Just my Blog

As I wrote before about the SSH-443 trick, I found out that the VPN-client I use often is also using port 443 to login into the network ... check out the next sreenshot

Welcome

On this weblog I wrote small articles about (in my opinion) interesting subjects.

At this moment I am working for Snow BV in the Netherlands, via them I am working as Technical Security Consultant/Linux Engineer for Shell. Since I work for Snow I passed a number of exams:

• ITIL Foundation
• LPIC level 1
• LPIC level 2
• RedHat Certified Technician
• RedHat Certified Engineer

For more business information, please check my Linked in-profile

If you got any questions feel free to mail me at

In the past I wrote a backup-script which makes .tar.bz2 files of the Maildirs and some other data... But after the server crash a few months ago I did not reactive the backup-script.

This night the script did again his backup-job and find out that some backups did not go well (websites with a backupsize of 2.0KB )

After some research I found out that the directory /sites/morpheus is a symbolic link to /usr/local/www/data. And /usr/local/www/data is a symbolic link to /usr/local/www/data-dist.

And the backup-script was only doing /usr/local/www/data so it only took the info about the symbolic link...

From now on... it backups the right data every evening at 22.30pm

Since I found out that it is possible to defeat the security of a firewall... it is also possible to go on the Internet totally secured... without beeing monitored

You need:

• A SSH-server who listen to port 443;
  
• An account on the SSH-server which allows tunnels;
  
• A proxy server (i.e the one of your ISP).
  
• A browser (I prefer Firefox);
  
• In case of a Win32 system... a SSH-Client (i.e. PuTTY).

So what we first do, is setup a tunnel to the webproxy

putty -L 8080:wwwproxy.xs4all.nl:8080 -P 443 account@sshserver.com

If you have done this... je set the firefox up to use the proxy server by using the next settings:
Proxyserver: 127.0.0.1 Port:8080

And it works... and all the HTTP traffic which goes in and out will be encrypted by the SSH-tunnel

Take a look at the next diagram:


_{Note: The case as described above was a bet with a good friend of mine, no illegal actions did happen!!!}

Dear reader,

I got a problem, and this problem are two of my collegues (and yes one of the two is the one about the IP-subnet stuff).

My manager asked me to install Linux on a spare HP DL380 server, to start playing with some tool which is only available on a Linux/UNIX system...

And at a certain moment the IP-guy asked me why it is not possible to try on a laptop... and he wanted to give me a very old one... so I said: "I want a new one". At the same time another collegue was in our office and asked: "Why not using VMWare on a Windows machine to emulate a Linux-env? It works well..."

*Argh*

Tux please come and help me with the battle against my collegues...

After Captcha and some other stuff to prevent spamming on my blog... I implemented a Banlist... At this moment the list contains almost 600 unique ip-address. And if you are such a fool to post spam... you will be banned for live!

If you are on the Banlist... you will be redirected to the banned page

**Update:I have now a list of about 1200 IP-Address who are banned

Most companies have a policy to reject non HTTP traffic (read TCP port 80 and 443).

An old friend of mine told me that a lot of companies do not verify if HTTP data is HTTP data...

So... with this in mind I changed the configuration of one of the SSH-daemons... the SSH-daemon will now also listen on port 443... and guess what... I have connection



_{Note: The case as described above was a bet with a good friend of mine, no illegal actions did happen!!!}

The december edition of the Linux Journal, will contain my letter regarding speeding up the command.