what is the “Online Certificate Status Protocol”

2011-03-09 Thread erikmccaskey64
I use privoxy. In the user.action file i have a redirect rule and a few websites: { +redirect{s@http://@https://@} } .twitter.com .facebook.com Ok! it's working great, e.g.: if i visit any "*twitter.com" URL it gets redirected to HTTPS! But: with wireshark i can see some "OCSP" packets [

how to only allow tcp on dport 443 on the OUTPUT chain?

2011-03-08 Thread erikmccaskey64
it's a normal desktop machines iptables firewall: If i want to block udp on dport 80 on the output chain, then is this enough? i want to only allow tcp on it! iptables -P OUTPUT DROP iptables -A OUTPUT -o $PUBIF --dport 80 -j ACCEPT or i need this rule? iptables -P OUTPUT DROP iptables -A OUT

Ideas for securing OpenVPN on an OpenWrt router

2011-03-08 Thread erikmccaskey64
ok, i putted an OpenVPN server on port 1194 on an OpenWrt 10.03 router. https://pastebin.com/raw.php?i=xEZTvnhT http://pastebin.mozilla.org/1138443 Questions: what could i do to increase security regarding this OpenVPN server? - i mean on server side! 1 - i sed 's/1194/5/' the port number

IPTABLES rule for separating users

2011-03-05 Thread erikmccaskey64
I have an OpenWrt 10.03 router [ IP: 192.168.1.1 ], and it has a DHCP server pool: 192.168.1.0/24 - clients are using it through wireless/wired connection. Ok! Here's the catch: I need to separate the users from each other. How i need to do it: by IPTABLES rule [ /etc/firewall.user ]. Ok! "

HOW to REDIRECT to HTTPS?

2011-03-03 Thread erikmccaskey64
I'm searching for a method [on client side] to redirect to HTTPS in a few given domains. e.g.: http://www.facebook.com/ to https://www.facebook.com/ Ok. I use several webbrowsers, and not all of them has "add-ons" to redirect these pages to https. My purpose is this: when i go to "htt

Sorting by date

2011-02-28 Thread erikmccaskey64
Original: Jan 23 2011 10:42 SOMETHING 2007.12.20.avi Jun 26 2009 SOMETHING 2009.06.25.avi Feb 12 2010 SOMETHING 2010.02.11.avi Jan 29 2011 09:17 SOMETHING 2011.01.27.avi Feb 11 2011 20:06 SOMETHING 2011.02.10.avi Feb 27 2011 23:05 SOMETHING 2011.02.24.avi Output: Feb 27 2011 23:05 SOMETHING 2011

opened OpenSSL port

2011-02-27 Thread erikmccaskey64
Main question: is it safe, to open a port for an openssl server? e.g.: server side - generate a self-signed cert. time openssl req -x509 -nodes -days 365 -newkey rsa:8192 -keyout mycert.pem -out mycert.pem openssl s_server -accept 52310 -cert mycert.pem Is it secure? - it could be DOSed' [

How can I disable Internet access for programs running in Wine?

2011-02-25 Thread erikmccaskey64
I just can find any solution... Please help! thanks..

sandboxie like application for Debian?

2011-02-14 Thread erikmccaskey64
http://www.filehippo.com/download_sandboxie/ It's a great application [ for windows... :\ ] Are there any programs under Debian, that has the ~same features? To be specific: The user could launch a program [e.g.: Google Chrome] inside this sandbox, and when he/she exits Google Chrome, all t