Monday, January 17, 2011

Nine steps to help in keeping your firm secure

The following are a few Anti-Hacking tips that will help in keeping your systems secure.
1. Install Anti-Virus software and ensure that it’s regularly updated.(If you do only one thing to help protect the safety of your computing environment, always take prompt advantage of software updates).

2. Anti-virus software isn’t enough – it’s also a good idea to install firewall (Good fences make good neighbors) software which will help prevent unauthorized incoming and outgoing communications from your computer while connected to the Internet.

3. Passwords protect the settings on the software so no-one else can alter protection levels. Most anti-virus programs also offer some protection against Trojans, which aren’t actually a virus, but a small program that allows others to control your computer.

4. Turn off your preview window in your email program. Some viruses, called worms, can infect your system without you clicking on attachments – just by you having your preview window open. Some worms can cause your sensitive information and documents to be transmitted to millions of people. Be very cautious in opening attachments, even if it appears to come from someone you know – their system may be infected.

5. Disconnect your computer from the Internet when not in use. The longer you are connected to the Internet, the more opportunity you give for persons to gain unauthorized access.

6. If your computer is used by others, carry out regular examination of the software on it and research any software that you discover that you haven’t installed yourself. It’s safest to make it a policy not to allow any software to be installed without your permission.

7. If you must store usernames and passwords on your system, ensure they are contained in a document that is password protected. It is safest not to store any passwords on your computer. Don’t let Windows “remember” passwords for you. Passwords should always be more than 8 characters long and include upper and lower case letters, numerals, symbols.

8. Ensure that you log out of online services properly. Failure to do so can allow others who use your computer to gain access to those services and you can be blamed for their activities.

9. Back up your files and store them away from your computer. Frequent backups just make good sense. The more virulent types of attacks damage or infect your hard drive and you can lose valuable personal information. By backing up your data weekly you can help protect your important files, computer settings, and irreplaceable digital media.

Thursday, December 16, 2010

How to Install Zimbra on RedHat Enterprise 5

1-Disable your firewall and SELinux
2-stop service sendmail and httpd(if you had installed these services)
#service sendmail stop
#service httpd stop
#chkconfig --level 2345 sendmail off
#chkconfig --level 2345 httpd off
3-configure the hosts file
#vi /etc/hosts (enter text below)

       127.0.0.1 localhost.localdomain localhost
       192.168.74.106 mailServer.not-late.com mailserver

4- configure resolv.conf file
#vi /etc/resolv.conf (enter text below, then save and exit)

nameserver 192.168.74.106

5- configure DNS or named.conf file (see this link: http://not-late.blogspot.com/2010/11/dns-bind-on-red-hat-linux-enterprise-5.html) make sure you can start and stop your named service
6- add record to named.conf file
#vi /etc/named.conf (enter text below at the bottom of your named file, then save and exit)
        zone "not-late.com" IN {
                type master;
                file "not-late.fz.db";
        };
        zone "74.168.192.in-addr.arpa" IN {
               type master;
               file "not-late.rev.db";
       };

7- create database zone file in /var/named/
7.a- create forward zone file
#vi /var/named/not-late.fz.db (enter text below, then save and exit)
$TTL 86400   @ IN SOA mailserver.not-late.com.    root.not-late.com. (
                                              42 ; serial (d. adams)
                                             3H ; refresh
                                          15M ; retry
                                            1W ; expiry
                                           1D ) ; minimum
          IN NS not-late.com.
          IN A 192.168.74.106
          IN MX 10 not-late.com.

7.b create reverse zone file
#vi /var/named/not-late.rev.db (enter text below, then save and exit)

$TTL 86400 @ IN SOA mailserver.not-late.com.     root.localhost. (
                                                         1997022700 ; Serial
                                                         28800 ; Refresh
                                                         14400 ; Retry
                                                         3600000 ; Expire
                                                         86400 ) ; Minimum
           IN NS not-late.com.
    106 IN PTR not-late.com.

8-Restart named service ( the result must be OK)
#service named restart

9- Testing your DNS to make sure it works
#dig not-late.com mx (Answer must be 1)

     ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> not-late.com mx
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18904
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

    ;; QUESTION SECTION:
    ;not-late.com. IN MX

    ;; ANSWER SECTION:
      not-late.com. 86400 IN MX 10 not-late.com.

    ;; AUTHORITY SECTION:
      not-late.com. 86400 IN NS not-late.com.

    ;; ADDITIONAL SECTION:
     not-late.com. 86400 IN A 192.168.74.107

    ;; Query time: 32 msec
    ;; SERVER: 192.168.74.100#53(192.168.74.100)
    ;; WHEN: Tue Dec 14 22:08:03 2010
    ;; MSG SIZE rcvd: 76

10-Testing Reverse DNS
#host 192.168.74.106 (result look similar below)

106.74.168.192.in-addr.arpa domain name pointer not-late.com.

11- Download Zimbra from zimbra web site:

12- unpacking the file you just downloaded to wherever you want
#tar -xzvf zcs-6.0.8_GA_2661.RHEL5_64.20100820052503.tgz -C /tmp
13-From within the /tmp directory there is a file called install.sh. This is the file that will launch the installer for Zimbra.
#./install.sh
14- Follow the installation instruction will go through to the end of setup.

Saturday, November 20, 2010

DNS Bind on Red Hat Linux Enterprise 5

#yum -y install bind-9.x.x.x
#cd /usr/share/doc/bind-9.3.6/sample/etc
#cp -v * /etc/
#cd /usr/share/doc/bind-9.3.6/sample/var/named
#cp -rv * /var/named/
#service named start (result will be FAILED)
#vim /etc/named.conf (Please delete from line "// All BIND 9 zones are in a "view", which allow different zones to be served") And your named.conf will look like below:


//
// Sample named.conf BIND DNS server 'named' configuration file
// for the Red Hat BIND distribution.
//
// See the BIND Administrator's Reference Manual (ARM) for details, in:
//   file:///usr/share/doc/bind-*/arm/Bv9ARM.html
// Also see the BIND Configuration GUI : /usr/bin/system-config-bind and
// its manual.
//
options
{
        // Those options should be used carefully because they disable port
        // randomization
        // query-source    port 53;
        // query-source-v6 port 53;

        // Put files that named is allowed to write in the data/ directory:
        directory "/var/named"; // the default
        dump-file               "data/cache_dump.db";
        statistics-file         "data/named_stats.txt";
        memstatistics-file      "data/named_mem_stats.txt";

};
logging
{
/*      If you want to enable debugging, eg. using the 'rndc trace' command,
 *      named will try to write the 'named.run' file in the $directory (/var/named).
 *      By default, SELinux policy does not allow named to modify the /var/named directory,
 *      so put the default debug log file in data/ :
 */
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
#service named start     ( [ OK ] )

Monday, November 15, 2010

Khmer Unicode on SQL Server

1- How to Insert khmer unicode into Sql Server?
ជាធម្មតាយើងមិនអាចបញ្ចូលអក្សរខ្មែរនៅក្នុង SQL Server បានទេ លុះត្រាតែយើង Install Khmer Unicode ជាមុនសិន​ សូមមើលរបៀបបញ្ចូល​ Khmer Unicode។ បន្ទាប់មកសូមសាកល្បងបញ្ចូលទិន្នន័យជាភាសាខ្មែរក្នុង SQL Server ដោយប្រើ SQL Command "INSERT INTO tblUnicode VALUES('១','អក្សរខ្មែរ')"។ (សូមមើលរូប)
បន្ទាប់មកសូមចុចលើ !Execute Button អ្នកនឹងទទួលបាន Messages ដូចក្នុងរូប(1 row(s) affected)​ នោះមានន័យថា ការបញ្ចូលទិន្នន័យជាអក្សរខ្មែរទៅក្នុងSQL Server បានសំរេចហើយ។ បន្ទាប់មកទៀតសូមបើកTable(tblUnicode) ជាទំរង់ នោះយើងនឹងឃើញទិន្នន័យដែលបានបញ្ចូលមានលក្ខណៈជាសញ្ញាសួរ(????????)។
ដូច្នេះដើម្បីអោយយើងអាចមើលជាទំរង់អក្សរខ្មែរបាន នោះយើងគ្រាន់តែបន្ថែមអក្សរ "N" នៅពីមុខតំលៃដែលបញ្ចូលដោយSQL Command​ គឺ "INSERT INTO tblUnicode VALUES(N'១',N'អក្សរខ្មែរ')" រួចសូមបើក Table(tblUnicode) មើលម្តងទៀត​ យើងនឹងទទួលលទ្ធផលជាអក្សរខ្មែរដែលអាចមើល និងអានបាន។







២- To select record from sql server ដោយ Sql command គឺ SELECT * FROM tblunicode WHERE [ID]=N'២' 

good luck!

Thursday, November 11, 2010

USB boot with Hiren

1-format your usb (download).
2-using Grub4Dos Installer.
Exact and Open file(grubinst_gui.exe)
then the dialog below will be open and please follow the figure
then Please press any to continue
3-Copy files(grldr, menu.lst) from Grub4Dos to your usb drive.
4-Insert your CD Hiren(10.1 or new) and copy all files from Hiren CD to your usb drive.
5-Test your usb boot hiren.
END

Saturday, November 6, 2010

Configuration Yum on Red Hat Linux Enterprise 5

Installing and running web server (httpd)
Checking web  server service
# ps  ax  |grep   http
If the httpd service is not running please install
#yum -y install httpd*
Starting web  server service
#service  httpd start
Build the repository
# mkdir  /var/www/html/yum
Getting packages to repository
Mounting CD/DVD RHEL
Copying RPM packages from CD/DVD to yum repository
#cp  -v  /media/RHEL/RPMS/*   /var/www/html/yum
installing createrepo
Installing createrepo package
Checking its package
# rpm  -qa  |grep createrepo
If doesn’t have : install # rpm –ivh  createrepo.x.x.x.rpm
Running createrepo tool to repository directory
Createing meta-data to repository directory
# createrepo  /var/www/html/yum
You can see:
-rw-r--r-- 1 root root 2227275 2010-02-18 11:51 filelists.xml.gz
-rw-r--r-- 1 root root 6487453 2010-02-18 11:51 other.xml.gz
-rw-r--r-- 1 root root 747714 2010-02-18 11:51 primary.xml.gz
-rw-r--r-- 1 root root 951 2010-02-18 11:51 repomd.xml

Configure yum client
Editing file: /etc/yum.conf  Or  /etc/yum.repos.d/*
[base-local]
name=RHEL $releasever - $basearch failover
method=priority
baseurl=http://192.168.74.100/yum/
enabled=1
gpgcheck=0