Re: Pi-hole, Linux hosts file and local DNS

2021-07-25 Thread Amit Nepal via PLUG-discuss
If I am understanding your question correctly, you can use pihole to resolve ips to your local domain names like you can with linux hosts file, but I don't believe there is a way to include port numbers with DNS resolution. Thank You, Amit On 7/25/2021 12:08 AM, Steve B via PLUG-discuss

Re: Home Office PHP Web Server : Reverse Lookup

2021-05-26 Thread Amit Nepal via PLUG-discuss
Reverse lookup is always configured on the ISP or whoever owns the IP end.  You can register your forward DNS information with any registrar, but reverse lookup has to be handled by the network provider. Cox probably has a default reverse lookup on each of their IP which is why there may not

Re: Home Office PHP Web Server : MAIL

2021-05-22 Thread Amit Nepal via PLUG-discuss
As long as you pull messages with IMAP or with POP with an additional setting on the client that says "leave a copy of message on the server", the messages should remain on the server. On 5/22/2021 11:02 AM, Keith Smith via PLUG-discuss wrote: Hi, I'm reading the Ubuntu Server Guide and it

Re: Raspberry Pi uses on a home network

2020-09-09 Thread Amit Nepal via PLUG-discuss
I Run home assistant with Adguard on a pi, Pi hole may be a good use case as well ! On 9/9/2020 3:22 PM, Steve B via PLUG-discuss wrote: I've been offered a Raspberry P 3B+ with a POE hat, but am having difficulty deciding if I really need it. Currently the uses I can see for it within my

Re: How to stop email spoofing?

2019-06-14 Thread Amit Nepal
You can implement RBLs to fight spam too. Also like Stephen mentioned, if you don't already have SPF, DKIM and DMARC setup, this video may help you set them up: https://www.youtube.com/watch?v=3Pld4ZQf9s4 Amit K Nepal (OSCP, CISM, CISSP, RHCE, CCENT, C|EH, C|HFI, GIAC ISO 27000 Specialist)

Re: rsyslog host

2018-12-12 Thread Amit Nepal
I suggest looking into syslog-ng for centralized log server. Clients can use rsyslog for unix and nxlog for windows.  Syslog-ng is scalable, high speed and provides a lot of features for parsing, alerting, co-relating etc. You can Use Syslog-ng for central log collection, send it to

Re: iptables redirect with a caveat

2017-09-17 Thread Amit Nepal
I have not tested but you can probably use mark to accomplish this. Mark any request coming directly to port 7778, drop anything with mark set and then redirect request on port 80 to 7778. iptables -t mangle -A PREROUTING -p tcp --dport 7778 -j MARK --set-mark 1 iptables -A INPUT -m mark

Re: Keypass questions

2016-07-28 Thread Amit Nepal
I use keepass with Key and Master password combination. I store the password database on the dropbox/SFTP and carry my key with myself on my cell phone, laptop etc. and then the master password is in my mind :) . So with this , even if my password database gets compromised or dropbox gets

Re: python code

2015-04-13 Thread Amit Nepal
Sorry , I meant this, like Jason mentioned the input prompt must be inside the while loop in order for it to wait for the user input : print(Welcome.) g = input(Guess the number: ) guess = int(g) while guess != 5 print(Guess again.) g = input(Guess the number: ) guess = int(g)

Re: python code

2015-04-13 Thread Amit Nepal
You would probably want to wait and ask for the input inside the loop as well. What you seem to be doing is you ask for input and then you execute the loop not letting the user input the new number and thus running into an infinite loop. This might fix it, not tested though :)

Re: file-integrity monitoring

2015-03-05 Thread Amit Nepal
I use ossec and i am pretty happy with it. You can try it out. Thanks Amit On 3/5/2015 4:17 PM, Keith Smith wrote: Hi, I am in the final steps of an annual Payment Card Industry compliance process. I have two CentOS servers that require file-integrity monitoring or change-detection. I

Re: Bind Configuration

2014-12-08 Thread Amit Nepal
Check out the iredmail for easy installation and management of Postfix with mysql and some extras .It is basically a script , that downloads necessary files, configure the database and everything for you and also installs a front end web interface. I usually replace the frontend with postfix

Re: Bind Configuration

2014-12-07 Thread Amit Nepal
Been quite some time since I configured bind last, however the last time I did , you could directly go to chroot. That should not be a problem. Thanks *Amit K Nepal Chief Information Officer (RHCE, CCENT, C|EH, C|HFI, GIAC ISO 27000 Specialist) omNovia Technologies Inc. * On 12/7/2014 8:29 PM,

Re: MySql max_allowed_packet

2014-12-04 Thread Amit Nepal
You can just change the value of max packet for that session and import the file . This article might be helpful . http://www.amitnepal.com/mysql-error-got-a-packet-bigger-than-max_allowed_packet-bytes/ Thanks *Amit K Nepal Chief Information Officer (RHCE, CCENT, C|EH, C|HFI, GIAC ISO 27000

Re: MySql max_allowed_packet

2014-12-04 Thread Amit Nepal
commands seem to have worked - thank you!! Do I need to set : 1) global net_buffer_length=100; 2) global max_allowed_packet=10; to some lesser value? Any way it is detrimental to leave at these values as set? Thanks!! Keith On 2014-12-04 17:22, Amit Nepal wrote: You can just change

Re: CodeIgniter lovers

2014-10-17 Thread Amit Nepal
I have used CI for some websites and I prefer to use it for any developments further down the road, however not much in to the web developments as of now. Thanks *Amit K Nepal Chief Information Officer (RHCE, CCENT, C|EH, C|HFI, GIAC ISO 27000 Specialist) omNovia Technologies Inc. * On

Re: network info

2014-08-29 Thread Amit Nepal
That is correct ! *Amit K Nepal Chief Information Officer (RHCE, CCENT, C|EH, C|HFI, GIAC ISO 27000 Specialist) omNovia Technologies Inc. * On 8/29/2014 11:34 AM, Michael Havens wrote: wait! I just found the solution to my problem! route -n but it says that the gateway is my modem/router.

Re: network info

2014-08-29 Thread Amit Nepal
system says is the nameserver or my router/modem's ip address? I'm thinking the modem/router's IP. :-)~MIKE~(-: On Fri, Aug 29, 2014 at 11:45 AM, Amit Nepal a...@amitnepal.com mailto:a...@amitnepal.com wrote: That is correct ! *Amit K Nepal Chief Information Officer (RHCE

Re: locking an SFTP user into only one directory.

2014-04-30 Thread Amit Nepal
A while back, I had done this to restrict to a particular directory , but it may not be ideal for you as you already have some parent directories, but you can give a try : http://www.amitnepal.com/chrooting-users-with-sftp/ Or , you may be able to mount that directory somewhere else and give

Re: How to share network printer w xp box?

2014-04-22 Thread Amit Nepal
As far as I can tell, if you are trying to share a printer that is connected to a Linux box with a windows machine, you may have to share the printer using Samba , so that it is available as a shared printer to your windows clients.

Re: Happy Sysadmin Day

2013-07-26 Thread Amit Nepal
Happy Sysadmin Appreciation Day to all sys admins out there ! *Amit K Nepal Infrastructure Engineer (RHCE, CCENT, C|EH, C|HFI) omNovia Technologies Inc. http://www.omnovia.com Amit K Nepal http://www.amitnepal.com http://www.amitnepal.com* On 7/26/2013 1:30 AM, der.hans wrote: moin moin,

Re: school recomendation

2013-05-17 Thread Amit Nepal
My Suggestions : If you have hands on IT experience go for Systems Security , if not go for Information Technology. Thanks *Amit K Nepal Infrastructure Engineer (RHCE) omNovia Technologies Inc. http://www.omnovia.com Amit K Nepal http://www.amitnepal.com http://www.amitnepal.com* On

Re: server compromised?

2013-03-11 Thread Amit Nepal
You can never be certain that your machine has been cleaned off 100% unless you do the clean install, however I have been in this situation where rebuilding was not an option. I spent almost 3 months just figuring things out and finally I did what I had to in one day. There are couple things

Re: server compromised?

2013-03-07 Thread Amit Nepal
That part usually means that the key was generated by that user on that machine, or sometimes is the description of the key e.g. when you generate the key using puttygen . If the key is generated in a linux machine the last part would be user@hostname of machine. I would suspect that the

Re: Samba on CentOS

2013-02-19 Thread Amit Nepal
Run this command to see if selinux is running : getenforce If you see permissive , then you should be fine, if you see the output to be enforcing , then set it to permissive, without having to restart : setenforce permissive If this solves the problem, then yes it was selinux, however the

Re: Windows cleaner

2013-02-15 Thread Amit Nepal
Have you tried combofix ? It cleans up preboot. I have used it couple times. http://www.bleepingcomputer.com/combofix/how-to-use-combofix *Amit K Nepal Infrastructure Engineer (RHCE) omNovia Technologies Inc. http://www.omnovia.com Amit K Nepal http://www.amitnepal.com http://www.amitnepal.com*