Home » Seguridad

Category Archives: Seguridad

Officescan, agents appear offline

Two resources to consider:

http://esupport.trendmicro.com/solution/en-US/1034943.aspx

if dashboard fails to load with a 403.1 error:

http://esupport.trendmicro.com/solution/en-US/1060118.aspx

 

Advertisements

OpenVPN on www.digitalocean.com CentOS VPS

Installation is easy using the procedure stated on their knowledge base:

http://goo.gl/qmtEm

Some things to be aware off:

After you follow the setup, you would be able to access only the VPS.

To route all traffic from the vpn clients through the tunnel to the internet, you have to make changes to the OpenVPN server configuration:

Change the default route of the vpn clients, uncomment the following line in the server configuration:
push "redirect-gateway def1"

Push DNS to the clients, in this example Google’s Open DNS is used:
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

Changes have to be done to the iptables rule to route traffic from the tunnel to the Internet:
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24-o eth0 -j MASQUERADE
iptables -t nat -A POSTROUTING -j SNAT --to-source xxx.xxx.xxx.xxx

Where xxx.xxx.xxx.xxx is the public ip address of the VPS.

Change the client configuration file to point to the files, instead of copying the content of the certificates to the the client configuration (ovpn files).

Reference:
http://www.servermom.com/how-to-build-openvpn-server-on-centos-6-x/732/

Expired NPS Server Certificate

Symptom:

Users cannot connect to Wireless Lan that is using an NPS Server and 802.1x.On the server:
NPS logs: Event ID 6273  Reason Code: 262 Reason: The supplied message is incomplete.  The signature was not verified.
Check the Personal Certificates on the Server where the NPS is running.  The RAS and IAS server certificate might be expired.

Solution:

This procedure solved the problem of an expired NPS Certificate on Windows Server 2008 R2.

http://technet.microsoft.com/en-us/library/cc754198.aspx

More info for the error:
http://technet.microsoft.com/en-us/library/cc735399%28v=ws.10%29.aspx

ESVA antispam virtual appliance new home

The community around the ESVA antispam virtual appliance has a new home:

http://www.esvacommunity.com/

Original work by author, Andrew MacLachlan:

http://esvaproject.pbworks.com

 

 

Hash calculators – Calculadoras de Funcion de Compendio

http://www.slavasoft.com/hashcalc/index.htm
(MD5, MD4, SHA1, SHA256,SHA384,SHA512, RIPEDMD160, PANAMA, TIGER, MD2, ADLER32, CRC32)

http://www.nullriver.com/products
(MD5) Calculates and Compares to a given value.

Identificadores de Seguridad bien conocidos en Windows

http://support.microsoft.com/kb/243330

Información desde la fuente para usuarios y grupos con SIDs conocidos para los sistemas operativos Windows.

Establecer permisos en llaves del registro por Politica de Grupos

En esta referencia hay información con respecto al tema:
http://technet.microsoft.com/en-us/library/cc756952%28WS.10%29.aspx