All About Networking...

Introduction to TCP/IP Layers

2014-04-18T03:57:00.003-07:00

TCP/IP Layers

Introduction
Computer communication follows some well defined rules and guidelines which we call protocols. In order for the computers to exchange data they have to agree on using the same rules, otherwise they become incompatible. That was the case in the past. This was one of the reasons to create a common model for communication. It was called OSI Model (Open Systems Interconnection). This was an attempt to make different vendor's computers exchange data easily. This way IBM machines could talk to DEC machines and so on. Today however, it is the TCP/IP model that is all-pervasive. This protocol suite is derived from OSI model and somewhat loosely follows its rules and terminology. This is going to be the focus of our discussion and the main topic of this lesson.

Note!
Remember that TCP/IP model does not follow OSI model exactly. OSI model is now used as a reference. What's described in this blog is TCP/IP model, not OSI or IPX/SPX model. Look at the comparison below:

TCP/IP Layers
The designers decided to break down the whole complexity of data exchange and created five layers of functions to accomplish the goal. This approach helps develop and modify certain layers of code without touching other layers. For instance, if you are an application programmer, you will be writing a code in the 'application layer' which allows you to use already written code dealing with the transport of data between computers. You do not even have to learn how this transport is done. It has already been written for you. This way, you focus on the application you're creating, what it does and how it works rather than learning about network adapter drivers, signaling and other gory, hardware details.

TCP/IP model divides the functions related to data transmission by using five distinct layers of responsibility. Below area these layers.

Layer 5-7 - Application
This is where the data's journey begins. Everyday, you use many applications that rely on network services. Those applications are classified to be layer 5 code. Your web browser and web server, mail client and mail server, ssh client and ssh server etc. You may have noticed the term client andserver often used in the above description. Pretty much all applications use this architecture.Client, is an application that requests some services from the server application. Server application is providing a client with what they want. A common example of that architecture is your Firefox orInternet Explorer web browser (client application) requesting a page from Apache or IIS web server (server application). Applications, in general, provide a User Interface (UI) which offloads us from a burden of knowing how a computer does things internally.

So, once your application formed the request, that one is sent down to the layer 4 (transport layer) asking for the delivery to the host somewhere in the network.

Layer 4 - Transport
This layer accepts all requests coming from the upper layer (application layer) and tries to organize the transport of that request across the network. In TCP/IP model this layer of software is responsible for:

Breaking down big files that are sent across into smaller chunks called segments. There are technology limitations that do not allow our computers to send large files in one piece. It would not be a good idea anyway as any small change of the data during transmission would make the sender re-transmit the whole file again instead of the smaller chunk only. That of course, would take more time and resources to successfully transmit the data.
As your computer uses many applications that will transmit something across the network at the same time, the system must know how to mark those request such that they are delivered to the right receiver applications. And once the replies are coming back, they should be delivered back to the same process that initiated them. The concept of the port number has been introduced to deal with that. Source and destination ports ensure that all requests and replies are delivered to the appropriate processes on the computers exchanging data. More on that later in the upcoming lessons.
This layer also allows the application to use connection-oriented or connectionlessservices. The former, establishes communication with the receiving computer (or more generally: destination host) before data can be exchanged, the latter will send data without ensuring that the destination application is running and willing to receive anything. This form of transmission is used primarily for voice and video applications.
This layer will also give applications some options in terms of the reliability. Depending on which layer 4 protocol the application is designed to use, the reception of data can be verified or not. That creates reliable versus unreliable transport respectively. In the reliable transport any data that has not been delivered will be retransmitted, unlikely the unreliable transport.
One other function of layer 4 could be to moderate the transmissions so that the receiving host is neither swamped by the excess of packets coming in nor is it waiting and doing nothing because the sender's speed of transmission is too slow. Majority of the functions above are performed by TCP protocol, not UDP as applications choose one of them to use.

Once all aspects and functions in this layer have been taken care of, layer 4 sends the data it received from layer 5 down to the layer 3 requesting its service.

Layer 3 - Internet
Upon receiving a request from layer 4, this code is going to process the incoming information. Since, typically we have more than one path between the sender (source) and the receiver (destination), the function of this layer is to find the best path between them. In order to accomplish that there are two concepts I need to introduce here.

Firstly, we need to know how computers find themselves in the network. This is accomplished by using specially designed, layer 3 addresses uniquely identifying computers in any network. The addresses used by this layer consist of four bytes delimited by the dots (e.g. 10.1.1.1) which are followed by a, so called, 'netmask' also consisting of four bytes with the dot used as the delimiter (e.g. 255.255.255.0). The whole IP address can look like this:
10.1.1.1 255.255.255.0. More on those later.

Secondly, because the destination of our data can be outside of our own network, a device calledrouter has been introduced to find the optimal paths between the different networks in which the computers reside. The data processed by layer 3 is called a packet or datagram. This layer also uses a mapping to the upper layer 4 that has requested its services. This is due to the fact that there are more than one protocols available in layer 4 (TCP or UDP). This information (which layer 4 protocol is sending the data) is going to be useful when the data arrives at the destination and the destination's layer 3 process needs to send the content to the appropriate layer 4 protocol for processing. It has to be the SAME protocol that the sender used in layer 4.

Layer 2 - Network Interface (Data Link in OSI model)
There is a great variety of technologies that handle data transmission on media such as copper and fiber optics cables or air (wireless). In order to offload the layer 3 protocols from learning all possible signaling methods, layer 2 was created. Thus, layer 3 can focus on finding the best path between the source and the destination, and the layer 2 functions will handle the details of preparing the data to be placed on the actual media (copper wire, fiber, air etc.). The piece of information processed at this layer is called a frame. This layer will also use specially designed addressing scheme to recognize the next device which a computer is sending the data to. For instance, in the commonly used layer 2 technology called Ethernet, this address uniquely identifying hosts in the same network is called MAC Address. The reason why we use different addressing schemes: layer 3 and layer 2, will become clearer when we get into some details of the actual data exchange. Please, bear with me till we reach the right lesson that explains it in more detail. The device that is capable of understanding the structure of a frame and delivers the data between the hosts in the SAME network is called bridge, or switch. As of the time of writing this, switches are very popular devices and bridges can be found mostly in museums.

Once the layer 2 has prepared the data which layer 3 requested to send, (the process is called 'framing'), layer 2 will send the request to layer 1 asking for the data to be placed onto the wire/fiber/air using the appropriate signaling method.

Layer 1 - Network Interface (Physical Layer in OSI)
This layer receives requests from layer 2 (data traveled from layer 5 to layer 1 now). The physical layer is going to encode data received from layer 2 software and place them in the form of bits (1s and 0s) on the medium. This way, ones and zeros travel across the media to deliver them to their receipient. The bits can traverse multiple devices as they go across such as hubs, switches, routers. What type of devices will forward those bits depends on the design of the network. The devices referred to as layer 1 devices are hubs, cables, network adapters, connectors,transceivers etc. Also the data processed by this layer is called bits. This layer defines low level aspects of the transmission such as cables used, maximum distance the cable can reliably sent bits across, types of the connectors, speed of the transmissions etc.

Firewall Security-Level

2014-04-18T03:38:00.002-07:00

Firewall Security-Level

This is my first Security Post regarding Cisco PIX/ASA firewalls. To begin with, what is a firewall? Literally, in the real world, a firewall as part of a building, is used to you guessed it: protect the building from fire. :) The same applies in the networking world. A firewall is a device that prevents unauthorized access and permits authorized access to a network. A firewall may function for packet filtering, proxy server and stateful packet filtering. Cisco PIX/ASA devices function as stateful packet filtering devices, which builds a stateful connection table to verify the connections.

A firewall prevents access from the untrusted network to the trusted network. An interface of the firewall may belong to the untrusted or the trusted. The interface that belongs to the trusted network is often called the inside interface and the untrusted one is the outside interface. Security-levels from 0-100 indicates the level of trust for an interface. The higher the number the more trusted the interface. The rule in security-level is that a higher security level can have access to a lower security level, the lower security level doesn't have access to a higher security level and is blocked by default. Interfaces with the same security levels are blocked as well.

Let's configure interfaces and lets see how security-levels are applied automatically and manually. I am using a PIX firewall.

First lets configure an outside interface.


petesfirewall(config)# interface ethernet0
petesfirewall(config-if)# nameif outside
INFO: Security level for "outside" set to 0 by default.

The "nameif" command is basically used to name an interface. Very obvious isn't it?:) Notice that once we named the interface "outside", Cisco automatically set the security-level to 0 meaning its untrusted. Next we configure an inside interface.


petesfirewall(config-if)# interface ethernet1
petesfirewall(config-if)# nameif inside
INFO: Security level for "inside" set to 100 by default.

The PIX now configures the security level by 100 which means its a trusted interface. For this reason, traffic from ethernet1 to ethernet0 is permitted by default but traffic from ethernet0 to ethernet1 is not. This is where inbound access-list comes in to allow traffic from an untrusted interface to a trusted one.

Let us now configure an interface named "webservers". You can use any name you like by the way. Let's give it a security-level of 60.


petesfirewall(config-if)# interface ethernet2 
petesfirewall(config-if)# nameif webservers
INFO: Security level for "webservers" set to 0 by default.
petesfirewall(config-if)# security-level 60

Notice that any interface name other than "inside" is automatically given a 0 security-level value. The "security-level" command is used to specify manually a security level to an interface. Ethernet2 by default can access Ethernet0 but can't access Ethernet1, because the latter has a higher security-level than the former. The "show nameif" command is a very useful command to display the names of the interfaces including the security-levels.


petesfirewall(config)# show nameif 
Interface                Name                     Security
Ethernet0                outside                    0
Ethernet1                inside                   100
Ethernet2                webservers                60

As you can see, in the PIX firewall the show command is accepted unlike in the routers which doesn't accept show commands in the global-configuration mode. For those have been configuring routers, adapting to configuring firewalls would be easy. After all, its still Cisco. :)

Finally, sometimes there is a need to allow access to interfaces with the same security-level. The command below, will allow such access.


petesfirewall(config)# same-security-traffic permit inter-interface

There you have it. Its easy as one, two, three. Good day homies!

Router as a DNS server

2014-04-18T03:35:00.001-07:00

Cisco Router as a DNS server

Not exactly like a DNS server that is hosted from a server and so on and so forth, the Cisco Router can act like a DNS server without the service stated above. It can even act as a proxy dns server, meaning forwarding the request to the upstream DNS server and cache the replies from the DNS server, so it can use the cache entries for other requesting hosts. We will only focus on the simple and practical configuration. I don't even know if this feature can be called a "DNS server" feature. :P If you have your own Dynamips Lab and has fixed ip addresses, it would be easier though to use hostnames when trying to ping devices. This can be achieved by the "ip host" command. It can be configured as the example below.


Router(config)#ip host R1 1.1.1.1
Router(config)#ip host R2 2.2.2.2
Router(config)#ip host R3 3.3.3.3
Router(config)#ip host R4 4.4.4.4

Let's do a ping test.


Router#ping R1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
...

Well, R1 now resolves to 1.1.1.1. There you have it, makes life easier !

VRF Route Target

2014-04-18T03:30:00.001-07:00

VRF Route Target

MPLS VPN implementation requires VRF and also exporting and importing routes for that VRF. I mentioned on my previous posts about VRF that the VRF name is locally significant and even the RD number. What counts is what you import and export. Importing and exporting route targets use the same syntax as the RD and it is ASN:NN as shown by the example below.

!
ip vrf ALL-VRF
rd 123:4
route-target export 123:4
route-target import 123:1
route-target import 123:2
route-target import 123:3

By definition the routes that you "export" are only the routes you advertise on the vrf address family in BGP. The routes that you import are the cummulative routes with the same label that were exported from the other routers participating in the MPLS VPN. Remember that you don't export what you have learned through importation. Check the diagram below and the scenario we need to accomplish in this lab.

Scenario Conditions:

1. EMEA should have full ip reachability to APAC and AMERICAS but APAC and AMERICAS should not see each other.
2. RR should only see the all the routes but will not be seen by the routers.

I have setup everything and configured MPLS as well. I have configured the clients on the RR on both ipv4 and vpnv4 address-families. The command "show ip bgp vpnv4 all sum" on the RR should show that its learning prefixes from the clients.

RR#sh ip bgp vpnv4 all sum
BGP router identifier 123.123.123.4, local AS number 123
BGP table version is 13, main routing table version 13
12 network entries using 1644 bytes of memory
12 path entries using 816 bytes of memory
4/3 BGP path/bestpath attribute entries using 496 bytes of memory
3 BGP extended community entries using 72 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 3028 total bytes of memory
BGP activity 12/0 prefixes, 12/0 paths, scan interval 15 secs

Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
123.123.123.1   4   123      52      57       13    0    0 00:40:41        2
123.123.123.2   4   123      53      61       13    0    0 00:41:26        2
123.123.123.3   4   123      43      44       13    0    0 00:36:44        2

We can clearly see that its learning prefixes in the vpnv4 but will not put those routes in the routing table until it has been imported in one of the VRF's. In our case, I have configured vrf ALL-VRF in RR and imported all the route-targets 123:1, 123:2 and 123:4. In a VRF you can export and import as many route-targets as needed. Lets see if RR can see the routes now

RR

!
ip vrf ALL-VRF
rd 123:4
route-target export 123:4
route-target import 123:1
route-target import 123:2
route-target import 123:3

RR#sh ip route vrf ALL-VRF

Routing Table: ALL-VRF
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
   D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
   N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
   E1 - OSPF external type 1, E2 - OSPF external type 2
   i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
   ia - IS-IS inter area, * - candidate default, U - per-user static route
   o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

 1.0.0.0/32 is subnetted, 1 subnets
B       1.1.1.1 [200/0] via 123.123.123.1, 00:46:26
 2.0.0.0/32 is subnetted, 1 subnets
B       2.2.2.2 [200/0] via 123.123.123.2, 00:46:26
 33.0.0.0/32 is subnetted, 1 subnets
B       33.33.33.33 [200/0] via 123.123.123.3, 00:46:26
 3.0.0.0/32 is subnetted, 1 subnets
B       3.3.3.3 [200/0] via 123.123.123.3, 00:46:26
 22.0.0.0/32 is subnetted, 1 subnets
B       22.22.22.22 [200/0] via 123.123.123.2, 00:46:26
 11.0.0.0/32 is subnetted, 1 subnets
B       11.11.11.11 [200/0] via 123.123.123.1, 00:46:28
 123.0.0.0/32 is subnetted, 1 subnets
C       123.123.123.14 is directly connected, Loopback40

Ok, we have meet the first condition. RR is now able to see the routes exported by the RR clients. They won't see the route advertised in RR because the clients are not even importing that route. Full reachability in MPLS VPN requires that one router's exported route-target should be imported by another and vice-versa, otherwise you can only see the route but you won't be able to reach it. The networks should be in the corresponding VRF routing table of the routers.

To illustrate this point, let's configure the second scenario. Below are the VRF configurations on the 3 clients.

APAC#

!
ip vrf APAC
rd 123:1
route-target export 123:1
route-target import 123:3

AMERICAS#

!
ip vrf AMERICAS
rd 123:2
route-target export 123:2
route-target import 123:2

EMEA#
!
ip vrf EMEA
rd 123:3
route-target export 123:3
route-target export 123:2
route-target import 123:1
route-target import 123:2

APAC is exporting route-target 123:1 and its importing 123:3 which is exported by EMEA. EMEA on the other hand is importing 123:1 and exporting 123:3. There should be full ip reachability between the two. By the way the route-target ID doesn't necessarily match with the RD. Normally for networks that should see each other in MPLS VPN both the export and import route target ID's are the same. It will get rid of any unnecessary confusion created by using different RT ID's. Take into consideration AMERICAS and EMEA routers. As you can see on the config above, AMERICAS is importing and exporting 123:2. One command can generate the both export and import and that is "route-target both 123:2". EMEA is importing and exporting also 123:2 which means they will reach each other. Let's test if we have accomplished the condition, we will show the routing table in APAC and AMERICAS and let's ping the networks in EMEA. The ping should be sourced on the loopback interfaces where we configured the VRF's.

APAC#sh ip route vrf APAC

Routing Table: APAC
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
   D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
   N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
   E1 - OSPF external type 1, E2 - OSPF external type 2
   i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
   ia - IS-IS inter area, * - candidate default, U - per-user static route
   o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

 1.0.0.0/32 is subnetted, 1 subnets
C       1.1.1.1 is directly connected, Loopback0
 33.0.0.0/32 is subnetted, 1 subnets
B       33.33.33.33 [200/0] via 123.123.123.3, 01:04:51
 3.0.0.0/32 is subnetted, 1 subnets
B       3.3.3.3 [200/0] via 123.123.123.3, 01:04:51
 11.0.0.0/32 is subnetted, 1 subnets
C       11.11.11.11 is directly connected, Loopback10

APAC#ping vrf APAC 3.3.3.3 source lo0


Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
Packet sent with a source address of 1.1.1.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 248/346/436 ms


AMERICAS#sh ip route vrf AMERICAS

Routing Table: AMERICAS
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
   D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
   N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
   E1 - OSPF external type 1, E2 - OSPF external type 2
   i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
   ia - IS-IS inter area, * - candidate default, U - per-user static route
   o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

 2.0.0.0/32 is subnetted, 1 subnets
C       2.2.2.2 is directly connected, Loopback0
 33.0.0.0/32 is subnetted, 1 subnets
B       33.33.33.33 [200/0] via 123.123.123.3, 00:56:20
 3.0.0.0/32 is subnetted, 1 subnets
B       3.3.3.3 [200/0] via 123.123.123.3, 00:56:20
 22.0.0.0/32 is subnetted, 1 subnets
C       22.22.22.22 is directly connected, Loopback10

AMERICAS#ping vrf AMERICAS 3.3.3.3 source lo0

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
Packet sent with a source address of 2.2.2.2
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 184/593/1020 ms


EMEA#sh ip route vrf EMEA

Routing Table: EMEA
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
   D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
   N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
   E1 - OSPF external type 1, E2 - OSPF external type 2
   i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
   ia - IS-IS inter area, * - candidate default, U - per-user static route
   o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

 1.0.0.0/32 is subnetted, 1 subnets
B       1.1.1.1 [200/0] via 123.123.123.1, 00:00:00
 2.0.0.0/32 is subnetted, 1 subnets
B       2.2.2.2 [200/0] via 123.123.123.2, 01:07:06
 33.0.0.0/32 is subnetted, 1 subnets
C       33.33.33.33 is directly connected, Loopback10
 3.0.0.0/32 is subnetted, 1 subnets
C       3.3.3.3 is directly connected, Loopback0
 22.0.0.0/32 is subnetted, 1 subnets
B       22.22.22.22 [200/0] via 123.123.123.2, 01:07:06
 11.0.0.0/32 is subnetted, 1 subnets
B       11.11.11.11 [200/0] via 123.123.123.1, 00:00:03

It will take a while to get used to VRF Route-target if you are just learning it but this should be pretty easy. Remember, you can't reach a network that you have imported unless it exported your network. In MPLS VRF, entries in your VRF routing table doesn't assure reachability, the router in the destination network should also have your network in its VRF routing table. Ok, we are done !

IPSEC VPN Configuration

2014-04-18T03:29:00.003-07:00

IPSEC VPN Configuration

IPSEC VPN's have revolutionized the networking world. It is usually used over the unsecured network called "the Internet". It's a way to ensure secure transfer of data over the internet and used for site to site connections and telecommuters who need remote access from anywhere to the corporate Intranet or for remote branch offices that only have internet connection. We have a basic diagram below and lets configure a Site to Site IPSEC VPN. We will focus more on configuration not on the nitty gritty details of the protocols and the process of VPN creation.

Let's pretend ISP is the Internet Cloud. We have R1 and R2 connected through an internet leased line to their ISP's. Lets say R2 has a server 2.2.2.2 which R1 needs to access from 1.1.1.1 in its network. (1.1.1.1 and 2.2.2.2 are just loopback addresses in R1 and R2 respectively) We will build a VPN tunnel allowing 1.1.1.1 to access 2.2.2.2 and vice versa. Steps are numbered but not necessarily the standard way but a more favorable way of configuring.

1. Create an access-list on both R1 and R2. This will indicate the "interesting traffic". This means that anything that matches the ACL applied to the tunnel configuration will pass through the tunnel instead of exiting the interface facing the internet.

R1(config)#access-list 100 permit ip host 1.1.1.1 host 2.2.2.2
R2(config)#access-list 100 permit ip host 2.2.2.2 host 1.1.1.1

Notice that the ACL's mirror each other.

2. Configure an ISAKMP key. This key will be used to generate more keys for VPN tunnel creation and must match between the peers.


R1(config)#crypto isakmp key 0 myvpnrouter address 192.168.20.1
R2(config)#crypto isakmp key 0 myvpnrouter address 192.168.10.1

The ip address at the end of the command is the IP address of the peer router.

3. Create an ISAKMP policy. The policy components like hashing, authentication, Diffie-Helman group, and lifetime must match. You can configure many different policies and the routers will check the ISAKMP policy until it finds a match of its own. It is checked sequentially by using policy sequence numbers. ISAKMP negotiation is also called Phase 1.


R1(config-isakmp)#crypto isakmp policy 10
R1(config-isakmp)#group 2
R1(config-isakmp)#hash md5
R1(config-isakmp)#lifetime 28800
R1(config-isakmp)#encryption aes
R1(config-isakmp)#authentication pre-share

R2(config-isakmp)#crypto isakmp policy 10
R2(config-isakmp)#group 2
R2(config-isakmp)#hash md5
R2(config-isakmp)#lifetime 28800
R2(config-isakmp)#encryption aes
R2(config-isakmp)#authentication pre-share

4. Configure Phase 2 which are IPSEC parameters.


R1(config)#crypto ipsec transform-set TRANSFORMERS esp-3des esp-sha-hmac
R1(config)#crypto ipsec security-association lifetime seconds 28800
R2(config)#crypto ipsec transform-set TRANSFORMERS esp-3des esp-sha-hmac
R2(config)#crypto ipsec security-association lifetime seconds 28800

Configure a crypto map.


R1(config)#crypto map MYMAP 10 ipsec-isakmp
% NOTE: This new crypto map will remain disabled until a peer
        and a valid access list have been configured.
R1(config-crypto-map)#match address 100
R1(config-crypto-map)#description to R2
R1(config-crypto-map)#set transform-set TRANSFORMERS
R1(config-crypto-map)#set peer 192.168.20.1
R1(config-crypto-map)#set security-association lifetime seconds 28800

R2(config)#crypto map MYMAP 10 ipsec-isakmp
 % NOTE: This new crypto map will remain disabled until a peer
         and a valid access list have been configured.
R2(config-crypto-map)#match address 100
R2(config-crypto-map)#description to R1
R2(config-crypto-map)#set transform-set TRANSFORMERS
R2(config-crypto-map)#set peer 192.168.10.1
R2(config-crypto-map)#set security-association lifetime seconds 28800

5. Apply the Crypto map to the outgoing interface.


R1(config)#int se1/1
R1(config-if)#crypto map MYMAP
R1(config-if)#
*Jul 11 13:05:47.007: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is ON

R2(config)#int se1/2
R2(config-if)#crypto map MYMAP
R2(config-if)#
*Jul 11 13:05:47.007: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is ON

6. Make sure you have a route towards the peer vpn router public ip. In our case lets create a default route.


R1(config)#ip route 0.0.0.0 0.0.0.0 192.168.10.10 name To_R2
R2(config)#ip route 0.0.0.0 0.0.0.0 192.168.20.20 name To_R1

7. Finally lets test the connection. The tunnel won't come up until there is interesting traffic passing through the tunnel. Any traffic that will hit the access-list we matched in the crypto-map will trigger the tunnel negotiation. In our case lets ping 2.2.2.2 from R1 sourcing from the Loopback interface 1.1.1.1. In the ISP router, I have configured a route for the 2 loopback addresses.


ISP(config)#ip route 2.2.2.2 255.255.255.255 192.168.20.1
ISP(config)#ip route 1.1.1.1 255.255.255.255 192.168.10.1

R1#ping 2.2.2.2 source 1.1.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 1.1.1.1
!!!!!

To verify if the tunnel is up and running, lets use the "show crypto isakmp sa" to check Phase 1 status.


R1#sh cry isakmp sa
dst             src             state          conn-id slot status
192.168.20.1    192.168.10.1    QM_IDLE              1    0 ACTIVE

QM_IDLE means that the tunnel is up. If the state is not that, that means that there is a problem.

"Show crypto ipsec sa" displays Phase 2 information which includes the number of packets that used the tunnel and the source and destination IP. Thats it for the configuration. For more detailed information on the VPN negotiation process visit this link. Cheers

HSRP Configuration (new..!)

2014-04-16T22:50:00.006-07:00

Packet Tracer 6.0 - HSRP Configuration

What is HSRP ?

HSRP (Hot Standby Router Protocol) is a redundancy protocol for setting up a fault-tolerant default gateway in a LAN environment. This is a Cisco proprietary protocol. The standard protocol is VRRP (Virtual Router Redundancy Protocol)

The primary router with the highest configured priority operates as a virtual router with a virtual gateway IP address.

It responds to the ARP request from PC or servers connected to the LAN with the MAC address 0000.0c07.acXX where XX is the HSRP group ID (converted to an hexadecimal value). If the primary router should fail, the Cisco router with the next-highest priority available in the LAN segment would take over the gateway IP address and answer ARP requests with the same mac address, thus achieving transparent default gateway fail-over.

HSRP in Packet Tracer 6.0

HSRP is a new feature of Packet Tracer 6.0 . This protocol can be configured on every Cisco router available in Packet Tracer as well as on Cisco Catalyst 3560 layer 3 switch.

The following IOS commands are available :

standby <0-4095> ip Enable HSRP and set the virtual IP address
standby <0-4095> preempt Overthrow lower priority Active routers
standby <0-4095> priority Priority level
standby <0-4095> timers Hello and hold timers
standby <0-4095> track Priority Tracking

HSRP configuration using Cisco 2911 ISR routers

Two network are configured for this tutorial :

Network 192.168.1.0/24
- Router0 : 192.168.1.2 (GigabitEthernet 0/0)
- Router1 : 192.168.1.3 (GigabitEthernet 0/0)
Network 192.168.2.0/24
- Router0 : 192.168.2.2 (GigabitEthernet 0/1)
- Router1 : 192.168.2.3 (GigabitEthernet 0/1)

Two HSRP groups are configured on the ISR routers :

HSRP Group 1 :
- IP address : 192.168.1.1
- Router0 with priority 120 (preemption enabled)
- Router1 with HSRP default priority (100)
HSRP Group 2 :
- IP address : 192.168.2.1
- Router0 with priority 120 (preemption enabled)
- Router1 with HSRP default priority (100)

Routers configuration

Router0 configuration	Router1 configuration
interface GigabitEthernet0/0 ip address 192.168.1.2 255.255.255.0 duplex auto speed auto standby version 2 standby 1 ip 192.168.1.1 standby 1 priority 120 standby 1 preempt ! interface GigabitEthernet0/1 ip address 192.168.2.2 255.255.255.0 duplex auto speed auto standby version 2 standby 2 ip 192.168.2.1 standby 2 priority 120 standby 2 preempt	interface GigabitEthernet0/0 ip address 192.168.1.3 255.255.255.0 duplex auto speed auto standby version 2 standby 1 ip 192.168.1.1 ! interface GigabitEthernet0/1 ip address 192.168.2.3 255.255.255.0 duplex auto speed auto standby version 2 standby 2 ip 192.168.2.1

Preemption is configured on Router0 using the standby X preempt commands. This router will always assume HSRP active state when it's online and if it has the highest HSRP priority in the network. The same configuration without the standby x priority 120 configuration on Router0 does not work and Router1 assumes the active state because it has a higher IP address configured.

Testing the configuration

Router0 is active for both HSRP groups. Both routers detected each other correctly but the priority seems to be wrong (Standby router is 192.168.1.3, priority 120 should be Standby router is 192.168.1.3, priority 100 on Router0)

Ping, traceroute and arp commands issued on Laptop0 confirms that the configuration is working. The IP packets are transiting through Router0 (192.168.1.2)

Known bug

HSRP can be configured the same way on Cisco 3750 multilayer switch vlan interfaces in Packet Tracer 6.0.1.

interface Vlan100
ip address 192.168.1.2 255.255.255.0
standby version 2
standby 1 ip 192.168.1.1
standby 1 preempt
!
interface Vlan200
ip address 192.168.2.2 255.255.255.0
standby version 2
standby 2 ip 192.168.2.1
standby 2 preempt

However :

Laptops can't ping the HSRP IP addresses configured on the multilayer switches
The packets are not forwarded between the 2 laptops if the HSRP address are the default gateways configured on both pc.

Cisco paket tracer 6 latest

2014-04-16T22:25:00.000-07:00

Cisco Packet Tracer v6.0. 1

Cisco Packet tracer is a powerful network simulation tools, which helps a network engineer to design a network virtually. Recently updated their version. The previous version was 5.3.3. That version didn’t support IP v 6, but this version support IP v 6. Also some other essential elements you can get easily. This is really awesome. Hope that you can enjoy with it.

Here I’m providing download link of Cisco Packet Tracer 6.0.1 for windows.

Download (no tutorials)

Download (with tutorials)

How to Protect Yourself from Keyloggers in Windows Oprating Systems

2014-01-27T22:32:00.002-08:00

How to Protect Yourself from Key loggers in Windows operating systems

Keylogging is a shortened form of “keystroke logging.” Keystroke refers to recording the keys pressed on the keyboard of a computer. Although not always, this technique is usually used for malicious purposes. The software used for the recording of keystrokes are called keyloggers.

Since it is mostly used for malicious purposes, this calls for you to finds ways to protect yourself from keyloggers and their intent to destroy your computing experience.

Types of Keyloggers

There are different types of keyloggers based on how they perform the recording of keyboard key presses. Let’s look into the types of keyloggers before moving further.

Hypervisor-based keyloggers

Kernel-based keyloggers

API-based keyloggers

Memory-injection keyloggers

Form-grabbing keyloggers

Form-grabbing keyloggers are the most common ones because of their web-based nature. These keyloggers will grab the data which is input into a web form on any browser and will even work in a secure HTTPS-based connection. The browser does not know about the data theft, as the data is first copied by the keylogger and then passed over to the web browser.

Since Windows 8 includes a very basic antivirus, Windows Defender, most users don’t feel a need for a stronger security suite that may slow down their computers. For those that do, however, the following are three choices to help protect yourself from keyloggers. You can also download Windows 8.1 Preview which will offer better security and features to the users. You can upgrade to the latest Windows Update when a stable version becomes available through Windows Update.

KeyScrambler

KeyScrambler is a wonderful free anti-keylogging software that can be used for protecting against web-based keyloggers. While you can have a complete Internet security suite for keeping yourself safe from most of the Internet threats, it does come with a cost. Most of the Internet security suites are not free and are prone to taking huge system resources while operating.

KeyScrambler resource usage is almost negligible. I have been using KeyScrambler for a few days and have yet to fall into any performance problems. There are two executables running in the Process Manager. Both of them take about three to four MB of memory with almost no processor usage.

Setting up KeyScrambler for protection

KeyScrambler can be downloaded from here. The installation procedure is quite simple and follows the standard app installation procedure on Windows.

I like the way KeyScrambler handles the screen space. While the keyboard is being used on a web browser, it will show an overlay window on the top center of the screen, and when you finish writing, the window disappears saving space and time. The overlay window displays the encrypted version of text being typed by the keyboard. If a keylogger is active, it will get the encrypted form of keyboard key presses.

If the overlay window is being shown, it is the confirmation that KeyScrambler is working and encrypting the keyboard presses.

Right clicking on the system tray icon will allow you to enable or disable the KeyScrambler functionality. You can also use the default hotkey for this purpose which is Ctrl + Shift + K. The hotkey can be customized in Options under the General tab.

You can also change the overlay window in Options under the Display tab.

In the advanced Tab of Options, you can select whether to encrypt the Space key or not and supporting East Asian language input.

KeyScrambler encrypts the key strokes on a driver level, it becomes almost impossible for keyloggers to bypass KeyScrambler. The overlay window will show you the encrypted text while you are typing. The keyloggers will get the encrypted text which will be unreadable for anyone.

I have been using KeyScrambler for some days and have been completely satisfied with it. It is unobstrusive and works seamlessly with all browsers. The only issue I had was using KeyScrambler along with KeePass, a password manager. If you are using auto typing feature of KeePass, the text typed into the text boxes will be encrypted by KeyScrambler, so you will need to manually copy the text fields from KeePass and paste them into the browser.

Lock A Windows PC Without Locking The Screen

2014-01-14T23:46:00.001-08:00

Lock A Windows PC Without Locking The Screen

If you are watching a movie or having a video chat with your family or friends in a group and don’t want anyone to disturb the screen through keyboard or mouse, KeyFreeze is the right app for you.

KeyFreeze locks the keyboard and mouse without locking the computer screen. Normally when we lock a PC, the screen changes to a locked one where we have to enter the password again in order to use the PC again. KeyFreeze gets rid of this situation and freezes the mouse and keyboard while leaving the screen open to make sure that no one can alter anything without your own intent.

Installing and using KeyFreeze

KeyFreeze is such a small utility that it should not have an installer but the publisher has packed KeyFreeze in an installer. The setup comes in an online installer which will download and install the actual program upon execution.

The interface of KeyFreeze is very simple as it comes only with one button, “Lock Keyboard & Mouse“. You can click on the button to lock the keyboard and mouse while keeping the screen open. When you press the Lock keyboard and mouse button, it will lock the screen after 5 seconds.

One thing to note here is that if you are running KeyFreeze as administrator, it will not ask you about running the app otherwise it will ask for admin permissions.

To unlock the keyboard and mouse, just press Ctrl + Alt + Del. This will release the keyboard and mouse immediately. You can press the Back button to proceed if you are using Windows 8.

Backup Gmail And Yahoo Emails On Your Computer..!

2014-01-14T23:45:00.001-08:00

Backup Gmail And Yahoo Emails On Your Computer

Gmail is a popular email service providing email services to millions of users around the world. Gmail has a lot of features but there is no direct way to download and backup email from Gmail on our local computers. Gmail, however, offers POP3 and IMAP functionality which lets us download the email locally using any email client like Microsoft Outlook or Mozilla Thunderbird.

MailStore Home can backup your email

MailStore Home is a free portable app that enables you to archive all the emails from multiple email accounts in a centralized archive. MailStore Home is free for personal use and can be installed in Windows or used as a portable app. If you are running it as a portable app, it will be able to backup your email accounts on a USB flash drive making it possible for your to take your backup anywhere with you.

Features

MailStore Home provides a text searching function by which you can search your backed up and archived emails in seconds.
It provides a central email backup and management system unlike POP3 which only downloads email from your inbox.
It supports several sources including Gmail, Yahoo Mail, Microsoft Outlook, Outlook Express, Exchange Server mailboxes, Office 365, Mozilla Thunderbird etc.
Can even backup large amounts of email very conveniently without data loss or corruption.
All archived emails can be restored. This feature is essentially great for migrating emails from one account to another.
It can be installed on a PC as well as on a USB flash drive as a portable app.

Installation and usage

When you start MailStore Home setup for installation, it will ask you whether to install it on the computer or as a portable app on any USB drive, hard drive or a specific folder. And that’s it. This is the only configuration you will need for installation.

To start backing up your email, you will need to click on Archive Email button. You will need to create a new profile by entering your email address.

To backup your gmail account, just click on the Advanced button and select Google
Mail. Please note that you will need to enable POP3/IMAP in your Gmail settings in order for MailStore Home to backup the emails. On the next screen you will get some configuration options related to backing up emails from your Gmail account.

Clicking on the Finish button will automatically create a new profile for you. You can select the profile and run it to backup your email according to the settings you have configured before.

Unlimited Cloud Storage Space

2014-01-08T22:54:00.000-08:00

Tired Using Limitd & Many More Cloud Storage Services....?? Here Is Solution... Unlimited Storage Space

Online cloud storage and synchronization has become a necessity and up until now, Dropbox is the easiest, the best and the most popular online storage service with instant synchronization option. With the boom in online storage and cloud computing, lot of companies are offering cloud storage solutions including Google which is offering Google Drive or Microsoft which is offering SkyDrive. Other companies include Bitdefender which is offering Safebox. All these companies offer a small amount of storage for free and if you need more storage, you’ll need to go for a paid package of the cloud storage solution. In the previous year, I have already reviewed 3 free online storage solutions which includes Dropbox, Windows Live Mesh (Now SkyDrive) and SpiderOak.

Today I want to talk about a free alternative to Dropbox or any other similar service with a distinction that it offers unlimited storage option. It is not limited to a few GBs of storage but now you can synchronize and backup Terabytes of your important data including audio and video.

Yes, I’m talking about Bitcasa, a new cloud storage service which offers unlimited storage for free. You will only need to register for an account on Bitcasa and follow the steps below in order to start using Bitcasa unlimited storage.

Download Bitcasa client for Windows, Linux or Mac and install it on your computer. The installation process is straight forward and does not require any configuration.
Signup for an account of Bitcasa. You can also signup with your Facebook or Twitter account.
When you start Bitcasa client for the first time, you’ll need to login to your account that you had registered in step two.
Bitcasa sits in your system tray. You can right click the icon and select “Show Bitcasa” in order to open the client.
In the left hand pane, select Add and then select the folder you want to backup in the cloud.
After selecting the folder, you will get three options: Infinite Storage, Sync and Backup

Infinite storage: The folder will appear in the computer as normal folder but it will be streamed from Bitcasa cloud storage. The folder will remain virtually unlimited in size.
Sync: The folder will be synchronized between different devices and the data will also remain safe on Bitcasa servers.
Backup: The folder will be backed up regularly on Bitcasa cloud storage. The folder will also stay in the local computer as well as on the cloud storage.
This is all. Bitcasa client will work to automatically synchronize all the selected folders according to your choice. You don’t need to do anything else.

Tip: You can also right click any folder and select the Bitcasa options in order to synchronize the folder immediately. This will save you from step 6.

I have been using Bitcasa storage for a while now and haven’t came across any issues yet. The best thing about this service is that it is offering unlimited storage absolutely free of cost. Which cloud storage services are you using right now? Will Bitcasa replace your current service? Please share your thoughts in comments below.

Setup A New Account - Microsoft Outlook 2007

2013-11-13T23:41:00.002-08:00

Setup A New Account - Microsoft Outlook 2007

Open Microsoft Outlook 2007.

At the top of the page click on the 'Tools' menu and then select 'Account Settings...'.
Tools > Account Settings...

Auto Account Setup
Check the box at the bottom for 'Manually configure server settings or additional server types'.
Note: at this point, depending on whether the user has setup a previous account in Outlook, the next couple screens may very in order but they are nearly identical, just confirm with the user which menu they are viewing.

The key point is that they check the box to 'Manually configure server settings or additional server types' and select the type of email service for the account (POP/IMAP). They will see either the 'Choose Email Service' (POP, IMAP, HTTP) or the user's settings window with 'Manually configure server settings or additional server types'.

Choose E-mail Service
Choose the E-mail Service: Put a dot in 'Internet Email' (or in 'Microsoft Exchange, POP3, IMAP, or HTTP' depending on the screen user is viewing).

Make sure that your settings look like the settings shown in this screenshot.
The following are the most important:

Your Name: Your Name (eg. John Smith)
E-mail Address: email@domain.tld (eg. john@test.com
Incoming mail server (POP3): mail.domain.tld (eg. mail.test.com)
Outgoing mail server (SMTP): mail.domain.tld (eg. mail.test.com)
User Name: email.domain.tld (eg. john.test.com NOT john@test.com)
Password: The one you specified in your EasyMail Setup (8 characters maximum).
Once your settings look like the settings shown in this screenshot, click on the 'More Settings...' button in the bottom right hand corner.

Internet E-mail Settings
Click the 'Outgoing Server' tab at the top of the screen.

Outgoing Server
Put a checkmark in 'My outgoing server (SMTP) requires authentication' and make sure that the dot is in 'Use same settings as my incoming mail server'.

Advanced
Click on the 'Advanced' tab at the top.

Make sure that your settings look like the settings shown in this screenshot.

Click the 'OK', 'Next' and then 'Finish' buttons and now you should be able to send and receive email.

Xcode 5 Developer Preview 4 + Tools Mac OS X

2013-08-06T01:56:00.002-07:00

Xcode 5 Developer Preview 4 + Tools Mac OS X

Xcode 5 Developer Preview 4 + Tools Mac OS X | 1.83 GB
Xcode is the complete toolset for building Mac apps and iOS apps and with Xcode 5, the tools do more than ever to help you create fast, efficient, high-quality apps. Xcode automatically configures your apps to use the latest Apple services, manages your many images in a unified asset catalog, and helps you design an app that looks gorgeous on iOS 7 or OS X Mavericks. Xcode 5 makes it incredibly easy to create and run tests, analyze your code, and monitor performance. And with access to continuous integration baked right in, your team can create better apps than ever before.

Automatic Configuration

Xcode 5 automatically configures your app to enable Apple services such as iCloud, Passbook, or Game Center, directly within the IDE. The new capabilities editor makes it as easy as flipping a switch to enable Apple services. Simply enter your Apple ID, and Xcode will manage your teams, certificates, and entitlements for you. Xcode will add the proper frameworks, create the appropriate provisioning profiles and entitlements, and sign your app automatically when you click Run.

Test Navigator
Creating a quality app requires that you write comprehensive tests. Test-driven development is easier than ever with the new Test Navigator in Xcode 5 which helps you create, edit, and run your unit tests. A single click can run individual tests, or a selected group. The Assistant editor provides new test-specific categories that automatically place your tests and application code side by side.

Bots for Continuous Integration
Xcode 5 works closely with OS X Server for OS X Mavericks to easily create bots that continuously build your app, execute your complete test suite, and run the Xcode static analyzer to find potential bugs. You can create a new bot in only a few clicks, and immediately start it running on any Mac in your network. While the remote Mac is doing all the integration work, Xcode on your local machine displays the build and test reports.

A nightly bot is great for generating a regular release for your QA team. Bots can also be configured to execute on every check-in, alerting committers immediately when something is broken. Bots can even test your iOS app on connected iPhones and iPads, surfacing any device-specific bugs.

Auto Layout
Auto Layout is a powerful technology that allows you to create a single user interface which automatically adjusts to screen size, orientation, and localization. With Xcode 5, Interface Builders support for Auto Layout has been greatly enhanced. Interface Builder offers as much or as little help as you like, giving you a free-form canvas on which to create your next great app. Xcode offers helpful alerts when constraints are missing or mis-configured, and Interface Builder can even fix the layout for you.

Asset Management
A beautiful app is composed of many images: icons for iPad, iPhone, and Mac, launch screens for different screen sizes, and all your custom artwork. Asset Catalogs, labeled as .xcassets in Xcode 5, make managing your images much simpler. You can work with all versions of each image without managing individual files, or memorizing filename conventions. The Asset Catalog can even create image splits that enable your images to scale dynamically with the interfaces layout, while keeping the file size small.

Debug Gauges
New debug gauges in Xcode 5 show resource consumption data at a glance, including CPU, memory, energy use, iCloud, and OpenGL ES. The gauges themselves add very little overhead while your app runs, making it obvious when CPU or memory usage spikes, and alerting you to an otherwise hidden problem long before your users see it. Clicking a gauge reveals a full report, complete with a preliminary diagnosis of what may be plaguing your app. You can then click a single button to launch Instruments, which will immediately begin performing a deeper analysis of your apps performance.

Xcode Visual Debugger
Built on the powerful LLDB debugging engine, the Xcode visual debugger in Xcode 5 is cleaner and more readable, and the Data Tips that hover over your code are more responsive. Variables in either view are formatted to be easier to understand at a glance, and you can now use Quick Look to quickly peek at an image, web page, bezier curve, or a document in memory. You can even print the object within the editor using a single click.

Source Control
The new top-level Source Control menu always shows the currently active branch of the project you are working on, and gives you quick access to switch, create, and merge branches. Youll never need to leave your code to create a new feature branch, or fix a bug. If you dont remember writing the code in front of you, you can check who to blame for that line, right in the editor. The new Accounts preference in Xcode gives you a single place to manage all your repositories, and OS X Server for OS X Mavericks can even host Git repositories for you and your team.

Supported Configurations:
Xcode 5 developer preview requires OS X 10.8 or above.
It does not run on earlier versions of Mac OS X.
Xcode supports development for iOS 7, OS X 10.9, and OS X 10.8.
Instruments requires OS X 10.8.4.

DOWNLOAD
(Premium Recommended)

Universal Maps Downloader v6.885

2013-08-05T13:32:00.000-07:00

Universal Maps Downloader v6.885

Universal Maps Downloader v6.885 | 3 Mb

Universal Maps Downloader is a tool that help you to get small tile images from Google Maps, Yahoo maps, MicroSoft Virtual Earth maps, OpenStreet Maps. All downloaded small images are saved on the disk. You can view downloaded maps by Maps Viewer Or you can combine them into a big BMP map by Maps Combiner.

Uploaded:

Download Here

BitShare:

Download Here

RapidGator:

Download Here

License Manager v1.1

2013-08-05T13:24:00.007-07:00

License Manager v1.1

License Manager v1.1 | 5.60 Mb

Although License Manager can be used for activation, it is not a one-click activation tool. It's primary purpose is to provede useful information about your licenses.

There are two versions LicenseManager35.exe is for .NET Framework 3.5 (always present on Win 7) and LicenseManager40.exe runs on .NET Framework 4.0 (always present on Win 8).

Now supports LCIDs with 5 digits in the PID
Contains a built-in KMS Server, which makes it now a standalone activation solution. For this to work you need to keep the supplied Dll in the same directory as the Exe.

Uploaded:
Download Here

BitShare:
Download Here

RapidGator:
Download Here

IP Messenger For Windows

2013-08-05T11:00:00.003-07:00

IP Messenger For Windows

Usage & License

feature


Serverless message communication Fast file/folder transfer Image embeded message, desktop (area specified) capture Message encrytion(RSA2048bit + AES256bit) and sign/verify (PKCS#1-v1_5)

Installer exe archive

Download 32 Bit Installer

Download 64 Bit Installer

TurboFTP 6.30 Build 950 Multilingual

2013-08-05T10:57:00.003-07:00

TurboFTP 6.30 Build 950 Multilingual

TurboFTP is a secure FTP client program (supports FTP over SSL/TLS and SFTP over SSH2) for Windows 2000/XP/2003/2008/Vista/7. It allows you to transfer files (upload or download) at turbo speed between your computer and virtually any FTP server with exceptional ease and when necessary, with strong encryption of industrial strength.

TurboFTP Key Features :
Sync Service Module. Run schedule tasks in NT service. Support dependency of tasks, multiple simultaneous schedule tasks and different dialup connection for individual site. Run programs before and after a schedule task.
Auto Upload New Files and/or Updated Files in Local Folder. Watch a local folder and automatically upload any new files dropped in it and/or updated files. This feature can be run as NT service in Sync Service Module.
Security. Secure FTP file transfer protected with SSL(Secure Socket Layer, including implicit/explicit SSL) and TLS (Transport Layer Security). Support SFTP over SSH2. Support OTP S/Key (MD4, MD5) password encryption.
older synchronization. Send E-mail report upon compete.
Folder Synchronizer. Offers visual real-time comparison of local and FTP directory structures, helps you synchronize, backup files and directories with minimum efforts.
MODE-Z support and Built-in Compress/Decompress Utility. Support on-the-fly data compression using MODE-Z. You can also extract and create archives in Zip, GZip or Tar formats in TurboFTP.
Strong interruption and stall protection. Backed by Auto Dial, Smart Keep Alive, Auto Reconnect and broken transfer resume.
Firewall/Proxy support. Get through firewall and proxy servers including HTTP Proxy, SOCKS 4/4a/5.
Large file support. Support files larger than 2Gb on FAT32 and files larger than 4Gb on NTFS file system.
Intuitive. Upload files right from Windows Explorer with the powerful Upload Wizard. Connection Wizard for absolute novice. One-click access to any folder with bookmarks.

Uploaded:
Download Here

BitShare:
Download Here

RapidGator
Download Here

NetWorx 5.2.9 + Portable

2013-08-05T10:55:00.002-07:00

NetWorx 5.2.9 + Portable

NetWorx 5.2.9 + Portable

NetWorx is a simple, yet powerful tool that helps you objectively evaluate your bandwidth situation. You can use it to collect bandwidth usage data and measure the speed of your Internet or any other network connection. NetWorx can help you identify possible sources of network problems, ensure that you do not exceed the bandwidth limits specified by your ISP, or track down suspicious network activity characteristic of Trojan horses and hacker attacks. let's meet on zhmak.info The program allows you to monitor all your network connections or a specific network connection (such as Ethernet or PPP) only.

The software also features a system of highly customizable visual and sound alerts. You can set it up to alert you when the network connection is down or when some suspicious activity, such as unusually heavy data flow, occurs. It can also automatically disconnect all dialup connections and shut down the system.

Key Features:
* Clear graphic and/or numeric display.
* Usage reports with export to a variety of file formats, including Excel, MS Word and HTML.
* Permits close supervision of uploads and downloads.
* Works with dial-up, ISDN, cable modems, ADSL, Ethernet cards, and more.
* Includes network information & testing tools with advanced netstat that displays applications using your Internet connection.
* Scalable to your own modem download capabilities.
* Option to notify user or disconnect from the Internet automatically when network activity exceeds a certain level.
* Speed meter to accurately time downloads and report the average transfer rates.
* Dial-up session journal with detailed information about every session.
* Absolutely free and does not contain any adware/spyware/malware.

Changelog
More reliable uninstallation process to ensure no orphan files are left.
Added a workaround to obtain application names that were previously recorded as unknown.
Added deleting past records for applications from the Applications view.
Expanded the default multicast IP address range to avoid recording multicast traffic as non-local.
Updated LAN traffic filtering driver (now uses Windows Filtering Platform on Windows 7 and above).

Uploaded:
Portable Software

Setup Download

BitShare:
Portable Software

Setup Download

RapidGator:
Portable Softeare

Setup Download

Windows Hotfix (Updates) Downloader v2.8

2013-08-05T10:46:00.002-07:00

Windows Hotfix (Updates) Downloader v2.8

Windows Hotfix Downloader v2.8

Compatible with Windows 8, Windows 7, Windows Vista and Windows XP

Features
Download windows updates (McRip - Windows 7, Windows 8)
Download office updates (McRip - 2010, 2013)
Install/uninstall updates
Integrate updates
Windows update cleanup
Check installed updates
Download windows updates (from WindowsUpdate.log)

Changelog:
v2.8
Fixed bug in time elapsed not being reset
Bug fix's

Uploaded:
Download Here

BitShare:
Download Here

RapidGator:
Download Here

EViews 8 Enterprise Edition

2013-08-04T02:15:00.002-07:00

EViews 8 Enterprise Edition

EViews 8 Enterprise Edition | 176 MB

EViews 8 offers academic researchers, corporations, government agencies, and students access to powerful statistical, forecasting, and modeling tools through an innovative, easy-to-use object-oriented interface.

A combination of power and ease-of-use make EViews 8 the ideal package for anyone working with time series, cross-section, or longitudinal data. With EViews, you can quickly and efficiently manage your data, perform econometric and statistical analysis, generate forecasts or model simulations, and produce high quality graphs and tables for publication or inclusion in other applications.

Featuring an innovative graphical object-oriented user-interface and a sophisticated analysis engine, EViews blends the best of modern software technology with the features you’ve always wanted. The result is a state-of-the art program that offers unprecedented power within a flexible, easy-to-use interface.

Home: _http://www.eviews.com/EViews8/ev8whatsnew.html

Uploaded.net

Download From Uploaded

Lumfile.com

Download From Lumfile

Rapidgator.net

Download From Rapidgator

Windows Expert Tool v4.7.0 (24.07.2013)

2013-08-04T02:11:00.006-07:00

Windows Expert Tool v4.7.0 (24.07.2013)

Windows Expert Tool v4.7.0 (24.07.2013) | 5.92 Mb

Windows Expert Tool is safe to recover your passwords saved in web browsers, instant messengers on, in customers e-mail, Wirelles their passwords (WEP /WAP), different passwords logins, passwords/data from your routers, your existing usb and product keys saved in all Microsoft Windows Operating Systems. This tool works on both architectures: Windows X64, Windows X86.

Version 4.7.0:
* Fixed bug: WebBrowserPassView failed to work with master password of Firefox containing non-English characters.
* WebBrowserPassView now extracts the passwords from all profiles of Firefox Web browser and reads the profiles.ini file of Firefox to get the correct profile folders.
* USBdeview.exe : Update for Windows 8: It seems that on Windows 8, it's impossible to detect from the Registry whether a device is connected or disconnected, so instead of using the Registry, a device is displayed as connected if it has power/version information.

She works closely with other recovery tools Nirsoft Team.
All rights of these tools for developers due Nirsoft.
All passwords are saved as. Html files in folder''Passwords''.
Example: Passwords\FirefoxPass.html
It's safe and fast.

Virus scanner results:
Some security tools (antivirus and others) detects false-positive.
If this occurs, simply:
1 - Turn off your anti-virus
2 - Extract Windows Expert Tool.zip
3 - Run Windows Expert tool.exe
4 - All keys recovered ...
5 - Turn on your anti-virus
5 - Enjoy!

Currently recovering:
1 - Reveals Key Product Windows & Office:
* Microsoft Windows 98/ME
* Microsoft Windows 2000
* Microsoft Windows NT
* Microsoft Windows XP
* Microsoft Windows Vista
* Microsoft Windows Server 2003
* Microsoft Windows 7 (Works only for some of the Windows 7 versions)
* Microsoft Windows 8 RTM
* Microsoft Office 2000 (Only ProductID is displayed)
* Microsoft Office 2003
* Microsoft Office 2007
* Microsoft Office 2010
* Microsoft SQL Server 2000
* Microsoft SQL Server 2005
* Microsoft Exchange Server 2000
* Microsoft Exchange Server 2003

2 - Reveals the passwords of the following instant messenger applications:
* MSN Messenger
* Windows Messenger (In Windows XP)
* Windows Live Messenger (In Windows XP/Vista/7)
* Yahoo Messenger (Versions 5.x and 6.x)
* Google Talk
* ICQ Lite 4.x/5.x/2003
* AOL Instant Messenger v4.6 or below, AIM 6.x, and AIM Pro.
* Trillian
* Trillian Astra
* Miranda
* GAIM/Pidgin
* MySpace IM
* PaltalkScene
* Digsby

3- Reveals the passwords and other account details for the following email clients:
* Outlook Express
* Microsoft Outlook 2000 (POP3 and SMTP Accounts only)
* Microsoft Outlook 2002/2003/2007/2010 (POP3, IMAP, HTTP and SMTP Accounts)
* Windows Mail
* Windows Live Mail
* IncrediMail
* Eudora
* Netscape 6.x/7.x (If the Password (If need) not encrypted with master password)
* Mozilla Thunderbird (If the Password (If need) not encrypted with master password)
* Group Mail Free
* Yahoo! Mail - If the Password (If need) saved in Yahoo! Messenger application.
* Hotmail/MSN mail - If the Password (If need) saved in MSN/Windows/Live Messenger application.
* Gmail - If the Password (If need) saved by Gmail Notifier application,
Google Desktop, or by Google Talk.
For each email account, the following fields are displayed: Account Name, Application, Email, Server, Server Type (POP3/IMAP/SMTP), User Name, and the Password.

4 - Reveals the passwords of the following many Web Browser:
* All Versions Internet Explorer Web browser
* All Versions Google Chrome Web browser
* All Versions Firefox Web browser
* All Versions Opera Web browser
* Others Web browser
* Some Versions Safari Web browser

5 - Wireless Network Keys WEP/WAP
* Recovers all wireless network keys (WEP/WPA)

6 - Recovers all dialup/VPN:
* Enumerates all dialup/VPN entries on your computers, and displays their logon details: User Name, Password, and Domain.

7 - Login passwords:
* Login passwords of remote computers on your LAN.
Passwords of mail accounts on exchange server (stored by Outlook 2003)
Password of MSN Messenger / Windows Messenger accounts
Internet Explorer 7.x and 8.x: passwords of password-protected Web sites
("Basic Authentication" or "Digest Access Authentication")
The item name of IE7 passwords always begin with "Microsoft_WinInet" prefix.
The passwords stored by Remote Desktop 6.

8 - Recover Router Passview:
* The backup file of the router usually contains important data like your ISP user name/password, the login password of the router, and wireless network keys.
Here's the list:
* Linksys WRT54GL (With original firmware or Tomato firmware), WRT54G
(only some of them), WRT160N, and possibly similar models.
* Edimax BR6204WG, and possibly similar models.
* Siemens ADSL SL2-141, and possibly similar models.
* Dynalink RTA1025W, and possibly similar models.
* NETGEAR WGT624, and possibly similar models.
* ASUS WL-520g, WL-600g, and possibly similar models.
* ASUS RT-N10+ , and possibly similar models.
* Asus RT-N56U , and possibly similar models.
* D-Link DIR-655, DIR-300, and possibly similar models.
* Sanex SA 5100, and possibly similar models.
* Sitecom WL-351, WL-575, WL-312, and possibly similar models.
* COMTREND 536+ (Only Internet Login)
* US Robotics 9108 ADSL (internet login and admin login)
* D-Link DSL-2540U/BRU/D ADSL2+, DSL-2650U, DSL-520B
* D-Link DVA-G3170i/PT
* D-Link DSL-604T
* D-Link G3670B
* D-Link DSL-2640T
* D-Link DSL-G684T
* D-Link 2740B
* D-Link DIR-615 G2
* D-Link WBR-1310
* D-Link DSL-2543B
* D-Link DI-524
* D-Link DI-624+A
* D-Link DIR-600
* TP-Link TD-8810 ADSL Modem/Router.
* Dynamode R-ADSL-C4-W-G1
* NetComm NB5Plus4 DSL
* Thomson TG580 DSL (only in Hex Dump mode)
* Asus RT-G31
* HuaWei EchoLife HG520 (Only some of them)
* HuaWei HG526
* TP-LINK TL-WR841N
* TP-LINK TL-WR841DN
* TP-LINK TL-MR342
* TP-LINK TL-WR340G
* TP-LINK TL-R460
* TP-LINK TL-WR741ND v2.0
* TP-LINK TL-WR700N
* TP-LINK TL-WR740N
* TP-LINK TL-WA801N
* TP-LINK TL-WR541G
* TP-LINK TL-WR1043ND
* Belkin N+ (F5D8236uk4)
* Mercury MW54R
* Netgear DG632
* Netcomm NB6W

9 - USB devices:
* Lists all USB devices that currently connected to your computer, as well as all USB devices that you previously used e save info.

Uploaded:

Download Here

BitShare:

Download Here

RapidGator:

Download Here

Jetico BestCrypt 8.25.2.3 Datecode 30.07.2013

2013-08-04T01:56:00.000-07:00

Jetico BestCrypt 8.25.2.3 Datecode 30.07.2013

Jetico BestCrypt 8.25.2.3 Datecode 30.07.2013 | 19 Mb

The BestCrypt Data Encryption system provides the most comprehensive and easy-to-use secure data storage and access control facilities available. BestCrypt's data encryption method uses encryption algorithms known world-wide and provides unparalleled protection against unauthorized data access. BestCrypt is easy to install, easy to use and totally transparent for application programs. Your data is BestCrypt's only concern, and it enhances your basic right to keep documents, commercial proprietary knowledge, and private information, in a confidential fashion.

The BestCrypt Data Encryption system provides the most comprehensive and easy-to-use secure data storage and access control facilities available. BestCrypt's data encryption method uses encryption algorithms known world-wide and provides unparalleled protection against unauthorized data access. BestCrypt is easy to install, easy to use and totally transparent for application programs. Your data is BestCrypt's only concern, and it enhances your basic right to keep documents, commercial proprietary knowledge, and private information, in a confidential fashion.
Once written to a BestCrypt file (container), data is never stored in an 'open' condition. Yet BestCrypt's smooth operation and complete transparency allow any authorized user to get instant access to the data.

BestCrypt's advanced data encryption and authorization technology provides a new level of security with standard, proven and published cryptographic algorithms, safe password input, and transparent encryption.
BestCrypt creates and supports encrypted virtual disks, which are visible as regular disks with corresponding drive letters (for example, D:, K:, Z:, i.e. with any drive letter that is not used by another system device).

BestCrypt allows encrypting data with many encryption algorithms (AES, Blowfish, Twofish, CAST and others). Every algorithm is implemented with the largest possible key size defined in the algorithm's specification. BestCrypt v.8 can utilize LRW Encryption Mode, which is specially designed for applications working on disk sector level and more secure than other popular modes used earlier (like Cipher Block Chaining (CBC) mode).
The data stored on a BestCrypt disk is stored in the container file. A container is a file, so it is possible to backup a container, move or copy it to other disk (CD-ROM or network, for instance) and continue to access your encrypted data using BestCrypt.
Any free drive letter in the system may be used to mount and to open an encrypted file-container for access. As well, with BestCrypt v.8 you can mount file-container as a subfolder on NTFS disk. When the virtual disk is opened, you can read and write data as if it were a conventional removable disk.
BestCrypt version 8 provides users with a higher security level as well as with a set of new functions. Besides, there are several ways of encrypting data in version 8:

- Storing encrypted data in containers and accessing the data through virtual drives (as earlier versions of the software do);

- Encrypting set of files into a single compressed and, if needed, self-extracting archive (read more information in BCArchive article);

- Encrypting and accessing transparently whole Windows partitions/volumes (read more information in BestCrypt Volume Encryption article).
BestCrypt allows encrypting data with many encryption algorithms. Every algorithm is implemented with the largest possible key size defined in the algorithm's specification:

- AES (Rijndael) - 256-bit key.

- Blowfish - 448-bit key.

- CAST - 128-bit key.

- GOST 28147-89 - 256-bit key.

- RC6 - 256-bit key.

- Serpent - 256-bit key.

- Triple-Des - 168-bit key.

- Twofish - 256-bit key.
Note: that BestCrypt v.8 supports also the following algorithms to provide compatibility with earlier versions of the software: Blowfish (256-bit key), Blowfish (128-bit key), DES (56-bit key).
Home Page - www.jetico.com

Download(Bitshare):

Download Here

Download(Rapidgator):

Download Here

Download(DizzCloud):

Download Here

Download(Uploaded):

Download Here

A Ruler for Windows 2.6 Final

2013-08-04T01:44:00.001-07:00

A Ruler for Windows 2.6 Final

A Ruler for Windows 2.6 Final | 3 Mb

A Ruler for Windows is a useful and simple pixel ruler for your computer and lets you quickly and easily measure objects on your screen.

With A Ruler for Windows you can use your screen normally while layering one or more rulers over of your work. As you can see through the clear plastic ruler you can even continue your typing under it.
Special 2x, 3x, and 4x modes allow you to take a snapshot of your whole screen and magnify it so you can measure between very fine points more easily. The ruler can be flipped horizontally or vertically, resized to an exact length or resized by dragging it to a desired length.
Ticks can be placed on which ever long edge you prefer. You can click near a tick to have a measuring line automatically drawn at an exact location. The [?] mark button allows you to learn about more other features and functions. A Ruler for Windows is fun to learn and very easy to use.
OS: Windows 8, 7, Vista, XP and 2000

Download(Bitshare):
Download Here

Download(Rapidgator):
Download Here

Download(DizzCloud):
Download Here

Download(Uploaded):
Download Here

Mac OS X 10.8.0 (12A269) Mountain Lion Final

2013-08-03T23:03:00.001-07:00

Mac OS X 10.8.0 (12A269) Mountain Lion Final (Mac...

Mac OS X 10.8.0 (12A269) Mountain Lion Final (Mac app Store) 2013 | 4.05 GB
Languages: English, Arabic, Catalan, Chinese, Croatian, Czech, Danish, Dutch, Finnish, French, German, Greek, Hebrew, Hungarian, Italian, Japanese, Korean, Norwegian, Polish, Portuguese, Romanian, Russian, Slovak, Spanish, Swedish, Thai, Turkish, Ukrainian

OS X Mountain Lion is the latest release of the worlds most advanced desktop operating system. Mountain Lion includes over 200 new features to update your Mac into the best computing experience yet. With the new Messages app you can send text, photos, videos, contacts, web links, and documents to anyone using another Mac, iPhone, iPad, or iPod touch you can even start a conversation on one device and continue it on another.

The new Share button makes it easy to share files, web pages, photos, and videos, as well as tweet right from the app you are using. With the Reminders app you can create to-do lists and alerts that appear in the new Notification Center. With Notes you can write down all your ideas and even speak your words with voice dictation. Play head to head games on your Mac with friends on their Macs or iOS devices with Game Center. And with iCloud built in, it’s simple to keep all your mail, contacts, calendars, reminders, notes, to do lists, music, photos, iWork files, PDFs, and more up to date across all your devices.

Messages
• Send messages from your Mac to friends with an iPhone, iPad, or Mac.
• With iMessage, you can start a conversation on your Mac and pick it up on your iPhone or iPad.
• Messages also supports traditional instant messaging services like AIM, Yahoo! Google Talk and Jabber.

iCloud
• Documents in the Cloud lets you create and edit your documents on your Mac, iPhone, and iPad.
• The new Reminders app makes managing tasks easy. Jot down your thoughts with the new Notes app. And iCloud keeps your Reminders and Notes up to date across all your devices.

Safari
• Type both searches and web addresses in the new Smart Search Field.
• Pinch to see tabs with Tab View and swipe to switch between them.
• iCloud Tabs makes the last websites you looked at accessible on your iPhone, iPad, and Mac.*

Notification Center
• New notifications appear in the top right corner of your screen.
• Open Notification Center from anywhere in OS X to see recent notifications.
• Configure your notifications to receive just the ones you want.

Sharing
• Share links, photos, videos, and other files right from the app you're in.
• Share with Mail, Messages, and AirDrop.
• Sign in to Twitter, Flickr, and Vimeo once to start sharing.
• Tweet right from your apps with the Tweet sheet.

Game Center
• Play live multiplayer and turn-based games against friends on iPhone, iPad, iPod touch, or Mac.
• Log in to the Game Center app to see friends in your gaming network.
• Check out leaderboards and achievements.
• See what games your friends play and track your progress against them.

Other great Mountain Lion features
Dictation lets you talk anywhere you can type—no setup or training required.
• AirPlay Mirroring shows your Mac screen on your HDTV with Apple TV.
• Power Nap keeps your Mac up to date while it sleeps so it's instantly ready to go.
• Gatekeeper makes it safer to download apps from the Internet by giving you control over which apps can be installed on your Mac.
• New features for Chinese users include improved text input, leading search engine Baidu as an option in Safari, sharing to microblogging service Sina Weibo and video websites Youku and Tudou, eight new fonts, and a new Chinese dictionary.

* iCloud Tabs on iPhone, iPad, and iPod touch requires iOS 6.

AirPlay Mirroring works with Apple TV (2nd generation or newer), iMac (mid 2011 or newer), Mac mini (mid 2011 or newer), MacBook Air (mid 2011 or newer), and MacBook Pro (early 2011 or newer).

Power Nap works with MacBook Air (mid 2011 or newer) and MacBook Pro with Retina display.

Some features require an Apple ID and/or compatible Internet access; additional fees and terms apply.

Some features require apps developed to work with Mountain Lion.

Requirements: OS X 10.6.8 or later

Yes, same build 12A269 as Gold Master but this one from Mac App Store.

Buy a Premium Account *** LETiTBiT.NET *** to download files Faster & Unlimited with NO waiting time!

http://vip-file.com/downloadlib/19799599611559297746-91598.9999f3b96fd5b983bed936dd799e/OSX.10.8.0.MULTI.part01.rar.html
http://vip-file.com/downloadlib/50586043764344710446-34565.3e0fa049d359e3a9a8356676b2c7/OSX.10.8.0.MULTI.part02.rar.html
http://vip-file.com/downloadlib/5212886354513878105-33249.316e90a90e955b39c65fb771dddc/OSX.10.8.0.MULTI.part03.rar.html
http://vip-file.com/downloadlib/854186423549-32440.3247d5c1932a04c31a3a143f444c/OSX.10.8.0.MULTI.part04.rar.html
http://vip-file.com/downloadlib/31396195816434756237193-07856.03db27d7c661f6cb49aa082ec6ff/OSX.10.8.0.MULTI.part05.rar.html
http://vip-file.com/downloadlib/85268874345986053494-80830.8da91722b08fd92689ad8f718a29/OSX.10.8.0.MULTI.part06.rar.html
http://vip-file.com/downloadlib/912069268716978070928678-91692.9c92795d9e5cd8452fa853750e29/OSX.10.8.0.MULTI.part07.rar.html
http://vip-file.com/downloadlib/0567038380283446925203-59090.5fad729a7adecab4f4f7a5423d89/OSX.10.8.0.MULTI.part08.rar.html
http://vip-file.com/downloadlib/5745590206192608676-68129.653b8af5ca9d944586953f8d9d76/OSX.10.8.0.MULTI.part09.rar.html

DeskProto 6.3571 Multi-Axis Edition

2013-08-03T21:48:00.005-07:00

DeskProto 6.3571 Multi-Axis Edition

DeskProto 6.3571 Multi-Axis Edition (x86)

DeskProto Multi-Axis: the Flagship edition, for 4-axis milling and 5-axis milling. Multi-Axis edition offers all Expert options
plus four-axis and five-axis machining. In the Multi-Axis edition all DeskProto options are available. The result is a CAM program
that allows you to produce even the most complicated models.

The extra features that DeskProto Multi-Axis offers: - Continuous
Rotation axis machining: during machining the part is rotated by the machine's fourth axis. - Indexed Rotation axis machining:
the fourth axis is used to machine the part from several sides. - Five-axis machining (indexed): the model can be machined from
almost all sides.

DOWNLOAD LINKS(uploaded)
Download Here
DOWNLOAD LINKS(rapidgator)
Downloaed Here
DOWNLOAD LINKS(ryushare)
Download Here
DOWNLOAD LINKS(lumfile)
Download Here