Security :: Professional Proxy Installed Or L7 Sufficient?
Nov 18, 2010
I want to install L7 iptables on my Linux that is used as a firewall for my internal network composed of some 200 computers. For my IDS , I plan to use Snort. Can I install snort on the same linux that I use as my firewall, or I have to install it on a different PC. Do I need to make use of L7 iptables, while I implement Snort. Shall I use Snort as IDS or IDPS? Where is the best place to install Snort, inside or outside the fire wall? Do I need to have a separate professional proxy installed on the linux, or the L7 proxy is sufficient? What would be the minimum hardware resource that Snorts requires(CPU, Ram)? For better security and performance , do I need to replace my present Linux with a PIX or any other hardware firewall?
View 1 Replies
ADVERTISEMENT
Jun 24, 2011
I just installed Red Hat Linux Professional 8.0 in my VMWare, but I do not know how to start X Windows. I have tried to type "startx" on "RUN", but I get error message: Fatal Server error Server already active for display 0. If this server is no longer running, remove tmp/.X0-lock and start again.
View 1 Replies
View Related
Feb 10, 2010
Would I need to scan the (root /) directory with sudo clamtk or would running clamtk be sufficient? Theoretically, if Ubuntu did get a virus; would this virus try to establish itself in / rather than /home? Also is it correct to presume that to scan the /home directory; running sudo clamtk wont do any more than just running clamtk?
View 9 Replies
View Related
Jul 22, 2010
Recently, my fraternity decided to use our LAN to stream media to our various bars, lounges and ballroom. Some of our playback devices, including an iPhone and a laptop, broke during a party, which is why we decided to have portable devices replaced with sturdy, interchangable and fixed hardware.
As this is going to cost some money and effort, we had better make a fully thought-through plan, which I am in charge of. Still, having never organized a project of any measurable magnitude, I would rather have this plan commented on here.
So far, I am planning to buy one central PC (2GHz, 512 MB RAM) acting as a server, and four identical PCs (1GHz, 256 MB RAM) acting as clients. The former would a) provide local files, stored an an external encrypted hard drive, and b) act as a NFS and SMB client to private systems in the same LAN to incorporate (and forward) data stored on those (as to provide one central point to change the configuration for their use). Futhermore, it would host /etc, /usr and /home of the individual clients to provide that at all times, the same software and drivers are used on all of them. The clients then would mount /etc, /usr and /home from the server, alongside with the both the directories on its external HDD and the ones it had itself mounted from other PCs. Each of them would have to be able to play back music, video files and terrestrial TV from a USB stick, with at most two of them doing so at a time.
Is this a realistic scenario? I so, would you have any recommendations for changes and could you point out pitfalls? The whole lot would have to be rather secure, as usually, there are lots of people coming and going, and we don't want our private data corrupted. If not, where did I go wrong? How would you yourself build a system like that?
And last, what software would you use? Is there a window manager which would be able to act solely as a means to display the three icons needed for TV, video, and music, and make it impossible to tamper with the system? And what programs would you use for playback to ensure maximum performance?
P.S.: Not that I'd suspect so, but is there a german lawyer present? Provided the individual files we play are in our legal posession, this is a legal scenario, isn't it? There would only be friends and other frats present at any public display.
View 3 Replies
View Related
Mar 7, 2010
I have a wireless usb-adapter with usbid:
Code:
Bus 001 Device 003: ID 1690:0711 Askey Computer Corp. [hex] SMCWUSBT-G (no firmware) I have heard that the second number after ":" above gives info about the chipset included in the adapter. It turns out this adapter has an atheros 5523 chipset. My question is if the product id 0711 above is the only thing determining if the adapter will work with Linux? If so, i can find in the file modules.usbmap that zd1211rw supports this chipset:
[Code]...
though it is associated with a different vendor id which is 0x1435. In this case, should i manually associate this driver with this adapter? You might ask why bother tweaking the OS?. The reason is that neither Fedora detected this thing as a wireless adapter nor ndiswrapper was able to install the windows driver (I think the problem is Fedora is 64 bit but win driver is 32 bit).
View 2 Replies
View Related
Mar 28, 2011
point me at a free proxy to bypass this which can simply be installed, built and/or run.setting up a server outside china and running a tunnel to it from my comp is not an option. also, below is a list of sofware that i have tried and failed to work:
Tor with vidalia
Tun with squid (i think squid)
hamachi (which i later realized would never have worked)
i tried to get haystack but it wouldn't build.
PS: if this post is in the wrong area, please tell me where to move it...
View 8 Replies
View Related
Aug 25, 2010
Is there a way to to check if the system has the available security updates installed? Specifically, I am looking to do this programmatically.
View 1 Replies
View Related
May 18, 2010
I have installed squid server.. but how can i make tranceparrent proxy?
View 1 Replies
View Related
Mar 5, 2011
When i click preferences-network proxy a screen of comes up showing the system internet configuration. Is there a way to make all system connections got through tor?
View 5 Replies
View Related
Sep 19, 2010
I have a http proxy account. It works well under windows through wodTunnel(an active X control component). But, I usually works under linux. I want to use it here. But I don't know how. I tried gstm, it can connect to the server successfully, but it seems can't respond to my http request. What should I do next?
View 3 Replies
View Related
Jul 1, 2010
here i would like to inform you that my company ask me to block facebook site at the work time it is: 08:00-12:30 and 14:00-17:30 in proxy server.i'm still confuse how to do!i need the details configuration in squid regarding how to block the sites
View 2 Replies
View Related
Jun 5, 2010
I'm using a local proxy server VPN'd to another network.
How do I setup either Firestarter or Gufw/ufw to ONLY allow in/out from ONE port? (The one port the proxy uses)
Ex: Firefox is proxied to 127.0.0.1, all ports, and then the proxy picks it up, and sends out on port xxxx, and recieves on port xxxx, then sends back thru 127.0.0.1, back to Firefox.
Any setting/rules I've treid on either Firestarter or Gufw kills the proxy>VPN (Proxy won't connect to remote network)
Addendum: If I start the proxy FIRST, then the firewall, all is good. I'm thinking the proxy uses a port to connect with remote network first, then switches to my configured xxxx port...hmmm
View 1 Replies
View Related
Jan 10, 2011
I am trying to install a proxy on my Kubuntu 10.10, since I live in a country that blocks access to almost everything. I tried to install squid, anon, socks.. both with command-line and KPackageKit, but every time, I have this error message:
[code]...
View 6 Replies
View Related
Apr 1, 2011
Rather than use pfsense, etc I decided to create my own router/proxy etc based on an atom base with 2 nics.Proxy/routing/dns/etc all working fine, I now though want to lockdown the fw rules.ETH1 is the WAN NICETH2 is the LAN NICI'm guessing i want to allow anything out of ETH1, but only allow incoming to ETH1 when its established or related... What about ETH2 though? Any ideas pls? Am used to configuring iptables on single nic, certainly not a router.
Code:
Chain INPUT (policy ACCEPT 18535 packets, 10M bytes)
pkts bytes target prot opt in out source destination
[code]....
View 8 Replies
View Related
Jul 6, 2011
Is my ssl connection secure if I'm going through a proxy. Is it possible to craft a malicious proxy to steal/crack authentication?
View 2 Replies
View Related
Feb 27, 2010
I was willing to create proxy in between the web app. and MySQL database so that I can do some modification before sending the query to the DB. But how to grep the query in the middle isn't working in the head yet. I found a tool named 'greensql' which captures the query in the middle but couldn't get how they are doing it.
View 4 Replies
View Related
Mar 24, 2011
i am using RHEL 5. i configured proxy server. now i want block one website.
View 2 Replies
View Related
Mar 3, 2010
I installed DansGuardian. In order for it to work I set the system wide proxy. However it is really easy to get around DansGuardian by going to preference proxy setting. How do I password protect this setting so it requires a password to change proxy setting? Preferably a different password than the normal sudo password if possible. If not I at least want the sudo password protecting it! I run multiple browsers so doing it via the system rather than the browser made the most since.
View 5 Replies
View Related
Sep 17, 2010
I am working on a project to create a video conferencing environment. For this I use a default installation of BigBlueButton on ubuntu 10.04. One of the main problems here is that it's not safe enough to share classified documents trough this software. It's a simple webserver that uses nginx. What I want to do is make this connection secure.
One of the problems is that I don't only have a connection trough port 80 but it uses the following ports:
Port 80 (HTTP), 1935 (RTMP), 9123 (Desktop sharing).
I would like to use a proxy instead of some tunneling or vpn to do this. Would anyone happen to know anything about squid or another equivalent to do this?
View 3 Replies
View Related
Aug 30, 2010
My company web access is behind proxy(http://abc.proxy). Network admin can get to check who is top10 user and web they access. I owned a centos server. I have a thought that create an encrypted tunnel within proxy so the admin cant detect my http address. This is how it going to works
client with OpenVPN -> OpenVPN server(centos with company proxy)-> proxy -> internet
My connectivity in my client are using OpenVPN server as bridge. Hence, no record for client is recorded in my Network admin monitoring list. OpenVPN server's activity can be traced by network monitoring tools, just assume that our ultimate goal is to hide client activity.
View 2 Replies
View Related
Feb 9, 2010
is someone can guide the best open source tools to monitor as webbase,gui,shell prompt
View 1 Replies
View Related
Apr 5, 2010
I have a problem with sites or domain blocking by squid proxy server in rehl 5. I have trying lots of time but i'm not succed.pls help me how to block sites or domain in rhel 5.
View 3 Replies
View Related
Feb 16, 2010
how to lock down individual users from setting a proxy server. Its a server not a WS so it should never go to the internet. I want to lock down the system side and firefox 5 settings.
View 14 Replies
View Related
Aug 7, 2011
I've got my netbook set up so that I can run a SOCKS proxy via my desktop machine. This works fine at home, but I'm wondering what happens at an internet cafe with public wifi.
Specifically, the connection needs initially to be set up with an ordinary direct internet connection so that I can log in to the cafe's router. I'm concerned that when I then set the network proxy to SOCKS host, the router will cease to recognise me and will disconnect me. This particular detail doesn't seem to have been covered in any instructions that I've seen (maybe I haven't looked hard enough).
View 5 Replies
View Related
Jul 22, 2010
I have setup a squid server on Rhel5.4. I would like to know how I can configure my squid server to block anon proxy sites.
View 3 Replies
View Related
May 30, 2010
I don't care so much the practicality and needlessness of actually setting up a computer for proxy server for personal usage, but none-the-less, i want to do it, and i'm just wondering about hardware.The proxy, i don't intend on having a desktop environment, so it'll be a terminal interface.But for a system that will handle traffic for 3 pc's and a ps3, how much hardware would one suggest i need, as far as RAM, HDD space, so on and so forth.
I was thinking it would be fun to do with with my old amd k6-2 processor and it's 32mb of ram, but in order for that pc to work, i'll need to replace a few hardware pieces, and before i dumb money into it and pull it out of the closet, i want to find out if it would even be worth my time to do it.
View 2 Replies
View Related
Mar 27, 2010
i used to have Windows XP Professional on my computer, then i decided to install Ubuntu but it didnt work for me it gave me really weird errors, i thought i uninstalled it, and then i installed Debian on my computer, Debian ran smoothly but when i tried to start Windows the GRUB from ubuntu appeared and when i tried to start windows again it showed and that the hal.dll was missing, i reinstalled Windows but still the same error appeared, this also affected my Debian GRUB so i had to install it again,
View 3 Replies
View Related
Dec 17, 2010
We are trying to set up a livestream to make it possible to have the video from an HD (720p) outdoor security IP camera (h264) and use this on a few websites and use it as a demo to show what the possibilities of IP-television are. We also want to be able to stream it to some settop boxes that are in a customer environement in use. the big deal here is to take the stream from the camera on the on the server.
It would be nice to be able to interrupt the stream to show some other vids or pictures or some interactive messages. I have seen lots of these kinds of "local tv channels" but I don't have a clue how to set it up...
Uplink, money(well...) and hardware isn't really a problem.
View 1 Replies
View Related
Feb 22, 2011
I was wondering what version of Fedora I have to install on a server in a professional environment. At the moment I install the Fedora 14 (minimum) version 64bit. Is this a good choice?
View 8 Replies
View Related
May 9, 2011
I'm brand new to linux and just started with fedora 14. I'm trying to mount the resumemaker professional iso so I can download the program. It's a windows program so I'm not sure if that matters. I've spent the past 2 hours trying to figure it out.
i did:
mkdir /mnt/iso for the new folder
then:
mount -o loop /home/jordanamman/ResumeMaker/ResumeMaker Professional 16.0 Deluxe.iso /mnt/iso
(I've tried like 20 different combinations from different websites so idk what I'm doing wrong)
View 2 Replies
View Related
