7 04 2013
Port Scan Attack Detector (psad) allow us detect and block possible port scan or suspicious traffic in real time. psad is designed for work with iptables, configuring syslog to send log messages from the facility kern.info to /var/lib/psad/psadfifo, to analyze netfilter log messages. psad comes with some snort rules to detect traffic pattern from DDoS [...]
30 03 2013
In some situations it’s needed if you have an internal mail server with a dynamic IP address, or simply one server hosting an application that have one form contact for example and a mail daemon listening in localhost, it can be very useful relay smtp traffic to the gmail servers, using smtp.gmail.com, and using a [...]
25 03 2013
Java Service Wrapper is a library that provides a set of binaries and scripts for different architectures and operating systems that allow us to run a Java application as a service daemon. There are some integration methods to run a Java app. The used in this post is WrapperJarApp to run a jar package, you [...]
16 03 2013
After some time without updating the blog due to some projects and work reasons, now I return to continuing posting!! These days I’ve been working to migrate this blog to a VPS. As yet this blog was hosted in a free plain in wordpress, the main reason to do the migration was because I wanted [...]
24 01 2013
TSIG (Transaction Signatures) provides authentication and data integrity for the communication between servers. This communication includes zone transfers, notifications, recursive queries or dynamic updates. A shared secret will be generated in one of both servers and the same secret with the same name will be configured in them. Bear in mind that TSIG only provides [...]
17 01 2013
openvpn is a vpn solution that implements connections for the layer 2 or 3, using the SSL/TLS protocol stack. Configuring a vpn SSL/TLS is a good idea and enhance the security of our communications due to the data cipher using the pki infraestructure (pair public/private key) and the verification and authentication of the data. Some [...]
7 01 2013
AAA is a network protocol that define basically three functionality, Authentication, Authorization and Accounting. It’s very useful for distributed systems to need authenticate users to have access for a specific services. In this post We’ll configure FreeRadius as AAA server and configure a Cisco device to allow login connections across ssh with the radius users configured on the [...]
4 01 2013
With the last version of samba 4 comes with Active directory logon and administration protocols, including typical active directory support and full interoperability with Microsoft Active Directory servers. This is possible with the combination of a LDAP directory, heimdal kerberos authentication, dynamic DNS server and the necessary remote procedure calls RPC. For complete list of [...]
31 12 2012
Galera arbitrator comes with the galera cluster and it’s a daemon to avoid an split brain situation for a mysql cluster typically configured with two nodes. An split brain in clustering is a situation where one node of a cluster is not be able to communicate and synchronize with other node on the cluster, and this situation behave to lock the [...]
23 12 2012
Galera is a synchronous multi-master cluster for MySQL/InnoDB databases. Some features and benefits of Galera are: Synchronous replication. Multi master topology. Read/Write to any cluster node. Automatic membership control. Data consistency between replica nodes. Read and write nodes scalability. Distributed transactions and lock tables. The motivation to implement Galera instead MySQL master/slave replication, comes that [...]
