Ubuntu Security :: Adblock Host Recommendations?
Jun 27, 2010I'm looking for a reputable, frequently updated ad-site list for my hosts file. I want to try it out for adblocking.
View 9 RepliesI'm looking for a reputable, frequently updated ad-site list for my hosts file. I want to try it out for adblocking.
View 9 RepliesI would like to know if you guys think this is a safe plugin/extension to use with either Chromium or Firefox.
There is an old page that shows it had security issues in the past.[URL].. Would it be safe to use this or do you think someone could use it to steal my passwords, etc. while browsing?
When 10.04 is released I'll encrypt my /home partition using luks. I've read that xts is good for hard drive encryption and aes is good for cipher encryption. I'm looking for something that is fairly secure without sacrificing a lot of speed.
View 2 Replies View RelatedI have Inceweasel 31.8.0 installed on LXDE Debian Wheezy and I am trying to make AdBlock Plus work. The thing is that I get pop-ups from any site, Youtube ad videos, etc. all the time, just like I have nothing installed to prevent that.
I tried:
- Installing AdBlock from Iceweasel add-ons, with a suscription to easylist ;
- installing xul-ext-adblock-plus (also with the same suscription).
With each configuration or even with none of them, I get the same results as described above. Is there anything I can do ?
By the way, I don't get Youtube ad videos on Chromium with Adblock installed through the Chrome webstore.
I have recently started using Network Connect by Juniper on my Fedora 14 laptop. It took a while to get it to work correctly. So, here is the function I made to allow me to use Network Connect quickly.
Code:
NCremote() {
cd /home/bs/.juniper_networks/network_connect;
echo "Signing into somewhere.com"
echo "Rememeber to escape your password!"
read -p "Username: " user
read -p "Password: " pass
java -jar NC.jar -h 123.43.22.11 -u $user -p $pass -f ../somewhere.com.cert -r "Realm Name" &
cd ;}
Important things to note. You will have to export the certificate from the site, you can use firefox to do that. The '-r' parameter requires the *actual* name of the realm you want to authenticate against.
You will also have to run firefox, go to the network connect site, click the button and let it install first. If it doesn't *make sure* that you have ALL adblock addons disabled.
I tried Midori before and it wasn't really good, but I tried it again later (after updates) and I really like it. Just a few questions:How do you block ads, like in Firefox with AdBlock Plus?How to turn on spell checking? I see it has a setting where you are supposed to enter a dictionary (attached), but I don't know where it could be.
View 1 Replies View RelatedI got chromium to serve as my faster browser. And due to me being a huge privacy nut, I changed my settings and locked the profile by making it read only. I would like to add adblock, so I need to somehow make the profile normal again.
Heres the command I need undone:
chmod a-w -R ~/.config/chromium/Default
The Adbock extension completely wipes out Yahoo! homepage. I think that is a little over aggresive ad blocking. Does anybody know what whitelist rule that would ?
View 1 Replies View RelatedI am running a desktop not a server. As far as i am aware of no server stuff is installed or tunning that does not come with the standard ubuntu 10.04 install. I tried using sudo iptables -A INPUT -s xx.xx.xx.xx -j DROP , it works sometines , then sometimes it does not. Some that it seems to block just come back in about 15 to 20 minutes. On this one in particular i get the following error :
sudo iptables -A INPUT -s 222-208-183-218 -j DROP
iptables v1.4.4: host/network `222-208-183-218' not found
Try `iptables -h' or 'iptables --help' for more information.
For the last four days, I have been getting HIDS alerts like these:
Code:
152.2.x.x - - [15/Feb/2011:04:28:59 -0500] "PROPFIND /C%24.co HTTP/1.1" 405 231
152.2.x.x - - [15/Feb/2011:04:28:59 -0500] "PROPFIND /C%24.com HTTP/1.1" 405 232
[code]....
I want to restrict user for SSH Logon, but able to use SFTP.
Also, i like to know how to restrict a user on SSH from everywhere except one host.
host always ask password on 1st remote desktop (VNC) access Desktop version... how can I disable this?
View 2 Replies View RelatedI need to allow ICMP ping for one host only. I found out how to enable it to all hosts (ICMP Filtering, check ping) but I would like to reduce the scope to one host. I know I can add rules in the user_post script but I can't find the correct iptables command ...
View 4 Replies View RelatedI have an Asterisk on an externally hosted vServer with Lenny. In order to further protect the SSH access I intended to change the Port number 22 to something like 55555. For this I changed the /etc/ssh/sshd_config file and restarted ssh. This caused unfortunately the following problems:
(1) The first login works but DenyHost writes now the IP in its list so that the second login with the same IP is blocked.
(2) With RESET_ON_SUCCESS = yes several logins were possible with the same IP, but later it also was blocked for some still unknown reasons.
(3) Files can be uploaded for being edited, but they can't always be saved. When they can't be saved the next login with this IP is blocked. It thus looks like the blocking can occur while being connected. When the files can't be saved it is however still possible to copy files from the computer to the vServer.
I add below the entries in the auth.log from a logout and a login. It shows further how suddenly the attempts to save files were blocked. After this session the IP used for it was blocked. I don't know where the message "Unable to open env file: /etc/default/locale" comes from. If I remember right I had these messages already before. I don't know how much that is really important.
[Code]....
I am using TomCat6 with Ubuntu Server 9.10 x64. I successfully configured to iptables to redirect the port "443" to "8443" (Tomcat SSL), using this command:
[code]...
way to redirect the audit daemon message to a remote host I checked the auditd.conf and it's man page and find that the log location is specified by the line log_file = file_path and in the man page
Quote:
"log_file: This keyword specifies the full path name to the log file where audit records will be stored. It must be a regular file."
does this mean that the auditd does not have the function to redirect the logs to a remote hosts.
I was able to install and start tftp.I can tftp localhost and get a file, even from a non-administrator login.I can connect from a remote host, but the *get* times out.I suspect there is a security issue. Can you tell me how to lower the security on tftp so that a remote host can do gets?
View 4 Replies View RelatedWe recently had a vulnerability scan done on our network and one of the vulnerabilities was that the dns server discloses the remote host name when using hostname.bind.
Is there any way that we can stop this from happening? Our name server is a Fedora 11 machine.
I have set up SSH and redirected the ssh server to listen on another port other than 22 for a bit of added security.
Now in hosts.deny I have:
ALL : ALL
In hosts.allow I have:
SSH : ip_address_of_client
I can no longer connect. I get the message: ssh_exchange_identification: Connection closed by remote host.
When I change hosts.allow to read:
ALL : ip_address_of_client
I can successfully connect the server.
However, I only want to allow SSH access in hosts.allow. What is the correct syntax?
I have tried and failed with each one of these:
SSH : ip_address:port_number
SSH2 : ipaddress
sshfwd-portnumber : ip_address_of_client
when I am run:
ssh -v "login"@"server"
I get:
OpenSSH_5.3p1 Debian-3ubuntu4, OpenSSL 0.9.8k 25 Mar 2009
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to server ["address"] port 22.
debug1: connect to address "address" port 22: Connection timed out
ssh: connect to host "server" port 22: Connection timed out
I suppose this is because I am connecting from a public institute where there is a firewall that is blocking an outbound connection on port 22.Is there anyway I can bypass the firewall using the internet ?
I would like to know the blocking methode In a Firewall or a Router.whether i will be done by Protocol wise, ho? or it will done through Host wise, How ?
View 2 Replies View RelatedIs there anyway for one Virtual Server to access the main host, or another Virtual Server? Or would they be totally 100% independent?
View 5 Replies View RelatedI am working on a cluster for a molecular dynamics class and I have to edit my FORTRAN code (only the newest and best for me!). In order to get through to the cluster I have to ssh in. The network on which the cluster resides is behind a firewall, so I have to ssh through the firewall into the network first.
this is fine, I can login and move files and folders as needed, including sftp-ing into host 1, then into the cluster so I can transfer files from cluster to host and then host to me. This gets rather tiresome, so it would be nice to edit the files in place.
The problem is that when I access my code with emacs it launches the emacs client on Host 1, with no mouse support. I know the purists will howl about how I should be using keyboard shortcuts, but I am a chemist and not a programmer, so the mouse is very nice for me. Is there any way I can perhaps mount the cluster using sshfs so that when I open my code it launches a local instance of emacs? Sorry if this is the wrong forum, but I thought it was network related.
He's on dial-up so getting updates and installing packages such as restricted extras would be painful. I'm thinking Mint but have little personal experience with distros beyond Ubuntu.
View 3 Replies View Relatedhaving no luck with 9.10 i am wondering what linux is recommended that actually works? ie no internet problems with videos etc. ie recognising cd and dvd and playing them back. ie a cd/dvd drawer that opens and waits until it's told to close instead of chomping discs. ie no colour issues. ie better than 800+600 resolution without having to stick a new graphics card in place of the stock card? etc etc, ie something that works and means i don't have to buy a new apple os. this is the machine i have running, apple power macintosh g4 450 dp (gigabit) [url]
View 9 Replies View RelatedI am looking for a FTP server replacement that is web based. Something like you see services have out there. I looked at a product called SynaMan from Synametrics Technologies and it really looked like it would do what I wanted but I could never get it to work with Ubuntu.Does anyone have any suggestions. This is for corporate use.Average users just don't get FTP
View 2 Replies View RelatedI have a site that is currently on an unreliable server. Yes, we're fixing that; suffice to say the situation isn't permanent. I would like to know how to set up a fail check on the site. There are plenty of services out there, but I've got a server that I can add scripts to in the crontab. What elements would you recommend I have in the script?
View 1 Replies View RelatedApart from ZoneMinder, does anybody know of any DVR software that I can use with my CCTV camera, and a purpose built linux computer. Looking for motion detection.
View 1 Replies View RelatedI messed up my Karmic install on my laptop trying to get wireless networking connection to behave better I'm not really sure what I did, but the problem I have is that, though it connects to my wireless network, it does not get a route to it. Any attempt to reach the router with a ping yields a destination unreachable. Trying to fix it in true hack fashion, I tried messing around with the static routes. I added an explicit route for my router (route add 192.168.0.1 wlan0) with no avail. I ensured there was a default route to the router which is a gateway outside of my LAN (route add default wlan0 gw 192.168.0.1). I have another route to my LAN network with a gateway of "*". I've done all this but the results are the same.
So, I'm interested in recommendations to fix this. Is there some networking setup/install procedure I can rerun? Does a recovery boot work? Or is it best to go back and reinstall Karmic? Are there other places that you might suggest I look to in order to fix this?
What's new as far as audio players ? I still like vlc for videos.
View 2 Replies View Related