Archive for category Networking/Security

Soportes a una solución global

Nuestro departamento de proyectos se ha especializado en la integración de entornos en las principales empresas del mercado. Nuestros clientes o los de nuestros partners disponen de una arquitectura multidisciplinar con multitud de variantes. Nuestra labor es que todo funcione a la perfección independientemente del fabricante que disponga. Conocemos los productos empresariales (enterprise) así como [...]

FacebookTwitterGoogle BookmarksLinkedInShare

, , , , , , , , , ,

No Comments

openssl s_client && openssl s_server

s_client Esta herramienta permite realizar comprobaciones en aquellos servicios SSL que dispongamos emulando un cliente. Por ejemplo, la comunicación de un cliente nativo LDAP por SSL, una query por ssh, el acceso a un servidor Apache seguro o simplemente capturar en un terminal la caducidad del certificado de un servicio. Su gestión y sintaxis es [...]

FacebookTwitterGoogle BookmarksLinkedInShare

, ,

No Comments

Módulos de Apache (mod_security)

Este módulo nos va a aportar la capacidad de filtrar accesos web a nivel de aplicación (capa 7) y normalmente se convina con el módulo de mod_proxy. Introducción Al instalar el paquete nos encontramos que vamos a cargar dos paquetes: libapache-mod-security – Tighten web applications security for Apache mod-security-common – Tighten web applications security – [...]

FacebookTwitterGoogle BookmarksLinkedInShare

, ,

No Comments

avoid lock of the root account

In the last post we saw how to enable account lockout after multiple failed login attempts, but if the account is locked is the root can be a big problem. The idea is that blocking is not applied to the root account and it launched the following command: root@solaris # usermod -K “lock_after_retries=no” root easy, [...]

FacebookTwitterGoogle BookmarksLinkedInShare

No Comments

lock a user account at the third attempt failed in solaris 10

To enable this feature edit the file /etc/security/policy.conf and change the last line with the following content: root@solaris # vi /etc/security/policy.conf … LOCK_AFTER_RETRIES=yes Default user accounts were locked at the fifth attempt and we must change to occur at the third attempt. This configuration is in the line RETRIES in the file /etc/default/login, which default [...]

FacebookTwitterGoogle BookmarksLinkedInShare

2 Comments

Deploy a small Grid on Sun Fire T1000 with Solaris Containers

This post is the first of three posts in which we will show you how to setup a fresh installed Sun Fire T1000 Server as a Solaris container server and deploy the Sun Grid Engine 6.2u4 software on different, securified, isolated zones. Architecture We are using a T1000 with on 1 Chip MultiThread processor with [...]

FacebookTwitterGoogle BookmarksLinkedInShare

, , , , , , , , ,

No Comments

conntrack DTrace script: connections by process, user and port on Solaris/Opensolaris

I’ve created conntrack DTrace script for Solaris and Opensolaris to monitor all outgoing TCP and UDP connections by process, user and port. It has some filtering capabilities allowing to filter traffic by port, process or user. In a standard unix system it’s rather difficult to know what process are using the network and how. With [...]

FacebookTwitterGoogle BookmarksLinkedInShare

, , ,

9 Comments