Libya Linux Users Group

Hello,

Today I gave a lecture for FOSsiL ( Free/Open Source software in Libya) group, the presentation about ” Is Linux by Default, Secure your webserver ( Apache ). we just get in hot topics ACL, MAC, Kerenl Patch , Linux Basic permisson , suPHP, mod_security and more about Apache security assumption. the presentation available for download here .

Just I want to thanks people really helped us in linux day:

Hadi Naser ” Libyan Spider Network ” : He designed all artworks for Linux day in Helping us in bulding the website ” Hosting , Domain , and helping in CSS ” Thanks Ju “.

Salah Bunammah “LTT “for his effort to make Linux day and his passion in Opensource

Jumana ” Libyan Spider Network ” : LTR , float:right;  Thanks for helping in coding and css’ing :d

Android G1

Really ” wow” phone G1, the first Google Android mobile operating system based phone designed by HTC and offered by T-Mobile, made its official debut in New York today. The phone will be available starting Oct. 22 and is priced at $180 along with a two-year contract for T-Mobile customers.

The key specs are:

–Dimensions: 4.60” x 2.16” x 0.62”; Weight: 5.6 ounces; Display: 3.17 inches
–3-megapixel camera with photo-sharing capabilities
–Music player
–Pre-installed 1 GB Micro SD memory card (support for up to an 8GB memory card)
–Bluetooth-enabled
–GPS capabilities
–GSM/GPRS/EDGE/Wi-Fi and UMTS/HSDPA
–Up to 130 hours standby, up to 5 hours talk time
–Hinged touch screen that slides open to reveal a full QWERTY keyboard
–Trackball for one-handed navigation
–Three color options in the U.S. - white, brown and black

The phone offers one-click access to Google search, a full HTML web browser and a zoom function that expands any page by a simple tap on the screen, a la the iPhone.

The device also comes with easy access to popular Google applications such as Google Maps Street View, Gmail and YouTube.

At launch applications from the Android app marketplace include
–ShopSavvy to help people do comparative shopping
–Ecorio to help people keep track of their daily travels and view what their carbon footprint looks like
–BreadCrumbz to enable people to create a step-by-step visual map using photos; –Amazon MP3 Store

Finally Linux day in Libya !!!, Linux day in Libya-Tripoli in 24 Jan 2009 will be held at the ALiemad tower, Ubuntu will send CD’s and sitcker for this day ” Thanks Ubuntu- Jono Bacon ” for his help .

for more info about the day visit F/OSsiL website http://fossil.ly

From ubuntugeek
If you have multiple servers with similar or identical configurations (such as nodes in a cluster), it’s often difficult to make sure the contents and configuration of those servers are identical. It’s even more difficult when you need to make configuration modifications from the command line, knowing you’ll have to execute the exact same command on a large number of systems .

In this tutorial we will see some tools to execute one command on multiple remote servers using ssh.First you need to make sure you have ssh installed in your machine or you can install using the following command

sudo aptitude install ssh

If you have multiple servers with similar or identical
configurations (such as nodes in a cluster), it’s often difficult to
make sure the contents and configuration of those servers are
identical. It’s even more difficult when you need to make configuration
modifications from the command line, knowing you’ll have to execute the
exact same command on a large number of systems .

In this tutorial we will see some tools
to execute one command on multiple remote servers using ssh.First you
need to make sure you have ssh installed in your machine or you can
install using the following command

sudo aptitude install ssh

Now we are going to see the following tools which does the required job we are looking for

1) Pssh

2) cluster ssh

3) Multixterm

1) Pssh

pssh provides a number of commands for executing against a group of
computers, using SSH. It’s most useful for operating on clusters of
homogenously-configured hosts.

The package contains:

- Parallel ssh (parallel-ssh, upstream calls it pssh), executes commands on multiple hosts in parallel

- Parallel scp (parallel-scp, upstream calls it pscp), copies files to multiple remote hosts in parallel

- Parallel rsync (parallel-rsync, upstream calls it prsync), efficiently copies files to multiple hosts in parallel

- Parallel nuke (parallel-nuke, upstream calls it pnuke), kills processes on multiple remote hosts in parallel

- Parallel slurp (parallel-slurp, upstream calls it pslurp), copies
files from multiple remote hosts to a central host in parallel

These tools are good for controlling large collections of nodes, where faster alternatives

Read the rest of this entry »

Two days ago F/OSsiL website goes online, I want to thank all colleagues in Libyan Spider Network for their generous help, FOSsiL will be the official board for this group and all activity will realease on it, FOSsiL preparing for Linux Day in Libya. for more info go to FOSSIL.LY

Its goal is to provide a comprehensive compilation of tools which, when working together, grant a network/security administrator with detailed view over each and every aspect of his networks/hosts/physical access devices/server/etc…
Besides getting the best out of well known open source tools, some of which are quickly described below these lines, ossim provides a strong correlation engine, detailed low, mid and high level visualization interfaces as well as reporting and incident managing tools, working on a set of defined assets such as hosts, networks, groups and services.

Read the rest of this entry »

There are times when you want to connect to the Internet through unknown and/or insecure networks such as  WiFi hotspot. If you aren’t careful, you might make it all too easy for someone to sniff your connection using Ettercap.

One of the best ways to secure your connection is to use a VPN, but that isn’t always practical. So here’s a way to securely connect to the net using only an SSH client and a remote box that you control/trust.

Requirements:

1. PuTTY* loaded on your local machine
2. Remote host running OpenSSH (e.g. Linux box at home)
3. Firefox (obviously)
4. Gaim for all your IM needs

Just follow these steps…
1. Create a new PuTTY session
Run PuTTY and create a new session in PuTTY to connect to the remote host that is running OpenSSH. Fill in the hostname, the port (usually 22), make sure SSH is checked, give it a session name and hit Save:

2. Configure a secure tunnel
Click on “Tunnels” on the left and set up dynamic fowarding for a local port (e.g. 7070). Under “Add new forwarded port” type in 7070 for the source port, leave the destination blank, and check Auto and Dynamic. Then it the Add button. If you did it correctly, you’ll see D7070 listed in the Forwarded Ports box:

That’s it for tunnels, as there is no need to create more than one. Remember to save your session profile in PuTTY so you don’t have to set up the tunnel next time.

3. Connect to the remote SSH box
Double click on the connection profile and type in your username and password when prompted.

4. Configure Firefox
Go to Tools, Options, General, and then click on Connection Settings…

Check Manual Proxy Configuration, leave most of the fields blank, but fill in 127.0.0.1 for the SOCKS v5 host with a port of 7070 (or whatever you used in Step 2):

5. Configure Gaim
Fire up Gaim and hit the Preferences button:

Then select Network on the left and set up the Proxy Server. The Proxy Type should be SOCKS 5. The host is 127.0.0.1 and the port is 7070 (or whatever you chose in Step 2).

There’s no need for a user or password. Then hit close.

6. Enjoy
That’s it. From now on, as long as you first log into the remote ssh host with PuTTY, your Firefox and IM traffic will be routed over a secure tunnel to the remote host and then out to the Net. Good stuff.

* Yes, PuTTY is available for Linux. It’s even in Portage!

Update (Email): Actually, the setup for Thunderbird to securely proxy your email traffic is pretty much the same as it is for Firefox.

And then type in 127.0.0.1 and your port number:

That’s it.

Malware (for “malicious software”) is any program or file that is harmful to a computer user. Thus, malware includes computer viruses, worms, Trojan horses, and also spyware, programming that gathers information about a computer user without permission.

Ignoring the threat of malware is one of the most reckless things you can do in today’s increasingly hostile computing environment. Malware is malicious code planted on your computer, and it can give the attacker a truly alarming degree of control over your system, network, and data - without your knowledge

Now, you can get complete protection from such malware by using/configuring the Malware Block List with squid so that you, your network and your users are protected.

Visit : http://www.malware.com.br for more information of the Malware Block List

To use the Malware Block List on a Squid proxy to block user access to URLs that contain Malware you need to perform the following simple steps:

* Download the block list:

wget -O - http://malware.hiperlinks.com.br/cgi/submit?action=list_squid > malware_block_list.txt

* Create an ACL in the main configuration file (squid.conf) pointing to a file which will have the list URLs:

acl malware_block_list url_regex -i "/etc/squid/malware_block_list.txt"

* Enable the ACL created previously:

http_access deny malware_block_list
deny_info http://malware.hiperlinks.com.br/denied.shtml malware_block_list

* Force Squid reconfiguration:

squid -k reconfigure

To have an up-to-date block list, create a cron job to run every 4 hours, pointing to a script like this:

#!/bin/sh
wget -O - http://malware.hiperlinks.com.br/cgi/submit?action=list_squid > /etc/squid /malware_block_list.txt
squid -k reconfigure

* Testing time: After reloading the squid, try to visit the following site (”www.uploadhut.com”), you should see something like ..

Sometimes, if an Ubuntu installation goes wrong, or a Windows bootloader overwrites MBR and doesn’t recognise the Linux installation, we have to restore our GRUB bootloader

we boot the Live CD, we choose the first option and in a few minutes we have arrived at the Live CD Desktop.

So, we go :  Applications –> Accessories –> Terminal

Then, we have to remember which is our Ubuntu installation partition.

In our example, it is the second one (/dev/sda2), formatted as ext3, in the first HDD of a SATA controller. We suppose that it is the second one, since, in case we have Windows that demand to be in the first partition (/dev/sda1), this one is occupied.

Now, you have to be really careful. You have to enter the right partition, instead of sda2 (unless it is the same) In the terminal :

cd /

sudo -s -H

mount -t ext3 /dev/sda2 /mnt

mount -t proc proc /mnt/proc

mount -t sysfs sys /mnt/sys

mount -o bind /dev /mnt/dev

chroot /mnt  /bin/bash

And now, you are actually “running” Ubuntu within the Hard Drive but through Live CD’s terminal.

Now we restore GRUB like that:

1) Restoration to MBR

grub-install /dev/sda

2) Restoration to partition (example: /dev/sda2)

grub-install /dev/sda2

In the first case (that is the most usual) you have certainly installed GRUB on MBR after you receive, in the terminal, the message that there are no errors.

After you reboot, you have your favorite bootloader restored.