Hosting environments can be Dedicated or Cloud based. In recent years more and more organizations combine both architectures to achieve scalability, performance and cost reduction. Hosting company called Rackspace who developed Open Stack and is one of leading providers of Cloud solutions offers hybrid solution called RackConnect. In summary RackConnect provides physical link between dedicated …
Monthly Archive: August 2015
Aug 20
Limiting connections rate for traffic destined on HTTP and HTTPS
In our example we going to restrict number of connection coming from outside interface (Internet) on port 80 and 443 to local environment. Setting up limitation will protect internal WEB servers against receiving too many connections such as DDOS attacks and SYN attacks. We limit maximum number of established connections to 1000. Embryonic (half-open) connection …
Aug 20
SSL Offload configuration on Brocade ADX via CLI
Application load balancers provide many functions in hosting environment, one of the most typical is SSL offloading. Instead of using CPU and RAM memory on WEB server you can use LB (with appropriate license) to provide secure connection to client. In this example we are going to encrypt traffic between client and Brocade ADX load …
Aug 20
APC PowerChute Business Edition Agent – Default Username and Password
What’s the default username and password for the APC’s PowerChute Business Edition Agent? Unfortunately (for your purpose; from security perspective – it’s a good thing) all the recent versions of the PowerChute Business Edition (at least starting with 8.0.1 Single Node agent, which is what I was using) do not provide a default username and …
Aug 20
How to check MD5 checksum of a file in linux
To check MD5 checksum of a file in linux go to folder containing file and md5 checksum which normally ends “.md5″. First display content of existing file: # cat yourfile.md5 bc4708c34c971595649207fe1ea012ba yourfile Next generate new checksum using md5sum command: # md5sum yourfile bc4708c34c971595649207fe1ea012ba yourfile Compare both outputs, of they are not identical file has been …
Aug 17
Reset-O on ASA/FWSM
Reset-O TCP flag means that the Reset is from the Outside. Here is the syslog messages reference: http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/system/message/logmsgs_external_docbase_0900e4b18059d73b_4container_external_docbase_0900e4b180ef4f45.html#wp1280675
Aug 16
WIFI on Linux via CLI
iwconfig is dedicated to the wireless interfaces. It is used to set the parameters of the network interface which are specific to the wireless operation. Check WIFI setting, including current signal strength setting: [root@linux ~]# iwconfig Example: [root@linux ~]# iwconfig wlan0 wlan0 IEEE 802.11g ESSID:"OSU_PUB" Mode:Managed Frequency:2.427 GHz Access Point: 00:0D:9D:C6:38:2D Bit Rate=48 Mb/s Tx-Power=20 …
Aug 16
Centos 7 – missing nslookup tool
In order to use nslookup tool bind-utils package has to be installed first. Command to install the package: sudo yum install bind-utils
Aug 16
How to enable SCP on Centos 7
Typically scp should be already available on most Centos distributions. If scp client is missing in your distribution simply install openssh-clients package using yum. yum install openssh-clients That’s it… Confirm that scp works by simply typing scp to get help page [root@linux ~]# scp usage: scp [-12346BCpqrv] [-c cipher] [-F ssh_config] [-i identity_file] [-l limit] …