IndianWebPortal.com

The SYN (TCP connection request) attack is a common denial of service (DoS) technique. A SYN flood is a form of denial-of-service attack in which an attacker sends a succession of SYN requests to a target’s system When a client attempts to start a TCP connection to a server, the client and server exchange a  [ Read More ]

How to find the domain name (DNS) information. http://network-tools.com or http://xwhois.com http://intodns.com/ http://centralops.net/co/ http://www.dnsstuff.com/ http://www.ipmango.com/megadns.php http://www.dnswatch.info

How to UNSECURED /tmp and /var/tmp partition. On the linux server the /tmp and /var/tmp partition is secure. So you can not installed some php modules for example “pdflib” on the server, it shows the error  “ERROR: `/root/tmp/pear/pdflib/configure –with-pdflib=/usr/local’ failed”  then you need to set the /tmp and /var/tmp partition UNSECURED and then try to  [ Read More ]

If server is linux server then you can add this default iptable rules for open some common port and secure some ports. # Generated by iptables-save v1.2.11 *raw : PREROUTING ACCEPT [29:2132] :OUTPUT ACCEPT [20:2224] COMMIT # Completed on Fri Feb 10 12:34:10 2006 # Generated by iptables-save v1.2.11 on Fri Feb 10 12:34:10 2006  [ Read More ]

RKHunter Cronjob Ans> To set the cron job to receive the daily scan report pico /etc/cron.daily/rkhunter.sh Add the following line in above file #!/bin/bash (/usr/local/bin/rkhunter -c –cronjob 2>&1 | mail -s “Daily Rkhunter Scan Report” supp0rt24x7@gmail.com) chmod +x /etc/cron.daily/rkhunter.sh Thanks

Change SSH port to some higher port? Ans> pico -w /etc/ssh/sshd_config Find the line ‘#Port 22′ and uncomment it and change it to look like ‘Port [Random high level port here]‘. for example we changes the port no22 to port no 322 Port 322 #Protocol 2,1 Protocol 2 #AddressFamily any #ListenAddress 0.0.0.0 #ListenAddress :: now  [ Read More ]