<?xml version='1.0' encoding='UTF-8'?><?xml-stylesheet href="http://www.blogger.com/styles/atom.css" type="text/css"?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearchrss/1.0/' xmlns:georss='http://www.georss.org/georss' xmlns:gd='http://schemas.google.com/g/2005' xmlns:thr='http://purl.org/syndication/thread/1.0'><id>tag:blogger.com,1999:blog-1248972659306827780</id><updated>2012-01-15T14:28:06.315-06:00</updated><title type='text'>Shaun Mallette's Blog</title><subtitle type='html'>Open Source Open Mind</subtitle><link rel='http://schemas.google.com/g/2005#feed' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/posts/default'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default?max-results=100'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/'/><link rel='hub' href='http://pubsubhubbub.appspot.com/'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><generator version='7.00' uri='http://www.blogger.com'>Blogger</generator><openSearch:totalResults>16</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>100</openSearch:itemsPerPage><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-5327669529647654127</id><published>2011-08-01T22:35:00.005-05:00</published><updated>2012-01-09T19:39:56.753-06:00</updated><title type='text'>How to watch the BBC outside of the UK (Updated version)</title><content type='html'>This is an update to an older post. The main difference is the UK exit nodes have been updated to ones that are currently working and are faster. This is a step by step instructions done on Ubuntu so any Debian flavor system shall work as well.&lt;br /&gt;&lt;br /&gt;&lt;b&gt;Step 1:&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;If you don't know which codename of Ubuntu that you are using type:&lt;br /&gt;&lt;b&gt;lsb_release -c &lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Then add this line to your&lt;b&gt; /etc/apt/sources.list&lt;/b&gt; file:&lt;br /&gt;&lt;b&gt;deb  http://deb.torproject.org/torproject.org distribution main&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Replace the word distribution with the codename (i.e. lucid,maverick)&lt;br /&gt;&lt;br /&gt;Then add the gpg key used to sign the packages by running the following commands as root at your command prompt:&lt;br /&gt;&lt;br /&gt;&lt;b&gt;gpg --keyserver keys.gnupg.net --recv 886DDD89&lt;br /&gt;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Now refresh your sources and install Tor by running the following commands at your command prompt:&lt;br /&gt;&lt;br /&gt;&lt;b&gt;apt-get update&lt;br /&gt;apt-get install tor tor-geoipdb&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;Step 2:&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Polipo gets installed with the command above at the time of this writing. Polipo is a caching web proxy that does http pipelining well, so it's well-suited for Tor's latencies.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;After polipo is installed you will need to change the script to work with tor. &lt;br /&gt;&lt;br /&gt;Backup the original polipo config&lt;br /&gt;&lt;br /&gt;&lt;b&gt;cp /etc/polipo/config /etc/polipo/config.backup&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Then edit the config file&lt;br /&gt;&lt;br /&gt;&lt;b&gt;nano /etc/polipo/config&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Delete the script that is in there and replace with &lt;a href="https://gitweb.torproject.org/torbrowser.git/blob_plain/HEAD:/build-scripts/config/polipo.conf"&gt;This&lt;/a&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;Step 3:&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;For this to work with tor you need an exit that has an UK ip address. To do this:&lt;br /&gt;&lt;br /&gt;&lt;b&gt;nano /etc/tor/torrc&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;And add the following at the top and save.&lt;br /&gt;&lt;br /&gt;&lt;b&gt;ExitNodes $B3C940F41C692FEBE7838D608BFF6114F936C3C6, $83F62F50DB1E5E4B6A6B58D9F970E40F26689911, $38B6A42E84BC86A0D217D3CF30EFFEC2678DBA17&lt;br /&gt;StrictExitNodes 1&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;Finally Step:&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Install the &lt;a href="https://www.torproject.org/torbutton/index.html.en"&gt;Tor Button&lt;/a&gt; for Firefox and restart. &lt;br /&gt;&lt;br /&gt;FYI You have to restart Polipo and Tor by doing ie. &lt;b&gt;/etc/init.d/polipo restart or service polipo restart&lt;/b&gt; To allow flash to play you need to go into Firefox's preference -&gt; security settings and uncheck disable plugins during Tor's usage.&lt;br /&gt;&lt;br /&gt;Thanks to the &lt;a href="https://www.torproject.org/index.html.en"&gt;Tor Project &lt;/a&gt; and  &lt;a href="http://johnlewis.ie/watching-iplayer-outside-the-uk-using-tor/"&gt;John Lewis &lt;/a&gt; for the UK exit node information.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-5327669529647654127?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/5327669529647654127/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2011/08/how-to-watch-bbc-outside-of-uk-updated.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/5327669529647654127'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/5327669529647654127'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2011/08/how-to-watch-bbc-outside-of-uk-updated.html' title='How to watch the BBC outside of the UK (Updated version)'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-1046740933695726667</id><published>2011-03-18T22:35:00.003-05:00</published><updated>2011-08-01T22:10:25.445-05:00</updated><title type='text'>How to watch the BBC outside of the UK (Old see updated version)</title><content type='html'>I despise restrictions on content. I believe that information shouldn't be restricted to location. I will walk you step by step so you can achieve the same, the instructions will be done on an Ubuntu system.&lt;br /&gt;&lt;br /&gt;&lt;b&gt;Step 1:&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;If you don't know which codename of Ubuntu that you are using type:&lt;br /&gt;&lt;b&gt;lsb_release -c &lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Then add this line to your&lt;b&gt; /etc/apt/sources.list&lt;/b&gt; file:&lt;br /&gt;&lt;b&gt;deb  http://deb.torproject.org/torproject.org distribution main&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Replace the word distribution with the codename (i.e. lucid,maverick)&lt;br /&gt;&lt;br /&gt;Then add the gpg key used to sign the packages by running the following commands as root at your command prompt:&lt;br /&gt;&lt;br /&gt;&lt;b&gt;gpg --keyserver keys.gnupg.net --recv 886DDD89&lt;br /&gt;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Now refresh your sources and install Tor by running the following commands at your command prompt:&lt;br /&gt;&lt;br /&gt;&lt;b&gt;apt-get update&lt;br /&gt;apt-get install tor tor-geoipdb&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;Step 2:&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;The next step is to set up web browsing. Start by installing Polipo. Polipo is a caching web proxy that does http pipelining well, so it's well-suited for Tor's latencies.&lt;br /&gt;&lt;br /&gt;&lt;b&gt;apt-get install polipo&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;After polipo is installed you will need to change the script to work with tor. &lt;br /&gt;&lt;br /&gt;&lt;b&gt;nano /etc/polipo/config&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Delete the script that is in there and replace with &lt;a href="https://gitweb.torproject.org/torbrowser.git/blob_plain/HEAD:/build-scripts/config/polipo.conf"&gt;This&lt;/a&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;Step 3:&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;For this to work with tor you need an exit that has an UK ip address. To do this:&lt;br /&gt;&lt;br /&gt;&lt;b&gt;nano /etc/tor/torrc&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;And add the following at the bottom and save.&lt;br /&gt;&lt;br /&gt;&lt;b&gt;ExitNodes PDQVPNUK1, PDQVPNUK2, st0nerhenge&lt;br /&gt;StrictExitNodes 1&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;Finally Step:&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Install the &lt;a href="https://www.torproject.org/torbutton/index.html.en"&gt;Tor Button&lt;/a&gt; for Firefox and restart. &lt;br /&gt;&lt;br /&gt;Thanks to the tor project &lt;a href="https://www.torproject.org/index.html.en"&gt;&lt;/a&gt; and where ever I found the UK exit node information.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-1046740933695726667?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/1046740933695726667/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2011/03/how-to-watch-bbc-outside-of-uk.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/1046740933695726667'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/1046740933695726667'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2011/03/how-to-watch-bbc-outside-of-uk.html' title='How to watch the BBC outside of the UK (Old see updated version)'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-7034436475062775637</id><published>2011-02-19T13:27:00.000-06:00</published><updated>2011-02-19T13:27:10.521-06:00</updated><title type='text'>How To Restore Grub2 In Debian Based Systems</title><content type='html'>Sometimes we get curious or need curtain features and install other systems on our computers. The problem that we run into is that it will trash the way we boot them. It is ever easy to get Grub2 to back to the state it was.&lt;br /&gt;&lt;br /&gt;You will need a LIVE cd if you are going to recover Grub2. I will be using an Ubuntu disk for this step by step tutorial. Open up terminal and continue by entering :&lt;br /&gt;&lt;br /&gt;&lt;b&gt;$sudo fdisk -l&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;This will show your partition table.Here is my table to understand it better :&lt;br /&gt;&lt;br /&gt;&lt;b&gt;/dev/sda1 29 8369 66999082+ 83 Linux&lt;br /&gt;/dev/sda2 * 8370 13995 45190845 7 HPFS/NTFS&lt;br /&gt;/dev/sda3 13996 14593 4803435 5 Extended&lt;br /&gt;/dev/sda5 13996 14593 4803403+ 82 Linux swap / Solaris&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Now i will mount Linux (sda1 here), Yours could be different it depends on where your boot partition for Linux was.)&lt;br /&gt;&lt;br /&gt;&lt;b&gt;$sudo mount /dev/sda1 /mnt&lt;br /&gt;$sudo mount --bind /dev /mnt/dev&lt;br /&gt;$sudo mount --bind /proc /mnt/proc&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;Now chroot into the enviroment we made :&lt;br /&gt;&lt;br /&gt;&lt;b&gt;sudo chroot /mnt&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;After chrooting, you will not have to use sudo anymore as you will be root(you can tell by #).&lt;br /&gt;&lt;br /&gt;You may want to edit /etc/default/grub file to fit your system (timeout options etc) just upadte grub if you do.&lt;br /&gt;&lt;br /&gt;&lt;b&gt;#nano -w /etc/default/grub&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Now install/recover Grub2 via :&lt;br /&gt;&lt;br /&gt;&lt;b&gt;#grub-install /dev/sda&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;You can use reconfirm by using:&lt;br /&gt;&lt;br /&gt;&lt;b&gt;#grub-install --recheck /dev/sda&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Now you can exit the chroot, umount the system and reboot your box :&lt;br /&gt;&lt;br /&gt;&lt;b&gt;#exit&lt;br /&gt;$sudo umount /mnt/dev&lt;br /&gt;$sudo umount /mnt/proc&lt;br /&gt;$sudo umount /mnt&lt;br /&gt;$sudo reboot&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;That is it and you are back in business.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-7034436475062775637?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/7034436475062775637/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2011/02/how-to-restore-grub2-in-debian-based.html#comment-form' title='1 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/7034436475062775637'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/7034436475062775637'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2011/02/how-to-restore-grub2-in-debian-based.html' title='How To Restore Grub2 In Debian Based Systems'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>1</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-1362298893362621207</id><published>2010-11-03T15:47:00.007-05:00</published><updated>2010-11-15T02:31:28.843-06:00</updated><title type='text'>Stuxnet Virus Worm - Cyber Attack False Flag by Iran</title><content type='html'>&lt;object width="480" height="295"&gt;&lt;param name="movie" value="http://www.youtube.com/v/-Adg4chwKkM?fs=1&amp;amp;hl=en_US"&gt;&lt;param name="allowFullScreen" value="true"&gt;&lt;param name="allowscriptaccess" value="always"&gt;&lt;embed src="http://www.youtube.com/v/-Adg4chwKkM?fs=1&amp;amp;hl=en_US" width="480" height="295" allowScriptAccess="never" allowFullScreen="true" wmode="transparent" type="application/x-shockwave-flash"&gt;&lt;/embed&gt;&lt;/object&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;I got this from &lt;a href="http://study4cyberwar.com/index.html"&gt;Study4cyberwar.&lt;/a&gt; This site is dedicated to cyberwar information. They have some good information to keep you updated.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-1362298893362621207?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/1362298893362621207/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2010/11/stuxnet-virus-worm-cyber-attack-false.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/1362298893362621207'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/1362298893362621207'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2010/11/stuxnet-virus-worm-cyber-attack-false.html' title='Stuxnet Virus Worm - Cyber Attack False Flag by Iran'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-4546556922427446280</id><published>2010-06-20T16:09:00.004-05:00</published><updated>2010-06-20T16:27:12.172-05:00</updated><title type='text'>Using ClamAV to Protect Your Windows Clients</title><content type='html'>ClamAV can scan incoming emails and you also can configure Squid web proxy to use ClamAV as well. One of the coolest options is that Samba can be configured to use ClamAv to scan files when they are accessed. Note: Using ClamAV on your Linux servers to sanitize oncoming data to filter email and HTTP traffic won't make you completely safe so I advise to still have a local anti-virus program installed on those Windows PC. Most distros have ClamAV in the repository except for RHEL and CentOS so if you have them installed just search the web for the RPMs. ClamAV supports a server mode making it avaiable to other available systems on the network. With this feature you can have one centralized ClamAV server that is kept up to date and has some horsepower to be used by other machines, such as an email server to scan for viruses without bogging down your email server. &lt;br /&gt;To get started install &lt;b&gt;claman-scanner-sysvinit package&lt;/b&gt; &lt;b&gt;on Fedora&lt;/b&gt; or &lt;b&gt;Clamav-daemon on Debian based systems&lt;/b&gt;. On Fedora the clamd conf file (/etc/clamd.d/scan.conf) will need to be edited by uncommenting the TCPScoket and TCPAddr lines.&lt;br /&gt;One of the important things that has to be done is updating the signatures of the antivirus. The majority of antivirus scanners rely on signatures to detect viruses; very few scanners implement heuristic or behavior-based monitoring which I believe to be the better choice. To update ClamAv with the up to date signatures install the &lt;b&gt;clamav-update package on Fedora&lt;/b&gt; or the &lt;b&gt;clamav-freshclam on Debian&lt;/b&gt;. The configure file in &lt;b&gt;/etc/clamav/freshclam.conf&lt;/b&gt; is used for updating info.  Then you can add freshclam to a cronjob so it can run regularly and notify you of the results:&lt;br /&gt;&lt;br /&gt;&lt;b&gt;0 * * * * /usr/bin/freshclam | mail -s "freshclam update info" admin@localhost.org&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Note: To make sure clamd has the most up to date signatures you need to configure freshclam to send a "RELOAD" command to it. &lt;br /&gt;&lt;b&gt;Fedora: NotifyClamd /etc/clamd.d/scan.conf&lt;br /&gt;Debian: NotifyClamd /etc/clamav/clamd.conf&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;Getting email protection is simple as installing &lt;b&gt;clamsmtp&lt;/b&gt;,it will act as a proxy and filter email. In todays world one of the most popular techniques for creating botnets is by what is called "drive-by" downloads. That is where an attacker inserts malicious content into a web page and then infects several hundred or thousands Windows clients that are then compromised and taken over; the answer to that is to use &lt;b&gt;Squid&lt;/b&gt; web proxy and install &lt;b&gt;c-icap&lt;/b&gt;; basically ICAP is like Milter for Sendmail, in that it allows the offload of antivirus processing to a different server.&lt;br /&gt;&lt;br /&gt;Now we move on to Samba protection. What happens when someone brings a removable media with a virus onboard, and it copies itself onto the file server in hoping to infecting others? The &lt;b&gt;samba-vscan&lt;/b&gt; module adds on-access scanning for Samba. The minute a file with a virus is accessed it should be detected and block access to the file. Samba-vscan is not in Debain so you can get it at &lt;a href="http://www.openantivirus.org/projects.php#samba-vscan"&gt;Open Anti-Virus.org&lt;/a&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-4546556922427446280?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/4546556922427446280/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2010/06/using-clamav-to-protect-your-windows.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/4546556922427446280'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/4546556922427446280'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2010/06/using-clamav-to-protect-your-windows.html' title='Using ClamAV to Protect Your Windows Clients'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-7716276447652241851</id><published>2010-05-12T21:33:00.000-05:00</published><updated>2010-05-12T21:33:02.290-05:00</updated><title type='text'>Controlling login attempts with PAM (Pluggable Authentication Module)</title><content type='html'>It is generally a good and sensible practice to lock out a user after a number of failed login attempts, with some exceptions. You don't want to give an intruder unlimited attempts, but you don't want clumsy users pestering you all the time for login resets. And users who wish to play practical jokes locking out other users by trying to su to a different user's account, and failing on purpose.&lt;br /&gt;&lt;br /&gt;On Debian, add this line to &lt;b&gt;/etc/pam.d/common-auth&lt;/b&gt;:&lt;br /&gt;&lt;br /&gt;auth required pam_tally.so onerr=fail no_magic_root&lt;br /&gt;&lt;br /&gt;And this line to &lt;b&gt;/etc/pam.d/common-account&lt;/b&gt;:&lt;br /&gt;&lt;br /&gt;account required pam_tally.so onerr=fail deny=3 reset no_magic_root&lt;br /&gt;&lt;br /&gt;On Red Hat, add the above two lines to /etc/pam.d/system-auth. This gives users three chances to log in, then locks them out if they fail. The no_magic_root option is very important -- this prevents the root user from being locked out. In this era of great bootable rescue disks like Knoppix, that's nowhere near the catastrophe it used to be.&lt;br /&gt;&lt;br /&gt;When the offending user has sufficiently soothed your upset sensibilities, restore access this way:&lt;br /&gt;&lt;br /&gt;&lt;b&gt;# pam_tally --user doofusfred --reset=0&lt;/b&gt;&lt;br /&gt;user doofusfred (1006) had 29&lt;br /&gt;&lt;br /&gt;It even tattles on how many times the user tried to login.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-7716276447652241851?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/7716276447652241851/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2010/05/controlling-login-attempts-with-pam_12.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/7716276447652241851'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/7716276447652241851'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2010/05/controlling-login-attempts-with-pam_12.html' title='Controlling login attempts with PAM (Pluggable Authentication Module)'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-7918812794108646543</id><published>2010-05-12T09:49:00.000-05:00</published><updated>2010-05-12T09:49:58.122-05:00</updated><title type='text'>Working with User and Group Management</title><content type='html'>Group Commands&lt;br /&gt;&lt;br /&gt;Group definitions reside in the /etc/group file. A standard Linux /etc/group file contains the following information: groupname:x:groupid:user list.&lt;br /&gt;&lt;br /&gt;The “x” in the group definition file is a deprecated placeholder for a group password.&lt;br /&gt;&lt;br /&gt;To find out which groups you belong to, type groups at a command prompt.&lt;br /&gt;&lt;br /&gt;$ groups&lt;br /&gt;khess rdpusers&lt;br /&gt;By default on most Linux systems, when an administrator creates a new user account, the system automatically creates a group account with the same name as the user account. An SA can specify a group when he creates the account but the group must already exist.&lt;br /&gt;&lt;br /&gt;Here are two illustrative examples:&lt;br /&gt;&lt;br /&gt;# useradd fred&lt;br /&gt;&lt;br /&gt;# grep fred /etc/passwd&lt;br /&gt;fred:x:504:506::/home/fred:/bin/bash&lt;br /&gt;&lt;br /&gt;# grep fred /etc/group&lt;br /&gt;fred:x:506:&lt;br /&gt;# useradd -g 100 -c "Bob Alobdob" bob&lt;br /&gt;&lt;br /&gt;# grep bob /etc/passwd&lt;br /&gt;bob:x:505:100:Bob Alobdob:/home/bob:/bin/bash&lt;br /&gt;&lt;br /&gt;# grep bob /etc/group&lt;br /&gt;#&lt;br /&gt;Why did the system return no response when you typed in grep bob /etc/group? It’s because the users group is Bob’s primary group. If users were a secondary group, Bob’s username would appear in the list. For example, create a new user with rpdusers (Group ID 504) as a secondary group.&lt;br /&gt;&lt;br /&gt;# useradd -G 504 -c "Jon Shmon" john&lt;br /&gt;&lt;br /&gt;# grep john /etc/passwd&lt;br /&gt;john:x:506:507:Jon Shmon:/home/john:/bin/bash&lt;br /&gt;&lt;br /&gt;# grep john /etc/group&lt;br /&gt;rdpusers:x:504:khess,john&lt;br /&gt;john:x:507:&lt;br /&gt;A group must exist before you assign users to it. The groupadd command creates new groups with a specific Group ID (GID) and name.&lt;br /&gt;&lt;br /&gt;# groupadd -g 1040 accounting&lt;br /&gt;&lt;br /&gt;# grep 1040 /etc/group&lt;br /&gt;&lt;br /&gt;accounting:x:1040:&lt;br /&gt;You may also create a new group with just a group name and the system will assign a GID for you with the command, # groupadd groupname.&lt;br /&gt;&lt;br /&gt;The groupmod command allows you to change the group name but the SA will have to change any files associated with the old group manually.&lt;br /&gt;&lt;br /&gt;# groupmod -n accounting beancounters&lt;br /&gt;# grep 1040 /etc/group&lt;br /&gt;beancounters:x:1040:&lt;br /&gt;Note: Don’t confuse chgrp (changes group permissions) with groupmod (changes the name of a group).&lt;br /&gt;&lt;br /&gt;You can remove a group with the groupdel command.&lt;br /&gt;&lt;br /&gt;# groupdel beancounters&lt;br /&gt;If you prefer to edit configuration files directly, although you shouldn’t, the vigr command edits the /etc/group file in a safe manner by setting locks so that only one administrator at a time can edit the file.&lt;br /&gt;&lt;br /&gt;Administrators rely heavily on the “group” commands for group administration, user administration and in scripting those functions for automated solutions.&lt;br /&gt;&lt;br /&gt;User Commands&lt;br /&gt;&lt;br /&gt;I call this collection of utilities the “user” commands because their functionality centers on user administration and not on action taken by the users themselves. Even if a user knows the location of these commands (/usr/sbin), they still can’t issue them without root privilege.&lt;br /&gt;&lt;br /&gt;For example, a clever user on your system tries to issue useradd and vipw.&lt;br /&gt;&lt;br /&gt;$ /usr/sbin/useradd steve&lt;br /&gt;useradd: Only root may add a user or group to the system.&lt;br /&gt;&lt;br /&gt;$ /usr/sbin/vipw&lt;br /&gt;vipw: Couldn't lock file: Permission denied&lt;br /&gt;vipw: /etc/passwd is unchanged&lt;br /&gt;The User commands have their Group analogs; you add a new user with useradd, modify a user account with usermod and delete a user account with userdel. And you edit the /etc/passwd file directly with vipw. You’ve already seen the useradd command in action in the Group Commands discussion.&lt;br /&gt;&lt;br /&gt;The usermod allows Admins to alter any user account attribute including the user’s real name (comment field), home directory name, account expiration date, disabling functionality, group add and change, login name, account locking and unlocking, alter the user’s shell and more.&lt;br /&gt;&lt;br /&gt;# grep khess /etc/passwd&lt;br /&gt;khess:x:500:500:Kenneth Hess:/home/khess:/bin/bash&lt;br /&gt;&lt;br /&gt;# usermod -c "Ken Hess" khess&lt;br /&gt;&lt;br /&gt;# grep khess /etc/passwd&lt;br /&gt;khess:x:500:500:Ken Hess:/home/khess:/bin/bash&lt;br /&gt;The usermod command requires some restraint and careful typing when issuing commands that can make a user account unusable. Let’s say that Bob Alobdob, from an example in the Group discussion, wants his login name and home directory changed to robert.&lt;br /&gt;&lt;br /&gt;# usermod -d "/home/robert" -m -l robert bob &lt;br /&gt;&lt;br /&gt;# grep robert /etc/passwd&lt;br /&gt;robert:x:505:100:Bob Alobdob:/home/robert:/bin/bash&lt;br /&gt;Notice how I explicitly entered “/home/robert” in the command? If you don’t specify the whole path, Robert won’t have a home directory nor will its contents exist anymore. The command, as shown, changes his current home directory from /home/bob to /home/robert, his login from bob to robert and the -m moves the contents of his “bob” home directory to his “robert” home directory. User permissions change to robert as well for all files in his home directory.&lt;br /&gt;&lt;br /&gt;Note: You cannot change the login name of a currently logged in user.&lt;br /&gt;&lt;br /&gt;The userdel command’s function might seem obvious to you but you might surprise yourself after issuing the command to find that the user’s home directory is still intact.&lt;br /&gt;&lt;br /&gt;Why would any programmer allow that directory to remain as clutter on your home filesystem? This is actually a failsafe mechanism and you should thank the thoughtful programmer who maintains userdel.&lt;br /&gt;&lt;br /&gt;What if two user names only differ by a single letter and you removed the wrong one? The incorrectly deleted user’s home directory and files were wiped from the system with a slip of your finger. With the failsafe mechanism in place, you have to manually remove the home directory and hopefully you would catch your error before doing so.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-7918812794108646543?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/7918812794108646543/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2010/05/working-with-user-and-group-management.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/7918812794108646543'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/7918812794108646543'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2010/05/working-with-user-and-group-management.html' title='Working with User and Group Management'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-1740364936340060853</id><published>2010-04-24T21:11:00.000-05:00</published><updated>2010-04-24T21:11:37.733-05:00</updated><title type='text'>Reset the MySQL root password on Ubuntu/Debian Linux</title><content type='html'>How to change the MySQL root password. Enter the following lines in your terminal.&lt;br /&gt;&lt;br /&gt;Stop the MySQL Server.&lt;br /&gt;sudo /etc/init.d/mysql stop&lt;br /&gt;&lt;br /&gt;Start the mysqld configuration.&lt;br /&gt;sudo mysqld --skip-grant-tables &amp;&lt;br /&gt;&lt;br /&gt;Login to MySQL as root.&lt;br /&gt;mysql -u root mysql&lt;br /&gt;&lt;br /&gt;Replace YOURNEWPASSWORD with your new password!&lt;br /&gt;UPDATE user SET Password=PASSWORD('YOURNEWPASSWORD') WHERE User='root'; FLUSH PRIVILEGES; exit;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-1740364936340060853?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/1740364936340060853/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2010/04/reset-mysql-root-password-on.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/1740364936340060853'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/1740364936340060853'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2010/04/reset-mysql-root-password-on.html' title='Reset the MySQL root password on Ubuntu/Debian Linux'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-3494999145677563834</id><published>2010-04-11T11:59:00.002-05:00</published><updated>2010-04-11T12:15:07.293-05:00</updated><title type='text'>Preventing SSH Attacks With DenyHosts</title><content type='html'>SSH is a great way to remotely administer a server. However, it still has a number of issues when you open it up to the world. The server and client communications are secure but that doesn’t mean the hosts involved are. Opening an SSH service to the world allows for brute force attacks and means that the carbon interface is still the weakest link.&lt;br /&gt;There are some very simple steps you can take to really harden remote access over SSH, especially if you can’t simply tie the service down to a limited number of source ports.&lt;br /&gt;&lt;br /&gt;First things first, sshd_config. In Ubuntu this is usually found in /etc/ssh and can be used to configure a great number of features. The simplest ones to deal with are always the best. Restricting the users who can login via SSH is a first principle. This can be done in one of two ways, by user or by group. AllowGroups allows any user in this group authenticated access to the server via SSH. A more fine grained approach is to use the AllowUsers option.&lt;br /&gt;&lt;br /&gt;Another easy win is by moving the listen port from 22 to some other randomly assigned port. This reduces the likelihood of a scan showing SSHD running.&lt;br /&gt;&lt;br /&gt;Other steps you might want to take include disabling root access, disable password authentication and using keys only.&lt;br /&gt;&lt;br /&gt;sudo apt-get install denyhosts&lt;br /&gt;&lt;br /&gt;DenyHosts is a python script intended to be run by Linux system administrators to help thwart SSH server attacks (also known as dictionary based attacks and brute force attacks).&lt;br /&gt;&lt;br /&gt;Denyhosts acts as a dynamic blocker for SSH and other services. It relies on the /etc/hosts.deny and hosts.allow. It dynamically builds a list of hosts that repeatedly connect to your server. By default the service will block connections from IP sources that are repeated attempting to connect and access your host. The denyhosts process is configured in /etc/denyhosts.conf &lt;br /&gt;&lt;br /&gt;Once you’ve put these steps in place you can rest assured the SSH on a public facing host is much more secure.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-3494999145677563834?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/3494999145677563834/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2010/04/preventing-ssh-dictionary-attacks-with.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/3494999145677563834'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/3494999145677563834'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2010/04/preventing-ssh-dictionary-attacks-with.html' title='Preventing SSH Attacks With DenyHosts'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-5996811474659749992</id><published>2010-02-20T15:59:00.003-06:00</published><updated>2010-02-20T16:06:34.233-06:00</updated><title type='text'>Working with Debian packages from the Command Line.</title><content type='html'>Here is a few command line entries that I use almost daily. &lt;br /&gt;&lt;br /&gt;&lt;b&gt;apt-cache search&lt;/b&gt; (packagename)will produce the following:&lt;br /&gt;&lt;br /&gt;chicagonpg@Quadzilla ~ $ apt-cache search gftp&lt;br /&gt;gftp-common - shared files for other gFTP packages&lt;br /&gt;gftp-gtk - X/GTK+ FTP client&lt;br /&gt;gftp - X/GTK+ FTP client&lt;br /&gt;gftp-text - colored FTP client using GLib&lt;br /&gt;&lt;br /&gt;Then to install just sudo apt-get install gftp-gtk (gtk is the gnome gui app)&lt;br /&gt;&lt;br /&gt;Once installed you can check what version you have by doing:&lt;br /&gt;&lt;br /&gt;&lt;b&gt;gftp-gtk --version &lt;/b&gt;&lt;br /&gt;&lt;br /&gt;chicagonpg@Quadzilla ~ $ gftp-gtk --version&lt;br /&gt;gFTP 2.0.19&lt;br /&gt;&lt;br /&gt;I have version 2.0.19&lt;br /&gt;&lt;br /&gt;To check if you have a certain application installed on your system &lt;br /&gt;use &lt;b&gt;dpkg -s&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;chicagonpg@Quadzilla ~ $ dpkg -s vlc&lt;br /&gt;Package: vlc&lt;br /&gt;Status: install ok installed&lt;br /&gt;Priority: optional&lt;br /&gt;Section: video&lt;br /&gt;Installed-Size: 3912&lt;br /&gt;Maintainer: Ubuntu Developers &lt;ubuntu-devel-discuss@lists.ubuntu.com&gt;&lt;br /&gt;Architecture: amd64&lt;br /&gt;Version: 1.0.2-1ubuntu2.1&lt;br /&gt;Replaces: vlc-nox (&lt;&lt; 0.9.2-1)Provides: mp3-decoderDepends: vlc-nox (= 1.0.2-1ubuntu2.1), libaa1 (&gt;= 1.4p5), libc6 (&gt;= 2.8), libdbus-1-3 (&gt;= 1.0.2), libfreetype6 (&gt;= 2.2.1), libfribidi0 (&gt;= 0.10.9), libgcc1 (&gt;= 1:4.1.1), libgl1-mesa-glx | libgl1, libglib2.0-0 (&gt;= 2.12.0), libgtk2.0-0 (&gt;= 2.8.0), libnotify1 (&gt;= 0.4.5), libnotify1-gtk2.10, libqtcore4 (&gt;= 4.5.1), libqtgui4 (&gt;= 4.5.1), libsdl-image1.2 (&gt;= 1.2.5), libsdl1.2debian (&gt;= 1.2.10-1), libstdc++6 (&gt;= 4.2.1), libtar, libvlccore2 (&gt;= 1.0.0~rc1), libx11-6, libx264-67 (&gt;= 1:0.svn20090502), libxcb-keysyms1 (&gt;= 0.3.6), libxcb1, libxext6, libxinerama1, libxv1, libxxf86vm1, zlib1g (&gt;= 1:1.2.3.3.dfsg), ttf-dejavu-core&lt;br /&gt;Recommends: vlc-plugin-pulse (= 1.0.2-1ubuntu2.1)&lt;br /&gt;Suggests: mozilla-plugin-vlc, videolan-doc&lt;br /&gt;Conflicts: vlc-nox (&lt;&lt; 0.9.2-1)Description: multimedia player and streamer VLC is the VideoLAN project's media player. It plays MPEG, MPEG2, MPEG4, DivX, MOV, WMV, QuickTime, mp3, Ogg/Vorbis files, DVDs, VCDs, and multimedia streams from various network sources. . VLC can also be used as a streaming server that duplicates the stream it reads and multicasts them through the network to other clients, or serves them through HTTP. . VLC has support for on-the-fly transcoding of audio and video formats, either for broadcasting purposes or for movie format transformations. Support for most output methods is provided by this package, but features can be added by installing additional audio plugins (vlc-plugin-pulse, vlc-plugin-sdl) or video plugins (vlc-plugin-sdl, vlc-plugin-ggi, vlc-plugin-svgalib). There is also a web browser plugin in the mozilla-plugin-vlc package.Homepage: http://www.videolan.org/vlcOriginal-Maintainer: Debian multimedia packages maintainers &lt;pkg-multimedia-maintainers@lists.alioth.debian.org&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;As you can see the status is installed but it also gives you some good information on the package as well.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-5996811474659749992?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/5996811474659749992/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2010/02/working-with-debian-packages-from.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/5996811474659749992'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/5996811474659749992'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2010/02/working-with-debian-packages-from.html' title='Working with Debian packages from the Command Line.'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-645530565173064339</id><published>2009-12-27T21:16:00.000-06:00</published><updated>2009-12-27T21:16:23.872-06:00</updated><title type='text'>Recover Forgotten Ubuntu Password without reinstalling</title><content type='html'>If you forgot you password for your ubuntu system you can recover using the following steps&lt;br /&gt;&lt;br /&gt;Turn your computer on.&lt;br /&gt;&lt;br /&gt;Press ESC at the grub prompt.&lt;br /&gt;&lt;br /&gt;Press e for edit.&lt;br /&gt;&lt;br /&gt;Highlight the line that begins kernel ………, press e&lt;br /&gt;&lt;br /&gt;Go to the very end of the line, add rw init=/bin/bash&lt;br /&gt;&lt;br /&gt;press enter, then press b to boot your system.&lt;br /&gt;&lt;br /&gt;Your system will boot up to a passwordless root shell.&lt;br /&gt;&lt;br /&gt;Type in passwd username&lt;br /&gt;&lt;br /&gt;Set your password.&lt;br /&gt;&lt;br /&gt;Type in reboot&lt;br /&gt;&lt;br /&gt;If this doesnt work you can alternatively try this:&lt;br /&gt;&lt;br /&gt;Turn on your computer, and as soon as you the Press Esc to enter grub message, press the escape key.&lt;br /&gt;&lt;br /&gt;Select the option that says (recovery mode).&lt;br /&gt;&lt;br /&gt;Your PC will boot into a shell. Once you get a command prompt, type "passwd username" where the username is your username.&lt;br /&gt;&lt;br /&gt;Enter a new password when prompted, and again when prompted again&lt;br /&gt;&lt;br /&gt;Type reboot to reboot your system&lt;br /&gt;&lt;br /&gt;Another way is to boot into the system via a live cd open up Applications-&gt;Accessories-&gt;Terminal&lt;br /&gt;then mount your ubuntu drive if its on /dev/sda1 do this:&lt;br /&gt;&lt;br /&gt;mount /dev/sda1/ /media/sda1&lt;br /&gt;&lt;br /&gt;Then we chroot into the system:&lt;br /&gt;&lt;br /&gt;chroot /media/sda1&lt;br /&gt;&lt;br /&gt;passwd user&lt;br /&gt;&lt;br /&gt;Now change the password, and reboot your box!&lt;br /&gt;&lt;br /&gt;Ref http://www.ubuntu-unleashed.com/&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-645530565173064339?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/645530565173064339/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2009/12/recover-forgotten-ubuntu-password.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/645530565173064339'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/645530565173064339'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2009/12/recover-forgotten-ubuntu-password.html' title='Recover Forgotten Ubuntu Password without reinstalling'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-696692095605407213</id><published>2009-12-15T00:02:00.007-06:00</published><updated>2009-12-17T18:54:33.874-06:00</updated><title type='text'>How to install OpenSSH in Ubuntu to connect to another computer</title><content type='html'>OpenSSH encrypts all traffic including passwords to effectively eliminate connection hijacking or eavesdropping on the traffic. SSH was designed as a replacement for Telnet,rlogin and rsh, which send information, notably passwords in plaintext leaving them open for interception. OpenSSH provides secure tunneling capabilities and several authentication methods, and supports all SSH protocol versions. &lt;br /&gt;This will all be done in Terminal.&lt;br /&gt;&lt;br /&gt;Type the following two commands to install both ssh client and server:&lt;br /&gt;&lt;br /&gt;sudo apt-get install openssh-server openssh-client &lt;br /&gt;&lt;br /&gt;You can do the same for the other pc or just install openssh-server if the pc is just going to be a server.&lt;br /&gt;To log in you would do the following:&lt;br /&gt;&lt;br /&gt;ssh yourusername@remotepc (ex. ssh bob@192.168.1.1) if the two computers have the same username you can just do ssh 192.168.1.1&lt;br /&gt;you will see a message like this&lt;br /&gt;Host key not found from database.Key fingerprint:xezop-fomas-lifot-pisoc-zyvik-hutoz-bafaf-zapyc-lubev-riked-dexax&lt;br /&gt;You can get a public key's fingerprint by running% ssh-keygen2 -F publickey.pub on the keyfile.&lt;br /&gt;Are you sure you want to continue connecting (yes/no)&lt;br /&gt;&lt;br /&gt;Type yes and it will add the RSA key this will only happen once, that is it. By default OpenSSH will be listening on port 22 but I would change that to a port of your choice for security since a network port scanner like Nmap can be ran by intrudes. &lt;br /&gt;The configuration file is in /etc/ssh/sshd_config&lt;br /&gt;we can use gedit to modify this:&lt;br /&gt;sudo gedit /etc/ssh/sshd_config you will see #Port 22 remove the # and change the port number to something like 3787, now save the changes.&lt;br /&gt;Now since we changed the port number the command to use ssh will be ssh -p222 192.168.1.1 (-p tells ssh what port to use)&lt;br /&gt;Other commands that can be used if needed are:&lt;br /&gt;  To stop server:&lt;br /&gt;sudo /etc/init.d/ssh stop&lt;br /&gt;&lt;br /&gt;  To start server:&lt;br /&gt;sudo /etc/init.d/ssh stop&lt;br /&gt;&lt;br /&gt; To restart server:&lt;br /&gt;sudo /etc/init.d/ssh restart&lt;br /&gt;SSH is one of my favorite programs. I would advise to look at the man pages by typing man ssh to view all the options.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-696692095605407213?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/696692095605407213/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2009/12/how-to-install-openssh-in-ubuntu-to.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/696692095605407213'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/696692095605407213'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2009/12/how-to-install-openssh-in-ubuntu-to.html' title='How to install OpenSSH in Ubuntu to connect to another computer'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-2324054466863014569</id><published>2009-12-03T17:52:00.005-06:00</published><updated>2010-01-30T03:12:26.539-06:00</updated><title type='text'>Reclaim Disk Space</title><content type='html'>Filling a partition to 100% can have an unpleasant effect on your system. When services and other programs cannot write to their log files, or cannot save data in /var, you could be in trouble. These programs won't be able to save their data, and typically quit out (or, in some extreme cases, crash dramatically!). To avoid this, the ext2,ext3 and ext4 filesystems reserve 5% of their capacity for only root processes to use. This is a good idea, but 5% is a lot on large drives - for instance, it's 25GB on a 500GB drive. Also, there is no need to reserve any space on a filesystem not used for root files, such as /home.&lt;br /&gt;&lt;br /&gt;The good news is that not only is this 5% not hardcoded into the filesystem, it can be changed on the fly without disturbing the your data and files. Tune2fs is used to tune various parameters of an ext2,ext3 and the new ext4 filesystem. It can be used to change the volume label or the number of mounts between forced execution of fsck and a host of other, more esoteric settings, but the options we are interested in here are -m and -r. The former changes the percentage of filesystem blocks reserved for the root user, while the latter uses an absolute number of blocks. &lt;br /&gt;&lt;br /&gt;Example: tune2fs -m 2  /dev/sda1&lt;br /&gt;&lt;br /&gt;reduces the reserved area to 2% of the filesystem, which may be more appropriate for if you have a large / or /var filesystem. If you're using a drive of 500GB or larger, this is the best option.&lt;br /&gt;&lt;br /&gt;This line of code:&lt;br /&gt;&lt;br /&gt;tune2fs -m 0  /dev/sda1&lt;br /&gt;&lt;br /&gt;sets the filesystem to have no reserved blocks, a good setting for /home that doesn't need a reserved area for the superuser.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-2324054466863014569?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/2324054466863014569/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2009/12/reclaim-disk-space.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/2324054466863014569'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/2324054466863014569'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2009/12/reclaim-disk-space.html' title='Reclaim Disk Space'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-2575052112250100409</id><published>2009-05-27T18:06:00.001-05:00</published><updated>2009-05-27T18:08:59.111-05:00</updated><title type='text'>GNU? Linux? Oh, Ubuntu!!!</title><content type='html'>      &lt;!-- ======================================================= --&gt;   &lt;!-- Created by AbiWord, a free, Open Source wordprocessor.  --&gt;   &lt;!-- For more information visit http://www.abisource.com.    --&gt;   &lt;!-- ======================================================= --&gt;   &lt;meta equiv="content-type" content="text/html;charset=UTF-8"&gt;   &lt;title&gt;&lt;/title&gt;   &lt;style type="text/css"&gt;    &lt;!-- #toc, .toc, .mw-warning { 	border: 1px solid #aaa; 	background-color: #f9f9f9; 	padding: 5px; 	font-size: 95%; } #toc h2, .toc h2 { 	display: inline; 	border: none; 	padding: 0; 	font-size: 100%; 	font-weight: bold; } #toc #toctitle, .toc #toctitle, #toc .toctitle, .toc .toctitle { 	text-align: center; } #toc ul, .toc ul { 	list-style-type: none; 	list-style-image: none; 	margin-left: 0; 	padding-left: 0; 	text-align: left; } #toc ul ul, .toc ul ul { 	margin: 0 0 0 2em; } #toc .toctoggle, .toc .toctoggle { 	font-size: 94%; }@media print, projection, embossed { 	body { 		padding-top:1in; 		padding-bottom:1in; 		padding-left:1in; 		padding-right:1in; 	} } body { 	font-family:'Times New Roman'; 	color:#000000; 	widows:2; 	font-style:normal; 	text-indent:0in; 	font-weight:normal; 	text-align:left; 	font-variant:normal; 	text-decoration:none; 	font-size:12pt; } table { } td { 	border-collapse:collapse; 	text-align:left; 	vertical-align:top; } p, h1, h2, h3, li { 	color:#000000; 	font-family:'Times New Roman'; 	font-size:12pt; 	text-align:left; 	vertical-align:normal; }      --&gt;   &lt;/style&gt;     &lt;div&gt;        &lt;p dir="ltr" style="text-align: left;"&gt;&lt;span lang="en-US"&gt;In the open source community we forget sometimes that non-techie individuals or Windows tech people don't understand what we are talking about. An example is just in this title GNU which is a recursive acronym&lt;/span&gt; for GNU's not Unix. Living in the FLOSS(Free Libre Open Source Software) community, we are generally limited to a small social group which really isn't that small since their are millions of users around the world. I decided to write about this in my blog due to a conversation I had with two individuals. I was at a cafeteria when I was approached with comments reference my EEEPC. Since I'm a Linux advocate I assured to let them know that is was running Linux. I just assumed that people would know the word Linux, but now that I look back in time even I didn't know what it was before I ran it. They saw my wallpaper that had an Ubuntu logo on it with the words Ubuntu and they pointed to it and said I know what that is. You see in my community it all makes sense because I know my community but to others it is just odd. Their are just to many names for Linux. People are use to one name systems like Windows or Mac. Do we call the system by what the Free Software Foundation calls it GNU/Linux or just Linux. To get to the bottom of it the name Linux really means the heart of the system the kernel, in return we use that as the name. Linux has many distributions Ubuntu,Fedora,OpenSuse,Debian,Slackware just to name a few. Now with Ubuntu standing out in the public eye it is used to define Linux which really isn't fair to the rest of the distributions. I know that people will not comprehend entirely which is ok but we need not to scare some people off by name confusion. Maybe by using the word Linux after the distributions name will help like Ubuntu Linux, Fedora Linux. Well, anyway that is my thoughts for this post. &lt;/p&gt;   &lt;/div&gt;  &lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-2575052112250100409?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/2575052112250100409/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2009/05/gnu-linux-oh-ubuntu.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/2575052112250100409'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/2575052112250100409'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2009/05/gnu-linux-oh-ubuntu.html' title='GNU? Linux? Oh, Ubuntu!!!'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-3027060302391962744</id><published>2009-05-11T20:51:00.005-05:00</published><updated>2009-05-11T21:18:32.661-05:00</updated><title type='text'>Media Center Update</title><content type='html'>Installed Ubuntu 9.04 64bit,Mythtv and XBMC on my media center. The stats of the media center are as follows:&lt;br /&gt;Thermaltake Tenor case&lt;br /&gt;ECS KN1SLI 939 board&lt;br /&gt;Nvidia 9600GT&lt;br /&gt;Hauppague HVR 1800&lt;br /&gt;750GB Seagate&lt;br /&gt;Asus DVD&lt;br /&gt;2 GB RAM&lt;br /&gt;Most of my movies are on this box which is very convenient,&lt;br /&gt;my music collection is on my Quadcore desktop box which&lt;br /&gt;I just SSH into to access which saves space on the hard drive.&lt;br /&gt;Can't wait for my next project.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-3027060302391962744?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/3027060302391962744/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2009/05/media-center-update.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/3027060302391962744'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/3027060302391962744'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2009/05/media-center-update.html' title='Media Center Update'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-1248972659306827780.post-1052360856283637458</id><published>2009-04-15T17:46:00.000-05:00</published><updated>2009-04-15T18:04:17.308-05:00</updated><title type='text'>New Server Setup</title><content type='html'>I have been running an Ubuntu server for a while now. It comes time to try something different. CentOS 5.3 was just release not to long ago and this will be my new adventure. I have worked with a Red Hat server prior and since CentOS is basically the same thing I will be familiar with it. The new server will feature Apache of course with MySQL and Drupal.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1248972659306827780-1052360856283637458?l=shaunmallette.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://shaunmallette.blogspot.com/feeds/1052360856283637458/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://shaunmallette.blogspot.com/2009/04/new-server-setup.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/1052360856283637458'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1248972659306827780/posts/default/1052360856283637458'/><link rel='alternate' type='text/html' href='http://shaunmallette.blogspot.com/2009/04/new-server-setup.html' title='New Server Setup'/><author><name>Shaun Mallette</name><uri>http://www.blogger.com/profile/08385774908269461856</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='21' height='32' src='http://1.bp.blogspot.com/_y2LnPZO6KI0/SxhXRBE63QI/AAAAAAAAAJc/7d32p8YNC24/S220/cubs.jpg'/></author><thr:total>0</thr:total></entry></feed>
