Sponsorised links
May 2008
GNU Squad » Faire du SFTP dans un chroot avec scponlyc
by camel
& 1 other
Commençons tout d’abord par expliquer les quelques termes alambiqués du titre de ce billet pour les néophytes :
* SFTP signifie « Secure File Transfer Program », c’est un programme permettant de transférer des fichiers en utilisant une liaison chiffrée par SSH (Secure SHell) ; attention à ne pas confondre SFTP avec FTPS qui signifie pour sa part « File Transfer Protocol over SSL » !
* chroot est un programme permettant de changer le répertoire racine d’un processus afin que ce dernier n’ai accès qu’à une partie limitée de l’arborescence.
* scponlyc est un shell limité destiné uniquement aux transferts de fichiers dans un chroot.
Le but du jeu est donc de permettre à un utilisateur de transférer des fichiers sur un serveur de manière sécurisée sans qu’il n’obtienne pour autant un shell et sans qu’il lui soit permit de voir l’arborescence du serveur.
April 2008
Sponsorised links
March 2008
SSH dynamic port forwarding with SOCKS
by camel
SSH has numerous uses beyond just logging into a remote system. In particular, SSH allows you to forward ports from one machine to another, tunnelling traffic through the secure SSH connection. This provides a convenient means of accessing a service hosted behind a firewall, or one blocked by an outgoing firewall.
However, forwarding an individual port still requires you to change where your program connects, telling it to use a non-standard port on localhost rather than the standard port on the remote machine, and it requires a separate port forward for each machine you want to access. Dynamic port forwarding via SOCKS provides a more convenient alternative.
The examples in this article assume that you reside behind a restrictive firewall which does not allow outgoing SMTP connections except to a designated mail server. You want to connect to a different mail server, mail.example.net, on port 25. You have an SSH account on a machine shell.example.org, which does not reside within the restrictive firewall and can thus access port 25 on mail.example.net.
Set Up Gateway Level Virus Security With ClamAV And SafeSquid Proxy | HowtoForge - Linux Howtos and Tutorials
by camel
In this HowTo, I will explain how you can secure your network from virus and other malware, by installing ClamAV and integrating it with SafeSquid, to scan all in-coming content for virus, and block all infected content at the HTTP Gateway, even before it enters your network.
Virus Security In SafeSquid
SafeSquid has built-in connectivity to various daemon based anti virus software like ClamAV, Sophos, Avast, F-Prot, NOD32 and Kaspersky. It also has a universal ICAP (Internet Content Adaptation Protocol) client that can be used to connect to ICAP based security software like Dr.Web ICAP, Kaspersky Antivirus for Proxy Server, Trend Micro InterScan Web Security and Symantec Scan Engine.
You can even use multiple anti virus software with SafeSquid to simultaneously scan in-coming content. This does not cause any significant latency, since SafeSquid has a multi-threaded architecture.
How To Install And Use The djbdns Name Server On Debian Etch | HowtoForge - Linux Howtos and Tutorials
by camel
& 1 other
djbdns is a very secure suite of DNS tools that consists out of multiple parts: dnscache, a DNS cache that can be used in /etc/resolv.conf instead of your ISP's name servers and that tries to sort out wrong (malicious) DNS answers; axfrdns, a service that runs on the master DNS server and to which the slaves connect for zone transfers; and tinydns, the actual DNS server, a very secure replacement for BIND.
February 2008
January 2008
How To Install And Use The djbdns Name Server On Debian Etch | HowtoForge - Linux Howtos and Tutorials
by camel
djbdns is a very secure suite of DNS tools that consists out of multiple parts: dnscache, a DNS cache that can be used in /etc/resolv.conf instead of your ISP's name servers and that tries to sort out wrong (malicious) DNS answers; axfrdns, a service that runs on the master DNS server and to which the slaves connect for zone transfers; and tinydns, the actual DNS server, a very secure replacement for BIND.
December 2007
Spain Accommodation
by abby
Spain Hotels Accommodation at discounted rates for Internet bookings. Feature hotels in Salamanca, Seville, Malaga, Granada, Valencia, Alicante
October 2007
OAuth — An open protocol to allow secure API authentication in a simple and standard method from desktop and web applications.
by camel
& 9 others
(via)
An open protocol to allow secure API authentication in a simple and standard method from desktop and web applications.
September 2007
SSL-enabled Name-based Apache Virtual Hosts with mod_gnutls
by camel
& 2 others
his article describes how to implement SSL-enabled name-based vhosts - that is secure virtual hosts which share the same IP address and port - with the SNI-capable mod_gnutls module for Apache’s httpd web server.
August 2007
July 2007
June 2007
How to secure an SSL VPN with one-time passcodes and mutual authentication | HowtoForge - Linux Howtos and Tutorials
by camel
SSL-based VPNs were designed to eliminate the need for complex configurations on the user's PC. Unfortunately, that was before the dangers of public WiFi networks and tougher regulatory requirements came into being. Thanks to WiFi, many attacks that were difficult are now quite simple. In particular, a man-in-the-middle attack can intercept SSL-encrypted traffic, rendering SSL-based VPNs useless - even if it's protected by a typical one-time password system. The man-in-the-middle can easily feed the one-time password into the SSL-based VPN within the alloted time.
May 2007
Cryptsetup, le couteau suisse du chiffrement de partitions ! - TheGlu's blog
by camel
Vous avez envie de chiffrer des fichiers super secrets, comme par exemple votre liste de mot de passe qui est dans un simple fichier texte, ou les fichiers sur votre clé USB pour éviter que l'on vous l'empreinte et récupère votre plan pour dominer le monde ? Cryptsetup est votre ami, il peut faire pleins de choses, grâce au chiffrement.
Secure Websites Using SSL And Certificates | HowtoForge - Linux Howtos and Tutorials
by camel
& 1 other
Today it is possible to create a secure website with relative ease by requiring a client to present a digitally signed certificate. A digitally signed certificate is simply a piece of information that contains data about the subject, public key, dates of validity, identification of the Certificate Authority (CA), and the digital signature. There are typically two ways to go about creating a secure website. First is by the use of a self-signed certificate. The second way is by using a Trusted Certificate signed by a CA. The choice is up to you, and this tutorial will show you how to do both. Go ahead and su into root and let's begin!
