Re: [Ilugc] Script attack

2010-12-08 Thread பாலாஜி நாராயணன்
On 7 December 2010 17:57, sri vats blackcap...@gmail.com wrote:
 Hi,

 iframe src='http://visions7.net/' width=1
 height=1style='visibility:hidden;'.

 This line of code got injected in my index.php files and affected my
 site.Have you experienced this kind of script attack?

 Did anybody know more information about this attack?Please share your
 thoughts.
 *FYI*:Please do not visit the visions7 url.It may affect you!

If this code is on your server, the best way is to audit the entire
code or even better, wipe it off and restore from a backup or version
control. You will never know what other changes were done on the
server.

-b-


-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] [Help] can any one give contact number of ilug in coimbattore ?

2010-11-22 Thread பாலாஜி நாராயணன்
On 23 November 2010 10:52, jaya kumar jayakumargen...@gmail.com wrote:
 hi to all

 can any one give contact number of ilug in coimbattore ?

 one of my friend in coimbattore he asking to participate there itself ilug
 coimbattore

 so it will be very helpful and useful to get any contact number of ilugc
 coimbattore .

 to stay touch with there ,,i hoope this help will be very needful to some
 one !


Ask him to join the mailing list - ilug...@googlegroups.com,  and
the wiki is at

http://www.ilugcbe.techstud.org/index.php?title=Main_Page

-balaji
-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] ILUG-Coimbatore

2010-09-27 Thread பாலாஜி நாராயணன்
On 27 September 2010 11:36, ganessh kumar rp rpganesshku...@gmail.com wrote:
 hi ,
 i like the work of u guys towards open source by forming ILUG-Chennai. i
 wish it
 would be nice if there exists such a group in coimbatore too . me and my
 friends
 are very much excited to have such group in our city . If such a community
 doesnt exist in coimbatore we invite all linux users and volunteers to start
 one

cbe-linux exists on yahoogroups. This group has a steadily increasing
list of subscribers and occasional chatter. Unfortunately I have not
seen anyone located physically in and around the area on the list, so
there are no regular meets.

It will be a good idea to revive this group since it has a good number
of subscribers.


 thank u
 -ganessh
 ___
 ILUGC Mailing List:
 http://www.ae.iitm.ac.in/mailman/listinfo/ilugc




-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] how to run the service with non root user

2010-08-06 Thread பாலாஜி நாராயணன்
On 6 August 2010 12:56, Dinesh Kumar Rajagopal dinesha...@gmail.com wrote:
 Dear ilug-c,
              I am writing shell script which control services (i.e
 start/stop/restart ) in production environment, for remote command execution
 i am using ssh with RSH Key for non root user. because root account should
 have password. so need to run the service in non root user. is this right
 way to do ?

* Check out sudo. Sudo can also be configured to read password from stdin.
* Second option is to see if you can run the daemon itself which you
are trying to restart as a non-root user. In that case you dont need
root privileges for restart.

HTH
--b


-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] [Tip] Edit The Command Line With Vim

2010-08-04 Thread பாலாஜி நாராயணன்
On 4 August 2010 09:46, Tha.Suresh jemenisur...@gmail.com wrote:
 Edit The Command Line With Vim

 This is a quick (and great) tip I found at Daily Vim:

 Open a linux terminal, and type some (long) command.
 Now type [ctrl]+[x] and then [ctrl]+[e]
 The command should be moved now to a vim window.
 Edit the command (fix typos, change parameters, etc..) and save.
 The command will now be executed. :)

You cn do most of the command line editing via readline.

set -o emacs or set -o vim

and most of the vim and emacs command line editing will work on the shell.

-balaji


-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] FOSS awareness programme at VLB Jananki Ammal College of Technology, Coimbatore

2010-08-03 Thread பாலாஜி நாராயணன்
On 2 August 2010 23:06, rajkumar vbalakrishnasamy
rajkumar.l...@gmail.com wrote:
 Hi prasath,
          We are going to start Coimbatore Linux users and Groups.And we
 need your support.

cbe-li...@yahoogroups.com exists though dormant.

-balaji



 On Mon, Aug 2, 2010 at 9:43 PM, prasath s pearl.glitteri...@gmail.comwrote:

 I am parasth from vlb college.we feel its really a good awareness
 program..then you had said idea about cluster establishment in our
 college lab.can u help us by giving detail about it.

 On 7/30/10, baskar k baskar...@gmail.com wrote:
  Hi All.
  On behalf of ILUGC yesterday (29-07-2010) i conducted a FOSS Awareness
  programmed at  VLB Jananki Ammal College of Technology, Coimbatore for
  B.Tech., (IT) student in the morning for 2 hours. Aorund 100 Students
  attended the programmed. The response from the students were very
  impressive. I see a good potential for further FOSS movement in that
  college. I also conducted FDP in the afternoon on Web Services uisng
  PHP.
 
  I thank our honorable coordinator(aka all-in-all office boy) Seeni and
  the College Management, HODS of CSE and IT Department, Prasanth Final
  year student of IT department.
 
 
  Thanks
  baskar
  ___
  ILUGC Mailing List:
  http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
 
 ___
 ILUGC Mailing List:
 http://www.ae.iitm.ac.in/mailman/listinfo/ilugc




 --
 राजकुमार
 follow me
 http://twitter.com/krisrajkumar
 ___
 ILUGC Mailing List:
 http://www.ae.iitm.ac.in/mailman/listinfo/ilugc




-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] [OT] Bsnl Dataone connection is slow now a days

2010-07-31 Thread பாலாஜி நாராயணன்
On 27 July 2010 23:24, Raja Subramanian rajasuper...@gmail.com wrote:
 2010/7/27 Balaji Narayanan (பாலாஜி நாராயணன்) li...@balajin.net:
 I am not sure. I run a ubuntu box and it does not have bind installed
 by default.

 I meant the bind config after you apt-get install bind9.  CentOS/etc
 make it trivial yum install caching-nameserver.

My point was that it does not install bind by default. Elsewhere in
thread I remember reading that ubuntu does it by default.



 For the technology wise, yes, but again, I assume that ISPs have
 atleast a caching name server installed closer to you.

 Fully agree on the importance of proximity to end users, and the
 limitations of OpenDNS/etc as a consequence.

 But other than proximity, ISP DNS has limited advantages.  Main
 disadvantages are lack of correctness, reliability and security where
 the OpenDNS/etc score high.  However, the privacy aspects of
 Google DNS is another can of worms.

I tend to disagree here. You are assuming that OpenDNS / Google DNS is
always reliable, correct and secure(???). If you dont trust your ISP
to provide the basic service that he is expected to provide reliably,
there is something wrong.

For the fact, I have been an Airtel Broadband user for over 5 years
now and I dont remember experiencing any major issues with their DNS.

Cheerio
-b-

-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] randtype in perl

2010-07-31 Thread பாலாஜி நாராயணன்
On 30 July 2010 19:24, Kenneth Gonsalves law...@thenilgiris.com wrote:
 On Friday, July 30, 2010 07:12:47 pm Girish Venkatachalam wrote:
 $ cat randtype.pl
 use Time::HiRes qw(usleep);

 $| = 1;

 open F, '/etc/passwd';

 @lines = F;

 for(@lines) {
         @chars = split //;
         for(@chars) {
                 print;
                 usleep(2);
         }
 }

 chinese posting with or without tag is a no no in this list ;-) Could we have
 an english translation so that we can find out what this thing does and 
 attempt
 to replicate it?

$| tells perl to flush STDOUT immediately.

The program prints characters read from /etc/password at random
intervals. This simulates the typing effect on a screen.

-balaji


-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] can any one tell the best shell scripting notes available in net ?

2010-07-31 Thread பாலாஜி நாராயணன்
On 30 July 2010 12:18, subhojit ojha subhojit.o...@gmail.com wrote:

 I'll be happy to just learn Grep + Sed + Awk + RegEx ;-)


 Hi Yogesh,

 I know grep and sed, about awk or gawk I can get some material to u...

 gawk also provides programming support, so its not a small command, it has
 lot of options. About RegEx, I don't have any idea, I have never used it.

If you dont know or not willing to learn regex, you are going to miss
a lot in programming life. :-)

-b-


-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] Restrict users not to use open proxy

2010-07-31 Thread பாலாஜி நாராயணன்
On 30 July 2010 13:21, vellingiri velling...@bksystems.co.in wrote:
 Dear Sir,

Last checked, I have not been knighted yet. So till then, i prefer to
be called 'Balaji'. :-)


     My question is people are misusing the proxy server. Let's say I have a
 proxy server ip address as 192.168.1.10 which run 3128 port. But people are
 using open proxy server with different port.

As I said in my earlier mail, block all outgoing traffic from all the
hosts other than your gateway servers. so even if they try to use the
open proxy server, it would fail. And if they are using an anonymous
proxy, identify and start blocking them in your squid setup.


offtopic
Finally, these kind of issues are better solved by putting in a proper
IT policy and enforcing them. There will always be people finding
intelligent ways to work around this. Figure out what you are
achieving by blocking and see if there is a need for you to do it. If
you think it is absolutely needed, put in a policy to ensure that you
should not be putting such a process and implement them.
/offtopic

-b-

-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] OAOD (wxcam)

2010-07-31 Thread பாலாஜி நாராயணன்
On 29 July 2010 18:42, Kenneth Gonsalves law...@thenilgiris.com wrote:
 On Thursday, July 29, 2010 12:29:30 pm Balaji Damodaran wrote:
 I think you missed the point here. Firstly, you're going a good job, but
 every mail you send has a section at the end that says To install and
 you give a command that is only relevant to debian based distributions,
 not for rpm based distributions.

 debian does not use sudo


-b-

-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] Re: Request for talks for a auguest month meet

2010-07-31 Thread பாலாஜி நாராயணன்
On 29 July 2010 10:47, Shrinivasan T tshriniva...@gmail.com wrote:
 apologies for the top post.
 it was sent via mobile and did not noticed its bad feature.


Looks like you recycled a message :-)

-b-

-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] SSL for Apache2

2010-07-30 Thread பாலாஜி நாராயணன்
On 30 July 2010 12:08, Dinesh Kumar Rajagopal dinesha...@gmail.com wrote:
 ILUG-C,
               We are using apache2 , by mistake i have created the csr.txt
 and keystore.jks using keytool (java).
 And got the certificate from godaddy.com, is there any possible to create
 certificate for apache2?

What you have is a java keystore. What you need is the certificate in
PEM format. Convert the keys using openssl. Here is a set of commands
that should help you.

http://stackoverflow.com/questions/652916/converting-a-java-keystore-into-pem-format

-balaji


-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] Restrict users not to use open proxy

2010-07-30 Thread பாலாஜி நாராயணன்
On 30 July 2010 11:55, vellingiri velling...@bksystems.co.in wrote:
 Dear all,
   How to restrict users not to access open proxy in Linux. As I have done
 port redirection 80 to 3128. Please anyone help me.

Your question is not very clear. If you do not want folks to use any
open proxy, you can do

* Setup a transparent proxy to allow all traffic through your proxy server.
* Block all outgoing traffic other from your own servers.

HTH
-b-


-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] doesn't ssh-agent defeat the purpose of a passphrase

2010-07-29 Thread பாலாஜி நாராயணன்
On 29 July 2010 11:49, Raja Subramanian rajasuper...@gmail.com wrote:
 On Thu, Jul 29, 2010 at 10:24 AM, Manokaran K manoka...@gmail.com wrote:
 But it is also suggested that ssh-agent (or keychain etc) is used to manage
 passphrases - so that one does not have the trouble of keying in a long
 passphrase everytime! I feel this defeats the very purpose of a passphrase!!
 A person getting hold of the ssh-agent config (or whatever file that holds
 the passphrase) file can just as easily access the servers!!

 For this reason, ssh-agent will never save the passphrase in a config file.
 You are forced to enter it manually whenever you start ssh-agent and add
 keys.  Once the keys are added, you can then use ssh repeatedly without
 passwords.

 The main security problem with ssh-agent is that it creates a unix domain
 socket for communication with ssh.  This file/socket is secured using standard
 unix file permissions and hence root can access the ssh keys for any local 
 user.

 Suggest you read this article for a good understanding of ssh/ssh-agent
 interaction:
    http://unixwiz.net/techtips/ssh-agent-forwarding.html

True, ssh-agent only avoids the need to type passphrases recently.
Also, If you want you can add a lifetime for the identify it holds.
ssh-agent runs as a user process and it does not store the passwords.

For the point about root having access, if you dont trust your admin
or if your admin is not trust worthy, you are doomed. It is not about
just reading the sockets, what if he replaces the ssh binary so that
he gets a copy of the password when you type it et al.

-balaji



-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] How to recover deleted files in Linux (Shift+Deleted)

2010-07-27 Thread பாலாஜி நாராயணன்
On 27 July 2010 14:50, Murali Babu drop2muralib...@gmail.com wrote:
 Hello linuxers,

 Yesterday I had working in pc which has a centos 5.4 os, by mistake i
 deleted
 some files which are all very very important.
 Please guide me recover my deleted files in centos

The first thing to do is to power off the machine, disconnect the hard
drive and then connect it to a different machine and follow the
procedures listed in the thread.

If you have deleted a file and if you are still using the file system,
the chances are that the inode will be allocated for a different file
and it will be completely overwritten.

Good Luck!
-balaji

-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] [OT] Bsnl Dataone connection is slow now a days

2010-07-27 Thread பாலாஜி நாராயணன்
On 27 July 2010 20:47, Vannia Rajan van...@vannia.co.cc wrote:
 2010/7/27 ஸ்ரீ பிரதீப் sreeprath...@gmail.com

 I also have a BSNL broadband connection. But I don't find any issue with
 the
 speed. In fact it is faster now. Only issue I face is with the DNS. I have
 changed the /etc/resolv.conf entry to point the opendns servers. After that
 it is normal. I get a download speed of more than 50 KBps.


 Changing in /etc/resolv.conf is a temporary fix, i guess. Most routers have
 the option to configure the DNS IP's. Doing it there is a permanent
 solution.

 Also, I found Open-DNS servers blocking Social-Networking services some
 times. So, i would suggest going for Google's Public DNS servers.

 http://code.google.com/speed/public-dns/

 8.8.8.8
 8.8.4.4

Beware of using Open DNS. Some of the edge caching systems relies on
routing you to a nearest server based on where the DNS query
originated from. And if you are using a Open DNS server, you might be
sent to a cache closer to the DNS server resulting in unwanted
latency.

Here is a fantastic blog post that a friend of mine wrote that
explains this with examples:

http://blog.sandipb.net/2009/04/23/akamai-awesomeness-and-opendns-lameness/

-balaji
-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] [OT] Bsnl Dataone connection is slow now a days

2010-07-27 Thread பாலாஜி நாராயணன்
On 27 July 2010 22:26, Raja Subramanian rajasuper...@gmail.com wrote:
 2010/7/27 Balaji Narayanan (பாலாஜி நாராயணன்) li...@balajin.net
 Beware of using Open DNS. Some of the edge caching systems relies on
 routing you to a nearest server based on where the DNS query
 originated from. And if you are using a Open DNS server, you might be
 sent to a cache closer to the DNS server resulting in unwanted
 latency.

 Great point.  But note that the problem is not specific to OpenDNS
 alone.  Any hosted DNS service has exactly the same problem.

True, but the assumption is that the ISP has some clue not to use a
DNS server half way across the globe.


 Perhaps the best option is to run bind as a caching name server
 for local users.  IIRC, the default config of every distro is to run
 bind as a pure cache only name server.

I am not sure. I run a ubuntu box and it does not have bind installed
by default.


 However, OpenDNS/GoogleDNS/etc have some neat technology
 deployed through UDP Anycast.  Good reading for any networking
 enthusiast.  And in any case, these services are far better than
 the DNS infrastructure provided by Indian ISPs.

For the technology wise, yes, but again, I assume that ISPs have
atleast a caching name server installed closer to you.

-balaji

-- 
http://balajin.net/blog
http://flic.kr/balajijegan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc