Monthly Archives: January 2007

Map a drive letter to a SFTP / SSH Server 7

My preferred server platform is linux. I have not yet been able to move to a linux-based system for my daily work, and trust me I’ve tried a number of times to move to a Fedora or Ubuntu desktop. Windows is still best for productivity and day-to-day tasks, as well as compatibility with other office workers. However that brings up the question of how to access resources on a linux system, securely, and easily enough to not take too much time out of your workflow. I have previously used the free WinSCP to do this. However, much like the FTP clients of yore, you need to transfer the file to your local PC, do the actual editing on your workstation (I prefer PSPad by the way), and then transfer the file back to the server. Windows fixed this particular issue by adding in Mapped drives, which can connect to an….

Small 16×16 icons for websites Comments Off

Looking for some small 16 by 16 icons for your website or other application? So was I. Here is what I’ve found: bulletmadness – large general use list, some brand specific urlgreyhot – (cool star trek reference) – a few mini and brand specific famfamfam – the motherload of small icons sweetie – pretty large icon set favicon.fr – its in french but easy enough to understand, and lots of icons here. paul armstrong designs – gallery2 icon set Here is my contribution, a MySpace icon.

Cacti remote exploit Comments Off

There appears to be an exploit in the wild which is automating the Cacti Command execution and SQL Injection Vulnerability [see Secunia alert 23528]. Via this exploit, any server running an older version of Cacti from before December 28th. Of course it’s always best to keep your software up to date. Other tricks to keep your system secure: Do not use default directories. Instead of /cacti/, use /somethingcacti/. This will foil any scripts which find based on server IP and default location (scripts can still find via a search engine search). Run apache using mod_security – this will try to catch SQL injection and remote command execution Mount your temporary directory (usually /tmp) with NOEXEC flag. This will prevent any script kiddies who are able to exploit a vulnerability from running other programs from the /tmp directory that PHP usually dumps things to. Let me know if you have any….

Clicky Web Stats Comments Off

Check out Clicky web stats. After you register, you add a piece of code to the bottom of your page and start collecting your stats. It’s really easy to set up, and the stats you get in return are awesome. You can see your stats by visitor, search term, page, etc. It is very clearly shown, and not as hard to figure out as some of the other webstats programs which really bog you down in data that you don’t need. I hate to say it, but it looks a lot nicer than Google Analytics. It is currently free – although I don’t see how they turn a profit at this point (it is in beta still) so I would look for either a pay service in the future, or maybe ad supported. Check it out and see what you think! This stats service is great for simple blogs and….

Centos, Logrotate, and noexec 2

This seems like a pretty rare bug but annoying anyway. On my system I found that when logrotate would run, some log files such as /var/log/maillog did not rotate properly. Typically, logrotate works like 1234Write to <tag>maillog</tag> Daily, move maillog to maillog.1 Daily, move maillog.1 to maillog.2 etc… However it was going 1234Write to maillog, Daily, move maillog to maillog.1, keep writing to maillog.1 Daily, move maillog.1 to maillog.2, keep writing to maillog.2 etc. According to this bug tracker entry and this post, it is a problem with the version of logrotate, and people having the /tmp directory on a separate mount (I did not even have mine set to noexec like I should have, and I still had this problem [fixed now, by the way]). It is easily fixed by installing the version of logrotate from the CentOS fasttrack repository [link]. After installing this, it looks like logrotate is….

Postfix queue tools 2

Here are a few handy items for Postfix email server users: 1. If your system is acting as a spam / antivirus / relay server for secondary internal servers, and your destination mail server is down, postfix will queue your messages to resend at a later time. In order for postfix to instantly re-queue these messages you use: 1postqueue -f 2. The mailq equivilant specific to postfix is 1postqueue -p 3. If you want to delete specific messages in your queue, use an ncurses based open source software called pfqueue. It will give you a menu that shows mail currently queued, and allows you to delete specific emails.

Free ISO Ripping Application for XP Comments Off

I was looking for some software to save (rip) an ISO file from a CD drive that you have. This is great for making backups, or if you access a CD often, it can help you in that you will not have to insert the CD every time your program runs. Also it speeds up your “CD” access. I had found this a while ago but I had a hard time finding it again, so I thought I would add an entry for future reference. It is called ISO Recorder by Alex Feinman, there are versions for XP, 2003, and Vista (32 and 64 bit versions for all). It adds an entry to your explorer menu in Windows XP – explorer integration is nice! Just right click and it presents you with the choice to “Create image from CD”. From there, just tell it where to save the ISO, and….