Ubuntu Security :: Active Connection / Program Access To Internet
Jan 18, 2011
There is this active connection in firestarter: ec2-174-129-193-12.compute-1.amazonaws.com (Port 443 - Service HTTPS - program python)After doing ps aux | grep PID it shows: /usr/bin/python /usr/lib/ubuntuone-client/ubuntuone-syncdaemon...This comes up in the firewall in each login, how do I get rid of it and how did it get there in the first place? Another question is if there is a way to limit a program's access to the internet. For example KCalender.. The things I type up in there may be stored somewhere. How can I disable complete access to the internet for that program and any other program so they can't backup, share, check etc. ?
I wanted to know if there was a firewall program out there that can open specific ports when a program/process is run and disable the ports again when the program is closed.
Its a case of ".... wireless network connection active but still not internet connection .."I am using WEP - 128 key ... Works when I connect directly using ethernet cable ... but not wireless (pci and wireless router)
I cannot Browse Even Internet is Active. Connected using Mobile Broadband using Samsung Mobile USB MODEM. (Modem is recognized Successfully and Connection Shown as active!) I cant browse or even use apt-get update in terminal.. no use. (Even I can see the Gprs icon in the Mobile Phone). WiFi is Perfect in this ubuntu (everything is fine) and Mobile modem working Successfully in Windows too. I have attached the picture.please see it.so you will understand everything
=I==USED==WVDIAL==TOOL===TOOO= root@saad-laptop:/home/saad# wvdialconf /etc/wvdial.conf Editing `/etc/wvdial.conf'. Scanning your serial ports for a modem. Modem Port Scan<*1>: S0 S1 S2 S3 WvModem<*1>: Cannot get information for serial port. ttyACM0<*1>: ATQ0 V1 E1 -- OK ttyACM0<*1>: ATQ0 V1 E1 Z -- OK ttyACM0<*1>: ATQ0 V1 E1 S0=0 -- OK ttyACM0<*1>: ATQ0 V1 E1 S0=0 &C1 -- OK ttyACM0<*1>: ATQ0 V1 E1 S0=0 &C1 &D2 -- OK ttyACM0<*1>: ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0 -- OK ttyACM0<*1>: Modem Identifier: ATI -- SAMSUNG GT-C6112 ttyACM0<*1>: Speed 4800: AT -- OK ttyACM0<*1>: Speed 9600: AT -- OK ttyACM0<*1>: Speed 19200: AT -- OK ttyACM0<*1>: Speed 38400: AT -- OK ttyACM0<*1>: Speed 57600: AT -- OK ttyACM0<*1>: Speed 115200: AT -- OK ttyACM0<*1>: Speed 230400: AT -- OK ttyACM0<*1>: Speed 460800: AT -- OK ttyACM0<*1>: Max speed is 460800; that should be safe. ttyACM0<*1>: ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0 -- OK
Found an USB modem on /dev/ttyACM0. Modem configuration written to /etc/wvdial.conf. ttyACM0<Info>: Speed 460800; init "ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0"
=EXECUTING==WVDIAL==AND==ITS=RESULT= root@saad-laptop:/home/saad# wvdial --> WvDial: Internet dialer version 1.60 --> Cannot get information for serial port. --> Initializing modem. --> Sending: ATZ OK --> Sending: ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0 ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0 OK --> Sending: AT+CGDCONT=1,"IP","imis" AT+CGDCONT=1,"IP","imis" OK --> Modem initialized. --> Sending: ATDT*99# --> Waiting for carrier. ATDT*99# CONNECT --> Carrier detected. Starting PPP immediately. --> Starting pppd at Mon Jul 18 11:26:54 2011 --> Pid of pppd: 3062 --> Using interface ppp0 ....
=CONFIGURATION==IN==WVDIAL.CONF= /etc/wvdial.conf [Dialer Defaults] Init1 = ATZ Init2 = ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0 Init3 = AT+CGDCONT=1,"IP","imis" Stupid Mode = 1 Modem Type = USB Modem ISDN = 0 New PPPD = yes Phone = *99# Modem = /dev/ttyACM0 Username = a Password = b Baud = 460800
A portscan reveals that port 39878 is 'open', service: 'unknown. I deny service for this port in Firestarter FW 'policy' Firestarter does not show any active connection. I am not running any apps, so how can I close this port?
My internet connection is really bad,so I need some kind of program to make a text file or something saying when internet connection is gone and time and date,also if possible to say why is it gone,is it my problem or is it my internet providers problem.
I open this thread after an unsuccessful long search over the Web. Essentially what I want is to block the outgoing connection of a program. All I know about this program is its name and so I don't have any information regarding the ports it utilizes or the address it may contact.
I'm using Ubuntu 9.10. My internet connection is an ADSL which I have set up using "pppoeconf". The connection starts at boot up. I can also start it if needed by using "sudo pon dsl-provider" and can stop it by using "poff dsl-provider".Recently I noticed that when I start my computer, there is some program (or programs) which is connecting automatically to the internet and downloading and uploading a lot of data. The data transferred can exceed 200 mb or 300 mb in an hour. I don't know what is being uploaded or downloaded.I know for sure that no file sharing programs like bittorrent clients are started at bootup so it is strange that this much data to be downloaded and uploaded without me sharing files or downloading files explicitly. The update software also does not run by default as I have opted to start it manually.
Is there any application which shows the programs that are connected to any particular port and transmitting and receiving data?In Windows XP I use a program called "What's Running" which clearly lists the programs using the different ports in the local machine and the remote IP addresses that the program is connected to. It also shows which program is transmitting and receiving data at any point in time. Is there any similar program for Linux?My internet connection is a data limited package otherwise I probably would not have bothered.
it is possible to change the root directory for a single, particular program. For example, I have an executable, 'miscreant.bin' that has all of it's required libraries in a directory named "libraries", in the same directory as the said executable. I can launch the program and make it use the libraries included with the executable rather than the system with:
With either, miscreant can be portable. But, I would also like to change the root directory (like chroot) of miscreant, so that the directory "~/miscreant/sandbox" becomes the root ("/"). So, if miscreant created a file named "/home/bryan/miscreant", it will be redirected to "~/miscreant/sandbox/home/bryan/miscreant". I am running Crunchbang 10 (Statler) on a 32-bit Atom netbook.
Is there an Ubuntu program that gives access to Internet radio stations like iTunes?
iTunes radio setting on Mac has hundreds or thousands of internet radio stations that the user can select from and listen to. Is there such an app for Ubuntu? That would be easier than finding all their web sites and bookmarking them.
I was hoping to set up a Kubuntu 10.04 Chroot on a PC with no internet access (I only have dialup anyway, not Broadband). All the information I have been able to find refers to downloading debootstrap in order to do this.I purchased a set of DVDs with all of the Ubuntu packages on them and created a single repository of them on my harddrive.Is there some way that I can create the Chroot using the packages on my hard drive without having to access the internet to download stuff as I do it?
I'm running a program called Synergy+ to let my keyboard and mouse control multiple computers. One of Synergy+'s features is that clipboard (copy-paste) data is able to be shared, as in copy on one machine, paste onto another. I would like this functionality removed but Synergy+ has no way to disable it. I'm looking for any ideas to block clipboard data from being transferred. Is there a way to block a program from accessing the machine's clipboard data?
I am running ubuntu 10.10. I recently enabled the firewall and installed Firestarter to configure it. Bad decision apparently. I can't connect to the internet using Firefox unless I first stop the firewall using Firestarter. After I do that, Firefox connects to the internet just fine.
If I uninstall Firestarter, will the ubuntu firewall function as it did originally, before I configured it? Or will it continue to function the way it does right now, which doesn't allow me to connect to the internet?
i m using Reliance Netconnect broadband+ my modem model is HUAWEI EC1260 and my operating system is Open SUSE 11.0 i m not able to access the internet by using the connection can anybody help me to do so.i ve tried wvdial to connect but its said modem was not found.
I am attempting to connect Ubuntu 9.10 to the Internet.I have a network connection, and Karmic detects it fine. I can ping addresses within our network (e.g. the Windows computer in the next room), and I can ping the router, but if I ping, say www.google.com, it says "Destination Net Unreachable". Previously, in Jaunty, I had a similar problem.I found a workaround: launch Pidgin. Somehow, launching Pidgin temporarily edits my configuration. However, in Karmic, I have no access to Pidgin, however, and Empathy does not do the same thing. Since I have no Internet, I cannot "sudo apt-get install" anything.How can I get the Internet working?
I have recently installed ubuntu 9.10. Earlier I had ubuntu 9.04. On that my internet was running perfectly well.After installation I created new connection as I had done for 9.04 version using "Network connections , Edit connections". However, after configuring connection(uname , password etc.) I wasn't able to access Internet.So I tried using "pppoeconf" utility. After using this now whenever I click on network connections applet on top panel , it shows in menu "device not managed".Can somebody point out what went wrong and what to do so as to be able to acess Internet in ubuntu?
I had been happily using a wireless connection for about two weeks. The connection then went down for a few days. Since it came back up, I can connect to the network, but cannot access the internet. Other users of the network can both connect to the network, and access the internet, though people have experienced the same problem as me the last time the network went down (they could connect to the network but not access the internet). I have tried deleting and re-starting the connection, to no avail. I have looked around the forums, but haven't found anything that can help: do any of you have any suggestions? I am malarial and at the end of tether.It is not a problem with Ipv6, which is set to ignore, as it was in the past when the connection workedI am running Ubuntu 10.10 on an X61 Thinkpad. Below is the output of iwconfig, route -n, lspci, and what happens when I ping other network
Iwconfig: eth0 Link encap:Ethernet HWaddr 00:1d:72:9e:09:8f UP BROADCAST MULTICAST MTU:1500 Metric:1
My Internet connection works.Using no VPN connection, I can access the Tnternet from the gnome-terminal (ping, apt-get, lynx), as well as from any GUI application.As soon as I establish a VPN connection via openconnect, GUI applications such as firefox, transmission and thunderbird still work.But terminal applications (such as mutt, apt-get etc), some daemons (like mpdscribble) and some GUI applications (such as the easytag cddb search) don't work anymore.
With Encrypted Wireless Connection Not Able to Access Internet - no pings, internet browsing, etc. However, without encryption I am able to browse the internet. I need encryption ..
I am pasting diagnostics collected by shell procedure collectNWdata.sh..
Code: collectNWData.sh V0.6.2.0 (Rev: 1.193, Build: 2010/01/20 21:22:30 UTC) --- Which type of your network connection should be tested? --- (2) Wireless connection (WLAN) --- What's the type of networktopology?
As I view it, Ubuntu has a great security risk in that it still allows internet access when the VPN connection has been lost, for whatever reason. As it is now, when the VPN connection fails you get bumped back to using your regular IP, and whatever you are doing becomes transparent to anyone watching. This is simply unacceptable for an allegedly secure platform. Does anyone know of a way to fix this with a script/program, or is there a distribution/OS that allows this? Windows re-dials the vpn automatically, but still allows internet access in the mean time.
Okay, a couple of weeks ago I was running 10.04, got an auto update that needed a firefox restart, so rather than restart, I just shutdown the computer for the weekend. When I booted the computer on Monday it would find sites (www.google.com, start.ubuntu.com) but it wouldn't download the necessary items to load the page. Now I have a windows laptop sitting next to the ubuntu box and it was online with no issues, so I know it wasn't the connection itself. So I decided that the update messed up the system so I downloaded 10.10 and installed that and ran that all last week.
On Friday I got a system update that required a firefox restart, so I ran firefox for the day and decided that since it was friday, I would just shutdown the computer and reboot on Monday.Well now Monday is here and now I again have sloooowww internet, to the point that URL.. times out and won't come up. I have tried doing a traceroute on both machines and the windows box gets all the way to www.google.com, but the ubuntu box gets about halfway there and then gets no response. I am at a loss, I don't want to reinstall every week. I did try to reboot and run the previous version of 10.10 that shows in the boot menu, but that does the same thing. One thing I did notice is that the broadcast ip is different than the machine IP, don't know enough to know if this is a problem.
I have successfully set up a cable internet connection in Ubuntu (created a new DSL connection by typing login and password and connected the cable - it worked). But I have no idea how I can set up a wireless internet connection.I have a wireless access point TL-WA501G, laptop and a cable internet connection with fixed IP address.My laptop can see the wireless access point. But I really do not know how to make it all work and what to start from.
i installed many security programs as a switching from windows guy and decided to get rid of them last night. I uninstalledgufw, clamav(and all based packages), firestarterusing synapticbefore i rebooted the system the internet was well and working. but after i rebooted i had no internet access;firefox couldn't retrieve, update manager and apt-get couldn't connect.the computer knows it's connected to the router i see the connection established sign but I can't even connect to the router by typing "192.168.2.1".the computer can ping itself(127.0.0.1) but can't ping itself in the network (the dhcp address is 192.168.2.3) and replies "operation denied" or something like that.I rebooted using live-cd and connected with no problems; the my internet connection is fineany thoughts will be appreciated P.S.: I did a fast check on the forums and couldn't find anything related; i didn't check thoroughly though.
I'm running Natty and have made two logins on the system. One for myself and family and one for the kids (teens 14-15yr) to play in without Internet access via Admin "Users and Groups". I have hidden the Internet software icons on their screen amongst others i don't want them to see on the menus. On our screen I use a Firefox addon called "Web Of Trust" that can be configured easily for the kids and another addon called 'Blocksite' that I can selectively use for them and myself etc.
I have found out that they have still been able to get on to the net somehow under their login. Will have to observe again!! In the users settings for the kids the tick box for 'Internet'and 'use modem' access is un-ticked so I presumed that would be enough! Not so!!
I have several Proxy severs set up at our business. I always do the same basic config, except for my version of Fedora (I always grab the newest).
I put 2 nics in a machine Load Squid, Dansguardian and Firestarter. I use Firestarter to direct the surfing traffic from my LAN out a cable modem that I have for each store. This lessons the bandwidth on the T1.
Easy enough. My problem is Firestarter has always been a little flaky. But as of F11 the gui wont stay up for more than a few minutes at a time. It still functions, but you have to be quick if your going to use it because it will inevitable crash.
So I suppose it's time to start doing this the correct way and using IP Tables. Does anybody have a resource they can point me to that will help me understand how to do this? It looks like this might be as simple as setting it up with the GUI Firewall tool that comes with F12 but I'm still not exactly sure how.
