Nityas World - Official Blog Of Nityanand Parab2010-03-10T01:41:02Znityanandparab@yahoo.com (Nityanand)Copyright 2010, nityanandparab@yahoo.com (Nityanand)SPHPBLOGOSPF Lsa Typeshttp://nityasworld.com/ospf-lsa-types.htm
]]>http://nityasworld.com/index.php?entry=entry100308-1258472010-03-08T00:00:00Z2010-03-08T00:00:00ZList Of Network Monitoring Softwaresthis link you will get the list of almost all network monitoring softwares.The list prepearation satrted in 1996 and updated till 3rd Jan 2010.The audience will be mainly network administrators.
]]>http://nityasworld.com/index.php?entry=entry100305-1115082010-03-05T00:00:00Z2010-03-05T00:00:00ZMake Money Through AutobloggingBut imagine you get a bunch of blog writers who will constantly write articles for your blog and it will drive enough visitors without you having to use your resources.
This is possible through Autoblogging.Autoblogging is not a word relatd to auto industry but it is the frame used for the method of blogging.The blog post will be generated automatically.
How this will possible? You have to keep software for Autoblogging on your site.There are numerous software available like this e.g. Wprobot from Wordpress.Autoblogged from Autoblogged.com, Feedwordpress from Feedwordpress.com
How they work? You have to have a blogging software like Wordpress installed on you site.Then you can download the software for autoblogging.You can choose which feeds you would like to post on your site. Here I will take example of Wprobot.
These modules can be integrated in your autoblog. Suppose you have selected Article will add related articles from articlesbase.com to your weblog with ease. Like this you can add any RSS feed you like to this autoblog.The trick is to add the RSS feeds with greater PR to your autoblog.
This way new content will be posted to your blog automatically without wasting your time.You can monetize the blog by adding adsense or any other ad software.
You should keep the content of the site related to single topic.You have to find a niche.This will drive visitors concerning only for that traffic and your blog can be a hit for the same topic.
]]>http://nityasworld.com/index.php?entry=entry100304-1249272010-03-04T00:00:00Z2010-03-04T00:00:00ZIndian Technology Blogs Who Are Making Lots Of Money Blogging Website Owner Ads revenue/day Estimated worth
]]>http://nityasworld.com/index.php?entry=entry100301-1907172010-03-01T00:00:00Z2010-03-01T00:00:00ZBaga Beach in GoaBaga Beach is located just 10-km west of Mapusa and extends essentially out of Calangute Beach. It is quaintly located by the Arabian Sea on the west coast of Goa. It is nestled in the rocky, wooded headland. Unlike the very crowded and busy Calangute, Baga has unspoiled scenic beauty that is more varied than just the plain beach of Calangute. The Beach receives most of its tourist influx from the British package tourists. It has a beautiful retreat house serenely located atop a hill.
Baga beach attracts western tourists who love its water sports and fishing expeditions. Baga has the best restaurants in Goa. From standard beach shacks to rustling pizzerias and terrace cafes serving real espresso coffee, Baga has all types of foodie destinations.
]]>http://nityasworld.com/index.php?entry=entry100301-1901032010-03-01T00:00:00Z2010-03-01T00:00:00ZAnjuna Beach in GoaEnjoy the funky music and loud beach parties that are a fixture of Anjuna. For the gourmets Anjuna offers the best of western seafood. You can choose from amongst any of the beachfront or village hotels. All of them are equally simple and serve equally delighting food and chilled beer.
The place has life and enthusiasm written in its air. The all night long beach parties, the Christmas to New Year frenzy or the swanky full moon parties, Anjuna is always up for it. On a day trip to Anjuna you can savor the best delights at the famous flea market or the shopping hangout off the beach or else you can enjoy the easy strolls on a moonlit night on the cool silvery sands.
]]>http://nityasworld.com/index.php?entry=entry100228-2112412010-02-28T00:00:00Z2010-02-28T00:00:00ZSetting Up Squid As A Transparent Proxy i) System: Pentium Dual Core with 765 MB RAM ii) Eth0: IP:192.168.1.1 iii) Eth1: IP: 192.168.2.1 (192.168.2.0/24 network (around 150 windows XP systems)) iv) OS: Red Hat Enterprise Linux 4.0 (Following instruction should work with Debian and all other Linux distros)
Eth0 connected to internet and eth1 connected to local lan i.e. system act as router.
Here I am pasting the contents from the same URL ---------------------------------------------------------------------------------------------
Server Configuration
* Step #1 : Squid configuration so that it will act as a transparent proxy * Step #2 : Iptables configuration o a) Configure system as router o b) Forward all http requests to 3128 (DNAT) * Step #3: Run scripts and start squid service
First, Squid server installed (use up2date squid) and configured by adding following directives to file: # vi /etc/squid/squid.conf
Modify or add following squid directives: httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on acl lan src 192.168.1.1 192.168.2.0/24 http_access allow localhost http_access allow lan
Where,
* httpd_accel_host virtual: Squid as an httpd accelerator * httpd_accel_port 80: 80 is port you want to act as a proxy * httpd_accel_with_proxy on: Squid act as both a local httpd accelerator and as a proxy. * httpd_accel_uses_host_header on: Header is turned on which is the hostname from the URL. * acl lan src 192.168.1.1 192.168.2.0/24: Access control list, only allow LAN computers to use squid * http_access allow localhost: Squid access to LAN and localhost ACL only * http_access allow lan: -- same as above --
Here is the complete listing of squid.conf for your reference (grep will remove all comments and sed will remove all empty lines, thanks to David Klein for quick hint ): # grep -v "^#" /etc/squid/squid.conf | sed -e '/^$/d'
OR, try out sed (thanks to kotnik for small sed trick) # cat /etc/squid/squid.conf | sed '/ *#/d; /^ *$/d'
Next, I had added following rules to forward all http requests (coming to port 80) to the Squid server port 3128 : iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j DNAT --to 192.168.1.1:3128 iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128
Here is complete shell script. Script first configure Linux system as router and forwards all http request to port 3128 (Download the fw.proxy shell script): #!/bin/sh # squid server IP SQUID_SERVER="192.168.1.1" # Interface connected to Internet INTERNET="eth0" # Interface connected to LAN LAN_IN="eth1" # Squid port SQUID_PORT="3128" # DO NOT MODIFY BELOW # Clean old firewall iptables -F iptables -X iptables -t nat -F iptables -t nat -X iptables -t mangle -F iptables -t mangle -X # Load IPTABLES modules for NAT and IP conntrack support modprobe ip_conntrack modprobe ip_conntrack_ftp # For win xp ftp client #modprobe ip_nat_ftp echo 1 > /proc/sys/net/ipv4/ip_forward # Setting default filter policy iptables -P INPUT DROP iptables -P OUTPUT ACCEPT # Unlimited access to loop back iptables -A INPUT -i lo -j ACCEPT iptables -A OUTPUT -o lo -j ACCEPT # Allow UDP, DNS and Passive FTP iptables -A INPUT -i $INTERNET -m state --state ESTABLISHED,RELATED -j ACCEPT # set this system as a router for Rest of LAN iptables --table nat --append POSTROUTING --out-interface $INTERNET -j MASQUERADE iptables --append FORWARD --in-interface $LAN_IN -j ACCEPT # unlimited access to LAN iptables -A INPUT -i $LAN_IN -j ACCEPT iptables -A OUTPUT -o $LAN_IN -j ACCEPT # DNAT port 80 request comming from LAN systems to squid 3128 ($SQUID_PORT) aka transparent proxy iptables -t nat -A PREROUTING -i $LAN_IN -p tcp --dport 80 -j DNAT --to $SQUID_SERVER:$SQUID_PORT # if it is same system iptables -t nat -A PREROUTING -i $INTERNET -p tcp --dport 80 -j REDIRECT --to-port $SQUID_PORT # DROP everything and Log it iptables -A INPUT -j LOG iptables -A INPUT -j DROP
Save shell script. Execute script so that system will act as a router and forward the ports: # chmod +x /etc/fw.proxy # /etc/fw.proxy # service iptables save # chkconfig iptables on
Start or Restart the squid: # /etc/init.d/squid restart # chkconfig squid on
Desktop / Client computer configuration
Point all desktop clients to your eth1 IP address (192.168.2.1) as Router/Gateway (use DHCP to distribute this information). You do not have to setup up individual browsers to work with proxies.
]]>http://nityasworld.com/index.php?entry=entry100227-1247382010-02-27T00:00:00Z2010-02-27T00:00:00ZUntangle - An Opensource Gatway AV with Web Filteringhttp://untangle.com is avaailable as an opensource software to use as Gateway Antivirus, Firewall with follwing features -Web Filter -Spam Blocker -Spyware Blocker -Protocol Control -Ad Blocker -Virus Blocker -Firewall -Open VPN
It can Protect your Network Untangle protects you from malicious incoming Internet threats such as viruses, spyware, hackers, identity thieves and more.
Monitor Apps & Network Monitor online behavior at the user, client and incident level. You can see what web sites are being visited, by whom, on what system.
Control your Network Restrict access to inappropriate sites, manage when certain sites can be accessed, and control undesireable Internet activity, like web shopping during work hours.
It has paid up version also which the user can download for extra capabilities It includes -eSoft Web Filter -WAN Balancer -Remote Access Portal -Kasperesky Virus Blocker -WAN Failover -Policy Manager -Commtouch Spam Booster
and also includes live support
You can load the Untangle through Vmware, as a standalone OS or as a windows application on a windows based PC
In the Vmware and standalone version can act in transparent mode and if you would like to test it features then you can install it as an application on any windows PC in your network with 2GB RAM and Dual Core CPU without changing your network. It can still act as a gwateway to all the machines using proxy arp feature.
]]>http://nityasworld.com/index.php?entry=entry100223-1125582010-02-23T00:00:00Z2010-02-23T00:00:00ZAVDS- Automatic Vulnerability Detection System from Beyondsecuritythe sytems, switches, routers and other systems for vulnerabilities and will give the report on the same at the end of the scanning. This scanning gets done as per the policy of the organization with a duration of a week or fortnight.But the disadvantage of this is if the vulnerability is found within that period will be undiscovered.
This situation can be avoided by introducing a Vulnerability Detection System which is automatic and will work 24 hours a day.The reports can be available to IT Security managers at any time. This reduces the burden of security engineers.One such system is available from Beyondsecurity. The source used by AVDS is http://www.securiteam.com/ which finds out exploits and vulnerabilities in the systems.
The Security managers can generate the tickets for incidents reported in the AVDS. Overall considering its features its a good product for Big organizations who find the mammoth task of finding the vulnerabilities in the system difficult.
]]>http://nityasworld.com/index.php?entry=entry100222-1015122010-02-22T00:00:00Z2010-02-22T00:00:00ZProtectDrive From Aladdin- Encryption Solution With Port RestrictionYou can keep single sign-on for the user.It can integrate with Active Directory and you can manage encryption and other polices for number of computers through Group Policy. It supports PBA(Preboot Authentication) i.e user can give windows login credentials at the booting only.So if his HDD gets lost the thief will not be able to login and steal the data on the HDD itself as it is encrypted. It supports below encryption standards -AES 256 bit -AES 192 bit -AES 128 bit -IDEA 128 bit -Triple DES CBC 112 bit -DES CBC 56 bit
As well as it supports FIPS standard(Federal Information Processing Standard) more info on this wiki link
You can enable/disable following devices on the computer for selected users or the whole computer itself with the policies built into this CDROM, Diskettes, Removable media, Parallel Ports, Serial ports
After starting the encryption if you would like to restart the computer for some reason it does not start from the initial, it resumes from the previously stopped sector,thus saving your lot of time.
I tested it on Vmware virtual machine with 10 GB HDD and it took 20 minutes to do the Full Disk Encryption.
]]>http://nityasworld.com/index.php?entry=entry100220-1126202010-02-20T00:00:00Z2010-02-20T00:00:00ZWeb Encyclopedia on Chhatrapati Shivaji Maharaj The Web Based Digital Interactive Encyclopedia will contain # 20,000 plus pages of historical information # Original documents in persian & modi referred. # Over a lakh of photographs of around 350 forts # Satellite coordinated GPS monitored maps of all forts. # SOVIT (Software Operated Virtual Interactive Tool) of forts. # State of the art technology, Dynamic multi-path search, Voice Interactivity, Multiple captioned photographs. # Forts from Nashik to Tanjaore covered with still and video photography. # Pictorial biography of Maharaj with 100 exclusive stories 2,500 colour paintings on his life & times. # Making of 1 hour Animated film on Maharaj under consideration.
Period covered Fifty years before birth of Shivaji Maharaj. Fifty years of the life of Shivaji Maharaj. Twenty-Seven Years after Shivajis death till the death of Aurangzeb.
The website covers a span of 127 years of Maratha History.
The size of this encyclopedia will be around 110GB.
You can visit rajashivaji.com for more information.
]]>http://nityasworld.com/index.php?entry=entry100219-1129542010-02-19T00:00:00Z2010-02-19T00:00:00ZPeplink -A Bandwidth Aggregation ProductThe lowest model comes with 2 WAN interfaces and their highest model comes with 7 WAN interfaces.
I have tested Peplink Balance 380 equipment.You can aggregate the bandwidth on 6 different alogorithms as below -Weighted Balance -Least Used -Priority -Overflow -Persistence -Lowest Latency -Enforced
]]>http://nityasworld.com/index.php?entry=entry100216-1255462010-02-16T00:00:00Z2010-02-16T00:00:00ZRouting and Switching Topics from Learningnetwork.cisco.com You can get many topics on routing and switching.I am posting the topics in Routing section.The topics are from basic to advanced.
Cisco CRS-1 Carrier Routing System Essentials (CRS) v2 (Advanced Solutions Education (ASE) Training Sample) Advanced Implementing and Troubleshooting MPLS VPNs (AMPLS) (Advanced Solutions Education (ASE) Training Sample) Building Core Networks with OSPF, ISIS, BGP and MPLS (Advanced Solutions Education (ASE) Training Sample) Basic IP Routing Concepts Master protocols that are the backbone of the Internet and enable traffic to move across business networks with Basic IP Routing Concepts. Routing Information Protocol (RIP) Master protocols that are the backbone of the Internet and enable traffic to move across business networks with Routing Information Protocol. Enhanced Interior Gateway Routing Protocol (EIGRP) Master protocols that are the backbone of the Internet and enable traffic to move across business networks with Enhanced Interior Gateway Routing Protocol. Open Shortest Path First (OSPF) Master protocols that are the backbone of the Internet and enable traffic to move across business networks with Open Shortest Path First. Apr-24-2007 CCNP OSPF Lab Moving traffic using Access Lists Master protocols that are the backbone of the Internet and enable traffic to move across business networks with Access Lists. Web-based Apr-24-2007 CCNA Access Lists Lab BGP Introduction and Basics Master protocols that are the backbone of the Internet and enable traffic to move across business networks with BGP Introduction and Basics. Apr-24-2007 CCNP CCIP BGP Lab BGP Path Selection Master protocols that are the backbone of the Internet and enable traffic to move across business networks with BGP Path Selection. Apr-24-2007 CCNP CCIP BGP Lab Controlling the Flow of BGP Updates Master protocols that are the backbone of the Internet and enable traffic to move across business networks with Controlling the Flow of BGP Updates. Apr-24-2007 CCNP CCIP BGP Lab BGP Multipath and Conditional Advertisement Master protocols that are the backbone of the Internet and enable traffic to move across business networks with BGP Multipath and Conditional Advertisement. Apr-24-2007 CCNP CCIP BGP Lab BGP Load Sharing in Single and Multihomed Environments: Sample Configurations. Provides information on Load sharing for: * Loopback Address as a BGP Neighbor * Dual-Homed to One Internet Service Provider (ISP) Through a Single Local Router * Dual-Homed to One ISP Through Multiple Local Routers * Multihomed to Two ISPs Through a Single Local Router * Multihomed to Two ISPs Through Multiple Local Routers CCNP CCIP BGP
BGP Challenge Labs Master protocols that are the backbone of the Internet and enable traffic to move across business networks with BGP Challenge Labs. CCNP CCIP CCIE BGP Lab Securing Cisco Routers (SECR) v1.0 Learn the top ten steps to improving Cisco router security. This course combines an updated version of the popular Cisco Router Security (CRS) course with the new Advanced Cisco Router Security (ACRS) course. Based on industry best practices and the newest in Cisco IOS security features, it contains tutorials, configuration examples, e-lab simulations, a built-in assessment to test your knowledge, and a course evaluation to provide feedback. CCSP Router Security IP Routing - Introduction Learn the fundamentals of IP Routing. You will be able to define routing, explain the benefits of segmenting a LAN with routers, understand how a router selects routes, discuss the differences between static and dynamic routing, discuss the differences between distance-vector and link-state routing protocols, understand the difference between classful and classless routing, and briefly explain how routing protocols such as RIP, IGRP, EIGRP and OSPF work. CCNA Router IP Routing Access Lists Learn how to onfigure access lists in an IP routing environment. You will also do hands-on Configuration Labs, and a Challenge Lab to test your troubleshooting knowledge. Feb-19-2003 CCNA Router IP Routing Intermediate System-to-Intermediate System Routing Protocol (IS-IS) In this module, you will learn the basic concepts behind IS-IS. You will also do hands-on Configuration Labs and a Challenge Lab to test your troubleshooting knowledge. CCIP IS-IS ISIS Lab Enhanced Interior Gateway Routing Protocol (EIGRP) Learn the basic concepts behind Enhanced Interior Gateway Routing Protocol (EIGRP). You will also do hands-on Configuration Labs to learn some fundamental concepts of EIGRP, and a Challenge Lab to test your troubleshooting knowledge. Oct-16-2002 CCNP CCIP Fundamental Configuration and Verification of EIGRP Learn the fundamental configuration and verification of the Cisco proprietary routing protocol, Enhanced Interior Gateway Routing Protocol (EIGRP). Open Shortest Path First (OSPF) Network Types Gain a basic understanding of Open Shortest Path First (OSPF) network types. You will understand: the differences between three default OSPF network types; when it is appropriate to use each network type; how to configure each network type; and how to resolve problems with OSPF over non-broadcast multi-access (NBMA) networks. CCNP OSPF Adjacencies Gain a basic understanding of troubleshooting neighbor adjacencies in Open Shortest Path First (OSPF). IOS-XR 3.6.0 Product Enhancements for CRS & GSR IOS-XR 3.6.0 is the latest software enhancement release for the CRS and GSR platforms. Check out this podcast to learn more about this new release's major features, including multi-chassis scalability, ISSU, NSR, and more. Podcast (AOD) English 11:06:06 NPI
Switching Topics from learningnetwork.cisco.com Introduction to LAN Switches QLM This quick learning module QLM gives the fundamentals of LAN switching. After going through this module, you will know the key differences between collision and broadcast domains, learn the benefits of segmenting networks with bridges or switches, understand how bridges and switches work, discuss VLAN and its functionality, and recognize the distinction between various types of switching methods.
Understanding VLANS by Understanding MAC Table Operation In order to clarify how VLANs are created, it is useful to understand how the modification made to the original MAC filtering and forwarding rules allows for the implementation of VLANs. The following processes and rules are high-level and, therefore, are not intended to represent exactly how they may be implemented.
Securing Cisco LAN Switches (SECL) 1.0 Teaches how to lock down Ethernet switch security. It feature the top ten security steps every system administrator should take on their switches. Based on industry-vetted security procedures and Cisco switch security features, SECL contains technical tutorials, step-by-step procedures, configuration examples (Cisco IOS and CatOS), e-lab simulations, interactive exercises, and a built-in assessment test. Account Managers and Systems Engineers-gain security-specific knowledge that can help you win sales and design more secure systems! CCSP Security Switch
LAN Switching Technologies: Catalyst 6500 Switches Building Cisco Multilayer Switched Networks (BCMSN), Fourth Edition co-author, Balaji Sivasubramanian, presents on how automation and management features in Catalyst 6500 switches handle the growing complexities of the data center. Podcast
Packet Cable Networks Jeff Riddel presents his book, PacketCable Implementation, the first complete primer on PacketCable network design, provisioning, configuration, management, and security. Learn practical tips for all facets of PacketCable planning and deployment. Video
