Posts tagged Security

Unexpected Changes

E-mail is one of those things that you take for granted. Once you have set-up an address and a client you can reliably receive mail for many years until something changes.

Read more ...


Poodle SSLv3

Well another week another security issue. This time it is a weakness in SSLv3. This is an older protocol (replaced by TLS) but can still be used in some circumstances. The Mozilla Security Blog article contains details. A quick fix for Firefox users is to install SSL Version Control plugin to disable use of SSLv3. SSLv3 will be disabled by default in Firefox 34 when it is released towards the end of November.

Read more ...


Bash Exploit

Well I read this article whilst I was at work. Upon getting home I started up my Fedora machine and ran the following check to see if I was vulnerable.

Read more ...


The Legacy Email Problem

Over the years, like many other people, I have obtained numerous email accounts/addresses. Trying to manage all these used to be a problem so a few years back I began to condense them down into the few I actually use.

Read more ...


Keeping My Hat On

In my previous post I outlined my thinking about moving from Fedora to OpenSuse. I installed OpenSuse 12.3 onto mylaptop and had a play about. The installer was clean and easy to use and everything was setup with the minimum of effort.

Read more ...


Windows 7 + CUPS - Problem Solved

I have been trying to get my Windows 7 (Pro) machine to connect to the CUPS printer on my Linux server. Whilst it used to work with Windows XP (Home) via IPP (Internet Printing Protocol) I was having no luck with Windows 7. One reason for the problem is my network security and firewalls. I lock down everything unless it is actually needed. This means that all the auto discovery services on the network can’t talk to each other. Still knowing the IP address and ports of the relevant machine/service to connect to is normally enough to get things working. Not in this case however. For some reason either at the Windows or CUPS end the IP address was causing a problem. The problem being that the it wasn’t being resolved to a machine name when trying to setup the IPP connection.

Read more ...


Mailserver Project - October Update

The mailserver project which I have been working on for many months now is getting to the point where it will soon be taking over the role of hosting all my email. No problems have been discovered over the past month and my upgrade script to regenerate the security certificates worked perfectly. A recent update to Dovecot, the IMAP system, means that a little more testing is in order due to modifications made to the config files.

Read more ...


Quick Mailserver Update

I have at long last done a little more work on the mailserver project. The latest thing to report is the addition of dspam to filter out spam. In addition to this clamAV is also integrated.

Read more ...


Mailserver Project: It Appears To Work

After spending much time and effort on the mailserver project I think I have finally created a secure and working basic setup. It’s currently a little to late to do extensive testing but the brief tests carried out so far look good. A laptop with a self signed ssl certificate can securely connect to the mailserver over the local lan and retrieve the email in the imap store and securely send email out again. Trying to use the mail client on the mailserver itself correctly fails to retrieve the imap store or send email due to not having a self signed certificate to send.

Read more ...


Mailserver Project: Another Update

I was hoping to begin this month with news that my mailserver project was reaching the milestone objective of being secure and working, alas it is not to be. The good news is that over the past month I have made significant progress and am in the final stages of securing and testing.

Read more ...


Windows Vista - Still Crap

In the past few weeks I purchased some new Anti-virus and Firewall software from ESET to replace my expiring & bloated AVG install. The first machine to get the upgrade was my XP desktop machine; everything went well. I was impressed with the lighter feel to the software and the added fact that it didn’t seem to be hogging the system resources quite as much. A weeks trial later I decided it was stable and usable enough to be used on my laptop; running Windows Vista. The install was painless and the software scanned my system and there were no obvious issues.

Read more ...


Never Blindly Copy Code

I have been developing my own iptables firewall scripts for my Linux machines. On the whole the process has been going quite well. Part of my research into the firewall rules involved buying a few reference books, one of which contained what claimed to be a very secure script. I copied the base rules over to use as a base to add my own rules to and things have progressed very well.

Read more ...


I Hate Windows XP Home

Over the easter weekend I have decided once again to setup my network just the way I like it. Up to this point everything is going well, the Samba shares on the linux machines are at last accessible through the firewall and the Linux machines can access the Windows shares. Now the problems start.

Read more ...


Protect Your Computer

I get asked many times how best to defend a computer against the internet. Well todo you all a favor here is my recommended defence applications

Read more ...