Tuesday, October 30, 2007

How To Identify Counterfeit Ap2

Blocking msn messenger

Here I am back, I admit that now, if I am absent a little but well, here I am back now to show browser settings and email client under CCProxy, so that it was much blabla and little action.

Internet Explorer

Call it Internet Explorer, Firefox, Opera, Safari, etc basically all navegadore are regulated in the same protocols and Internet Explorer remains the most popular in the world (Spare me the discussion of which is better) I will use that screen to show how to configure the access right through.



We're going to Tools, Internet Options, Connections, LAN Settings
uncheck them (if it were) the box Automatically detect settings, mark the box Use a server proxy for your LAN (...) in the fields immediately activated to enter the proxy server data as well as the port. In the example I am occupying port 8080
we move and click the advanced options to set one by one the protocols. This will be useful if, for example, we have some other software such as the socks.
Once completed, we accept everyone and preferably close the browser and restart. OJO most of the problems of non-detection of proxy have put bad lie in the server ip or port. Before you break your head if malviajadas heroic solutions, check that.

email client

This example will use the settings Microsoft Outlook (bone, which comes with Office) to illustrate the configuration. In my house occupied the version 2007. He may be a previous version, or Outlook Express or any other mail client you will be definitively used this configuration. Just to comment, I have held thunderbird without problems.

If this is the first time you start, you should only choose to occupy a POP3 mail server, if it is to re-configure then go to Tools, Account Settings, choose the account (if you had several) and enter the following screen:



If you can not be put in the first two fields, we're screwed.
Mail Server incoming and outgoing: here is where we put the ip of the computer that is running CCProxy. Do not forget that the user should be allowed to use the mail to work (this is another very common error)
logon information (here comes the good part): There are two types of ways to authenticate, the first deal is as follows : (for login and sending mail) usuario@usuario.com # mail.usuario.com That first form is used regularly for mail "business" or those who pay to use them, in short, you income occur when a server where mail.usuario.com is our incoming mail server.
The second form is the one that would look for some free service like yahoo for example, and would stay user # mail.usuario.com As we can see, this second option does not need to put the entire domain, which is a small but significant difference between that works or not your email right through outlook. Cat
The symbol will make CCProxy differentiate what the user name and what server name.

Once done, we click on more settings and advance to the next screen:



Here there is no major problem, we must put the same thing at the beginning of session to receive mail. Ok we all and send and receive test mail test mail. A Lot
eye configurations supported by your mail server, not me ask how to configure mail in your company because they know as valid users to send or receive mail, besides of course, if you are an administrator and you do not know they'd better find out or you go looking for another job. The point is fully aware of these settings, and that really depends on how successful connection is configured the mail client. Unlike many proxies, CCProxy not require you to set directly on the server you're using, but the customer who requests to connect to, which can be very reassuring if we occupy many email account.

Monday, October 22, 2007

Lab 8 Population Genetics

client configurations Account Manager Advanced

Ok ok, I admit, I was skipping this part, but the truth is that even if I wanted, I went to work, so like I was the plane but here I am, ready to redeem the error, let us begin.


Account Manager


Account Manager is an extremely important part, you can work without defining it, but would lose its essence is to regulate and audit traffic navigation. In this part we define the behavior of users pasenpor CCProxy and combining with local or domain level policies can achieve results. Allow

category: In this part we will find:
Allow all: All connections are allowed only
Allow: Addresses ip or mac listed will have access to, discarding anything that is not within
Allow all but: The small but this is like "ban" certain disclosures allowing the majority to pass except those listed

Authorization Type: is the type of authentication whereby users must pass. This type of validation is affected by the selection made in "category enable" ip address
: CCProxy verify that the ip address listed is the same as the client to access the service, if it is true, reject it.
Mac Address: exactly the same, but on the MAC address
Username / password: ask for a username and password if you want surfing no matter the previous two criteria
Username / password + IP: Same as above, but this time to review the IP matches the one listed for that user
Username / password + IP: Same as above, but on the MAC address
IP + MAC: The IP address must match the MAC address, if any not equal to what is defined to reject it.

see right now:

Web Filter:
The tyranny looms, the whip of the prohibition generates its thunder with evil and the devil that runs all decide where if and where not. Exactly, here you can spend hours and hours of fun unhealthy, prohibiting access to pages and practicing your diabolical laughter when the user asks: why I can not get in here?



And as said jack the ripper, we Parts:

Web Filter Name: I think there is much to say, so if I recommend is do not put 'code' pon clear names, you understand and remember that created them, of course, will not speak at length making lengthy description that is, with some simple but consistent enough, also, in theory no one else but you will have access to the proxy. Filter

site: for the filter function must be enabled obviously is a great puzzle out how to activate and deactivate, I leave for work

Allowed Sites / Banned Sites: That's right, the fun starts here. When activated the option of allowed sites means that everything is prohibited, except for sites that list here. The upside is forbidden, everything is permitted except as there ready. Ocupalo according to criteria.
And the million dollar question: how to fill those lists? Well, you can put the full address of the site to block / allow (www.misitio.com) or fill in the holy wildcard as DOS, bone, asterisks, for example if I put *. I misitio.com block all this before. "misitio.com" This is because there are sites that deal redirects, and do not start with "www" such as blogger, vista.misitio.com which could override the filter. The wildcard can be placed anywhere you like, often involves creativity in defining the filter.

banned URL: Here is where to place what kind of files can not be downloaded, here is where we can put all your music files, compressed, executable, etc etc etc, however cautious, especially when blocking. exe as there are sites with real-time processes that occupy. exe eg Aspel site (www.aspel.com) queries and see in the address bar in certain parts points to an executable, which means that if the filter defines executable so that nothing could affect this page.

Content Forbidden: this is where we will: cheap sex, porn, crack, warez, old hairy, all things that comes to mind, but beware, if we for example sex and an application form asks you your sex is likely to block . (You can also put the name of a sister or cousin whore for anyone in your job's going to hire)

now return to the main screen
account manager
We click on the button again, next to the table for create an account to access:



User / Group: define a name for this account (personally, I put the computer name
Password: We set a password for the user accessing the service
Enable: Box punches is that the account is operational, otherwise it is disabled
ip address / ip range: one direction (or several in case of a group) iran in this part
MAC Address: , here is the MAC address of the computer that is intended to provide access
TIP!: The MAC address is definitely the safest option for a user validation as IP can be changed, but the MAC as it is a physical address, unique for each card and can not be changed. How to know it? If you pay attention you will see a sign? with the two boxes listed above das click there and it opens another window:



In the name of the place the name of the computer, then click on to obtain both IP and MAC address as you will be returned.

As a group: Checking the box define that this occasion will be a group and not an account, for example, the group of ugly gossip. Once created, the group can add users to the
Belongs to group: if existing groups by selecting this checkbox the user can append the group, for example if we have a group of gossipy old and ugly, we can add to juanitacotorra group.
We will stop to talk to the groups. The groups help us to save some work, say an example, let's create the group HRV (old and ugly and gossip). Once created, define this group will be subject to no1 web filter, which restricts the whole sailing with the exception of pages of government previously defined, nor Telnet access (because apart from gossips have the morning to download the screen saver as are puppet under the guise of "look good tender" and of course, brings spyware and some other viruses) also have remote dial access, or FTP or other. This done, we juanita user parrot, when we get to the part of "Belongs to group" then select VFC and at that point the user will acquire the characteristics of the group. This is especially useful if juanitacotorra has an army of clones like her service.

Continued ... Maximo
Number: Refers to the number of connections that the user can do, it may be useful to stop spyware attacks, as such, the user can be restricted to 5 connections and as the pop ups generated by some bichillo begin, the rejection for exceeding them.
Bandwidth (byte / s): Here we limit the bandwidth occupied by the user. Mind you, this measurement is in BYTES so careful with this field.

www, mail, telnet, automatic dialing, ftp, socks, other: are protocols that USER will be allowed to the user or group is created.

Web Filter: created here select the filter that will apply to www in the desired user or group

Hours: schedule is defined in which the group or user will have access to defined services. Clicking on the E takes us to the time ranges to define

Autodisabled: Disconnect the service at the right time to finish

already in the main window you can find the button autoscanear, which is useful for detecting all the teams with their mac address and avoided a great job in the case of many users
Now if, in the following configurations of clients and see if! for dessert, the configuration to block messenger