Archive for July, 2003

What are those .keep files that appear everywhere?

Thursday, July 31st, 2003

Probably you have seen a hidden file in all your directory structure called .keep and wondered what this file is for.

(more…)

Why can’t I su to root?

Sunday, July 27th, 2003

As a security measure, the default configuration for Gentoo Linux requires a user to be a member of the wheel group to be allowed to execute the su command to become root.

(more…)

Hidden sniffer

Saturday, July 26th, 2003

It is possible to sniff packets through an unplumbed interface, so the interface can not be detected, remaining invisible to detection and attack.

(more…)

Umounting a busy filesystem

Saturday, July 26th, 2003

Note that this tip applies to Solaris 7 and 8.

Have you ever tried to unmount a filesystem and found that there is something blocking it?

(more…)

Blocking referrers with Apache

Saturday, July 26th, 2003

A referrer tells the webserver the location of the last page viewed by your browser. It is normally sent from the browser to the Apache webserver every time the browser requests information.

(more…)

Is your mail server an “open mail relay”?

Monday, July 14th, 2003

An open mail relay or simply an open relay is a mail server that allows non local users to send mail to another non local users. I mean, the mail server processes mail messages where neither the sender nor the recipient are users of the local mail system. This is the perfect scenario for spammers to abuse your system.

(more…)

Apache and SSL

Sunday, July 13th, 2003

When you want to transmit information through an untrusted channel (i.e. internet) and want to keep that information private, guarantee it’s integrity and keep the authenticity then you need something like SSL. The mod_ssl module provides strong cryptography for the Apache web server through the SSL (Secure Sockets Layer, v2/v3) and the TLS (Transport Layer Security, v1) protocols implementation of OpenSSL. It also provides message digest mechanism to guarantee messages integrity and digital signature for authenticity.

(more…)

Configuring network interfaces

Friday, July 11th, 2003

To enable a network interface card under Solaris you should install the device driver, reconfigure the system by rebooting and assigning an IP address to the interface. The last one is what we are going to deal with.

(more…)

Basic package management

Sunday, July 6th, 2003

This tip shows you basic package management:

  • pkgadd
  • pkgrm
  • pkginfo
  • pkchk

(more…)

Restarting inetd on Solaris 8

Sunday, July 6th, 2003

Whenever you make changes to inetd.conf you should restart the daemon to make the changes effective.

(more…)