I still remember the first time I login to a remote UNIX server many years ago. It was really exciting to see remote server login shell displayed on the "Telnet" session of my local computer. During those days, most of the time I login to a remote server using telnet for checking emails, compiling and debugging computer programs, and to run some commands. Nearly all activity on the Internet was conducted through remote login sessions to large servers running at my university servers. Network bandwidth was quite expensive then. And Data speed was slow too. Network security was not much a concern for such a connection. Seldom do we encounter any news regarding people hacking into the network or server for mischievous reasons ...
When Mosaic - the first Internet browser that displays images was invented in 1993, gradually everything changed! Internet started to gain more and more attention from the public. The "hacker" no longer means an ethically good programmer but someone who breaks into computers ... Security was getting more and more attention from both enterprises and the public. It was in this situation that many new network security measures were introduced. For example, SSH (Secure Shell) was created as a secure replacement for telnet. It has all the functionality of telnet with security and added features. Nevertheless, it was only in 1996 that I started to use this tool (you could tell network security wasn't even in my consideration before that :)
As in the case of FTP (please refer to my June 2013 article), everything transmitted in a telnet session are not encrypted. This means your user identification and password are all sent in clear text! In SSH, however, the passwords are encrypted. SSH Secure Shell uses RSA public key cryptography for connection and authentication. These encryption algorithms include DES, 3DES, Blowfish and IDEA.
SSH commonly uses TCP port 22 to connect your computer to another computer on the network. In fact SSH comprised of a suite of three utilities, slogin, ssh and scp. "slogin" is used to securely log into another computer over a network, "ssh" for executing commands in a remote machine, and "scp" for moving files from one machine to another. These utilities are based on earlier versions of UNIX utilities rlogin, rsh and rcp which are insecure by nature. For example, when using ssh's slogin (instead of rlogin) the entire login session, including transmission of password, is encrypted; therefore it is almost impossible for an outsider to collect passwords. This means an attacker who has managed to take over a network can only force ssh to disconnect. He or she cannot play back the traffic or hijack the connection when encryption is enabled.
There are two components in a SSH Secure Shell software package - the server and the client. Both components will need to be installed and configured prior to use. The server component is not limited to a traditional UNIX or Microsoft server but could also be available in a router, firewall, or many other devices. To use SSH on Windows, you have to download an SSH client. A number of SSH clients are available in the Internet nowadays and some are available as freeware. You may like to try out OpenSSH, PuTTY, Tera Term to experience how this tools work. If you like to setup SSH server too, download OpenSSH and setup "sshd" at the server side.
Showing posts with label Networking. Show all posts
Showing posts with label Networking. Show all posts
Thursday, September 12, 2013
Friday, March 15, 2013
HTTP looks simple, but not ...
Recently I had a chance to relook into Hypertext Transfer Protocol (HTTP), one of the protocol that we use almost everyday. The HTTP is an application layer protocol functions as a request-response protocol in the client-server computing model. A web browser like Chrome or Firefox, for example, may function as the client and an application running on a computer hosting a web site may be the server. The server provides resources such as HTML files and other content, or performs other functions on behalf of the client. When a HTTP request message is sent from client to the server, the server will response a message to the client with completion status information about the request and may also contain requested content in its message body.
The original version of HTTP, HTTP/0.9 (1991) was written by Sir Tim Berners-Lee. It was a simple protocol for transferring raw data across the Internet. There are currently two versions of HTTP, namely, HTTP/1.0 and HTTP/1.1 in use today. HTTP 1.0 defined in RFC 1945 was officially introduced and recognized in 1996 improved the protocol by allowing MIME-like messages. However, HTTP/1.0 does not address the issues of proxies, caching, persistent connection, virtual hosts, and range download. These features were provided in HTTP/1.1 which is defined in RFC 2616.
In HTTP 1.0 and before, TCP connections are closed after each request and response, so each resource to be retrieved requires its own connection. This increases the load on HTTP servers and causing congestion on the Internet. Opening and closing TCP connections takes a substantial amount of CPU time, bandwidth, and memory. In practice, most Web pages consist of several files on the same server. This requires a client to make multiple requests of the same server in a short amount of time. In HTTP/1.1 a keep-alive-mechanism was introduced, where a connection could be reused for more than one request. Several requests and responses are allowed to be sent through a single persistent connection. Such persistent connections experience less latency, because the client does not need to re-negotiate the TCP connection after the first request has been sent.
There are many more improvements in HTTP 1.1. For example, it improves bandwidth optimization by supporting not only compression, but also the negotiation of compression parameters and different compression styles. HTTP 1.1 also allows for partial transmission of objects where a server transmits just the portion of a resource explicitly requested by a client.
Another improvement to the protocol was HTTP pipelining. This feature further reduces lag time, allowing a client to make multiple requests without waiting for each response, allowing a single TCP connection to be used much more efficiently, with much lower elapsed time. This feature speed up browsing by opening up multiple “pipes,” , each pipe downloading a different part of the web page, then assembling them correctly at the browser. Certain browsers even enable user to configure maximum number of pipelining connection. For example, in Firefox, you may set a value to the “network.http.pipelining.maxrequests” for such purpose.
All common desktop browsers like Chrome, Firefox, Internet Explorer and etc support and enable HTTP 1.1 by default. However, you are able to disable the use of HTTP 1.1 in these browsers. Many web sites still use HTTP 1.0, so if you are having difficulties connecting to certain web sites, you might want to clear this check box. For example, you can modify HTTP 1.1 settings in Internet Explorer by using the Advanced tab in the Internet Options dialog box. As for Firefox, you can do so by typing about:config in the address bar, search for network.http.version and change the value to 1.0. As for Chrome, you may like to tweak settings such as HTTP Pipelining in the chrome://flags setup page.
The original version of HTTP, HTTP/0.9 (1991) was written by Sir Tim Berners-Lee. It was a simple protocol for transferring raw data across the Internet. There are currently two versions of HTTP, namely, HTTP/1.0 and HTTP/1.1 in use today. HTTP 1.0 defined in RFC 1945 was officially introduced and recognized in 1996 improved the protocol by allowing MIME-like messages. However, HTTP/1.0 does not address the issues of proxies, caching, persistent connection, virtual hosts, and range download. These features were provided in HTTP/1.1 which is defined in RFC 2616.
In HTTP 1.0 and before, TCP connections are closed after each request and response, so each resource to be retrieved requires its own connection. This increases the load on HTTP servers and causing congestion on the Internet. Opening and closing TCP connections takes a substantial amount of CPU time, bandwidth, and memory. In practice, most Web pages consist of several files on the same server. This requires a client to make multiple requests of the same server in a short amount of time. In HTTP/1.1 a keep-alive-mechanism was introduced, where a connection could be reused for more than one request. Several requests and responses are allowed to be sent through a single persistent connection. Such persistent connections experience less latency, because the client does not need to re-negotiate the TCP connection after the first request has been sent.
There are many more improvements in HTTP 1.1. For example, it improves bandwidth optimization by supporting not only compression, but also the negotiation of compression parameters and different compression styles. HTTP 1.1 also allows for partial transmission of objects where a server transmits just the portion of a resource explicitly requested by a client.
Another improvement to the protocol was HTTP pipelining. This feature further reduces lag time, allowing a client to make multiple requests without waiting for each response, allowing a single TCP connection to be used much more efficiently, with much lower elapsed time. This feature speed up browsing by opening up multiple “pipes,” , each pipe downloading a different part of the web page, then assembling them correctly at the browser. Certain browsers even enable user to configure maximum number of pipelining connection. For example, in Firefox, you may set a value to the “network.http.pipelining.maxrequests” for such purpose.
All common desktop browsers like Chrome, Firefox, Internet Explorer and etc support and enable HTTP 1.1 by default. However, you are able to disable the use of HTTP 1.1 in these browsers. Many web sites still use HTTP 1.0, so if you are having difficulties connecting to certain web sites, you might want to clear this check box. For example, you can modify HTTP 1.1 settings in Internet Explorer by using the Advanced tab in the Internet Options dialog box. As for Firefox, you can do so by typing about:config in the address bar, search for network.http.version and change the value to 1.0. As for Chrome, you may like to tweak settings such as HTTP Pipelining in the chrome://flags setup page.
Tuesday, February 19, 2013
How to backup and restore a site with GoDaddy
A. Backup of folder in Godaddy
The archive feature in the GoDaddy Hosting Control Center’s File Manager is very limit on the amount of files that it can archive. It imposed a limit of 20MB for achiving of files. As such we need to create a cron script to do backup of files for a folder.
For example, in order to backup $HOME/html/test folder, we will create a cron script like follows:
---
#!/bin/bash
NOWDATE=`date +%m%d%y` # Sets the date variable format for zipped file
tar -cvf $HOME/html/_db_backups/site_backup_test.$NOWDATE.tar $HOME/html/test
---
After that schedule this script as a cron job. This will do the job!
B. Backup of Database in Godaddy
This is simple. Use phpMyAdmin in Manage Database and export the database
C. Restore of data into local system
Download both the database and tar files generated to your local drive. Extract the tar files into a directory. As for the Database, as it is too big for phpMyAdmin to import, use the following command line to import it into database system. For example, if the Database name is testDB and the user name is testDB.user
C:\mysql.exe -u testDB -p -h localhost testDB.user < "test.sql" Enter password: *********
You may need to modify the .htaccess file in the extracted folder by comment out the following configuration statement:
#RewriteBase /
Hope help!
The archive feature in the GoDaddy Hosting Control Center’s File Manager is very limit on the amount of files that it can archive. It imposed a limit of 20MB for achiving of files. As such we need to create a cron script to do backup of files for a folder.
For example, in order to backup $HOME/html/test folder, we will create a cron script like follows:
---
#!/bin/bash
NOWDATE=`date +%m%d%y` # Sets the date variable format for zipped file
tar -cvf $HOME/html/_db_backups/site_backup_test.$NOWDATE.tar $HOME/html/test
---
After that schedule this script as a cron job. This will do the job!
B. Backup of Database in Godaddy
This is simple. Use phpMyAdmin in Manage Database and export the database
C. Restore of data into local system
Download both the database and tar files generated to your local drive. Extract the tar files into a directory. As for the Database, as it is too big for phpMyAdmin to import, use the following command line to import it into database system. For example, if the Database name is testDB and the user name is testDB.user
C:\mysql.exe -u testDB -p -h localhost testDB.user < "test.sql" Enter password: *********
You may need to modify the .htaccess file in the extracted folder by comment out the following configuration statement:
#RewriteBase /
Hope help!
Thursday, January 10, 2013
IPv6 Basic
The Internet is running out of Internet Protocol Version 4 (IPv4) addresses. In 1998, the Internet Engineering Task Force (IETF), a standards body, created Internet Protocol Version 6 (IPv6) as a replacement to IPv4 with the goal to increase the Internet's address space. However, IPv6 also has some enhancements, including autoconfiguration, easier network renumbering and built-in security through the IPsec protocol. Transitioning to IPv6 enables the Internet to continue to grow and enables new, innovative services to be developed because more devices can connect to the Internet.
In contrast to IPv4, which defined an IP address as a 32-bit value, IPv6 addresses have a size of 128 bits. Therefore, IPv6 expands the number of available addresses (about 4 billion addresses as in IPv4)to 340 trillion trillion trillion (or, 340,000,000,000,000,000,000,000,000,000,000,000,000) addresses. With this number of available addresses, it will be able to accommodate devices that are online today and those that may be in the future. These may includes TVs, fridges, computers, phones and so on.
Many major websites and Internet Service Providers now support IPv6, but there are still many more who need to switch.
IPv6 Address representation
IPv6 addresses in long form are represented as eight sets of four hexadecimal digits separated by colons, but that makes for long addresses. Here is an example below:
2001:0db8:0000:0000:0000:0000:0002
The address above is using the hexadecimal colon notation. Every two bytes are written in hexa format with a colon separating them.
IPv6 addresses can be written in short hand using two conventions:
1. Zero Suppression
- all IPv6 address segments are 16 bits
- The leading zeroes in each segment can be left out of the address segment.
2. Zero Compression
- Since all addresses contain 8 segments, following sections of zeroes can be collapsed to a double colon.
- However this double colon can appear only once in the address representation.
Using these two rules, our example IPv6 address 2001:0db8:0000:0000:0000:0000:0002 collapses to 2001:db8::2.
IPv6 Prefix numbers
Prefixes for IPv6 subnet identifiers and routes are expressed in the same way as Classless Inter-Domain Routing (CIDR) notation for IPv4. An IPv6 prefix is written in address/prefix-length notation.
For example:
805B:2D9D:DC28::/48
805B:2D9D:DC28:0000:0000:FC57:D4C8:1FFF
In the above example the first 48 bits of the address represents the main prefix or network ID and the last 80 bits are used for individual host ID. The prefix notation will be found in routing tables and used to express main networks or subnets.
IPv6 Address Categories
Three categories of IP addresses are supported in IPv6:
Unicast Addresses: Unicast addresses assigned to hosts and router interfaces. Packets destined to unicast address are delivered to a single interface.
Multicast Addresses: These are addresses that represent various groups of IP devices. A packet sent to a multicast address is delivered to all interfaces identified by that address.
Anycast Addresses: Anycast addresse identifies multiple interfaces. A packet sent to an anycast address is delivered to the closest member of a group, according to the routing protocols' measure of distance. Anycast addressing is used when a message must be sent to any member of a group, but does not need to be sent to them all.
There are no broadcast addresses in IPv6. All broadcast types of IPv4 are performed using multicast address type of IPv6.
In contrast to IPv4, which defined an IP address as a 32-bit value, IPv6 addresses have a size of 128 bits. Therefore, IPv6 expands the number of available addresses (about 4 billion addresses as in IPv4)to 340 trillion trillion trillion (or, 340,000,000,000,000,000,000,000,000,000,000,000,000) addresses. With this number of available addresses, it will be able to accommodate devices that are online today and those that may be in the future. These may includes TVs, fridges, computers, phones and so on.
Many major websites and Internet Service Providers now support IPv6, but there are still many more who need to switch.
IPv6 Address representation
IPv6 addresses in long form are represented as eight sets of four hexadecimal digits separated by colons, but that makes for long addresses. Here is an example below:
2001:0db8:0000:0000:0000:0000:0002
The address above is using the hexadecimal colon notation. Every two bytes are written in hexa format with a colon separating them.
IPv6 addresses can be written in short hand using two conventions:
1. Zero Suppression
- all IPv6 address segments are 16 bits
- The leading zeroes in each segment can be left out of the address segment.
2. Zero Compression
- Since all addresses contain 8 segments, following sections of zeroes can be collapsed to a double colon.
- However this double colon can appear only once in the address representation.
Using these two rules, our example IPv6 address 2001:0db8:0000:0000:0000:0000:0002 collapses to 2001:db8::2.
IPv6 Prefix numbers
Prefixes for IPv6 subnet identifiers and routes are expressed in the same way as Classless Inter-Domain Routing (CIDR) notation for IPv4. An IPv6 prefix is written in address/prefix-length notation.
For example:
805B:2D9D:DC28::/48
805B:2D9D:DC28:0000:0000:FC57:D4C8:1FFF
In the above example the first 48 bits of the address represents the main prefix or network ID and the last 80 bits are used for individual host ID. The prefix notation will be found in routing tables and used to express main networks or subnets.
IPv6 Address Categories
Three categories of IP addresses are supported in IPv6:
Unicast Addresses: Unicast addresses assigned to hosts and router interfaces. Packets destined to unicast address are delivered to a single interface.
Multicast Addresses: These are addresses that represent various groups of IP devices. A packet sent to a multicast address is delivered to all interfaces identified by that address.
Anycast Addresses: Anycast addresse identifies multiple interfaces. A packet sent to an anycast address is delivered to the closest member of a group, according to the routing protocols' measure of distance. Anycast addressing is used when a message must be sent to any member of a group, but does not need to be sent to them all.
There are no broadcast addresses in IPv6. All broadcast types of IPv4 are performed using multicast address type of IPv6.
Thursday, December 6, 2012
Securing network - using ACL
An Access Control Lists (ACLs) is a collection of sequential permit and deny conditions that applies to packets. It let you control whether network traffic is forwarded or blocked at interfaces on a router or switch. Typical criteria are the packet source address, the packet destination address, or the upper-layer protocol in the packet. For example, network users are allowed to access the Internet except using the Telnet program; ACLs allow you to do this.
Basically the ACL definitions provide criteria that are applied to packets that enter or exit a network interface. It provides a mechanism for defining security policies by grouping various access control entries (ACEs) together to form a set of rules. Access and security permission that one network device has to another network device are affected by the entries that make up the ACL. ACEs are not necessarily a negative restriction; in some cases, an ACE is a method of granting a person or device access to something.
Most of the Security Software, for example, Cisco IOS, tests a packet against each ACE in the order they are defined until a match is found. Thus, if a network packet matches the criteria of the first ACE, the switch will apply the specified action to the packet. Otherwise, the switch continues to compare the packet to subsequent ACEs. If there is no match in any of the ACEs, the switch will drop the packet. However, if there are no restrictions, the switch forwards the packet. Since switches process ACEs in order and stops testing conditions after the first match, ACLs should be designed with care to provide good performance. By studying traffic flow, you can design the list so that the most commonly matched conditions be listed first to minimize processing time. Fewer conditions to check per packet means better throughput. As such it is advisable to order the list with the most general statements at the top and the most specific statements at the bottom, with the last statement being the general, implicit deny-all statement.
Basically the ACL definitions provide criteria that are applied to packets that enter or exit a network interface. It provides a mechanism for defining security policies by grouping various access control entries (ACEs) together to form a set of rules. Access and security permission that one network device has to another network device are affected by the entries that make up the ACL. ACEs are not necessarily a negative restriction; in some cases, an ACE is a method of granting a person or device access to something.
Most of the Security Software, for example, Cisco IOS, tests a packet against each ACE in the order they are defined until a match is found. Thus, if a network packet matches the criteria of the first ACE, the switch will apply the specified action to the packet. Otherwise, the switch continues to compare the packet to subsequent ACEs. If there is no match in any of the ACEs, the switch will drop the packet. However, if there are no restrictions, the switch forwards the packet. Since switches process ACEs in order and stops testing conditions after the first match, ACLs should be designed with care to provide good performance. By studying traffic flow, you can design the list so that the most commonly matched conditions be listed first to minimize processing time. Fewer conditions to check per packet means better throughput. As such it is advisable to order the list with the most general statements at the top and the most specific statements at the bottom, with the last statement being the general, implicit deny-all statement.
Monday, November 19, 2012
SkyDrive
Found this service from Microsoft the other day. Like Google toolbar that save my bookmark which I can use whenever access to the Internet, SkyDrive offer free disk space for me to access from anywhere of the Internet using web browser!
What is really cool is 7GB of free online storage! On top of that, maximum file size can be up to 2GB per file. This is really nice feature! User can also configure their file private or share it with contacts or make it to be public.
This is really nice service! See SkyDrive homepage to subscribe for it!
What is really cool is 7GB of free online storage! On top of that, maximum file size can be up to 2GB per file. This is really nice feature! User can also configure their file private or share it with contacts or make it to be public.
This is really nice service! See SkyDrive homepage to subscribe for it!
Sunday, November 18, 2012
How to access web page without Chrome, Internet Explorer, Firefox or Safari
In networking, sometime while performing network trouble shooting, you may like to quickly test if the connection to a website is available. Without using a web browser, you also can use the telnet command that is available in most of the login terminal like Command prompt, unix login shell or Cisco login terminal.
To test a connection to a website like www.abc.com just key in
To test a connection to a website like www.abc.com just key in
Tuesday, November 6, 2012
How to solve GoDaddy Joomla .htaccess problem
Recently we migrate one of our sites into GoDaddy hosting server. The site used Joomla. However, when uploading all files and creating database in GoDaddy, we faced the .htaccess problem.
Following are summary of solution to Joomla .htaccess problem in GoDaddy hosting plan:
1. Delete .htaccess file if already created. Use the original htaccess.txt file from Joomla distribution and rename it to .htaccess
2. Add the following lines at the top of the .htaccess file
Following are summary of solution to Joomla .htaccess problem in GoDaddy hosting plan:
1. Delete .htaccess file if already created. Use the original htaccess.txt file from Joomla distribution and rename it to .htaccess
2. Add the following lines at the top of the .htaccess file
Sunday, October 28, 2012
Remove unnecessary services on your PC or server
Whether it is a Windows PC, Cisco router, switches, Linux machine or network enable device, it is recommended to stop unnecessary services that are run by default. Every running, but unused, service on your system maybe a possible means of attack. Users may not even be aware that many of these services are running.
It is important to know the security implication of any network service before enabling it in. For example, a telnet client running on another device on the network can easily establish a telnet session to a system where telnet service is enabled; it needs only the IP address of the system and the port or socket number of the network service running on the system. The rule of thumb for TCP and UDP ports is: Turn off any services or listeners that you do not need for your application to function. One way to check the list of ports running on your system is to go to one of the many web sites that can run a remote scan of your system and tell you how secure the system.
It is important to know the security implication of any network service before enabling it in. For example, a telnet client running on another device on the network can easily establish a telnet session to a system where telnet service is enabled; it needs only the IP address of the system and the port or socket number of the network service running on the system. The rule of thumb for TCP and UDP ports is: Turn off any services or listeners that you do not need for your application to function. One way to check the list of ports running on your system is to go to one of the many web sites that can run a remote scan of your system and tell you how secure the system.
Saturday, June 23, 2012
How to solve "Another blog is already hosted at this address"
Sometime when you try to publish a custom domain like ipcnetworking.com on Blogger, you may get the message "Another blog is already hosted at this address."
Most of the time, this is due to your DNS setting. Anyway make sure that you stop the web service of Google Apps if you happen to use this service.
One way to overcome this problem which I did with my sites was to configure my DNS as:
Most of the time, this is due to your DNS setting. Anyway make sure that you stop the web service of Google Apps if you happen to use this service.
One way to overcome this problem which I did with my sites was to configure my DNS as:
mydomain.com. 3600 IN CNAME ghs.google.com.With this configuration, you have a "CNAME" referral which points directly to a Google server. When the Blogger script verifies that the domain URLs both point to Google, it can proceed with confidence.
www.mydomain.com. 3600 IN CNAME ghs.google.com.
Tuesday, June 12, 2012
Have your page listed in Google Search System
You may submit your website to Google at Add your URL to Google.
This will help Google to be awared of the existence of your site. Anyway, this will not guarantee a listing in the search result. It depends.
This will help Google to be awared of the existence of your site. Anyway, this will not guarantee a listing in the search result. It depends.
Wednesday, May 23, 2012
How to resolve xampp 1.7.7 Tomcat startup issue
When trying to start up tomcat service in xampp 1.7.7 or earlier, it may not be able to startup properly. Following are the message I noticed when trying to execute it:
C:\xampp>"Copy of catalina_start.bat"
[XAMPP]: Searching JDK HOME with reg query ...
Error: The system was unable to find the specified registry key or value
. [XAMPP]: Cannot find current JDK installation!
. [XAMPP]: Cannot set JAVA_HOME. Aborting ...
done.
Press any key to continue . . .
Sunday, April 15, 2012
How to download more than 2 files at a time in Firefox
In Firefox, when you try to download a couple of files at the same time, you might have noticed everything adding up in the download manager but only two files get downloaded from a server at any moment. The process of changing this limitation is pretty simple.
Step 1: Open Firefox and type about:config in the address bar and press 'Enter'
Step 1: Open Firefox and type about:config in the address bar and press 'Enter'
Friday, November 25, 2011
How to create a copy of wordpress site into xampp running on your local PC
Having your wordpress site in your local PC will serve as a backup for the site. It also enable you to test new features in it before implemented in the production site.
Following are some steps for performing this task.
1. Using phpMyAdmin, export the database of your site. Replace the URL of original site to new URL in the exported SQL file.
2. Copy the whole wordpress directory of your site to local directory. Normally it is at:
c:\xampp\htdocs\wordpress
3. In your local server, create a new database to be used by the site. If possible, use the same database name as in your production server. You may like to refer to wp-config.php for information of the user ID & password. Configure uers access to the database using "Privileges" function of phpMyAdmin.
Following are some steps for performing this task.
1. Using phpMyAdmin, export the database of your site. Replace the URL of original site to new URL in the exported SQL file.
2. Copy the whole wordpress directory of your site to local directory. Normally it is at:
c:\xampp\htdocs\wordpress
3. In your local server, create a new database to be used by the site. If possible, use the same database name as in your production server. You may like to refer to wp-config.php for information of the user ID & password. Configure uers access to the database using "Privileges" function of phpMyAdmin.
Friday, October 28, 2011
How to enable Telnet feature in Windows 7
Telnet client is a tool useful for network trouble shooting. However, Telnet client is not install in Windows 7 by default. To install Telnet client in Windows 7, follow the following procedures:
1. Select "Programs And Features" from Control Panel
2. Select "Turn Windows features on or off"
3. Check Telnet Client
4. Hit OK
With this setting, you should be able to use Telnet client on your command - Cmd.
1. Select "Programs And Features" from Control Panel
2. Select "Turn Windows features on or off"
3. Check Telnet Client
4. Hit OK
With this setting, you should be able to use Telnet client on your command - Cmd.
Tuesday, October 25, 2011
phpMyAdmin: You probably tried to upload too large file
Sometimes when importing database into MySQL, you may face with the error message of "You probably tried to upload too large file. Please refer to documentation for ways to workaround this limit."
To resolved this issue in phpMyAdmin, you will need to increase the limit parameters in php.ini. For example, in my test site:
max_execution_time = 120 ; Maximum execution time of each script, in seconds (def. 30)
max_input_time = 180 ; Maximum amount of time each script may spend parsing request data (def. 60)
memory_limit = 128M ; Maximum amount of memory a script may consume (def. 128mb)
upload_max_filesize = 128M ; Maximum allowed size for uploaded files. (def. 2mb)
post_max_size = 16M ; (def. 8mb)
To resolved this issue in phpMyAdmin, you will need to increase the limit parameters in php.ini. For example, in my test site:
max_execution_time = 120 ; Maximum execution time of each script, in seconds (def. 30)
max_input_time = 180 ; Maximum amount of time each script may spend parsing request data (def. 60)
memory_limit = 128M ; Maximum amount of memory a script may consume (def. 128mb)
upload_max_filesize = 128M ; Maximum allowed size for uploaded files. (def. 2mb)
post_max_size = 16M ; (def. 8mb)
phpMyAdmin: #1153 got a packet bigger than 'max_allowed_packet' bytes
Sometimes when importing database into MySQL, you may face with the error message of "#1153 got a packet bigger than 'max_allowed_packet' bytes"
To resolved this issue in phpMyAdmin, simply increased max_allowed_packet to 16MB in MySQL configuration file: my.ini. For example:
#max_allowed_packet = 1M
max_allowed_packet = 2M
To resolved this issue in phpMyAdmin, simply increased max_allowed_packet to 16MB in MySQL configuration file: my.ini. For example:
#max_allowed_packet = 1M
max_allowed_packet = 2M
Friday, May 13, 2011
Using Mercury/32 as an interface to Gmail SMTP Gateway
Having an SMTP server which can deliver email to the Internet is great when conducting experiment in network environment. There are quite a number of SMTP server software available. In this article, we will use Mercury/32, a SMTP server which is included in the XAMPP package as an example for relaying email to the Internet through Gmail gateway - the Google email system.
Following are some of the steps involves in configuring Mercury/32 to use Gmail SMTP gateway as it’s SMTP relay host.
tab “Local domains”
Following are some of the steps involves in configuring Mercury/32 to use Gmail SMTP gateway as it’s SMTP relay host.
- If you already have Web Server (like apache) running on your system, please disable HTTP Server in the Mercury configuration so that it will not conflict with existing server service.
Select: “Configuration” -> “Protocol modules”
Uncheck “MercuryB HTTP web server”
- Enable “MercuryC SMTP relaying client” in the same dialog box. Click “OK”
- Restart Mercury!
- “Configuration” -> “Mercury core module”,
- tab “General”
- Internet name for this system: localhost
- Disable all checkboxs but “Send copies of all errors to postmaster”.
- tab “General”
- if the entry “localhost (local host or server) localhost (internet name)” is there, if not, add it and click “OK”.
Friday, March 12, 2010
Cisco DHCP Configuration
Dynamic Host Configuration Protocol (DHCP) is a protocol used by networked devices to obtain information required to operate on an Internet Protocol network.
When a DHCP client is first switched on, it sends a broadcast packet on the network with a DHCP request. If there is a DHCP server exists in the network, this request will be picked up by the DHCP server. The DHCP server will allocate an IP address to the PC, from one of the pools of addresses it managed.
DHCP clients use a broadcast packet to find a DHCP server, so if a client is on one side of a router, and the server on the other, normally these broadcast packets will be filtered out. Many routers today include support for DHCP- forwarding, but it is not enabled by default.
Many system administrators do not realize that DHCP service can be enabled in Cisco devices. In this article, we will show the method on configuring DHCP on a Cisco router.
When a DHCP client is first switched on, it sends a broadcast packet on the network with a DHCP request. If there is a DHCP server exists in the network, this request will be picked up by the DHCP server. The DHCP server will allocate an IP address to the PC, from one of the pools of addresses it managed.
DHCP clients use a broadcast packet to find a DHCP server, so if a client is on one side of a router, and the server on the other, normally these broadcast packets will be filtered out. Many routers today include support for DHCP- forwarding, but it is not enabled by default.
Many system administrators do not realize that DHCP service can be enabled in Cisco devices. In this article, we will show the method on configuring DHCP on a Cisco router.
Thursday, March 11, 2010
Windows Clustering
Clustering is the connection of multiple computers together in such a way that to the outside world, the cluster appears to be a single system. Each computer in a cluster is referred to as a node.
Business suffers when work stops because of critical service is offline. A properly installed and configured cluster provides continued operation during hardware failure, software failure, and/or planned maintenance. Ability to recover from failed server hardware and failed software is the main benefit of clustering.
Windows Server 2003 clustering consists of two different technologies: Server Cluster and Network Load Balancing (NLB). Each of these technologies can be used to provide high availability for different types of services.
Business suffers when work stops because of critical service is offline. A properly installed and configured cluster provides continued operation during hardware failure, software failure, and/or planned maintenance. Ability to recover from failed server hardware and failed software is the main benefit of clustering.
Windows Server 2003 clustering consists of two different technologies: Server Cluster and Network Load Balancing (NLB). Each of these technologies can be used to provide high availability for different types of services.
Subscribe to:
Posts (Atom)