Posts

Playing with NuFW firewall.

Image
I have played with NuFW live CD and want to share my experience. NuFW is an application layer firewall with authentication support. It allows to build SSO-based infrastructure with minimal efforts. NuFW adds user-based filtering to Netfilter, the state of the art IP filtering layer from the Linux kernel. NuFW live CD provided web-based management system for setting up network, ACL, objects and all required rules. You can see a sample screenshot of editing ACL rule. Please notice that LiveCD is not working so stable, so be ready for certain glitches. Further I'll describe sample steps for setting up firewall for certain users. First, let's set up new user account. NuFW Live CD use only local users by default, but NuFW itself support LDAP directories. So I'll create an account via KUser. Second step - create an authenticate object in Nuface: And the last step - add ACL for the user: As you can see there are nothing special in such actions. Unfortunately, I...
Post a Comment
Read more

Google Reader shared items

I have began to share my Google Reader items which are accessible on this page: http://www.google.com/reader/shared/08144242512191999080 Maybe you will find some interesting for you from these items. Happy reading!
Post a Comment
Read more

New Mail Dispatcher executable

I have created Windows installer package for current version of Mail Dispatcher: http://downloads.sourceforge.net/maildispatcher/maildispatcher-0.3.exe It is built with slightly outdated Python and GTK, so I have not updated the project site with this new link. After releasing new version of Mail Dispatcher I'll release a new Windows installer package built with updated frameworks.
Post a Comment
Read more

XSL transformations in Python

I want to describe how to do XSL transformations in Python by using 4Suite . It is a really easy, and requires just a few steps: Install 4Suite technologies for Python: $ sudo yum install python-4Suite-XML Create a required XML file (for example, simple1.xml): <!-- The stylesheet to apply --> <?xml-stylesheet href="simple.xsl" type="text/xsl"?> <document cache-methods="get,post"> <title>Simple XSLT sample</title> <body> <heading>Simple XSLT sample</heading> <paragraph> This is a sample text. </paragraph> </body> </document> Create a required XSL file (for example, simple1.xsl): <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0"> <!-- Output an XHTML/transitional document (uses html output method ...
Post a Comment
Read more

Backup LVM file system with SELinux context

Backup is one of the most crucial operations for providing availability of the computer system. Although writing backup scripts is an easy task, there are few points with LVM and SELinux which are described below. LVM is a logical volume manager for the Linux kernel. One of the key features of LVM is generating snapshots for logical volumes. This allows the administrator to create a new block device which presents an exact copy of a logical volume, frozen at some point in time. It is very useful for backups - we can make backups without stopping volumes. Snapshots can be created with 'lvcreate' command with '-s' option. SELinux is an implementation of a flexible mandatory access control architecture in the Linux operating system. It uses file labelling with special security context. During a usual file archiving this context could be lost, so the administrator should use special archivers like 'star'. So, the administrator should use following procedure for a...
Post a Comment
Read more

Organizing Kerberos-based infrastructure

SSO ( Single Sign-On ) is a good method for organizing enterprise-level IT infrastructure. It can reduce TCO ( Total cost of ownership ) of user management, allowing to create/modify/delete user accounts in one place without changing configurations of servers and client workstations. Let's consider Kerberos as a basis for SSO in an enterprise infrastructure in details: Log in to a workstation. Most UNIX-based OS provide authorization mechanism for logging into a workstation using Kerberos PAM modules. Windows OS-based workstations can login only to domain controller, and doesn't support standard Kerberos servers by default due to Kerberos extensions by Microsoft. But there is a bypass way - use Samba PDC with Kerberos and OpenLDAP integration ( Article in Russian , I'll translate and publish it in the blog after setting up such infrastructure on my servers). Servers. Firewall: NuFW (see corresponding article ). Email: postfix, sendmail. IM: openfire. Web: apache....
2 comments
Read more

Mail Dispatcher version 0.3 is released

Image
New release of Mail Dispatcher introduces major changes in internationalization and usability of the product. Parsing mail messages was added and now they are shown in required encoding. Also a user can select preferred encoding for messages preview. Selecting dates ranges was added and now a user can select required date interval for downloaded messages. Mail Dispatcher uses special algoritm for selecting messages based on binary searching. For more information, visit site: http://maildispatcher.sourceforge.net/history.shtml
Post a Comment
Read more