of your virtual desktops. It does seem to make things very easy to keep organized. It would be nice if something like this were available in gnome.

sumber : http://ubuntu-tutorials.com/2006/10/15/kde-kompose-osx-expose/