INFRASTRUCTURE SOLUTIONS

Start your first Affiliate step, and Start getting money online in 2021

2021-10-16T12:17:00.010+03:00

In this Post I am going to tell you the easiest way that will lead you to start earning money form online marketing

1st STEP you should create your blog using for example: google blogger website, It is free and easy to setup, the blog will be used to create content with affiliation link. of course you can link your blog to one of the hosting websites for examples Bluehost

2nd step is to find an affiliate website like bluehost.com which they have an affiliate program you can sign up for.

3rd step is to get the affiliate link from bluehost as below

4th Step is to start posting your link in blog and different places as much as you can

Swift Alliance ARG

2020-12-25T20:14:00.013+02:00

Swift ARG

Stands for swift Alliance Remote Gateway

Why You need swift ARG?
If you want to get rid of the hassle of Maintaining and paying for SAG/SNL and HSM devices then the best choice is to have ARG.

This way your SAA will connect directly to swift network through swift VPN boxes.

ARG setup as follow:
- Create new Certificate on swift o2m website
- Tight the services required for ARG for examples: rma, rtgs, ach, api tracker and many other services.
- Run commands on your SAA server to use this certificate for ARG connection.
- After running the commands you will have new LT connections that corresponds to ARG.

That's all

Wish this information can help someone.

CCNA Security

2015-01-27T00:41:00.001+02:00

CCNA Security

NFP (Network Foundation Protection)

- Managment Plane:
Authenticate and authorize any administrators. Protect time synchronization by using authenticated
NTP. Use only encrypted remote-access protocols such as SSH for CLI and SSL/TLS for GUI tools, and use secure versions of SNM

- Control Plane:
The control plane tools can be implemented to limit the damage an attacker can attempt to implement directly at the router’s IP address.

- Data Plane:
Access control lists (ACL) Layer 2 controls, such as private VLANs, Spanning Tree Protocol (STP) guards IOS IPS, Zone-Based Firewall

Management Plane Commands:
#AAA New-model
#AAA authentication login default local (this will make cisco device use AAA method including line console 0, vty, Aux and SSH)

#security passwords min-length 8
#aaa local authentication attempts max-fail 3
#login block-for 300 attempts 10 within 60

Windows Command Lines (Shortcuts)

2015-01-27T00:13:00.001+02:00

Windows Command Lines (Shortcuts)

- ncpa.cpl (Network Settings command)

- inetcpl.cpl (Internet Explorer settings)

- mstsc (Remote Desktop Session)

CCNA Security 640-554

2015-01-27T00:08:00.001+02:00

CCNA Security 640-554

VPN types:
1- Site to Site (enable both sides to communicate with each others)
2- One direction (token) (allow other side to access our network)

ISAKMP negotiation consists of 2 phases
- phase 1 create the first tunnel
- phase 2 create the second tunnel which protect the data

VPN Components:

- Symmetrical encryption algorithms (use the same key for encrypting and decrypting data)
Ex: DES, 3DES, AES, IDEA

- Asymmetrical encryption (use a public and a private key. one key encrypts the data, and the other key in the pair is used to decrypt)
Ex: RSA, Diffie-Hellman.

- Digital Signature (Encryption of hash using private key, and decryption of hash with the sender's public key)
Ex: RSA signature

- Diffie-Hellman key exchange (uses a public-private key pair asymmetrical algorithm, but creates final shared secrets (keys) that are then used by symmetrical algorithms.
Ex: used as one of the many services of IPsec

- confidentiality (encryption algorithms provides this by turning clear text into cipher text)
Ex: DES, 3DES, AES, RSA, IDEA

- Data Integrity (validates data by comparing hash values)
Ex: MD5, SHA-1

- Authentication (verifies the peer's identity to the other peer)

VPN Commands:

# Show vpn crypto isakmp sa (to see VPN connection status)

CCNP Security Firewall:

2015-01-26T15:38:00.001+02:00

CCNP Security Firewall:

- ASA NAT (Video 04)
- ASA V.8.2 NAT Vs ASA V8.3 & 8.4 NAT and Newer

Mouse Problems with Ubuntu in Hyper-V

2013-11-27T07:17:00.000+03:00

http://www.faultserver.com/q/answers-mouse-problems-with-ubuntu-in-hyper-v-265129.html

SNMP on Ubuntu and FreeBSD

2013-11-22T12:47:00.002+03:00

How to enable SNMP Monitoring on Ubuntu Server 12.04.2

Install SNMPD
$ sudo apt-get install snmpd

Create a backup file of snmpd.conf original file that we will edit later
$ sudo mv /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.ori

Create the new snmpd.conf file
$ sudo vim /etc/snmp/snmpd.conf

Add the file with these lines

rocommunity public
syslocation "Your Location"
syscontact admin@domain.com

Then edit the /etc/default/snmpd file
$ sudo vim /etc/default/snmpd

Disable this line below by adding # in front of the line
#SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid'

And add a new line
SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -I -smux -p /var/run/snmpd.pid -c /etc/snmp/snmpd.conf'

Restart the SNMPD service
$ sudo /etc/init.d/snmpd restart
* Restarting network management services

Install SNMP on FreeBSD

Install net-snmp from the ports collection

# cd /usr/ports/net-mgmnt/net-snmp
# make install clean

edit /etc/rc.conf and add the following line:

snmpd_enable="YES"

edit /usr/local/share/snmp/snmpd.conf and add the following:

syslocation home (replace home with the name you would like to use)
syscontact me@here.com (put in the systems admin e-mail address)
rocommunity

public

 (replace with the read only name you would like to use)
rwcommunity private (change this to the writable password you would like to use)
master yes

Start the SNMP daemon

# /usr/local/etc/rc.d/snmpd.sh start

At this point, you up and running with a very basic snmp configuration. There's a handy utility called 'snmpconf' that can be run to help you generate the snmp.conf (optional) and snmpd.conf files. This will give you more options and help tighten up security.

Now, you should be able to snmpwalk your host using the following:
snmpwalk -v1 -c public 127.0.0.1

Change assigned key pair on amazon ec2 instance

2013-11-19T05:37:00.000+03:00

First create new key pair in Amazon.
then use puttykeygen to copy the public key, and also to generate private key from it (.ppk)
then just copy the public key to this location
/home/ubuntu/.ssh/authorized_keys

and before closing the ssh terminal, try to log in to the server using the new ppk file.

http://www.faultserver.com/q/answers-cant-change-assigned-key-pair-on-amazon-ec2-instance-310926.html

How Do I Block an IP Address on My Linux server?

2013-11-19T05:29:00.000+03:00

http://www.cyberciti.biz/faq/how-do-i-block-an-ip-on-my-linux-server/

Tomcat SSL Installation Instructions

2013-11-10T04:35:00.003+03:00

http://www.sslshopper.com/tomcat-ssl-installation-instructions.html

in my case, the certificate was stored in one of the servers, I just do two simple steps:

1- copy the certificate to /etc/tomcat7 folder

2- Configuring the SSL Connector

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="/etc/tomcat7/Taikeystore.pfx"
keystorePass="1234567"
keystoreType="PKCS12" />

Done

Using Apache Bench for Simple Load Testing

2013-11-10T04:08:00.000+03:00

http://www.petefreitag.com/item/689.cfm

Install Vmware tools in freebsd

2013-10-23T05:19:00.002+03:00

when there is problem installing Vmware tools by using Vmware ESXi v 4.1, you can install another version of vmware tools located in the following path:
/
usr/ports/emulators/open-vm-tools-nox11

Prevent access to some folders in your webserver

2013-10-23T05:01:00.002+03:00

To prevent access to some folder in you website, you need to do 2 simple steps:

first create .htaccess file in the folder you want to prevent, and place the following
Options -Indexes ----> this command will prevent listing all content inside the folder.

Second: make sure of AllowOverride
in httpd.conf file in apache for the folder that you want to prevent access to is set to All not None
i.e AllowOverride All

Receive error when i try to portmanager -u

2013-10-10T05:54:00.000+03:00

When I run portmanager -u, I receive the following errors:

------------------------------------------------------------------------
portmanager 0.4.1_9: Collecting installed port data
------------------------------------------------------------------------
2 open conditionals:
           at line 1131 (evaluated to true)
          at line 1131 (evaluated to true)
make: fatal errors encountered -- cannot continue
MGdbAdd error: attempt to place null data into record halted
Assertion failed: (0), function MGdbAdd, file MGdbAdd.c, line 78.
Abort (core dumped)

Sol: problem seems to have been resolved by 
re-building the ports tree. I did a 'portsnap extract' instead of the 
usual 'portsnap update'.

Error when try to install portmanager on Freebsd 8.1

2013-10-09T09:19:00.001+03:00

I receive error when I try to install portmanager from /usr/ports/ports-mgmt/portmanager/

the error related to tar command, so I replaced original tar port with another tar port from /usr/ports/archivers/libarchive

then I did the following to replace the old tar with new tar

# cd /usr/bin
# ls -l *tar
-r-xr-xr-x 1 root wheel 62904 Nov 30 2011 bsdtar
lrwxr-xr-x 1 root wheel 21 Nov 30 2011 tar -> /usr/bin/bsdtar
# rm tar
# ln -s /usr/local/bin/bsdtar tar
-r-xr-xr-x 1 root wheel 62904 Nov 30 2011 bsdtar
lrwxr-xr-x 1 root wheel 21 May 3 06:36 tar -> /usr/local/bin/bsdtar

just make sure before deleting old tar, that u installed another tar port.

the following link that helped me: http://forums.freebsd.org/showthread.php?t=39404

error when try to Install VMware Tools in Ubuntu server

2013-10-08T08:50:00.003+03:00

I faced a problem when I wanted to install VMware tools on Ubuntu Server 12.X, I have followed this article for how to setup vmware tools:
http://ghosttx.com/2012/03/how-to-install-vmware-tools-v4-on-ubuntu-11-10-server/

but after i run the command line to install the VMware tools I recieve error as follow:

A previous installation of VMware Tools has been detected.

The previous installation was made by the tar installer (version 4).

Keeping the tar4 installer database format.

You have a version of VMware Tools installed. Continuing this install will 
first uninstall the currently installed version. 
Do you wish to continue? (yes/no) [yes]

Error: Unable to execute "/usr/bin/vmware-uninstall-tools.pl.

Uninstall failed. Please correct the failure and re run the install.

Execution aborted.

then i searched google for similar error, and found many solutions, but hte one worked for me is:
sudo rm -R /etc/vmware-tools

from: http://askubuntu.com/questions/42687/cannot-install-vmware-tools

2013-10-03T02:56:00.003+03:00

I receive error when I try to # portsnap fetch extract

the solution was to run the following command:

# rm /var/db/portsnap/tag && portsnap fetch extract

Samba4.0.8 on FreeBSD 9.1 RELEASE--An Alternative to Windows Server

2013-10-01T19:28:00.001+03:00

Using my home Dynamic IP to Send & Receive Email through Exchange 2010 lab (Step By Step)

2013-09-23T19:41:00.001+03:00

Today I have successfully deployed a virtual exchange 2010 lab environment, the impressive thing that make me write this post that I used in the test my home dynamic IP to send and receive emails (nice isn't it !!).
So I decided to write documentation for the most difficult part (which is setting DNS records and setting Send And Receive connectors).
Good to mention that I have searched the Internet for Hours to find simple steps for doing it but unfortunately I didn't found any, actually I used my experience and my understanding for how emails routing works to succeed.

Next I will give brief description of the lab and steps I used:

First: I used VMware Workstation 9 as a virtualization platform.

Important Note: at the beggining I used Network NAT Mode, it works OK but I had a problem when I wanted to forward port from my router to the Exchange server (the router cannot forward to different subnet) , so I had found a solution to change the network setting from NAT to Bridged Mode. see figure below

so after choosing this option I end up with same network for my Host and VM's which was 192.168.1.0.

Second: I have created 3 VM's, 1st is Win Server 2008 R2 Domain controller, 2nd is Win Server 2008 Exchange 2010 server, and last is Win 8 client VM (domain user with Outlook 2010) .

Third: I have converted the first Win Server 2008 server to DC with a domain name as the email suffix I wanted .

Fourth: I have Installed all Windows Updates Before installing Exchange 2010, I will not list the steps I used to install the exchange 2010 because it is every where on the net.

Fifth: Of course your dynamic IP well change every few days so I had to find workaround, and I already used before Dynamic DNS which is really great (from http://www.dyndns.com)
so what I get from this website is a Fixed DNS name pointing to my Dynamic IP, then from my Router I login to my DDNS using user name & password (my router support DDNS, if not there is another solution which is downloading DDNS client to your Ex Server and login to the service)

After you press login you should see succeed word, otherwise you check what is the problem.

Sixth: I have purchased new Domain from GoDaddy Hosting which is matching my local domain name, actually nowadays the price of domains is so cheap, it cost me only 7 U$ Per Year (Can you Imagine :)

After I sign in to domain, I logged in to the control panel of my website and all I had to do is adding new MX record , which point to my Dynamic DNS (don't forget to make the new MX record the lowest priority which authorize it for receiving emails for your domain)
Note: (Forget about adding A records or CNames it is all make you confuse :)

There is useful website to see if your MX record was updated successfully after adding new one:
http://www.whatsmydns.net/#MX/
and amazingly the update was very very fast it took around 5 - 10 min only.

After Setting my DDNS and MX record I Forwarded port 25 (which is the default port for Mail Transfer Protocol) to my Exchange Server IP (192.168.1.11) as the below figure:

After doing this I had to test the port with the DDNS, so I had to telnet (from External network) as follow:
C:/>telnet dnsname.dyndns.info 25
and I successfully opened session with the exchange server.

So now, I have Exchange Server Installed and DNS settings configured, and my router also forwarding the incoming mail to my exchange server, then I had to create new email account and connect it to Outlook 2010, later I tried to send or receive email but with no luck (of course because I didn't make any changes on Send & Receive connectors).
So I used www.testexchangeconnectivity.com to test emails flow.
then I choose

Internet Email Tests
Inbound SMTP Email

and I inserted the email address I wanted to test and received the following error

5.7.1 Client was not authenticated

so I did littile search on Google I found the solution fast, which is to allow anonymous users setting in (Default Receive Connector)

After setting this on, I successfully received emails, but couldn't send emails, and this was the most difficult part of my Whole project.

After googling Hours and searching every where on the internet, I almost give up to use my current smtp server for sending emails, but I had the feeling that I was close to make it work, so after changing many many configuration of the Send Connector, it worked (I was Really Happy & surprised, because I am confident that no one (or few people) on the internet have done it the same way or by anyway.
anyway below is the screen shot of the send connector configurations I used:

Finish now Exchange 2010 can send and receive.

Great Isn't it.

VMware ESXi - Converting 'Thick' Provisioned Drives to 'Thin', and 'Thin' to 'Thick'

2013-08-13T09:42:00.002+03:00

http://www.petenetlive.com/KB/Article/0000579.htm

ncdu Utilities on Linux & FreeBSD

2013-07-23T07:01:00.003+03:00

I found very use full tool to calculate files & directories sizes in one cmd

To install on ubuntu:
#apt-get install ncdu

To install on FreeBSD:
#cd /usr/ports/sysutils/ncdu
#make clean install

After installing finish, just type ncdu to run the tool. ENJOY

how to reset domain admin password on a Windows Server 2008

2013-06-14T05:58:00.001+03:00

http://lordoftheping.blogspot.com/2009/05/i-did-not-use-my-tests-virtual-machines.html

MySQL - Resetting a lost MySQL root password

2013-05-29T09:14:00.002+03:00

http://www.rackspace.com/knowledge_center/article/mysql-resetting-a-lost-mysql-root-password

Moving WordPress to New Domain

2013-05-29T09:09:00.000+03:00

We've been asked to duplicate our websites, so we've done it as per the following steps:

1- Copy the applications to the new server
2- We dump all the DB needed.
3- We restore the DB on the new DB server, and give the appropriate privileges for DB users.
4- Then we configure httpd-vhosts files with the new domain names.

It was easy to do, but we wanted to change the old URL's for all the links inside the new domains to reflect the new domain name, so we used (Search Replace DB V.2) , this tools is fast and easy to use.

The main purpose of this tool is to change on the DB without effecting the serialization which can happen in transient values in WP at times, and it can also handle multi-byte Unicode changes safely. This is important now that internationalised domain names are allowed.

IT’S NOT ONLY FOR WORDPRESS

It’s worth mentioning that the code will work for any platform that stores PHP serialized arrays in a MySQL database. You can easily use this script on Drupal, Joomla and many other systems where you need to change items across a database without messing up your stored arrays.

you can download it from:
http://interconnectit.com/products/search-and-replace-for-wordpress-databases/

very useful info for moving wordpress sites from: http://codex.wordpress.org/Moving_WordPress