I am using ubuntu 11.04 in my home desktop. Is it necessary that firewall should be active inorder to avoid hack? I heard that we will not be given static ip address, only paid one will get static ip address that can be used for web server implementation. If my system doesnt have static address then can others access my system?
View 9 Replies
allow sftp access to my Ubuntu system (happens to be desktop as it's also my main system) using accounts that are not able to login normally. (I have already managed to create such accounts.) These accounts need to be chrooted (also already accomplished with the openssh daemon settings.) Where I run into problems is that I want to give them (read only) access to files outside the chroot (on another partition in fact) and the matter if made more difficult because the directories to be shared are on NTFS-3G partitions (as they are a shared linux / windows storage drive). Is this possible and if so, what do I need to do?
Edit - Forgot to include versions
Ubuntu 10.10
openssh 1.5.5p1-4ubuntu4 (the one that comes with 10.10)
This might sound really stupid, so you'll all have to excuse my lacking knowledge. I read that USB attacks get more and more common, like putting in an USB stick with a malicious autorun script on it, and it's game over. Can AppArmor protect devices and limit their access to the file system?
View 5 Replies View RelatedI have been trying to use my DS2490 USB to serial device with a Maxim .DG1921G thermocron with owfs. It is supposed to give me access to a virtual file system for the thermocrom without needing to launch owfs as root.
Code:
/var/log/messages gives:
Feb 8 16:22:45 norman-HP-G56-Notebook-PC kernel: [ 236.140141] usb 5-1: new full speed USB device using ohci_hcd and address 2[code]....
but if ds2490 module is loaded it works when run sudo.It seems from this that it is a lack of permissions to USB but I have tried all the methods on at http://owfs.org/index.php?page=udev etc. to overcome this and a few others but none work.I am running Ubuntu 10.10 kernel 2.6.35-22-generic #33-Ubuntu SMP
I often get responses from people who first say: "Are you sure? You want your network to be exposed to the outside world?" I am not experimenting on a Production Server of NASA or any Security Concern Department. Friends, there is no harm in experimenting on your personal computer or on a test computer which is isolated from the production environment. Look at hackers! What do they do? If they don't know how security is breached then how would they come up with security measures?
If my question reads... "How to let any user perform Administrative Tasks on a Linux System irrespective of his/her privileges on that particular system?" then I would not get the right answers in the first place. They will say... "You are letting everyone destroy your system... are you sure you want to do that?" My question is: Why should we restrict ourselves from experimenting even if it sounds weird to other people?
I give you an example where it is desirable to let an unprivileged user perform certain tasks. You want to know if there are any employees in your office who are storing videos in their home directory and filling up the disk space to a great amount. You have a department called "Command Center or Data Center Operations or Help Desk" call it whatever you would, whose work is to monitor such activities, and you create an account "monitor" for them to monitor such activities but they are not able to do them:
[Code]..
Which is the best remote linux hardening GUI tool.Is it possible to use that tool from windows system?
View 8 Replies View RelatedThis happened all of a sudden, the System menu has nothing to offer but 'help and support' and 'About GNOME'. I tried restarting X, also removing the theme i was using but did not help.
View 1 Replies View Relatedthis forum and also to OpenSuse. Wn i shutdown my sys, it restarts rather than shutting down. Please help me out.
View 2 Replies View RelatedLinux Internet Doesnt work
Its connected...
to router netgear
I have a problem which is a great inconvenience to me. I want to say that I've been searching for the answer for a week and couldn't find anything but problems similar to mine which were unresolved.I used to have debian lenny, but one day i decided to reinstall my operating system and upgraded to sid, so I have a fresh install of debian sid with gnome.
The system beep no longer works on gnome.
What I mean, when i move to terminal(like ctrl+alt+f1) it works great, it also works when i type 'beep' in gnome-terminal. but it doesnt make a sound when i e.g. press ctrl+G, when i am being called on irssi, when i press backspace in gnome-terminal. These things used to work in Lenny, and I really need them (especially this hiliting in irssi). I would go back to Lenny if i didnt need some software that is not present for that version of debian. The pcspkr module is loaded
I am using a ubuntu 10.10 desktop,i cannot login to my system it doesnt accept the password. when i login in safe mode i get through but when i run any command i get segmentation fault.
View 5 Replies View RelatedVersion 10.04 LTS. Installed desktop version and network worked but I needed a static IP address and the install configures for a DHCP configured address. I tried changing to static address using the System->Preferences->Network Connections application but was unable to get the system to come up with the network up.
So I manually modified the /etc/network/interfaces and the /etc/resolv.conf files. I restart the system but when I do an ifconfig, I don't see a configured IP address on eth0 (only the loopback address). If I run /sbin/ifup eth0 everything then works fine and ifconfig shows the correct address bound to eth0.
My files are as follows:
I recently set up a web server at home, using a non-standard port, due to my ISP blocking 80. I just checked my log files, and I see a TON of entries indicating that a file was not found "proxy-1.php", "proxyheader.php", etc. I do not have these files, not intend to have them as part of my website. I did a whois looking by IP address for several of these, and they all seem to come from an ISP in China. Is there a way to BLOCK any IP address outside the US (that is somewhat simple to do?)
View 5 Replies View RelatedI have a linux system which is conencted to a corporate lan and it has internet access to it. But i don think that machine hs any static ip or DNS name. I am able to ssh to that machine within the lan but is it possible to ssh to that machine outside the lan using internet?
View 3 Replies View RelatedI got this message on Friday from just one domain. uote:mailsrv.forthnet.gr #<mailsrv.forthnet.gr #5.5.0 smtp; 554 5.5.0 Your message was considered to be spam by the FORTHnet Antispamming Policy and was not delivered to the recipient. The following spam tests returned positive for this message:FORGED_RCVD_HELO,RCVD_IN_BRBL. For further information visitWe are not a spamming community but it seems we have a statice IP address that has a Reverse lookup to "myipaddress.static.lyse.net" and not my email domain. Would setting a cname mail.mydomain.no -> myipaddress.static.lyse.net cure this problem or are there more tricks to be performedOnce I have cured the FORGED_RCVD_HELO I can move to getting the IP removed from BARACUDA.
View 2 Replies View RelatedI'm trying to link 'aubio' (a lib) and its failing on one of ts dep's with this error.
Code:
$ make
Making all in src
make[1]: Entering directory `/home/John/Externals/aubio/aubio-0.3.2/src'
make all-am
[code]....
"Warning: This system can not link to static lib archive /usr/local/lib/libff"
I've configured/make/make installed fftw and its doing just fine in the usr/lib folder, so I'm at a loss at how to fix this. Do I need to build fftw again using some kind of shared make switch? I couldn't find any referance about that.
Okay, just wanted to be perfectly clear on this point... /static/ software builds don't link to /any/ shared libs, right? I.e., can a static-built C program run on a system without a libc installed?
View 1 Replies View RelatedI am trying to configure my Linux router to restrict Internet access for one computer on my LAN. It needs to be restrictive based on the time of day and the days of the week. I am using the MAC address of the computer to single out the one computer that needs to be blocked. However, this is my first attempt at making any rules with iptables, and I am not sure if I am doing this right. If some one can take a look at this I would greatly appreciate it. This is what I have done so far.
Here is my thinking. Create a new target. Check the MAC address, if it is NOT the offending computer return to the default chain. If it is the offending computer check that we are between the allowed hours and dates and ACCEPT. If we are not within the time/date range then drop the packet.
Code:
Here I am trying to route all packets regardless of the computer on the LAN into the blocked_access chain for checking.
Code:
Is it a good idea to route all traffic through the blocked_access chain? I do run other servers that are accessible from the Internet, so I am not sure how this setup will affect that. I also use shorewall on the router to setup iptables for me. How would I integrate this with shorewall?
I am using squid to block access when he is using the web browser. However, he is still able to play games(World of Warcraft) and the like.
I am using Debian sid, iptable(1.4.6), shorewall(4.4.6), kernel 2.6.32-trunk-686.
My HP system suddenly stopped taking ip-address for wifi. I tried to give it static ip-address, it took it. But still I am unable to connect to internet. I tried this both with wicd and network manager.
My system is perfectly working on wired network.
I have a dual boot: XP and Ubuntu.
When I load XP I have an IP address (shown in ipconfig /all) and www.whatismyip.com of 144.82.192.154
When I load Ubuntu I have an IP address (shown in ifconfig and www.whatismyip.com) of 144.82.193.37
These IP addresses seem to be static since I have an Ethernet connection. I have rebooted several times and get the same addresses in XP and Ubuntu. Why are they different?
this is the allert i got:Code:Summary:Your system may be seriously compromised! /usr/sbin/NetworkManager tried to loada kernel module.Detailed Description:SELinux has prevented NetworkManager from loading a kernel module. All confinedprograms that need to load kernel modules should have already had policy writtenfor them. If a compromised application tries to modify the kernel this AVC willbe generated. This is a serious issue.Your system may very well be compromised.Allowing Access:Contact your security administrator and report this issue.Additional Information:
Source Context system_u:system_r:NetworkManager_t:s0
Target Context system_u:system_r:NetworkManager_t:s0
Target Objects None [ capability ]
[code]....
I want to add an ipv6 address in linux.
i am going to use the following command.
# /sbin/ifconfig <interface> inet6 add <ipv6address>/<prefixlength>
Can anyone explain how this command will works?
Is that prefix length value is fixed to 64 or is it vary?if so,can you explain how it could be?
I have built a CentOS server, as many times before, and have has to move it to a new location/network. I had changed the virtual site that was configured with a virtual ip address on the same nic. I have since removed the virtual nic, checked my host files and network files and nothing now has the old ip address. I had issues I believed caused by dns or ip address so I finally uninstalled Apache. Reinstalled it. I still cannot access the site that was there. I have cleared all the data I can from the Firefox browser such as histoy. However when I go to "http://localhost" it says it cannot connect to the old ip address. WHERE IS THAT BEING SENT FROM??? It's driving me crazy. I really don't want to rebuild the server as there are other things that took some time to get configured.
View 111 Replies View RelatedMy problem is that I need to move a moderately complex system from an old system to a new system. The old system is a core 2 duo running on an asus p5k-se (p35 chipset) M/B, Nvidia 8500 gt, 3 x sata II hard disks, 1 x sata dvd, 1 x ide hd, 4GB ram. It runs opensuse 11.1 kde 4 as a desktop system + samba server, apache server, database server + other non-opensuse software. In addition some of the opensuse software is not the default 11.1 versions as later versions were required. The nvidia driver is from the nvidia repo. There are several file systems, some under LVM.
The new system will be a core5 760, asus p7p55d-e M/b (p55 chipset), nvidia 240, 3 x sata II HD, 1 x sata dvd, 4GB ram and possibly 1 x ide HD. This M/B also includes USB 3 & sata III. I have no USB 3 devices but this may eventually change. I have no plans for sata III and believe that it may be better to attach any sata III SSD to the sata II bus.
What I would like to do is to move the hard disks from old system to the new system. What I would like to know is, if the system is left at 11.1, is the system likely to work with the new hardware. If the answer is no, if the system was upgraded to 11.3, would the transfer of the hard disks then work? In order to upgrade from 11.1 to 11.3 using the DVD i believe I should get rid of all non-default repos. I assume that I should also get rid of anything that was installed from them, e.g. the nvidia driver and any software versions installed manually outside RPM. Also is there any default 11.1 software that should be removed either before or after the upgrade to 11.3
Is there a way to to check if the system has the available security updates installed? Specifically, I am looking to do this programmatically.
View 1 Replies View RelatedHow to detect mac address modication in linux
View 1 Replies View RelatedHow Detect the mac address modification of a machine...in linux
View 1 Replies View RelatedI have millions of small chunks of new's and delete's in my program. Even though no memory leak is detected through valgrind or purify, memory grows. But the growth is degrading over the number of times of the execution of the tasks. Can i think that fragmentation plays a role in this?
View 6 Replies View RelatedI have been fiddling around with my ip address configuration using several sources, and this is what I have in the /etc/network/interfaces file:
auto lo
iface lo inet loopback
auto eth0
iface eth0 inet static
address 192.168.1.122
broadcast 255.255.255.255
netmask 255.255.255.0
network 192.168.1.0
gateway 192.168.1.254
Yet, this is what I have in the ifconfig after I restarted the computer:
[Code].....
Could there be any mistakes I have made in the file? Why is it that I seem to have set a static ip address here and is not working?
I'm having difficulties mounting an FTP address to my file system automatically during boot. After a bit of research I have discovered a package called curlftpfs, I've installed this package using aptitude and I had no errors.
I've successfully mounted an FTP address manually using curlftpfs at the command line and proved to myself that this is working as it should...However, I can't get this to mount automatically and I am receiving the following error during boot when I try and mount it through /etc/fstab...
Error connecting to ftp: Failed to connect to (IP address of server): Network is unreachable
My research indicates this package should be able to do this.
I'm still a learner when it comes to Linux, but could this be because TCP/IP services are not started at the time of mounting the filesystems? I've tried a continuous ping at this computer whilst it is booting and I don't get a response until after /etc/fstab has been processed. If this is the reason, can I start them these processes earlier?
Another option would be to have a script/command run when the computer boots, but prior to MySQL loading. If this is possible, it would also satisfy my problems.
