Using Clam AntiVirus to provide real-time protection for your iFolder 3 Server

September 13th, 2009

“Because iFolder is a cross-platform distributed solution, there is a possibility of a virus infection on a platform migrating across the iFolder server to other platforms, and vice versa. You should enforce server-based virus scanning to prevent viruses from entering the corporate network.”

This solution applies for openSuSE 11.1 :

The following packages need to be installed :

clamav
dazuko
postfix

Execute modprobe dazuko (as root)

Run lsmod and check that dazuko is loaded:

Edit /etc/init.d/boot.local

  • Add:
    modprobe dazuko

Edit /etc/clamd.conf

Enable logging by activating :
LogFile /var/log/clamd

* Activate:
# Path to a local socket file the daemon will listen on.
LocalSocket /var/lib/clamav/clamd-socket

* Deactivate:
# TCP port address.
#TCPSocket 3310

* Deactivate:
# TCP address.
#TCPAddr 127.0.0.1

* Activate and edit:
# Execute a command when virus is found.
VirusEvent /bin/echo “iFolder VIRUS ALERT: %v” | /bin/mail -s “ClamAV – iFolder” -r ClamAV@server.domain ToUser@domain

* Deactivate:
# Run as a selected user (clamd must be started by root).
#User vscan

Note:
If not deaktivating “User vscan” you receive the error: “clamuko cannot connect to dazuko” in /var/log/clamd

* Clamuko settings, Activate the following :

ClamukoScanOnAccess yes
ClamukoScanOnOpen yes
ClamukoScanOnClose yes
ClamukoScanOnExec yes
ClamukoIncludePath /YOUR_PATH_TO_IFOLDER/ifolder/simias/SimiasFiles

Change any other settings in the file to reflect your needs (see ClamAV documentation).

Start clamd:
/etc/init.d/clamd start

Check that clamd was started without any errors:
tail -f /var/log/clamd

Download the EICAR test signature from:
http://www.f-secure.com/virus-info/eicar_test_file.shtml

Note!
This is not a real virus.

Run: tail -f /var/log/clamd

Save the test file (eicar.zip and/or eicar.com) in your iFolder and wait for sync.

When the virus pattern is detected you should see this (see below) in the log file
/var/log/clamd.

Check that a mail has been sent: tail /var/log/mail

Update ClamAV:
You can update ClamAV using the command: freshclam

A better way is to use the freshclam daemon for automatic updates.

Settings for freshclam: /etc/freshclam.conf

Edit /etc/freshclam.conf

  • Activate:
    # Path to the log file (make sure it has proper permissions)
    UpdateLogFile /var/log/freshclam.log
  • Activate and provide your country code:
    # Uncomment the following line and replace XY with your country code.
    DatabaseMirror db.se.clamav.net
  • Activate and provide update interval (e.g 24 for every hour):
    # Number of database checks per day.
    Checks 24

Create a log file for freshclam:
touch /var/log/freshclam.log

Set file rights:
chown vscan:vscan /var/log/freshclam.log

Start freshclam:
/etc/init.d/freshclam start

Check the log file:
tail /var/log/freshclam.log

Activate automatic start for clamd, freshclam and postfix from Yast –> System –> System Services (Run Level).

Now you have a real-time anti-virus scanning for your iFolder3 server.

Basic FTP Commands

September 2nd, 2009

The FTP (File Transfer Protocol) utility program is commonly used for copying files to and from other computers. These computers may be at the same site or at different sites thousands of miles apart. FTP is a general protocol that works on UNIX systems as well as a variety of other (non-UNIX) systems.

Find below a listing of basic FTP commands :

? to request help or information about the FTP commands
ascii to set the mode of file transfer to ASCII
(this is the default and transmits seven bits per character)
binary to set the mode of file transfer to binary
(the binary mode transmits all eight bits per byte and thus provides less chance of a transmission error and must be used to transmit files other than ASCII files)
bye to exit the FTP environment (same as quit)
cd to change directory on the remote machine
close to terminate a connection with another computer
close brubeck closes the current FTP connection with brubeck,
but still leaves you within the FTP environment.
delete to delete (remove) a file in the current remote directory (same as rm in UNIX)
get to copy one file from the remote machine to the local machine
get ABC DEF copies file ABC in the current remote directory to (or on top of) a file named DEF in your current local directory.
get ABC copies file ABC in the current remote directory to (or on top of) a file with the same name, ABC, in your current local directory.
help to request a list of all available FTP commands
lcd to change directory on your local machine (same as UNIX cd)
ls to list the names of the files in the current remote directory
mkdir to make a new directory within the current remote directory
mget to copy multiple files from the remote machine to the local machine;
you are prompted for a y/n answer before transferring each file
mget * copies all the files in the current remote directory to your current local directory, using the same filenames. Notice the use of the wild card character, *.
mput to copy multiple files from the local machine to the remote machine;
you are prompted for a y/n answer before transferring each file
open to open a connection with another computer
open brubeck opens a new FTP connection with brubeck;
you must enter a username and password for a brubeck account
(unless it is to be an anonymous connection).
put to copy one file from the local machine to the remote machine
pwd to find out the pathname of the current directory on the remote machine
quit to exit the FTP environment (same as bye)
rmdir to to remove (delete) a directory in the current remote directory

Installing iFolder server on openSuSE 11.1

August 24th, 2009

iFolder is a simple and secure storage solution that can increase your productivity by enabling you to back up, access and manage your personal files-from anywhere, at any time. Once you have installed iFolder, you simply save your files locally-as you have always done-and iFolder automatically updates the files on a network server and delivers them to the other machines you use.

Using iFolder, you can designate any network server as an iFolder server and publish information to a personal iFolder created on that server. Once your folder is established, you can install iFolder on the computers you regularly use and download information from your personal iFolder to any of those computers. Not only that, but using iFolder, you can also invite other iFolder users to share your files in the same safe and secure way so that your teams always have the most relevant copy of a document.

You can download iFolder server for openSuSE 10.3 from this URL : http://www.ifolder.com/download/

But installing iFolder server on openSuSE 11.1 is a bit tedious as mono packages packed with version 11.1 are a bit advanced for iFolder. Find below instructions to help you out :

– Install iFolder server and plugins from this repo.

– Configure apache2 with SSL support.

– Setup by typing as root :

simias-server-setup

ifolder-admin-setup

ifolder-web-setup

in console and follow question given by each command.

Change folder directory to /etc/apache2/conf.d by cd command and copy all .conf file to /etc/apache2 with cp command on console.

– Start apache service by typing service rcapache2 start in console.

– Allow services http and https in Firewall.

And you’re done.

IMPORTANT :

If you experience the following error code while the client is trying to connect to the server : Authentication Status Code: Unknown. The problem can be solved by NOT choosing the default server data location while running simias-server-setup. I have chosen /home/iFolder instead and that solved my problems. The server will create the folder for you with correct setup and permissions.

I would like to thank http://www.decriptor.com/2009/05/22/ifolder-on-opensuse-11-1/ for helping in creating the repository and making the above information available.


Firefox 3.5.2 Released

August 15th, 2009

Mozilla Foundation released the latest version of the well known web browser, Firefox 3.5.2. The new version addresses several critical security vulnerabilities. Among the stability improvements, it also brings proper ICC profiles rendering. Private browsing mode is included along with open video format support already built in.

Firefox 3.5 Download Link

To test the new open video format support in Firefox, check out : http://openvideo.dailymotion.com/en

EUROPA: Commission welcomes new Microsoft proposals on Microsoft Internet Explorer and Interoperability

July 25th, 2009

The European Commission can confirm that Microsoft has proposed a consumer ballot screen as a solution to the pending antitrust case about the tying of Microsoft Internet Explorer web browser with Windows. This followed extensive discussions with the Commission which centred on a remedy outlined in the January 2009 Statement of Objections whereby consumers would be shown a “ballot screen” from which they could – if they wished – easily install competing web browsers, set one of those browsers as a default, and disable Internet Explorer. Under the proposal, Windows 7 would include Internet Explorer, but the proposal recognises the principle that consumers should be given a free and effective choice of web browser, and sets out a means – the ballot screen – by which Microsoft believes that can be achieved. In addition OEMs would be able to install competing web browsers, set those as default and disable Internet Explorer should they so wish. The Commission welcomes this proposal, and will now investigate its practical effectiveness in terms of ensuring genuine consumer choice.

As the Commission indicated in June, the Commission was concerned that, should Microsoft’s conduct prove to have been abusive, Microsoft’s intention to separate Internet Explorer from Windows, without measures such as a ballot screen, would not necessarily have achieved greater consumer choice in practice and would not have been an effective remedy.

Microsoft has also made proposals in relation to disclosures of interoperability information that would improve the interoperability between third party products and Windows and Windows Server. Again, these proposals require further investigation before the Commission reaches any conclusion as to the next steps.

Microsoft’s proposals will be published in full on its website.

The Commission has no further comment at this stage.

Background

The Commission sent a Statement of Objections (SO) to Microsoft on 15 January 2009 in relation to the tying of the Microsoft Internet Explorer web browser with Windows.

A Statement of Objections is a formal step in Commission antitrust investigations in which the Commission informs the parties concerned in writing of the objections raised against them. The addressee of a Statement of Objections can reply in writing to the Statement of Objections, setting out all facts known to it which are relevant to its defence against the objections raised by the Commission.

Microsoft replied to the SO on 28 April 2009. The Commission is currently considering Microsoft’s reply, and additional evidence in the case. The investigation is continuing.

Printronix and TallyGenicom AG Reach Final Agreement in Europe and Worldwide

July 19th, 2009

Under Terms, Printronix Will Acquire From TallyGenicom AG Intellectual Property and Sales Distribution Rights for All TallyGenicom Line Matrix and Laser Printer, Supplies and Consumables Business While TallyGenicom AG Retains All Intellectual Property and Worldwide Sales Distribution Rights for Serial Matrix, Inkjet and Thermal Printers, Supplies and Consumables Business.

Under the terms of the agreement, Printronix will acquire intellectual property from TallyGenicom AG as well as worldwide sales distribution rights for all TallyGenicom line matrix and laser technologies, including printers, supplies and consumables. The acquisition is subject to regulatory approval. In addition, TallyGenicom AG retains all intellectual property and worldwide distribution rights for the TallyGenicom serial-matrix, inkjet and thermal technologies, which includes printers and options, supplies and consumables. TallyGenicom AG will continue to resell TallyGenicom-branded line matrix and laser products purchased from Printronix, and Printronix will resell serial matrix products purchased from TallyGenicom AG.

The companies entered into this agreement after TallyGenicom lodged objections to Printronix’s March 23, 2009 acquisition of certain assets of TallyGenicom LP, as prescribed by the U.S. Bankruptcy Court for the District of Delaware. Today’s announcement resolves all disputes between Printronix and TallyGenicom AG.

Distributors, resellers and end-user customers of TallyGenicom-branded products can purchase products from their existing TallyGenicom reseller or by contacting Printronix’s global sales offices:

—  United States: +1 800-665-6210
—  Europe, Middle East, & Africa: +33 (0) 1 46 25 19 00

Customers wishing to contact TallyGenicom AG may call +49 (0) 731 20 75 0

Toshiba launches Blu-ray after DVD setback

July 19th, 2009

Japan’s Toshiba Corp. will enter the Blu-ray DVD market, more than a year after it gave up on its own next-generation format that failed to gain industry support, a report said.

The media-electronics conglomerate will launch Blu-ray products as early as this year, a complete reversal of its position over the high-density DVD standard, the Yomiuri Shimbun newspaper said.

Toshiba had promoted its “HD DVD format”, pitting itself against the Blu-ray system developed by Sony and its partners, in a competition characterised as a re-run of the VHS-Betamax battle in video cassette tapes in the late 1970s.

Major Hollywood studios with vast movie back catalogues sided with Blu-ray, which then dominated the key Japanese market.

The move pushed Toshiba to concede defeat and give up on promoting HD DVD in early 2008, in an echo of Sony’s Betamax setback a generation ago.

Playing Magnetic Scrolls IF games online

July 18th, 2009

In the mid 80’s a small British team of programmers called Magnetic Scrolls prepared to become the European answer to Infocom. After releasing only seven games Magnetic Scrolls perished in the fast growing multimedia age. Nevertheless their thrilling stories, a trailblazing parser and excellent graphics made them a milestone in adventure game history.

Magnetic Scrolls Image

I’ve found a wonderful website with lots of information about the Magnetic Scrolls games and chance to play them online too, check out this URL : http://msmemorial.if-legends.org/memorial.php

Installing ifolder3 server on openSuSE 10.3

July 10th, 2009

iFolder is a simple and secure storage solution that can increase your productivity by enabling you to back up, access and manage your personal files-from anywhere, at any time. Once you have installed iFolder, you simply save your files locally-as you have always done-and iFolder automatically updates the files on a network server and delivers them to the other machines you use.

Using iFolder, you can designate any network server as an iFolder server and publish information to a personal iFolder created on that server. Once your folder is established, you can install iFolder on the computers you regularly use and download information from your personal iFolder to any of those computers. Not only that, but using iFolder, you can also invite other iFolder users to share your files in the same safe and secure way so that your teams always have the most relevant copy of a document.

Below are installation instructions for openSuSE 10.3 server :

Download the following packages :

ifolder3 from http://www.kablink.org/index.php

http://ftp.novell.com/pub/mono/download/x86/mono/1.2.6-4/mono-core-1.2.6-4.novell.i586.rpm
http://ftp.novell.com/pub/mono/download/x86/mono/1.2.6-4/mono-data-1.2.6-4.novell.i586.rpm
http://ftp.novell.com/pub/mono/download/x86/mono/1.2.6-4/mono-data-sqlite-1.2.6-4.novell.i586.rpm
http://ftp.novell.com/pub/mono/download/x86/mono/1.2.6-4/mono-web-1.2.6-4.novell.i586.rpm
http://ftp.novell.com/pub/mono/download/x86/mono/1.2.6-4/mono-nunit-1.2.6-4.novell.i586.rpm
http://ftp.novell.com/pub/mono/download/x86/mono/1.2.6-4/mono-winforms-1.2.6-4.novell.i586.rpm
http://ftp.novell.com/pub/mono/download/noarch/xsp/1.2.6-2/xsp-1.2.6-2.novell.noarch.rpm
http://ftp.novell.com/pub/mono/download/suse-103-i586/mod_mono/1.2.6-1/apache2-mod_mono-1.2.6-1.suse103.novell.i586.rpm

Install as following :

rpm -i mono-core-1.2.6-4.novell.i586.rpm
rpm -i mono-data-1.2.6-4.novell.i586.rpm
rpm -i mono-data-sqlite-1.2.6-4.novell.i586.rpm
rpm -i mono-nunit-1.2.6-4.novell.i586.rpm
rpm -i mono-web-1.2.6-4.novell.i586.rpm –nodeps
rpm -i mono-winforms-1.2.6-4.novell.i586.rpm
rpm -i xsp-1.2.6-2.novell.noarch.rpm
rpm -i apache2-mod_mono-1.2.6-1.suse103.novell.i586.rpm

Then install iFolder server.

Warning over Michael Jackson email virus

July 3rd, 2009

Computer security firm Sophos issued a warning about an Internet virus transmitted from a mass email claiming to contain secret songs and photos of Michael Jackson.

The email comes with the subject “Remembering Michael Jackson” and is sent from “sarah@michaeljackson.com”, Sophos said in a statement sent by its Asia office in Singapore.

It tells recipients that an attached file titled “Michael songs and pictures.zip” contains secret songs and photos of the pop music icon, who died of a heart attack in the United States on June 25.

Sophos warned computer users not to open the attachment.

“By opening the attachment, computer users are exposed to infection. Once infected, a computer will begin automatically spreading the worm onto other Internet users,” Sophos said.

“Besides spreading via email, Sophos experts note that the malware is also capable of spreading as an Autorun component on USB memory sticks.”

Graham Cluley, a senior technology consultant at Sophos, said many computer users are likely to be tempted to open the attachment because of the feverish interest in the King of Pop’s sudden death.

“But sensible computer users should by now be well aware that cybercriminals will be quick to exploit news events to spread malware and spam,” he said.

“Anyone who receives this email should delete it immediately to save themselves the embarrassment of infecting their email contacts.”