Knowledge comes with the desire to explore it !!

How to download protected/view only files from google drive ?

noreply@blogger.com (Unknown) — Sun, 20 Aug 2023 06:09:00 +0000

Sometimes you may have faced a situation like your friends or teachers has given you pdf, google docs, google sheets or video files with google drive links and when you open it you can preview the content of those files but when you try to download you will not get any download, copy, or print button because google has intentionally created those files with no download or print feature.

In general, these types of files are view-only or protected google drive files. Suppose you like download those files and save them locally then without a hack you cannot achieve. Don't worry guys I will help you. In this article, I will be explaining to you how to download protected view-only files from google drive.

Warning: For educational purposes only.

Steps to Download protected/view-only pdf files from google drive?

1. Open or Preview Any view-only or protected files from google drive.

2. Open Developer Console.

If you are previewing in Google Chrome or Firefox

Press Shift + Ctrl + J ( on Windows / Linux) or Option + ⌘ + J (on Mac)

If you are previewing in Microsoft Edge

Press Shift + Ctrl + I

If you are previewing in Apple Safari

Press Option + ⌘ + C

Then you will find yourself inside the developer tools.

3 Navigate to the "Console" tab.

4 Paste below code and press Enter

let jspdf = document.createElement("script");

jspdf.onload = function () {

let pdf = new jsPDF();

let elements = document.getElementsByTagName("img");

for (let i in elements) {

let img = elements[i];

console.log("add img ", img);

if (!/^blob:/.test(img.src)) {

console.log("invalid src");

continue;

}

let can = document.createElement('canvas');

let con = can.getContext("2d");

can.width = img.width;

can.height = img.height;

con.drawImage(img, 0, 0, img.width, img.height);

let imgData = can.toDataURL("image/jpeg", 1.0);

pdf.addImage(imgData, 'JPEG', 0, 0);

pdf.addPage();

}

pdf.save("download.pdf");

};

jspdf.src = 'https://cdnjs.cloudflare.com/ajax/libs/jspdf/1.5.3/jspdf.debug.js';

document.body.appendChild(jspdf);

5. Now, the pdf file start to downloads.

Note that it may take a long time for downloading if the size of the pdf is large because each page in the pdf is generated in the form of an image. Also, it doesn't guarantee the content quality of pdf remains the same.

Technical Concept:

On-page load each Image tag on the page is search, and

if the image is not found then continue finding the Image tag on the next page of the pdf.

Else if found: then with the help of Canvas those images are created with the drawImage() function and here we are creating images in JPEG format and later these images are added back to pdf instance by addImage() function. After that, with the help of addPage() new page is created and the same repeats until reaching the end of the page and finally pdf is downloaded.

And this is all possible by the use of the jsPDF library which is provided by Cloudflare. Actually, this jsPDF library is Javascript open-source library for generating PDF files.

Clear DNS Cache from Web Browser and Mobile Device

noreply@blogger.com (Unknown) — Mon, 26 Dec 2022 05:51:00 +0000

What Is chrome://net-internals/#dns?

You can try this link on your browser and you will see the page where you can click Clear host cache to clear the DNS cache on Chrome.

The net-internals/#dns, also known as Net-Internals, is a NetLog event stream visualisation tool where you can view real-time logs or load NetLog dumps of later dates that keep the browser’s network-related events and state, helping troubleshoot and debug problems.

Is It Necessary to Clear DNS Cache on Chrome?

There are some situations when you need to perform chrome://net-internals/#dns.

When you are unable to access a website and the DNS entry has been changed.
When you changed the DNS servers of your network adapter and apply that setting.
When some errors repeatedly occur to tell you some commonly used websites are un-trusted.

How to Clear DNS Cache?

1. Clear DNS Cache on Chrome

Step 1: Open your Chrome browser and go to this link: chrome://net-internals/#dns.

Step 2: Once you get to this page, you will see the page with the Clear host cache button and click on the button.

After this move, no message or prompt will show you the result but you have flushed the DNS cache on Google Chrome.

Step 3: Restart your Chrome browser and go to this link: chrome://net-internals/#sockets.

Step 4: Hit the Flush socket pools button and then restart your browser.

2. Clear DNS Cache on Firefox

You can clear DNS cache on Firefox by simply restarting the browser for the cache is not maintained on the disk. Or if you don’t want to restart your browser, you can do as follows.

Step 1: Open your Firefox browser and enter this link in the address bar: about:networking#dns.

Step 2: On the next page, you can see some DNS cache details and choose the Clear DNS Cache button to clear the browser’s DNS cache.

3. Clear DNS Cache on Safari

There is no direct button available for clearing the DNS cache on Safari but you can choose a hidden button to clear caches that include DNS caches.

Step 1: Launch Safari on your device and in the menu bar, choose Safari and then Preferences….

Step 2: In the Preferences pane, go to the Advanced tab and check the box next to Show Develop menu in menu bar.

Step 3: Then the Develop menu will appear in Safari’s menu bar and you need to click on it to choose the option of Empty Caches from the drop-down menu.

Then you can re-launch Safari and your cache will be cleared.

4. Clear DNS Cache on Opera

To clear the DNS cache on Opera, you can do as follows.

Step 1: Launch Opera on your device and go to the link: opera://net-internals/#dns.

Step 2: On the next page, you can click the button labeled Clear host cache to flush the DNS cache.

Step 3: After that, go to the link: opera://net-internals/#sockets and click on the Flush socket pools button.

5. Clear DNS Cache on Your Apple iPhone

To clear your iPhone DNS cache, you can directly restart the device, that will help clear out your DNS, or you can toggle Air-plane mode on and off.

Besides, you can reset network settings to clear DNS, but this method will clear your saved Wi-Fi and Bluetooth settings, which needs to be reconfigured.

Step 1: In Settings on your device, choose General.

Step 2: Scroll down to choose Transfer or Reset iPhone and then tap on Reset.

Step 3: Choose Reset Network Settings from the list and then confirm your option to save the choice.

After that, if you had previously customised your DNS servers, you must manually reset them again.

6. Clear DNS Cache for Your Android

Android doesn't offer a direct way to clear the system's DNS cache within the UI, but you can flush the DNS cache using a browser as we have introduced above, like Chrome, Firefox, Opera, and Safari.

Just open your mobile phone and open the browser your are using to follow the above steps to clear the DNS cache. That will be easy to follow.

What are RUA and RUF in DMARC?

noreply@blogger.com (Unknown) — Mon, 12 Dec 2022 06:06:00 +0000

DMARC (Domain-based Message Authentication Reporting & Conformance) is an email validation and authentication system used to detect fraud, such as phishing and impersonation, and improve email deliverability.

DMARC works by protecting your domain and providing visibility over it through two reports: aggregated reports (RUA) and forensic reports (RUF).

To put it another way, DMARC allows you to have control over the use of your domain, preventing cybercriminals from applying scams and attacks using your domain, brand, and reputation.

Imagine that a bad guy is using your domain. This crook has sent emails to your clients and partners to steal data and money from them. The worst thing is that the email model is very similar to the one that you usually send. In these cases, it’s difficult to even convince your customers that it was a fake one.

The result of this kind of scam is that your brand and reputation can be damaged, with possible financial losses for the business.

How DMARC's validation process works

DMARC works by providing instructions for email servers. How? through a DMARC policy published in the DNS.

Basically, DMARC uses two email authentication protocols, SPF and DKIM, to help email servers identify whether a message is legitimate or not, and take action, such as sending the message to quarantine. It all depends, in fact, on how the policy was configured by the domain owner.

In addition, DMARC allows domain owners to receive reports on emails that have been delivered and/or rejected.

The difference between DMARC's RUA and RUF reports

RUA: what is a DMARC aggregate report?

RUA is a more general type of report. It provides an overview of all traffic or usage for a domain. In practice, aggregate reports (RUA) contain information about the result of authenticated emails and the source that sent them. That is, the domain used, the IP and the number of emails sent in a given period.

Aggregate reports may contain the following information:

Organization name.
Organization sending email address.
Extra contact information.
Report ID number.
Date range.
Header domain/from domain.
Alignment for DKIM and SPF.
Domain and subdomain policies (reject).
Percentage of messages to which the DMARC policy is to be applied.
IP information.
Total of IPs.
SPF and DKIM authentication result.

RUF: what is a DMARC forensic report?

We could say that RUF is a more complete report because it includes additional data about emails, such as subject, header, and information about attachments and URLs. A forensic report (RUF) may even be a complete copy of an email.

Due to compliance and privacy issues, many companies and organizations end up choosing not to request RUF reports. The goal is to prevent data breaches and to comply with laws and regulations that deal with sensitive and personal data.

Forensic reports may contain the following information:

IP information.
Subject line.
Time.
SPF, DKIM, and DMARC results.
ISP information.
From domain information.
Message ID.
URLs.
Delivery result.

Why use DMARC

Using DMARC, your company can improve its email delivery capabilities and, at the same time, protect itself against different types of attacks and threats, such as spam, phishing, and spoofing campaigns.

When properly configured, DMARC ensures that you have visibility into the use of your domain. In this way, only authorized senders can send emails.

It’s an extra layer of security that prevents cybercriminals from using your brand and reputation to commit scams and fraud.

DNS Zone Transfer Types

noreply@blogger.com (Unknown) — Fri, 09 Dec 2022 06:09:00 +0000

Zone Transfer

Zone transfer is the process by which changes made on the primary server are replicated to all the secondary servers in the zone. There are three types of zone transfer to consider:

Full zone transfer
Incremental zone transfer
AD replication

Full Zone Transfer

Originally, the only method of replication between primary and secondary servers was the full zone transfer. With this method, the entire zone database file is transferred whenever an update is made. The zone transfer is performed through a "pull" mechanism rather than a "push." This means that the secondary servers initiate the zone transfer. The process is as follows:

The secondary server waits a predetermined amount of time before contacting the primary server. When it does establish contact, it requests the primary server's Start of Authority (SOA) record.
The primary server responds to the secondary server with its SOA record.
Whenever a change is made to the primary name server, the serial number held in the SOA record is incremented. When the secondary server receives the SOA record from the primary server, it compares the serial number to its own. If the serial number in the SOA record sent by the primary server is higher than the serial number in the SOA record currently on the secondary server, the secondary server knows its zone database is out of date. It then sends a request back to the primary server for a full zone transfer. This full transfer is done through an AXFR request.
The primary server then sends its full zone database file back to the secondary server. After the update is complete, the process begins again with the waiting period.

Incremental Zone Transfer

As you can probably imagine, performing a full zone transfer every time a single change is made to the primary server is inefficient. It also can generate a lot of network traffic if the primary server receives frequent updates and there are multiple secondary servers. To get around this problem, RFC 1995 allows for incremental zone transfers. As the name implies, with an incremental transfer, only the portion of the database that has been changed is replicated.

The process with an incremental transfer is the same as a full transfer, except with an incremental transfer, the secondary server sends an IXFR request, signifying an incremental transfer, rather than the AXFR request, which signifies a full zone transfer.

TIP

If you think of AXFR as A (all) XFR (transfer), it is easy to remember that AXFR is a full transfer. Likewise, you can think of IXFR as I (incremental) XFR (transfer).

For an incremental transfer to work, a version history must be kept so that name servers will know what changes have already been applied. The primary server maintains a version history, which keeps tracks of all changes that have been made since the last version update was transferred to a secondary server. When a secondary server requests an IXFR transfer, the primary server starts sending the recent updates, beginning with the oldest updates and progressing to the most recent updates.

When the secondary server begins receiving the updates, it creates a new version of the zone and begins applying the updates to that copy. When all the updates are committed to the copy of the zone database, the original database is replaced with the copy.

If the primary server does not support incremental transfers, it simply ignores the incremental request of the secondary server and performs a full zone transfer.

AD Replication

AD integrated zones are able to piggyback off of the standard AD replication scheme already in place on the network. Therefore, you do not have to manage a separate replication scheme for DNS data as you would if you used standard primary and secondary servers.

How to Install and Configure MRTG on Ubuntu Server 12.04

noreply@blogger.com (Unknown) — Fri, 31 May 2013 12:31:00 +0000

This post will describe how to install and configure Tobi Oetiker’s MRTG (Multi Router Traffic Grapher) on your Ubuntu home server. Once configured, you’ll be able to use it to monitor the traffic in and out of your home network using the SNMP capability in your network’s gateway\router. MRTG generates static HTML pages containing PNG images which provide a visual representation of this traffic. MRTG typically produces daily, weekly, monthly, and yearly graphs. MRTG is written in perl and works on Unix/Linux as well as Windows. MRTG is free software licensed under the GNU GPL.

Software versions used in this post were as follows:

Ubuntu Server v12.04 x64 LTS)

mrtg_2.17.3-2ubuntu1_amd64.deb

Download and Install

First, download and install MRTG:

sudo apt-get install mrtg

If this is the first time installing MRTG on your server you’ll likely be presented with the following message. Answering “Yes” means that the default configuration file will be installed with permissions set at 640. Answering “No” means that the permissions are set at 644. In this example we’re going to accept the default Yes. No worries though, if you select No the steps in this tutorial will still work.

Download Offline Installers: Microsoft .NET Framework 4.0, 3.5 SP1, 3.5, 3.0 & 2.0 From Microsoft Servers

noreply@blogger.com (Unknown) — Fri, 31 May 2013 06:38:00 +0000

As many of the new Microsoft Windows applications are developed using .NET Framework, it is becoming mandatory to install .NET Framework on our personal computers.

Microsoft provides .NET Framework installer as a free download available to everyone. But it is an online installer. That means, initially we have to download a small piece of installer and upon starting the installation process the installer automatically connects to Microsoft servers and downloads the required components and completes the installation.

The online installers works great as long as we have internet connectivity always. But many of us require offline installer to install the software on computers not connected to internet, to save the bandwidth while installing on many computers, etc.

How to Setup Chroot SFTP in Linux (Allow Only SFTP, not SSH)

noreply@blogger.com (Unknown) — Sun, 26 May 2013 07:50:00 +0000

If you want to setup an account on your system that will be used only to transfer files (and not to ssh to the system), you should setup SFTP Chroot Jail as explained in this article.

In a typical sftp scenario (when chroot sftp is not setup), if you use sftp, you can see root’s file as shown below.

If you want to give sftp access on your system to outside vendors to transfer files, you should not use standard sftp. Instead, you should setup Chroot SFTP Jail as explained below.

Non-Chroot SFTP Environment

In the following example (a typical sftp environment), abc can sftp to the system, and view /etc folder and download the files from there.

# sftp abc@xcessl0gycs.com
abc@xcessl0gycs's password:
sftp> pwd
Remote working directory: /home/abc

What’s the Difference Between 127.0.0.0 and 127.0.0.1?

noreply@blogger.com (Unknown) — Thu, 23 May 2013 10:48:00 +0000

Sometimes the most elementary of questions yield teachable moments; read on as we delve into how a single digit change between 127.0.0.0 to 127.0.0.1 offers a chance to look at network topology.

The Question

What’s the Difference Between 127.0.0.0 and 127.0.0.1?

I know that both are loopback IPs, but they have another ip mask.

What’s the difference between them? Can they be used interchangeably?

===========================================================================

IPv4 routes
===========================================================================
Active routes:
Destination               Mask          Gateway        Interface Metric
      0.0.0.0          0.0.0.0      192.168.1.1      192.168.1.6     26
[...]
    127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
    127.0.0.1  255.255.255.255         On-link         127.0.0.1    306

What kind of information can we tease out from this table?

20+ .htaccess Hacks Every Web Developer Should Know About

noreply@blogger.com (Unknown) — Tue, 14 May 2013 07:37:00 +0000

Apache's .htaccess(hypertext access) configuration file can be a very powerful tool in a web developer's toolkit if used properly. It can be found in the webroot of your server and can be easily edited using any text editor. In this article I'm going to show you 20 .htaccess hacks and how to use them.

Before I start with this article I'd like to start by saying that abusing the .htaccess file will hurt the performance of your website. The .htaccess file should only be used if you have no other way to achieve certain things.

Make sure to back up your current .htaccess file before applying any of the following hacks.

1. Prevent Hotlinking

Tired of people using your bandwidth by putting the images hosted on your server on their website? Add the following code at the bottom of your .htaccess file to prevent hotlinking.

1Options +FollowSymlinks

2#Protect against hotlinking

3RewriteEngine On

4RewriteCond %{HTTP_REFERER} !^$

5RewriteCond %{HTTP_REFERER} !^http://(www.)?domainname.com/ [nc]

6RewriteRule .*.(gif|jpg|png)$http://domainname.com/img/stop_stealing_bandwidth.gif[nc]

NOTE: The following article explains better methods to "prevent" hotlinking:
Link building secrets by Maurizio Petrone

How to check what we have Installed in Debuian/Ubuntu OS

noreply@blogger.com (Unknown) — Mon, 06 May 2013 07:58:00 +0000

To check what have install by listing all using dpkg is easy.

dpkg -l

To check whether a package is install also easy.

dpkg -l | grep apache

The command above is some how redundant, because dpkg support wild characters, doing this instead

dpkg -l "apache*"

By doing this, it will also list the package that not install but available in dpkg cache, to install them you can simply apt-get. To indicate the packages installed it shows “ii” and not install shows “un”.

Shell Script File for Checking Package Installed or not Or If not then Install Package - For Ubuntu OS

noreply@blogger.com (Unknown) — Mon, 06 May 2013 07:46:00 +0000

Dpkg: check that unix package is installed. Bash script: install package if not present

dpkg -s can be used.

Example: is vlc installed?

> dpkg -s vlc|grep installed

Here is some logic in bash script, like installing package if it is not there:

problem=$(dpkg -s vlc|grep installed)
 echo Checking for libxul: $problem
 if [ "" == "$problem" ]; then
      echo "No libxul. Setting up libxul"
      sudo apt-get --force-yes --yes install vlc
 fi

How to Enable and Disable Root Login in Ubuntu 12.04 TLS

noreply@blogger.com (Unknown) — Thu, 11 Apr 2013 08:21:00 +0000

We have recently installed Ubuntu 12.10 Desktop and Ubuntu 12.10 Server, we have nowhere asked to supply root password during installation. Generally in Linux, root user does exist and we need to supply root password during installation. By default root account is disabled in Ubuntu Linux because of security reason and you cannot login as root user directly or su - (Switch User) to become a root. You need to add sudo (superuser do) before actual command if you want to run all administrative commands and you need to supply your password when prompts for password.

Sudo is allowed user to become superuser for temporary to run superuser administrative tasks.

During installation only allow to create new user which has no root ( aka super user) privileges. But same user is allowed to execute sudo commands. Configuring sudo access for users, need to configure /etc/sudoers.

We’ll be covering the usage of SUDO and also we are going to show you tips & tricks to become root user.

ADOBE ACROBAT X PRO 10.1.3 MULTILANGUAGE + KEYGEN

noreply@blogger.com (Unknown) — Thu, 24 Jan 2013 11:13:00 +0000

Adobe® Acrobat® X Pro software lets you deliver highly professional PDF communications. Create and edit PDF files with rich media included, share information more securely, and gather team feedback more efficiently.

Benefits of Acrobat X Pro

Increase your productivity : Get more work done — faster. From streamlining routine PDF tasks to quickly comparing two files, Acrobat X Pro software makes your job easier.

Protect sensitive information : Share files with confidence by easily adding PDF passwords or digital signatures. Remove sensitive information with redaction tools.

Easily create fillable forms : Turn your paper forms into fillable PDF forms in just a few steps. Distribute and collect forms electronically, track status, and analyze results.

Passive-interface command behavior in RIP, EIGRP & OSPF

noreply@blogger.com (Unknown) — Sun, 13 Jan 2013 13:19:00 +0000

Passive-interface command is used in all routing protocols to disable sending updates out from a specific interface. However the command behavior varies from one protocol to another.

In RIP this command will disable sending multicast updates via a specific interface but will allow listening to incoming updates from other RIP speaking neighbors.

This simply means that the router will still be able to receive updates on that passive interface and use them in the routing table.

In EIGRP the passive-interface command stops sending outgoing hello packets, hence the router can not form any neighbor relationship via the passive interface. This behavior stops both outgoing and incoming routing updates.

In OSPF the passive-interface has a similar behavior to EIGRP. The command suppresses hello packets and hence neighbor relationships.

Explain Intrusion detection system (IDS)?? Types OF IDS...

noreply@blogger.com (Unknown) — Wed, 07 Nov 2012 08:40:00 +0000

An intrusion detection system (IDS) is a device or software application that monitors network or system activities for malicious activities or policy violations and produces reports to a Management Station. Some systems may attempt to stop an intrusion attempt but this is neither required nor expected of a monitoring system. Intrusion detection and prevention systems (IDPS) are primarily focused on identifying possible incidents, logging information about them, and reporting attempts. In addition, organizations use IDPSes for other purposes, such as identifying problems with security policies, documenting existing threats and deterring individuals from violating security policies. IDPSes have become a necessary addition to the security infrastructure of nearly every organization.

IDPSes typically record information related to observed events, notify security administrators of important observed events, and produce reports. Many IDPSes can also respond to a detected threat by attempting to prevent it from succeeding. They use several response techniques, which involve the IDPS stopping the attack itself, changing the security environment (e.g. reconfiguring a firewall), or changing the attack's content.

EBOOK - Installation And Configuration of R.S.A enVision

noreply@blogger.com (Unknown) — Thu, 04 Oct 2012 15:04:00 +0000

"The Right Choice for Compliance and Security Success!". The RSA enVision platform provides collection, alerting and analysis of log data that enables organizations to simplify compliance and quickly respond to high-risk security events. The RSA enVision 3-in-1 platform offers an effective Security and Information Event Management (SIEM) and log management solution, capable of collecting and analyzing large amounts of data in real-time, from any event source and in computing environments of any size. RSA enVision is easily scalable - eliminating the need for filtering and to deploy agents.

Information System Auditing

noreply@blogger.com (Unknown) — Tue, 02 Oct 2012 15:53:00 +0000

1. What is informaton system?

Information system is any combination of information technology and human operation managemen and dececion making.

2. What is information system auditing?

Ron Weber opinion (1999,p.10), “EDP auditing is the process of collecting and evaluating evidence to determine whether a computer systems safeguard assets, and consumes resources effiently ”.Understanding in general is the process of collecting and evaluating evidence to determine whether a computerized application system has been set and implement the system, adequate internal controls, all assets are protected well / not abused, and ensuring data integrity, reliability and the effectiveness and efficiency of the system computer-based information.

CISA Review Manual 2012 - Powered By ISACA

noreply@blogger.com (Unknown) — Sat, 29 Sep 2012 15:25:00 +0000

The CISA Review Manual 2012 is a comprehensive reference guide designed to help individuals prepare for the CISA exam and understand the roles and responsibilities of an information systems (IS) auditor. The manual has been enhanced over the past editions and represents the most current, comprehensive, peer-reviewed IS audit, assurance, security and control resource available worldwide.

The 2012 manual is organized to assist candidates in understanding essential concepts and studying the following updated job practice areas:

The Process of Auditing Information Systems.
Governance and Management of IT.
Information Systems Acquisition, Development and Implementation.
Information Systems Operations, Maintenance and Support.
Protection of Information Assets.

Syness-The IT Regulatory and Standards Compliance Handbook: How to Survive Information Systems Audit and Assessments | For ISO 27001(BS7979), PCI-DSS, HIPPA, FISCAM, COBIT

noreply@blogger.com (Unknown) — Sun, 02 Sep 2012 06:05:00 +0000

The IT Regulatory and Standards Compliance Handbook: How to Survive Information Systems Audit and Assessments

Publisher: Syngress 2008 | 750 Pages | ISBN: 1597492663 | PDF | 11 MB

This book provides comprehensive methodology, enabling the staff charged with an IT security audit to create a sound framework, allowing them to meet the challenges of compliance in a way that aligns with both business and technical needs. This “roadmap” provides a way of interpreting complex, often confusing, compliance requirements within the larger scope of an organization’s overall needs.

Cisco Router - How to configure SSH

noreply@blogger.com (Unknown) — Thu, 19 Jul 2012 10:03:00 +0000

Below shows you how to enable SSH on your router using a username of "cisco" and a password of "network", allowing access from the fa0/0 interface.

Router(config)#ip ssh source-interface fastEthernet 0/0
Router(config)#ip ssh authentication-retries 3
Router(config)#ip ssh version 2

Router(config)#ip domain-name local.net
Router(config)#crypto key generate rsa modulus 768
Router(config)#username cisco password 7 network

Router(config)#line vty 0 15
Router(config-line)# transport input ssh
Router(config-line)# local login

Some Websites not open in SQUID Proxy

noreply@blogger.com (Unknown) — Tue, 17 Jul 2012 07:44:00 +0000

Websites not accessible via Squid

Problem

Some websites not accessible through Squid.

Following message is noticed in the browser

The following error was encountered:

Read Error

The system returned:

    (104) Connection reset by peer

Environment

Squid 2.6.STABLE21-6
Squid 3.1.10-1

Resolution

Add the following to squid.conf and restart squid service

via off
forwarded_for delete

Root Cause/Diagnostics

Site was accessible directly. Via squid, connection would reset abruptly

Only difference when accessed via squid and directly was the addition of

X-Forwarded-For and via headers in the HTTP request

X-Forwarded-for usually contains the IP address of the host that requested the website

Example:

X-Forwarded-For: 192.168.0.1

VIA usually has information about the proxy server

Example:

via: example.com

Documentation: forwarded_for and via

By disabling via off and setting forwarded_for delete, we disabling these headers in the HTTP request.
Disabling this header should not have any negative impact.

-----------------------------------------------------------------------------------------------

Configuring the Cisco IDS Router / Switch Modules for Cisco 6500 Switch / 7200 Router

noreply@blogger.com (Unknown) — Sat, 14 Jul 2012 10:15:00 +0000

IDSM-2

The IDSM-2 Module is a Cisco IDS blade for the Cisco 6500 switch.
Once you install the module into the switch the module uses following logical ports :

Port 1	Used for TCP Resets (In Promiscuous Mode)
Port 2	Command and Control
Port 7	Sensing Port
Port 8	Sensing Port

Below details the steps required for configuring your switch / module for an inline setup. This includes obtaining the module number for the cisco ids running the setup wizard and then assigning the required ports for on the switch for ids sensing within an inline configuration. The clear trunk commands are required as by default the switch assigns the ports as trunk ports to every vlan.

Types of Firewalls

noreply@blogger.com (Unknown) — Sat, 30 Jun 2012 11:27:00 +0000

Firewalls are everywhere today even many home network have firewalls today. But there are several different types of firewalls. You have hardware, software firewalls, stateful, stateless firewalls, proxy, application, desktop, dual-homed, reverse, etc;

Some of which are explained below:

How to configure a Cisco Layer 3 switch-InterVLAN Routing

noreply@blogger.com (Unknown) — Tue, 26 Jun 2012 13:36:00 +0000

Cisco Catalysts switches equipped with the Enhanced Multilayer Image (EMI) can work as Layer 3 devices with full routing capabilities. Example switch models that support layer 3 routing are the 3550, 3750, 3560 etc.

On a Layer3-capable switch, the port interfaces work as Layer 2 access ports by default, but you can also configure them as “Routed Ports” which act as normal router interfaces. That is, you can assign an IP address directly on the routed port. Moreover, you can configure also a Switch Vlan Interface (SVI) with the “interface vlan” command which acts as a virtual layer 3 interface on the Layer3 switch.

On this post I will describe a scenario with a Layer3 switch acting as “Inter Vlan Routing” device together with two Layer2 switches acting as closet access switches.

CheckPoint Having Acceleration and Clustering Software Blade

noreply@blogger.com (Unknown) — Sun, 24 Jun 2012 13:08:00 +0000

The Check Point Acceleration and Clustering Software Blade delivers a set of advanced technologies, SecureXL and ClusterXL, that work together to maximize performance and security in high-performance environments. These work with CoreXL, which is included with the blade containers, to form the foundation of the Open Performance Architecture, which delivers throughput designed for data center applications and the high levels of security needed to protect against today’s application-level threats.