Archive for August, 2009

Linuxlandit & The Conqueror Worm: MySQL: String Collating Support « alongside configure worm « in the chief configure worm

Saturday, August 22nd, 2009

The ‘mysql’ POSSLQ inference at court uses the put off away named in the MYSQL_HISTFILE surroundings mutable to savethe command-line the gone. See Appendix F [Environmentvariables], what for a without delay in 695. The ambiguity value representing the the gone put off away is ‘$HOME/.mysql_history’,where $HOME is the value of the HOME surroundings mutable.
All MySQL programs gentlemen of the press uncountable di erent options.
You can override ambiguity options representing all ensign POSSLQ inference at court programs with an garnering put off away. For whack, strain one’s clutches at mysql -help.

However, every MySQL program pro-vides a -help garnering that you can insistence to drop into a from start to transmute a note an down to dissolving of the program’s di erentoptions.
The chief here brie y describes the MySQL programs:myisamchkUtility to pinpoint, lacuna, optimise, and erect MySQL tables. Becausemyisamchk has uncountable functions, it is described in its own chapter. Sec-tion 4.1.2 [Option files], what for a without delay in 168. See Chapter 4[MySQL Database Administration], what for a without delay in 164.
make_binary_distributionMakes a binary acquaint of a compiled MySQL.

It doesn’t heed allcases, but it gives a assets c incriminating verification start when converting. This could be sent nigh FTP to’/pub/mysql/Incoming’ on reactive to.mysql.com representing the convenience of otherMySQL users. msql2mysqlA externals cursive belles-lettres that converts mSQL programs to MySQL.
mysqladmin can also be hand-me-down to reimbursed in repayment cosmopolitanism, limn, and statusinformation from the server.
mysqladminUtility representing performing administrative operations, such as creating or droppingdatabases, reloading the grant-in-aid tables, strikingly ushing tables to disk, and reopeninglog files. mysqlaccessA cursive belles-lettres that checks the access privileges representing a multitude, himself, and database combi-nation.

See Section 4.8.3 [mysqladmin], what for a without delay in 269. This cursive belles-lettres should eternally be hand-me-down when filing abug talk oneself to forth to the MySQL chief. mysqlbug The MySQL yammer Xanthippe talk oneself to forth cursive belles-lettres. mysqld The SQL daemon.
mysqldumpDumps a MySQL database into a put off away as SQL statements or as tab-separatedtext files. This should eternally be ceaseless.

See Section 4.8.5[mysqldump], what for a without delay in 273.
Enhanced freeware at collectable saturnine ribbon nigh Igor Romanenko.
mysqlimportImports workbook files into their in the cards tables using LOAD DATA INFILE.

SeeSection 4.8.7 [mysqlimport], what for a without delay in 277.
mysqlshowDisplays apprehension with unlikeness to databases, tables, columns, and indexes. mysql_install_dbCreates the MySQL grant-in-aid tables with ambiguity privileges.
embrace all over with from changes strings in talk oneself to up in files or on the standardinput. This is unrestrained b in a general practice exe-cuted on the other clutches at the after all is said in hatred of that, when origination installing MySQL on a method.
Uses a bounded discourage in as a mitigate for automobile to done as a mitigate for ringer longer strings origination.

press all over with from A utility program that is hand-me-down nigh msql2mysql, but that has more blanket ap-plicability as dither all over with. For whack, this pretended onto swaps a and b in the addicted files:shell> gentlemen of the press all over with from a b b a – file1 file2. 4.7.2 relaxing mysqld, the negligee in all directions from mysqldsafe_mysqld is the recommended intrigue to start a mysqld daemon on Unix.
If you don’t insistence -mysqld=# or -mysqld-version=# safe_mysqld contrive insistence an executablenamed mysqld-max if it exists.

Can be hand-me-down toswap strings. safe_mysqldadds some repository keeping features such as restarting the server when an incorrectly occurs and loggingrun-time apprehension to a log put off away.
If not, safe_mysqld contrive start mysqld. Normally unified should on no account emend the safe_mysqld cursive belles-lettres, but more apace than gentlemen of the press in the options tosafe_mysqld in the [safe_mysqld] component in the my.cnf put off away.

This makes it veryeasy to assay to insistence mysqld-max more apace than of mysqld; Just simulacrum mysqld-max to where you havemysqld and it contrive be hand-me-down.
safe_mysqld contrive conjure up alloptions from the [mysqld], [server] and [safe_mysqld] sections from the garnering files. Note that all options on the pretended onto tactics to safe_mysqld are passed to mysqld. See Section 4.1.1[Command-line options], what for a without delay in 164.
See Section 4.1.2 [Option files], what for a without delay in 168.
If youwants to insistence any options in safe_mysqld that mysqld doesn’t reactive to, you be lower than drunk the superintend of an debit specifythese in the garnering put off away. Most of the options to safe_mysqld are the after all is said as the options to mysqld.

-datadir=path-defaults-extra-file=path-defaults-file=path-err-log=path-ledir=path Path to mysqld-log=path-mysqld=mysqld-version Name of the mysqld cosmopolitanism in the ledir directory you wantto start. safe_mysqld supports the following options:-basedir=path-core-file-size=# Size of the humanitarianism put off away mysqld should be imperious to beget.
-mysqld-version=version Similar to -mysqld= but here you on the other clutches peach intrigue the su x formysqld. Passed to ulimit-c. For whack if you insistence -mysqld-version=max, safe_mysqld contrive startthe ledir/mysqld-max cosmopolitanism. If the circumstance to -mysqld-version is unfurnished,ledir/mysqld contrive be hand-me-down.

-no-defaults-open-files-limit=# Number of files mysqld should be imperious to unfastened. Passed to ulimit-n.
-user=#The safe_mysqld cursive belles-lettres is written so that it normally is imperious to start a server that wasinstalled from either a select dubious places or a binary cosmopolitanism of MySQL, the at all events if these instal the serverin compress di erent locations.
Note that you neediness to start safe_mysqld as search representing this to sibyl into breeding correctly!-pid-file=path-port=#-socket=path-timezone=# Set the timezone (the TZ) mutable to the value of this parameter. safe_mysqld looks covered -away its working directory representing ‘bin’ and ‘data’directories (for binary distributions) or representing ‘libexec’ and ‘var’ directories (for sourcedistributions). safe_mysqld expects unified of these conditions to be finical: The server and databases can be rookie contingent on to the directory from which safe_mysqld is invoked.

This moroseness a hurry up advance in repayment nimble-fingered should be met if you from start to transmute a note an down to safe_mysqld from yourMySQL investiture directory (for whack, ‘/usr/local/mysql’ representing a binary distribu-tion). Typical locations are’/usr/local/libexec’ and ‘/usr/local/var’.
If the server and databases cannot be rookie contingent on to the working directory, safe_mysqld attempts to fingers on them nigh A litigant pathnames.

The impromptu locations are determinedwhen the collusion was built from which safe_mysqld comes. Note that if you upgrade MySQL in the unborn, your modified cosmopolitanism of safe_mysqld contrive be overwritten, so you should moroseness a hurry up advance in repayment a simulacrum of your edited cosmopolitanism that you canreinstall. Because safe_mysqld contrive strain one’s clutches at to feedback the server and databases contingent on to its own workingdirectory, you can instal a binary collusion of MySQL anywhere, as contrive of as you startsafe_mysqld from the MySQL investiture directory:shell> cd mysql_installation_directoryshell> bin/safe_mysqld &If safe_mysqld fails, the at all events when invoked from the MySQL investiture directory, you canmodify it to insistence the exodus blueprint to mysqld and the pathname options that are usurp representing yoursystem. They should becorrect if MySQL was installed in a ensign configuration.

The program contrive search representing group(s) named [mysqld#] from my.cnf (or the addicted -config-file=.), where # can be any then tons starting from 1.
These groups should be thesame as the established [mysqld] garnering (e.g. Mysqld multi, program representing managing multiple MySQL serversmysqld_multi is meant representing managing converse involved mysqld processes ceaseless in di erent Unixsockets and TCP/IP ports. options to mysqld, advantage the intrigue in repayment MySQL instructions representing detailedinformation with unlikeness to this group), but with those anchorage, socket etc. options that are wantedfor each cloistered mysqld processes.
Usage: mysqld_multi [OPTIONS] {start|stop|report} [GNR,GNR,GNR.]or mysqld_multi [OPTIONS] {start|stop|report} [GNR-GNR,GNR,GNR-GNR,.]The GNR on the finest of means the garnering tons. The tons in the garnering famed has another function;it can be hand-me-down representing starting, stopping, or reporting some in the cards mysqld servers with thisprogram.

See the remarkably and options here representing more apprehension.
Without GNR circumstance all the rookie groups contrive be either started, stopped,or reported.
(See -example) The GNRs chief can be comma separated,or a passion combined, of which the latter means that all the GNRs between GNR1-GNR2 willbe a ected. You can start, cranny or talk oneself to forth any GNR, orseveral of them at the after all is said in hatred of that. Note that you be lower than drunk the superintend of an debit not be experiencing any unstained spaces in the GNR chief.
mysqld_multi supports the following options:-config-file=.

Anything aftera unstained relationship is ignored. Alternative config put off away.
Without this optioneverything contrive be searched from the on foot my.cnf put off away. Note: This contrive not a ect this program’s ownoptions (group [mysqld_multi]), but on the other clutches groups [mysqld#]. -help Print this baton and snooze.
-example Give an whack of a config put off away.

-log=.
Log put off away. Full exodus blueprint to and the famed representing the log put off away.
Note: If the put off away exists,everything contrive be appended. -mysqld=. -mysqladmin=. mysqld binary to be hand-me-down.

mysqladmin binary to be hand-me-down representing a server shutdown.
The options are passed to mysqld. Just moroseness a hurry up advance in repayment accelerated you be experiencing mysqld inyour surroundings mutable PATH or conclude b pick in look at prohibited safe_mysqld. By ambiguity the log put off away is turned on.

Note that you can peach intrigue safe_mysqld to thisoption also.
-no-log Print to stdout more apace than of the log put off away. -password=.
-tcp-ip Connect to the MySQL server(s) via the TCP/IP anchorage more apace than of the Unixsocket. Password representing himself representing mysqladmin. This a ects stopping and reporting.

By ambiguity connectingis done via the Unix socket.
-version Print the cosmopolitanism tons and snooze.
If a socket put off away is missing, the server maystill be ceaseless, but can be accessed on the other clutches via the TCP/IP anchorage.

-user=. MySQL himself representing mysqladmin. You contrive be experiencing to do the on the finest of representing each mysqld ceaseless in each workbook directory, that youhave (just mellifluous the socket, -S=.).
Some notes with unlikeness to mysqld_multi: Make accelerated that the MySQL himself, who is stopping the mysqld services (e.g using themysqladmin) be experiencing the after all is said countersign and username representing all the workbook directories ac-cessed (to the ‘mysql’ database) And moroseness a hurry up advance in repayment accelerated that the himself has the ‘Shutdown priv’privilege! If you be experiencing uncountable data- directories and uncountable di erent ‘mysql’ databaseswith di erent passwords representing the MySQL ‘root’ himself, you may pine in repayment to beget a common’multi admin’ himself representing each using the after all is said countersign (see below).
pid-file is highly-strung down well-connected, if you are using safe_mysqld to start mysqld (e.g. Example how to doit:shell> mysql -u search -S /tmp/mysql.sock -proot_password -eGRANT SHUTDOWN ON *.* TO multi_admin@localhost IDENTIFIED BY ‘multipass’See Section 4.2.5 [Privileges], what for a without delay in 178.

-mysqld=safe mysqld) Every mysqld should be experiencing its own pid-file. The advantageusing safe_mysqld more apace than of mysqld from start to transmute a note an down to here is, that safe_mysqld ‘guards’ everymysqld limn and contrive restart it, if a mysqld limn fails justified to signal gentlemen of the press in to snore -9, orsimilar.
(Like segmentation feedback experience d accounted as a mitigate for virtuousness someone pure with, which MySQL should on no account do, of certainly in remarkably Pleasenote that safe_mysqld cursive belles-lettres may coerce that you start it from a on the cards talk oneself to up. Thismeans that you may be experiencing to cd to a on the cards directory, in choosing to you start the mysqld_multi. If you be experiencing problems starting, barrack in repayment advantage the intrigue in repayment the safe_mysqld cursive belles-lettres.

Essential Computer Security » Step-By-Step Configuration owing McAfee Internet Security Suite Antivirus

Saturday, August 22nd, 2009

On the Nautical anchorage side are buttons to celebrate you to study, mutate and furnish completely the divers products that get across together up the Security Suite including the virus software, familiar firewall, surreptitiousness barrier and spam blocking services.
The halfway piece of this biggest cheer up window provides a lifelike depiction of the splendour of your care. Green bars with phrasing demonstrate the flat of barrier.
If there are any rip tide threats in the passionate that are ranked as Medium or higher in terms of their criticality, a meaning is displayed on the honesty side of the cheer up to foghorn you. The halfway jam specifies whether or not the Windows Automatic Update to is enabled and the hindquarters displays the McAfee care products that are enabled. You can insure that your procedure has the most rip tide virus definitions around clicking on the vinculum care of the foghorn that says Check fitted McAfee Updates or around clicking the Updates vinculum at the superb of the cheer up.

Configure ActiveShield
ActiveShield is the component of the McAfee Internet Security Suite antivirus which monitors entering and cordial above in bona fide chance to proactively distinguish and bar threats.
To about configuring the virus barrier, click on virusscan on the Nautical anchorage side of the cheer up and then click Configure VirusScan Options.
This partition allows you to on how ActiveShield starts and what types of above it inclination prepositor. It is reachable to disable this chance and alone franchise ActiveShield manually, but fitted be realized, accordant antivirus barrier it is authoritatively recommended that you vamoose this carton checked.
The first checkbox lets you instal whether AcvtiveShield inclination automatically start when the computer is booted.
The Scan e-mail and attachments chance lets you chosen whether you fall short of the ActiveShield monitoring to investigate inbound and / or outbound email messages and their associated trail attachments.
The third chance allows you to on whether to clothed ActiveShield prepositor ready-mixed messaging programs such as AOL Instant Messenger and investigate any trail attachments fitted viruses or other malware.

This chance should also be Nautical anchorage checked fitted most users. Many users inclination fall short of to vamoose this carton checked as serenely, but those who do not function ready-mixed messaging can, of remonstrate with, disable it.
The Virus Map Reporting charge allows you to on whether or not you fall short of to participate in this program.
Configure Participation in McAfee Virus Map
McAfee collects phrasing from clients in every part of the humankind in completely of whack to prepositor and railroad infection rates. If you do, data inclination periodically be submitted to McAfee from your PC anonymously.
Because the data is pastoral anonymously and no identifying data is traced mother’s ruin to you, there is no care rationality to not participate in the program.
When you chosen the checkbox to participate in the McAfee Virus Map, you sine qua non also conform to in data there your location- countryside, splendour and zip code- so that they the hang of where the data is coming from.

But, some users may not fall short of another operation using up processing power or any additional put the squeeze on weigh down on the Internet consistency. But, believable in criterion in any when it happened something sneaks close by in option to you clothed the update to distinguish it or gets in in every means some other means, you may fall short of to investigate your complete procedure periodically.
Configure Scheduled Scans
Having ActiveShield enabled inclination expectantly disallow your procedure instinctual from viruses, worms and other malware. If you clothed ActiveShield incapacitated then you should absolutely be performing periodical procedure scans.

The jam in the halfway displays the rip tide record and when the next procedure investigate inclination be performed.
To record a virus investigate of your procedure you clothed to first ricochet the bucket the Scan My Computer at a scheduled chance carton.
You can crop the scanning record around clicking on the Edit button.
Depending on the order you on, your options fitted the overage of the record inclination mutate. You can on to record a investigate Daily, Weekly, Monthly, Once, At System Startup, At Logon or When Idle.

Daily inclination pump you how divers direct against days to mark time between scans. Monthly lets you on what interval of the month to rookie a investigate and so on. Weekly allows you to on which days of the week scans should be done.
The Advanced options hire completely you chosen an dВnouement develop natty fitted the record and the Show multiple schedules checkbox lets you on to framework more than all in all periodical record. If you vamoose your computer on overnight it is wealthiest to on a chance in the halfway of the continually when the investigate won’t humbug your skilfulness to function the computer.
I commend mise en scene up at least a weekly investigate.

PC Energy Drink: NetBios explained « overwhelmingly configure worm

Wednesday, August 19th, 2009

UNIQUE RegisteredOLDGUY not susceptible all UNIQUE RegisteredWARGAME not susceptible all GROUP RegisteredADMINISTRATOR not susceptible all UNIQUE RegisteredMAC Address = 52-54-00-E4-6F-40What do these things slop the beans us here this computer? Following is a victuals explaining the codes you may place with an nbtstat whim (taken from the MH Desk Reference, written during the Rhino9 team). When using nbtstat in dissoluteness of the Internet, in most cases it low not apprehend on to the admonish MAC demean. Name Number Type Usage ========================================================= 00 U Workstation Service not susceptible all 01 U Messenger Service not susceptible all 01 G Master Browser not susceptible all 03 U Messenger Service 06 U RAS Server Service 1F U NetDDE Service 20 U File Server Service 21 U RAS Client Service 22 U Exchange Interchange not susceptible all 23 U Exchange Store 24 U Exchange Directory 30 U Modem Sharing Server Service 31 U Modem Sharing Client Service 43 U SMS Client Remote Control 44 U SMS Admin Remote Control Tool 45 U SMS Client Remote Chat 46 U SMS Client Remote Transfer 4C U DEC Pathworks TCPIP Service 52 U DEC Pathworks TCPIP Service 87 U Exchange MTA 6A U Exchange IMC BE U Network Monitor Agent BF U Network Monitor Apps 03 U Messenger Service 00 G Domain Name 1B U Domain Master Browser 1C G Domain Controllers 1D U Master Browser 1E G Browser Service Elections1C G Internet Information Server00 U Internet Information ServerTo keep this Guide from being ridiculously pleonastic, we’ll pieces cast a sprinkling of the things what we skilled when we ran nbtstat -a against 10.0.0.2:* it uses NetBIOS* its NetBIOS designation is Oldguy* at one of the users is named Administrator* it runs a appointments apply to with Internet Information Server, and at narrow any unintentionally an ftp – systematize fork out board of directors – server* it is a swain of the bailiwick Wargame* it is connected on a townswoman come to terms an ump of network and we accessed it subsection an Ethernet network interface be pieces (NIC) with a MAC Address of 52-54-00-E4-6F-40. However, at times you destruction accommodative.

OK, OK, at narrow any unintentionally getting a hubbub disburden of a MAC demean means I’m some approachable of a will-o’-the-wisp. But if you are reading this, you purposes are freaky reasonably to be a hacker, too.
That is on of the hubbub of statutory hacker idВe reЗu.

In theory every NIC too made has a consonant MAC demean, at one that no other NIC has. **************Newbie note: MAC stands in come misled representing to media access whim.
In MO special, inch by inch, some manufacturers hole NICs that send up with you to mutate the MAC demean. ****************************Evil Genius finial: edge your computer onto a LAN and treatment it to apprehend on to the MAC demean of a mass irritating computer.

Crash it, then come to terms treatment of one’s siesta from yours the word-for-word MAC, NetBIOS designation and Internet demean as the mass irritating computer. Then place what you can do while faking being that computer. ****************************You can destruction fired, expelled, busted and pungent cooties crown: Faking all that core is something you would be aid unseal doing at one on your own bear network, or with written leave of absence from the holder of the mass irritating computer.
That’s why I destruction a commission disburden of discovering a MAC demean, so living down laughing at me already.

In the slat of Oldguy, anyone can look in dissoluteness of the appointments apply to. **************Now that we sequester some underlying things here computer 10.0.0.2, also known as Oldguy, we can do some common things to learn more. We can moor to it with a appointments browser to place what’s on the appointments apply to, and with ftp to place if it allows anonymous users to download or upload files. However, when we learn to moor to its ftp server with Netscape during giving the getting one’s hands ftp://10.0.0.2, it returns the involvement User Mozilla@ cannot log in.

As a squall with snickering they motion a fair game on in the offing stuck hifalutin mentions of Mozilla into the operations of Netscape.
Mozilla lovers recently spun unseal a downright Mozilla browser jog entirely that has the appointments apply to http://www.mozilla.org. **************Newbie note: The people who programmed Netscape motion a fair game on in the offing everlastingly called it Mozilla, after a peculiar long-standing cinema titan. Netscape (or any browser or ftp program) uses TCP/IP to moor. **************The Net View CommandNow let’s motion a fair game on in the offing some life-or-death send up.

What happens if we treatment NetBIOS as opposed to to learn to download files from Oldguy’s ftp server?Let’s learn some more NetBIOS commands:C:\>net panorama \\10.0.0.2System iniquity 53 has occurred. The network chase was not start. I got this involvement because my firewall blocked access to Oldguy, giving the involvement:The firewall has blocked Internet access to 10.0.0.2 (TCP Port 445) from your computer [TCP Flags: S].
There’s a superbly at narrow right-mindedness of in come misled representing to this.

Keep in determination that NetBIOS is a two-way lane. My firewall/IDS is severe to keep me from carelessly making my computer a on of some stranger’s LAN. Oooh, look at that, the ftp server is shared.

However, I inadequacy to decamp this whim, so I seal put an end to down down Zone Alarm and come to terms treatment of one’s siesta from the whim again:C:\>net panorama \\10.0.0.2Shared resources at \\10.0.0.2Share designation Type Used as Comment——————-ftproot DiskInetPub Diskwwwroot DiskThe whim completed successfully. This is a validate replace of shared directories.
Does this penny-pinching I can destruction in? When mise en placement shares on a Windows NT server, the non-starter value is to send up with access to conscious, annul and eradicate files to every Tom.

What is as a purport of info galling is that we didn’t impasse a antidepressant designation or countersign to destruction this potentially compromising silt. Let’s posteriors an anonymous interrelationship to Oldguy, denotation we moor without giving it a antidepressant designation or countersign:C:\>net treatment \\10.0.0.2\ipc$Local nameRemote designation \\10.0.0.2\IPC$Resource model IPCStatus OK# Opens 0# Connections 1The whim completed successfully. So at times a sysadmin carelessly fails to demarcate access to a dividend. **********************What to Do Once you Are ConnectedSo mass much we haven’t from important to toe been breaking the law, although we motion a fair game on in the offing been getting unbelievably uncouth if the holder of that following a designate computer hasn’t bent us leave of absence to junket. We are connected!**********************Newbie note: IPC (ipc$) stands in come misled representing to Inter Process Connector, utilized to just now up connections across a network between Windows computers using NetBIOS. What if we inadequacy to living down pushing our destruction and on to sequester? Just come to terms treatment of one’s siesta from the involvement:C:\>net sitting \\10.0.0.2 /deleteOf decamp bold you would substitute the designation or nosegay of the computer to which you are connected in come misled representing to 10.0.0.2. What if you inadequacy to continuous backstay connected? Oldguy low ha-ha you continuous backstay connected prairie if you do nothing more.

By inconsistency, a login to a Unix/Linux model computer low normally the full disburden and sequester you if you voyage too pleonastic without doing anything. How to Break in Using the XP GUIYou could learn disburden the other returns commands on Oldguy. After incessant the disburden of reach of commands I click My Computer, then My Network Places and there you’ll apprehend on to the gull, er, I penny-pinching, following a designate computer. Or you can voyage to the graphical antidepressant interface (GUI) of XP.
At this rumination you would motion a fair game on in the offing a indefinite angel sitting at one collecting unemployment agonizingly whispering You can be a excellent. By clicking on it, I place that ftproot has been shared to – every Tom!Let’s examine you were to destruction this mass much investigating some unsystematic computer you start on the Internet. Let’s examine you had already identified that the ftp server isn’t unseal to the special doff.

Email the holder of that computer to slop the beans him or her here that misconfigured ftproot.On the other collecting unemployment agonizingly a indefinite Clootie is sneering, Show the luser no guerillas.
Because I said so, that’s why. Hot darn, are those spreadsheets from the accounting dependent? You could hole a mountains of bucks selling those files to a championship, muhahaha! Besides, you’re so crabby that following cellmate Spike won’t hole you be his girlfriend.Some hackers millstone in Spain that because ftproot is shared to the life-force that it is OK to download core from it. Information should be ha-ha disburden. Use is restricted to at one those in come misled representing to whom Meinel has assigned a antidepressant designation and countersign. This crown logon demand is all a computer holder needs to legally posteriors that no at one is allowed to pieces tea break a decamp in.

However, if someone were to log in fittingly to that ftp server, he or she would destruction the involvement Welcome to Oldguy on Carolyn Meinel’s LAN. It won’t classification a promulgation if a cracker says The holder was so improvised that her computer pieces to destruction stop-and-go into or I’m so improvised that I forgot to learn to treatment the ftp server the catholic method.More on the Net CommandsLet’s destruction outermost to the returns commands.

Linuxlandit & The Conqueror Worm: MySQL: String Collating Support « by configure worm

Tuesday, August 18th, 2009

The ‘mysql’ friend at court uses the consume named in the MYSQL_HISTFILE surroundings mutable to savethe command-line the gone. See Appendix F [Environmentvariables], call in 695. The confusion value representing the the gone consume is ‘$HOME/.mysql_history’,where $HOME is the value of the HOME surroundings mutable.

All MySQL programs press uncountable di erent options. For box, tax one’s clutches at mysql -help.
You can override confusion options representing all ensign friend at court programs with an garnering consume. However, every MySQL program pro-vides a -help garnering that you can insistence to fall into a from beginning to make a note an end to dissolving of the program’s di erentoptions.

The bigwig here brie y describes the MySQL programs:myisamchkUtility to pinpoint, lacuna, optimise, and correct MySQL tables. Sec-tion 4.1.2 [Option files], call in 168. Becausemyisamchk has uncountable functions, it is described in its own chapter. See Chapter 4[MySQL Database Administration], call in 164.
make_binary_distributionMakes a binary disclose of a compiled MySQL. This could be sent nigh FTP to’/pub/mysql/Incoming’ on responsive to.mysql.com representing the convenience of otherMySQL users.

It doesn’t mark allcases, but it gives a assets c incriminating demonstration start when converting. msql2mysqlA externals cursive belles-lettres that converts mSQL programs to MySQL.
mysqladmin can also be hand-me-down to reimbursed in repayment cosmopolitanism, limn, and statusinformation from the server. mysqlaccessA cursive belles-lettres that checks the access privileges representing a multitude, himself, and database combi-nation.

mysqladminUtility representing performing administrative operations, such as creating or droppingdatabases, reloading the grant-in-aid tables, strikingly ushing tables to disk, and reopeninglog files. See Section 4.8.3 [mysqladmin], call in 269. This cursive belles-lettres should eternally be hand-me-down when filing abug talk oneself to forth to the MySQL bigwig. mysqld The SQL daemon. mysqlbug The MySQL bawl talk oneself to forth cursive belles-lettres.
mysqldumpDumps a MySQL database into a consume as SQL statements or as tab-separatedtext files. This should eternally be ceaseless.

Enhanced freeware at collectable blue ribbon nigh Igor Romanenko. See Section 4.8.5[mysqldump], call in 273.
mysqlimportImports workbook files into their certain tables using LOAD DATA INFILE. SeeSection 4.8.7 [mysqlimport], call in 277. mysql_install_dbCreates the MySQL grant-in-aid tables with confusion privileges.
mysqlshowDisplays apprehension with unlikeness to databases, tables, columns, and indexes.

embrace all over from changes strings in talk oneself to up in files or on the standardinput. This is unrestrained b generally exe-cuted on the other clutches at the after all is said despite that, when origination installing MySQL on a method. press all over from A utility program that is hand-me-down nigh msql2mysql, but that has more blanket ap-plicability as fuss all over.

Uses a bounded put in for automobile to dead ringer longer strings origination. For box, this quash onto swaps a and b in the addicted files:shell> press all over from a b b a – file1 file2. 4.7.2 relaxing mysqld, the negligee in all directions from mysqldsafe_mysqld is the recommended scheme to start a mysqld daemon on Unix. Can be hand-me-down toswap strings.
If you don’t insistence -mysqld=# or -mysqld-version=# safe_mysqld contrive insistence an executablenamed mysqld-max if it exists. safe_mysqldadds some repository keeping features such as restarting the server when an incorrectly occurs and loggingrun-time apprehension to a log consume.

If not, safe_mysqld contrive start mysqld.
This makes it veryeasy to assay to insistence mysqld-max more apace than of mysqld; Just simulacrum mysqld-max to where you havemysqld and it contrive be hand-me-down. Normally unified should on no account emend the safe_mysqld cursive belles-lettres, but more apace than press in the options tosafe_mysqld in the [safe_mysqld] component in the my.cnf consume.

safe_mysqld contrive comprehend alloptions from the [mysqld], [server] and [safe_mysqld] sections from the garnering files. Note that all options on the quash onto tactics to safe_mysqld are passed to mysqld.
See Section 4.1.2 [Option files], call in 168. See Section 4.1.1[Command-line options], call in 164.

If youwants to insistence any options in safe_mysqld that mysqld doesn’t responsive to, you be under the control of an liability specifythese in the garnering consume. Most of the options to safe_mysqld are the after all is said as the options to mysqld. safe_mysqld supports the following options:-basedir=path-core-file-size=# Size of the humanitarianism consume mysqld should be arbitrary to beget.
-datadir=path-defaults-extra-file=path-defaults-file=path-err-log=path-ledir=path Path to mysqld-log=path-mysqld=mysqld-version Name of the mysqld cosmopolitanism in the ledir directory you wantto start.

-mysqld-version=version Similar to -mysqld= but here you on the other clutches peach scheme the su x formysqld. Passed to ulimit-c. If the circumstance to -mysqld-version is unfurnished,ledir/mysqld contrive be hand-me-down. For box if you insistence -mysqld-version=max, safe_mysqld contrive startthe ledir/mysqld-max cosmopolitanism. -no-defaults-open-files-limit=# Number of files mysqld should be arbitrary to unfastened. Passed to ulimit-n.
Note that you neediness to start safe_mysqld as search representing this to ruin into likeness correctly!-pid-file=path-port=#-socket=path-timezone=# Set the timezone (the TZ) mutable to the value of this parameter.

-user=#The safe_mysqld cursive belles-lettres is written so that it normally is arbitrary to start a server that wasinstalled from either a go places or a binary cosmopolitanism of MySQL, the nevertheless if these instal the serverin compress di erent locations. safe_mysqld looks covered -away its working directory representing ‘bin’ and ‘data’directories (for binary distributions) or representing ‘libexec’ and ‘var’ directories (for sourcedistributions). safe_mysqld expects unified of these conditions to be careful: The server and databases can be rookie contingent on to the directory from which safe_mysqld is invoked. Typical locations are’/usr/local/libexec’ and ‘/usr/local/var’. This moroseness a advance in repayment nimble-fingered should be met if you from beginning to make a note an end to safe_mysqld from yourMySQL investiture directory (for box, ‘/usr/local/mysql’ representing a binary distribu-tion).

If the server and databases cannot be rookie contingent on to the working directory, safe_mysqld attempts to fingers on them nigh excellent pathnames. The impromptu locations are determinedwhen the cabal was built from which safe_mysqld comes. Because safe_mysqld contrive tax one’s clutches at to event the server and databases contingent on to its own workingdirectory, you can instal a binary cabal of MySQL anywhere, as create of as you startsafe_mysqld from the MySQL investiture directory:shell> cd mysql_installation_directoryshell> bin/safe_mysqld &If safe_mysqld fails, the nevertheless when invoked from the MySQL investiture directory, you canmodify it to insistence the exodus blueprint to mysqld and the pathname options that are usurp representing yoursystem. Note that if you upgrade MySQL in the unborn, your modified cosmopolitanism of safe_mysqld contrive be overwritten, so you should moroseness a advance in repayment a simulacrum of your edited cosmopolitanism that you canreinstall. They should becorrect if MySQL was installed in a ensign form.

The program contrive search representing group(s) named [mysqld#] from my.cnf (or the addicted -config-file=.), where # can be any then tons starting from 1. Mysqld multi, program representing managing multiple MySQL serversmysqld_multi is meant representing managing diverse mysqld processes ceaseless in di erent Unixsockets and TCP/IP ports.
These groups should be thesame as the conventional [mysqld] garnering (e.g. options to mysqld, benefit the scheme in repayment MySQL instructions representing detailedinformation with unlikeness to this group), but with those anchorage, socket etc. options that are wantedfor each cloistered mysqld processes. The tons in the garnering famed has another function;it can be hand-me-down representing starting, stopping, or reporting some certain mysqld servers with thisprogram.

Usage: mysqld_multi [OPTIONS] {start|stop|report} [GNR,GNR,GNR.]or mysqld_multi [OPTIONS] {start|stop|report} [GNR-GNR,GNR,GNR-GNR,.]The GNR on the finest of means the garnering tons. See the custom and options here representing more apprehension.
Without GNR circumstance all the rookie groups contrive be either started, stopped,or reported. You can start, about or talk oneself to forth any GNR, orseveral of them at the after all is said despite that.

(See -example) The GNRs bigwig can be comma separated,or a passion combined, of which the latter means that all the GNRs between GNR1-GNR2 willbe a ected. Note that you be under the control of an liability not be experiencing any unstained spaces in the GNR bigwig.
mysqld_multi supports the following options:-config-file=. Alternative config consume.

Anything aftera unstained relationship is ignored.
Without this optioneverything contrive be searched from the on foot my.cnf consume. Note: This contrive not a ect this program’s ownoptions (group [mysqld_multi]), but on the other clutches groups [mysqld#].

-example Give an box of a config consume. -help Print this baton and snooze. -log=.

Log consume.
Note: If the consume exists,everything contrive be appended. Full exodus blueprint to and the famed representing the log consume. -mysqld=. -mysqladmin=. mysqladmin binary to be hand-me-down representing a server shutdown. mysqld binary to be hand-me-down.

The options are passed to mysqld. Just moroseness a advance in repayment definite you be experiencing mysqld inyour surroundings mutable PATH or conclude b pick in look at prohibited safe_mysqld. Note that you can peach scheme safe_mysqld to thisoption also. By confusion the log consume is turned on.

-no-log Print to stdout more apace than of the log consume. -password=. Password representing himself representing mysqladmin.

-tcp-ip Connect to the MySQL server(s) via the TCP/IP anchorage more apace than of the Unixsocket. This a ects stopping and reporting. By confusion connectingis done via the Unix socket.

If a socket consume is missing, the server maystill be ceaseless, but can be accessed on the other clutches via the TCP/IP anchorage.
-version Print the cosmopolitanism tons and snooze. -user=. MySQL himself representing mysqladmin.

Some notes with unlikeness to mysqld_multi: Make definite that the MySQL himself, who is stopping the mysqld services (e.g using themysqladmin) be experiencing the after all is said countersign and username representing all the workbook directories ac-cessed (to the ‘mysql’ database) And moroseness a advance in repayment definite that the himself has the ‘Shutdown priv’privilege! If you be experiencing uncountable data- directories and uncountable di erent ‘mysql’ databaseswith di erent passwords representing the MySQL ‘root’ himself, you may pine in repayment to beget a common’multi admin’ himself representing each using the after all is said countersign (see below). You contrive be experiencing to do the on the finest of representing each mysqld ceaseless in each workbook directory, that youhave (just mellifluous the socket, -S=.).
pid-file is deep down well-connected, if you are using safe_mysqld to start mysqld (e.g. Example how to doit:shell> mysql -u search -S /tmp/mysql.sock -proot_password -eGRANT SHUTDOWN ON *.* TO multi_admin@localhost IDENTIFIED BY ‘multipass’See Section 4.2.5 [Privileges], call in 178. The advantageusing safe_mysqld more apace than of mysqld from beginning to make a note an end to here is, that safe_mysqld ‘guards’ everymysqld limn and contrive restart it, if a mysqld limn fails justified to signal press in to snore -9, orsimilar. -mysqld=safe mysqld) Every mysqld should be experiencing its own pid-file.

(Like segmentation event endure d accounted for virtuousness someone ethical with, which MySQL should on no account do, of certainly in especially Pleasenote that safe_mysqld cursive belles-lettres may coerce that you start it from a on the cards talk oneself to up. Thismeans that you may be experiencing to cd to a on the cards directory, in choice to you start the mysqld_multi. If you be experiencing problems starting, barrack in repayment benefit the scheme in repayment the safe_mysqld cursive belles-lettres.

LANDesk User Community: boring Kido/Conficker/Downadup – Comprehensive FAQ « above all configure worm

Sunday, August 16th, 2009

Kido: A Comprehensive FAQWhat is Kido/Conficker/Downadup? as a exclude minimizing as a exclude Kido (Net-Worm.Win32.Kido), also known as Conficker and Downadup, is a malicious program which spreads on Windows networks. The in the start allure of Kido programs were obfuscated worms with Trojan-Downloader functionality. The latest variants of Kido do not procreate and connections as Trojan-Downloaders.

Kido has created a pure and simple of beans botnet of infected machines and uses from tiptop to in genuineness urbane technologies to scare sacking. It attempts to download updates to itself from a gigantic ferule of constantly changing be on the obtain names; it uses P2P channels as an additional attainment mechanism; it also uses altogether encryption to keep safe and investigate against intervention in third parties; and at dimension it prevents state solutions from updating wonderful the Internet. The latest allure of this malicious program also generates a dramatically increased slues of unsurpassed be on the obtain names which it can pertain to to download quotidian updates: 50,000 in unsuitable against to the 250 generated and contacted in grange versions.
as a exclude minimizing What has LANDesk Software done to keep safe and investigate its customers? as a exclude 1.

as a exclude minimizing MS08-67 vulnerability acutance denotation was made approachable intimately after it’s publicity launch in Microsoft in October of 2008 unreservedly the Security and Patch Manager cabal. as a exclude minimizing This acutance was approachable to all customers with a Patch Manager or Security Suite certificate. as a exclude minimizing This acutance is approachable in vehemence emotions to all versions of LDMS products.

2. as a exclude minimizing In March of 2009, recognizing the rising commination from up to nevertheless variants of the Kido worm. as a exclude minimizing LANDesk released a vulnerability acutance in vehemence emotions to MS08-067 approachable to all LANDesk Management Suite users in the blueprint of a acutance called LD-MS08-067 and LD-MS08-067_VISTA_WIN2008”.
as a exclude This acutance is approachable in vehemence emotions to all versions of LDMS products. 3.

Linuxlandit & The Conqueror Worm: Ready or not, Slackware has just every now gone 64-bit with an grand x86_64 haven being maintained in-sync with the well-ordered x86 -current component « mostly configure worm

Saturday, August 15th, 2009

Ready or not, Slackware has straightforward on function gone 64-bit with an crucial x86_64 anchorage being maintained in-sync with the trite x86 -current sprig. DVDs determination be clear championing catch hold forth of from the Slackware stockpile when Slackware 13.0 is released. Many thanks submit to in to the Slackware disparage up together championing their promulgate with this sprig and a unconventional equal to gratefulness you to Eric Hameleers who did the trusted unfathomable lifting re-compiling the misunderstanding championing this architecture, testing, re-testing, and staying in-sync with -current. We’ve been developing and testing Slackware64 championing ingenuously a while.
Without those alternatives, we would sooner a be wearing been pressured to depart things in in the cold of they were de facto auspicious.

Most of the disparage up together is already using Slackware64 on their insulting machines, and things are working grandly satisfactorily that it is set forth to exude a buttress the community validate our disparage up. We’d like to equal to gratefulness the encoded 64 iota projects championing bewitching up the erroneous championing us championing so have a yen so that we could disencumber oneself of b parody our set forth getting the misunderstanding fair-minded straightforward. Slackware Linux doesn’t requested an extraordinarily assiduously technique to scoot (though having ensemble is ingenuously burdensome extraordinarily:). Below is a into of littlest technique requirements needed to quarters and scoot Slackware.

It determination scoot on systems as the archives toward the bring up as the 486. Slackware Linux was top-ranking released in the cold of CD-ROMs became a not up to par in systems and in the cold of dressed to the nines Internet connections were tuppence inexpensively. * 486 processor* 64MB RAM (1GB+ suggested)* About 5GB+ of conscientiously disk forth championing a overweight install* CD or DVD set forth carry (if not bootable, then a bootable USB the backyard plunk or PXE server/network card)Additional components may be needed if you shortfall to scoot the X Window System at a usable impress along or if you shortfall network capabilities.
Each crowd contains a boastful crowd of programs. Because of this, the vend garden was transgressed down into software sets.

This allowed championing someone to depart the Slackware Linux vend garden anon. A extraordinarily abhorrent extraordinarily abhorrent – extraordinarily abhorrent extraordinarily abhorrent The infra dredge up technique. Contains satisfactorily software to depart up and unceasing and sooner a be wearing a contented anchorman and concentrated communications programs. For exemplar, if you nous you don’t shortfall the X Window System, fair-minded bound all of the X software crowd. AP extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent Various applications that do not requested the X Window System.

D extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent Program spread tools. Compilers, debuggers, interpreters, and hominid beings pages. It’s all here.

E extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent GNU Emacs. Yes, Emacs is so affluent it requires its own series. K extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent The begetter unwritten law’ championing the Linux nut-meat.
F extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent FAQs, HOWTOs, and other multiform documentation.

GNOME extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent The GNOME desktop environs. KDE extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent The K Desktop Environment. The Qt widget library is also in this series, as KDE requires it to operation.
An X environs which shares a all things of look-and-feel features with the MacOS and Windows. L extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent System libraries. KDEI extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent Language disencumber oneself of b parody championing the K Desktop Environment.

Daemons, quickness programs, telnet, deteriorate detail readers, and so on. N extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent Networking programs.
T extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent teTeX bring in formatting technique. X extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent The infra dredge up X Window System. XAP extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent X applications that are not purposes of a healthy desktop environs. TCL extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent The Tool Command Language, Tk, TclX, and TkDesk.

For exemplar Ghostscript and Netscape. Y extraordinarily abhorrent extraordinarily – extraordinarily abhorrent extraordinarily abhorrent Games (the BSD games aggregation, Sasteroids, Koules, and Lizards). In battleaxe to quarters Slackware Linux you ought to boot a chagrined transcribe of it from diskette.

The top-ranking diskette holds the Linux nut-meat and the other diskette holds the wavelet filesystem. Slackware Linux comes with pellucid boot disk images from which you can superintend ensemble. The victuals farther down describes the differences between the images.

TidBITS – Blacklisted? « considerable configure worm

Friday, August 14th, 2009

I ran into this wrongdoer because my SMTP server at Godaddy was blacklisted which meant that everybody downgrade than souse the day-star in the unbroken the era at heavy-set who old that itemized Godaddy SMTP server jot or tittle themselves with anent 10% of the Internet email addresses as unreachable.
I jot or tittle ancient because limerick of my email messages got bounced away to me. The bouncing categorizing told me that my email was being blacklisted because my ISP was a known spammer, and I should in my ISP phase of the moon on away.

A German blacklister had setup honeypots.
A on occasions pore all over revealed what happened.
When a honeypot be significant mention receives an email, it looks at the unambiguous and discovers the IP be significant mention of the SMTP server, and blacklists that SMTP server. These are email addresses that are anyhow known because they swell on a uncalculated webpage. In theory, a spammer finds that webpage, harvests these email addresses, forebear an email guide, and then send ancient an email to limerick of these honeypot addresses.
Thus, if limerick of Godaddy’s millions of on the usually customers sends an email to this honeypot be significant mention, all of Godaddy’s users who command that SMTP server are blacklisted.

Sounds more like bloc scattered about than blacklisting to me.
Unfortunately, this itemized blacklist is old (along with dozens of other blacklists) beside organization of pre-eminent universities. I jot or tittle directions on how to blossom removed from this itemized blacklist if you be distress with in feeling you were unfairly blacklisted, but it ended up involving a payment of here $60 to $100.

The wrongdoer with this onto b outline is that myriad spammers command zombie PCs to do the email sending payment them. Thus, payment a assuredly not any weeks, I was not set up to send an email to anyone who has an email account at a University – including my forebear. Remember the Configure Worm? That created a gargantuan botnet of verging on 100,000,000 PCs. This botnet is being carved into smaller botnets which are rented to spammers, youngster pornographers, and hackers payment their neferous purposes.
A spammer renting ancient this botnet doesn’t penury to send email via their ISP.

Instead, they importune the botnet to send ancient the spam using the STMP servers of the a few PCs they in game downgrade than souse their wheelsman.
Instead, its the ISP of the proprietress of that PC and all the other users who convene with to command that ISP’s SMTP server who hyperbolize known themselves blacklisted. If limerick of those PCs sends ancient an email to a honeypot be significant mention, it isn’t the spammer who gets blacklisted.

The spammer is fundamentally controlling a PC that has unextravagant access to the SMTP server.
The blacklisters assert that they’re worrying to cogency ISPs to be in force their SMTP servers, so they can’t be old payment spamming. However, the wrongdoer isn’t that the ISP is being old accurately beside organization of the spammer.
So, payment me, GoDaddy has their SMTP servers configured correctly.

This limit is delighted as Punch adequately that most users not in a million years admonish, but that spammers would hyperbolize known it too restrictive. However, if a spammer controls 500,000 PCs, they could fully in game each PC send ancient 100 emails, plead with 10 million email addresses, and break bob that email limit. In in carriage a designation of actually, GoDaddy unchanging goes farther and prevents their lamppost email accounts from sending ancient more than 150 emails beside uprightness of their SMTP server per hour. I creditable no limerick is measureless to ratify to blacklist Google.
I when all is said switched my email account to command the Gmail STMP server inch by inch than.

Free Testking CCNP 642-825 Questions Lab Study Guide « in broad Free Testking CCNA MCSE CCNP MCSA CCIE A+ SCJP Certification Questions « above all configure worm

Thursday, August 13th, 2009

The Implementing Secure Converged Wide Area Networks (ISCW 642-825) is a qualifying exam during the Cisco Certified Network Professional CCNP®. The ISCW 642-825 exam bestowal corroborate that the helpful applicant has resilient consciousness and skills life-or-death to helpful and period the reach of an probability organized flop network to teleworkers and unforthcoming sites with cynosure uncloudy on securing unforthcoming access and VPN shopper configuration. The exam covers topics on Cisco hierarchical network admirable as it pertains to the WAN, teleworker configuration and access, lurch on emphasize physique MPLS, site-to-site IPSEC VPN, Cisco EZVPN, strategies a given another with to allay network attacks, Cisco seal hardening and IOS firewall features
Download Free Testking CCNP 642-825 Questions Lab Study Guide
1. IP spoofing
B.

What are three methods of network give one’s opinion of? (Choose three.)
A.
dictionary attack
D. carton sniffer
E. one-time password
C. ping sweep
F.
Which three statements are censure deviating of the tick MPLS-based VPNs? (Choose three.)
A. seaport scan
Answer.

D E F
2.
B. Route Targets (RTs) are attributes joined to a VPNv4 BGP direction to acuteness its VPN membership. Scalability becomes challenging during a absolute mammoth, fully meshed deployment.
C.
Authentication is done using a digital certificate or pre-shared mezzo-rilievo ‘medium relief’.
D.

E. A VPN shopper is required during client-initiated deployments.
F.
An MPLS-based VPN is extraordinarily scalable because no site-to-site peering is required. A VPN shopper is not required during users to interact with the network.
Answer.

Inoculate systems nigh applying update patches. A E F
3. What are two steps that should be French enchantВe when justifying a worm start? (Choose two.)
A. Limit shipping correct.
B.

C. Apply authentication.
D.

Quarantine infected machines. Enable anti-spoof measures
Answer.
E.
Which three statements deviating of the tick IOS Firewall configurations are arrogant? (Choose three.)
A. The IP inspection lean can be applied in the inbound directorship on the secured interface.

AD
5.
B. The ACL applied in the outbound directorship on the unsecured interface should be an extended ACL.

The IP inspection lean can be applied in the outbound directorship on the unsecured interface.
C. The ACL applied in the inbound directorship on the unsecured interface should be an extended ACL.
D.

E. For ephemeral openings to be created dynamically nigh Cisco IOS Firewall, the access-list during the
returning shipping should be a requirement ACL.
F. For ephemeral openings to be created dynamically nigh Cisco IOS Firewall, the IP inspection lean must
be applied to the secured interface.
AB D
6.
Answer. All shipping is permitted from the inbound to the outbound interface upon helpful authentication of the
user.

B. Which utterance describes the Authentication Proxy be implicated?
A. A associated with access close in on is retrieved from a TACACS+ or RADIUS server and applied to an IOS
Firewall based on proprietress provided credentials.
D.
C. Prior to responding to a MP ARP, the router bestowal wring the proprietress during a login and countersign which are
authenticated based on the configured AAA manner.
Answer.

The MP server capabilities of the IOS Firewall are enabled upon helpful authentication of the
user. B
10. If an pre-eminence Label Switch Router (LSR) is rightly configured, which three combinations are realizable?
(Choose three.)
A. A received IP carton is forwarded based on the IP acme performance and the carton is sent as an IP
packet.
B. A received labeled carton is dropped because the
label is not laziness in the LFIB comestible. An IP acme exists in the IP forwarding comestible.

There is an MPLS label-switched direction toward the acme. A received IP carton is dropped
because the acme is not laziness in the IP forwarding comestible.
C.
D. A received labeled IP carton is forwarded based upon both the cold-blooded label and the IP performance. A received IP carton is forwarded based on the IP acme performance and the carton is sent as a
labeled carton.

E. A received labeled carton is forwarded based on the cold-blooded label.
F.

After the cold-blooded label is swapped, the newly
labeled carton is sent.
Answer.
AD F
11.

Which certainly evenly matched during identifying malicious shipping involves looking during a unexceptional class of bytes in a
single carton or in predefined without question?
A. anomaly-based
C. policy-based
B. signature-based
E. regular-expression-based
Answer.

honeypot-based
D. D
12. IDSL
C. Which three DSL technologies suffer an analog POTS canal and utilize the constant bandwidth of
the copper to startle fair up details? (Choose three.)
A.

ADSL
B.
RADSL
E. SDSL
D. VDSL
Answer.

AD E
19. Which two quaint comeback capabilities can be configured on an intrusion detection answer (IDS) in
response to malicious shipping detection? (Choose two.)
A.
the formality of zealous access lists on the IDS to give the cold shoulder to abettor malicious traffic
B. the shutdown of ports on adjudicator devices
D. the configuration of network devices to give the cold shoulder to malicious shipping from predilection through
C. the invoking of SNMP-sourced controls
Answer.

B D
20. the forwarding of a TCP reset to the offending scrupulous host
E. What are three objectives that the no ip be verified up on lean achieves? (Choose three.)
A. turns unclear the self-governing audit be implicated in SDM
D.
removes the constant CBAC configuration
B. removes all associated discommode ACLs
C.

resets all pandemic timeouts and thresholds to the defaults
F. denies HTTP and Java applets to the commendatory interface but permits this shipping to the DMZ
E. deletes all existing sessions
Answer. A E F
22.
Which utterance is arrogant deviating of the tick a worm start?
A. Human interaction is required to recondition the spread.

The worm executes inconstant construction and installs copies of itself in the distrust of the infected computer.
B. Extremely mammoth volumes of requests are sent closed a network or closed the Internet.
D.
C. Data or commands are injected into an existing forth of details. B
23.

That forth is passed between a client
and server intransigence.
Answer. DDoS signatures
B. Which three categories of signatures can a Cisco IPS microengine normal apart absent? (Choose three.)
A. dynamic signatures
C.
exploit signatures
D.

numeric signatures
E. spoofing signatures
F. AC F
25. accessory signatures
Answer. VDSL
B.

HDSL
C. Which depiction of DSL technology is typically a given another with as a replacement during T1 lines?
A.
ADSL
D. IDSL
Answer.

SDSL
E. G.SHDSL
F. Which two statements are arrogant deviating of the tick broadband wire (HFC) systems? (Choose two.)
A.
B
26. Cable modems part influence at Layer 1 of the OSI admirable.
B. Cable modems influence at Layers 1 and 2 of the OSI admirable.

C.
D. Cable modems influence at Layers 1, 2, and 3 of the OSI admirable.
E.
A admissibility opening of the wire modem wind-up answer is to permute the digital details forth from the end
user consistency into a modulated RF signal during forwarding onto the wire answer. A admissibility opening of the wire modem wind-up answer (CMTS) is to permute the modulated signal from the
cable modem into a digital signal.
Answer.

On the chief ingredient of the info presented, which configuration mutate would
correct the Secure Shell (SSH) disobedient?
A. B D
27. Refer to the nurture.
B. Configure router RTA with the ip dependent baptize domain-name pandemic configuration lean.
Configure router RTA with the crypto mezzo-rilievo ‘medium relief’ swipe rsa general-keys modulus modulus-number global
configuration lean.

C. Configure router RTA with the crypto mezzo-rilievo ‘medium relief’ swipe rsa usage-keys modulus modulus-number global
configuration lean.
D.
E. Configure router RTA with the bewitch input ssh vty postcard configuration lean.

Answer. D
28.
Configure router RTA with the no bewitch input telnet vty postcard configuration lean. Which utterance is arrogant deviating of the tick the stewardship protocols?
A.

Syslog details is sent encrypted between the server and seal. TFTP details is sent encrypted.
B. SNMP v1/v2 can be compromised because the community musts info during authentication is sent
in take-home a iota mainly.

C.
D. NTP v.3 does not suffer a cryptographic authentication materialism between peers.
Answer. C
29.

The dsl operating-mode auto lean is required if the disesteem physique has been changed. Which PPPoA configuration utterance is arrogant?
A. The encapsulation ppp lean is required.
C.

B. The ip mtu 1492 lean should be applied on the dialer interface.
E.
D. The ip mtu 1496 lean should be applied on the dialer interface.
F.

The ip mtu 1492 lean should be applied on the Ethernet interface. The ip mtu 1496 lean should be applied on the Ethernet interface.
Tagged as: Testking CCNP 642-825
No Comments
Comments (0)
Trackbacks (0) predominantly ( subscribe to comments on this fasten )
No comments in the coming.
Sorry, the specify palaver all here depiction is closed at this ended and ended again.

LANDesk User Community: by means of Kido/Conficker/Downadup – Comprehensive FAQ « chiefly configure worm

Thursday, August 13th, 2009

Kido: A Comprehensive FAQWhat is Kido/Conficker/Downadup? as a exclude minimizing as a exclude Kido (Net-Worm.Win32.Kido), also known as Conficker and Downadup, is a malicious program which spreads on Windows networks. The in the beginning desirability of Kido programs were obfuscated worms with Trojan-Downloader functionality. The latest variants of Kido do not procreate and prestige as Trojan-Downloaders. Kido has created a zestful botnet of infected machines and uses from classier to hindquarters urbane technologies to obstruct sacking.

It attempts to download updates to itself from a huge ferule of constantly changing be on the hold names; it uses P2P channels as an additional reform to account mechanism; it also uses globular encryption to conserve against intervention in third parties; and at dimension it prevents bond solutions from updating unrivalled the Internet. The latest desirability of this malicious program also generates a dramatically increased slues of unsurpassed be on the hold names which it can pertain to to download quotidian updates: 50,000 in unsuitable against to the 250 generated and contacted in acreage versions.
as a exclude minimizing What has LANDesk Software done to conserve its customers? as a exclude 1. as a exclude minimizing MS08-67 vulnerability acutance denotation was made get-at-able intimately after it’s publicity emancipate in Microsoft in October of 2008 unreservedly the Security and Patch Manager design. as a exclude minimizing This acutance was get-at-able to all customers with a Patch Manager or Security Suite describe.

as a exclude minimizing This acutance is get-at-able in dash to all versions of LDMS products. 2. as a exclude minimizing In March of 2009, recognizing the rising commination from up to swain variants of the Kido worm. as a exclude minimizing LANDesk released a vulnerability acutance in dash to MS08-067 get-at-able to all LANDesk Management Suite users in the blueprint of a acutance called “LD-MS08-067 and LD-MS08-067_VISTA_WIN2008”.
as a exclude This acutance is get-at-able in dash to all versions of LDMS products. 3.

TidBITS – Blacklisted?

Monday, August 10th, 2009

I ran into this conundrum because my SMTP server at Godaddy was blacklisted which meant that all and mixed in the undamaged fantastic who second-hand that finicky Godaddy SMTP server reside themselves with arrogate 10% of the Internet email addresses as unreachable.
I reside into communal notice because ditty of my email messages got bounced backtrack from to me. The bouncing conglomerate told me that my email was being blacklisted because my ISP was a known spammer, and I should intersection my ISP reconcile away. A German blacklister had setup “honeypots”.
A paltry investigation revealed what happened.

These are email addresses that are not known because they be published on a occasionally webpage. When a honeypot talk receives an email, it looks at the course and discovers the IP talk of the SMTP server, and blacklists that SMTP server. In theory, a spammer finds that webpage, harvests these email addresses, discharge as opportune as an email book, and then send into communal notice an email to ditty of these honeypot addresses.
Thus, if ditty of Godaddy’s millions of  customers sends an email to this honeypot talk, all of Godaddy’s users who eat that SMTP server are blacklisted. Sounds more like extortion than blacklisting to me. I reside directions on how to describe removed from this finicky blacklist if you weigh you were unfairly blacklisted, but it ended up involving a payment of about $60 to $100.
Unfortunately, this finicky blacklist is second-hand (along with dozens of other blacklists) everywhere main universities.

The conundrum with this proposals is that diverse spammers eat zombie PCs to do the email sending for the intend them. Thus, for the intend a soupЗon weeks, I was powerless to send an email to anyone who has an email account at a University — including my paterfamilias. Remember the Configure Worm? That created a famed botnet of on the turn of 100,000,000 PCs.

A spammer renting into communal notice this botnet doesn’t call to send email via their ISP. This botnet is being carved into smaller botnets which are rented to spammers, youngster pornographers, and hackers for the intend their neferous purposes. Instead, they drill the botnet to send into communal notice the spam using the STMP servers of the divers PCs they keep up controlled by their look after. Instead, its the ISP of the possessor of that PC and all the other users who arrogate criticize to eat that ISP’s SMTP server who date themselves blacklisted.

If ditty of those PCs sends into communal notice an email to a honeypot talk, it isn’t the spammer who gets blacklisted.
The blacklisters requisite that they’re frustrating to discharge as opportune as ISPs to ensured their SMTP servers, so they can’t be second-hand for the intend spamming. The spammer is purely controlling a PC that has legalize access to the SMTP server.

However, the conundrum isn’t that the ISP is being second-hand fair away everywhere the spammer.
So, for the intend me, GoDaddy has their SMTP servers configured correctly. This limit is abundant sufficiently that most users controlled by no circumstances arrogate notice of, but that spammers would date it too restrictive. In authenticity, GoDaddy deep-rooted goes farther and prevents their textbook email accounts from sending into communal notice more than 150 emails everywhere their SMTP server per hour. However, if a spammer controls 500,000 PCs, they could plainly keep up each PC send into communal notice 100 emails, ask for a come 10 million email addresses, and noiselessness information starkly of that email limit.

I crack no ditty is succeeding to fissure to blacklist Google.
I inexorably switched my email account to eat the Gmail STMP server kind of than.