Beyond Technology

Computer threat - continued

2007-07-05T05:08:00.000-07:00

Another threat to the computer and network as follows:

Denial of Service (DoS)

This type entangling the hacker and or a certain party to send a number of ICMP echo request to the broadcast address. Remember that the address of sender request have been disguised so difficult to tracks.

Distributed Denial of Service

DDoS

Spoofing

Is the creation of TCP/IP packets using somebody else's IP address. Routers use the "destination IP" address in order to forward packets through the Internet, but ignore the "source IP" address. That address is only used by the destination machine when it responds back to the source.Broadcast Amplification

By using broadcast amplification, an attacker can direct machines at one site to flood another site with network packets. If huge amounts of packets are sent to a site, it goes down under the load, causing denial of service. To prevent this technique from being used, the document's authors suggest that companies turn off the capability to forward directed broadcast or multicast traffic.TCP SYN attack

Computer threat - Network Security

2007-06-29T20:52:00.000-07:00

Every TCP package have 'flag bit’ defining content and intention of each package.

Example:

SYN or SYNCHRONIZE

ACK

FIN

FINISH

To build a TCP connection, need data transfer package between two host, transfer of this data recognized by the name of "TCP Three-Way Handshake" as below picture.

Computer Network Threat

Threat is very harmful to the entire system and also by application at internal and external network.

The threat as follows:

Remote Login - this matter happened when someone capable to connect to a computer and have ability to control to several things related to resource found on the host or computer.

Application Backdoors - some program have special ability to access with long distance (remote access). Some bug program, exactly contain a backdoor or hidden access providing level control the computer and program.

SMTP session hijacking - SMTP is most commonly method used to deliver E-mail. By getting E-mail mailing-list, someone can deliver undesirable E-mail to thousands of or more users. This matter is called unsolicited junk mail or spam.

Spamming conducted with joining SMTP server which not suspect, then deliver thousands of E-mail called redirecting process, so that complicate to detect who is the real sender of the Mail Spam.

Operating system bugs – In application, some operation system have conducive security gap to be exploited illegally.

E-mail bombs - is an Individual attack, someone send hundreds or thousands of E-mail to one address so the victim E-mail cannot accept E-mail anymore.

Macro - To make simple or facilitate procedure an application, many application program permit us to make command which can be run by the program (script). By exploiting ability of script or macro, attacker can cause damage of data at computer.

Virus – Most known to make trouble at computer. The growth of virus from method, way of, making, effectiveness, damage storey, and also speed of spreading is different each other.

Redirect bombs – Hacker or Cracker can use ICMP to change direction of information and attack to other router.

Source routing - At many case, a data package which work through one or some network determined by router pass to route information by the router, but sometime hacker used the package as the real sender.

Another type of computer attack are from (next posted about this) :

Denial of Service (DoS)

Spoofing

Broadcast Amplification

TCP SYN

The method to run the threat above, can be conducted variously including using virus.

Network security - protecting PC

2007-06-25T02:11:00.000-07:00

Tapping by hacker is an annoying problem when we are on surfing internet.

We have to learn how to hack but shall be used for protection from attack.

Following is tips and some software assisting to protect PC from online tapping.

Often we forget to protect our PC “attacking” from online tapping when we surf the internet.

Many civil people feel enough in protecting its PC with a program a kind of firewall desktop and anti spy firewall.

In fact, still many gap at firewall which you used, can be exploited by online watcher hacking on your PC

Below is a tips to protect PC from internet tapping in a LAN party, W-LAN or home connection as my experience.

Activated your Firewall:

In course of online tapping or infection, usually the first step do by hacker is collect information and data concerning victim to be tapped. Usually hacker use information compiler tools like “ Nmap” ( http://www.insecure.org/nmap), hereinafter hacker will check open port at victim PC and also TCP/IP package sent from PC into Network. This matter to get specific information is called print finger from victim PC.

The others way, hacker usually try to get deeper information by delivering an E-mail bait to victim (victim will open the e-mail through Microsoft Outlook program which integrated in its Windows). From bait E-mail answered, hence hacker directly can check what kind of E-mail software and server client install in victim PC.

A lot of “software bug” site, discuss about weak of E-mail software and server client according to each version, but I’m not talking about that weak at this post.

So how to avoid that attack ?

The way of which you can use as protection early is firewall desktop. If you do not wish to use special firewall or commercial, hence you enough activate personal firewall that found on Windows XP service pack 2. Comprehend firewall application path and activity which you use in order not to harm you.

Ascertaining your pc clear of Virus and Trojan, before install the firewall.
Configure your firewall with carefully in each application requiring to access online and also access sharing file in existing network.

Encrypt the Important Folder and WebMail connection.

After getting information about victim PC, usually hacker can start tapping, it is of course with two important tools that is " Ethereal" and "ARP-Spoofer". With ARP-Spoofer, hacker can take information which pass by victim PC with Gateway Internet access and that information package can be opened with “Ethereal (http://www.ethereal.com)”.

To overcome matter above, we have to encrypt our Webmail connection through https band. Do not use http band, better avoid to use ftp band and telnet, because can be sabotaged by hacker. You can use SSH connection to replace ftp band or the telnet. The existing constraint is there is very rare web server providing https service and the SSH.

One of the common Mail which use HTTPS is GMail. Whereas for the important and confidential folder in the PC better do Encrypt. Its data content with right click on folder that you want to Encrypt, its way open part: Properties – Advanced – Encrypt content to protect data. But this matter can be done if your XP windows system file is use NTFS type. By use NTFS system file, we also can block out to access rights access certain consumer.

Use Good Firewall.

With DNS spoofing, hacker can do deflection instructing PC victim to spurious website. This deflection is easy to do because DNS protocol is not have any security mechanism. This matter can be prevented by using good firewall application.

At firewall nowadays, usually DNS cache keep with elegantly, so when we ever visit to previous website, hence DNS spoofing we can prevent.

Recognize to access autoexec at registry

If hacker have succeeded tap your pc, usually they always prepare backdoor to facilitate hacking access in other opportunity. One of the effort draw up backdoor is by altering victim pc system file. But this matter can be easy to detect to through antivirus program.

The way of more realistic to all hacker by placing Trojan in our PC, then run through one of the "Autoexec" what running with autoexec in other Windows system. In anticipating this matter, which we do with install additional tools “Autorun” from Sysinternalsi (http://www.systernals.com).

With this tool can display lot of autoexec exist in our system. Autoruns also can show signature from autoexec exist in our pc system. If found autoexec entry which unknown and identify as trigger Trojan, hence Autoruns can turn off it. With this tool, we assisted in eliminating against backdoor which is possible left by hacker in our pc.

Besides trick above, to avoid tapping, suggested do not use User Administrator when surf in internet, then arrange your explorer internet security setting to High Level Security setting.

And don't forget to always Update your Windows, especially when newest update improve many Security system on your PC.

Chipset recognized

2007-06-18T23:25:00.000-07:00

The chipset is the heart of the computer and is the hub for all data transfer.
It determines how fast components like the processor, memory, keyboard and various plug-ins can function in relation to each other.

A Chipset is a corps of VLSI chip(Very Large Scale Integration Chips), which vital function execute in a computer system. Each function need one or more chip.

Not all chipsets support all components that you may want with your computer. Before selecting a chipset, decide what features you want with your computer, and then check to see that the chipset supports them.

Below is kind of Chip, replaced by a modern chipset:

Memory Controller
EIDE Controller (Enhanced Integral Drive Electronics) is a new version of IDE and improve maximum of harddisk able to be controlled from 504MB become 8.4GB.
PCI Bridge (Peripheral Component Interface or Peripheral Component Interconnect) is a local bus standard provide by Intel and working with maximum 33Mhz. The bus wide is 32/64 bit, and transfer speed is 133MB/sec for 32 bit and 266MB/sec for 64bit. PCI dissociating (decouple) processor from bus expansion via bridge.
RTC (Real-Time-Clock)
DMA (Direct Memory Access) Controller. DMA is a one of technologies used by some hardware to move data from and to main memory without entangling CPU computer (Processor)
Keyboard controller
PS/2 mouse controller
Secondary cache controller
Low Power CMOS SRAM control

There is not all Chipset replacing all chip function. Chipset is not upgradeble like CPU, memory or harddisk.

Chipset Premier Manufacturer
The famous Chipset maker company like follows:

Intel Corporation:
- Intel® Q965 Express Chipset
- Intel® 5000P Chipset for Dual-Core Intel® Xeon® Processor 5100 Series and Quad-Core Intel® Xeon® Processor 5300 Series
- Intel® 3100 Chipset for Intel® Core™ Duo processors and Intel® Celeron® M processors on 65nm
- Intel® 3100 Chipset for Dual-Core Intel® Xeon® Processors LV and ULV and Intel® Celeron® Processor 1.66 GHz and 1.83 GHz
- Intel® 3100 Chipset for Intel® Pentium® M and Intel® Celeron® M Processors on 90nm process
- Mobile Intel® 945GME Express Chipset
- Intel® E7520 Chipset for Intel® Core™2 Duo Processors and Intel® Core™ Duo Processors
- Intel® E7520 and Intel® E7320 Chipsets for Intel® Pentium® M and Intel® Celeron® M processors on 90nm process
- Intel® E7520 Chipset for Dual-Core Intel® Xeon® Processors LV and ULV, and Intel® Celeron® Processor 1.66 GHz and 1.83 GHz
- Intel® E7520 Chipset For Intel® Xeon® processors
- Intel® E7501 Chipset
- Intel® E7500 Chipset
- Intel® 945G Express Chipset
- Mobile Intel® 915GME Express Chipset
- Mobile Intel® 910GMLE Express Chipset
- Intel® 915GV Express Chipset
- Intel® 875P Chipset
- Intel® 865G Chipset
- Intel® 855GME GMCH and Intel® 6300ESB ICH
- Intel® 855GME GMCH and Intel® ICH-4
- Intel® 854 Chipset
- Intel® 852GME Chipset
- Intel® 852GM Chipset
- Intel® 845 Chipset
- Intel® 845E Chipset
- Intel® 845GV Chipset
- Intel® 815 and 815E Chipsets
- Intel® 810E2 Chipset
- Intel® 810 Chipset
- Intel® 840 Chipset
- Intel® 440BX AGPset
- Intel® 440GX AGPset
- Intel® 440MX Chipset
- Intel® 430HX PCIset
- Intel® 430TX PCIset
Silicon Integrated System Corporation (SiS):
- Intel Core 2 Duo Chipset
  - SiS672FX Fully support DX9, Certified for Windows Vista Premium
  - SiS672 Fully support DX9, Certified for Windows Vista Premium
  - SiS671FX Fully support DX9, Windows Vista ready
  - SiS671 Fully support DX9, Windows Vista ready
  - SiS671DX Support FSB 1066MHz and DDR2-667, Windows Vista Ready
  - SiS662 PCI Express&DDR2-667 Integrated Chipset For Pentium® D/Pentium®4 Processor
- Intel Pentium 4 Chipset
  - SiS656FX - PCI Express&Dual-Channel DDR2/DDR Chipset For Pentium® D/Pentium® 4 Processor
  - SiS649FX - PCI Express&Single-Channel DDR2/DDR Chipset For Pentium® D/Pentium® 4 Processor
  - SiS649 - PCI Express&Single-Channel DDR2-533/DDR400 Chipset For Pentium® 4
  - SiS656 - PCI Express&Dual-Channel DDR2-667/DDR400 Chipset for Pentium® 4
  - SiS655TX - Dual-Channel DDR400 Chipset with HyperStreaming™ Technology for Pentium® 4
  - SiS655FX - Dual-Channel DDR400 Chipset for Intel® Pentium® 4 FSB800
  - SiS648FX - DDR400 Plus AGP 8X Chipset for Intel® Pentium® 4 HT 800
  - SiS661FX - Integrated Mirage™ Graphics Chipset for Pentium® 4
  - SiS661GX - Integrated Mirage™ Graphics Chipset for Pentium® 4
  - SiS655 - Dual-Channel DDR333 Plus AGP 8X Chipset for Intel® Pentium® 4
  - SiS648 - First AGP 8X supporting Chipset with MuTIOL® 1G Technology For Pentium® 4
  - SiS651 - The Integrated Graphics Solution for Pentium® 4 with FSB533
  - SiS650 - Integrated VGA Solution for Intel® Pentium® 4
- AMD 64 Chipset
  - SiS771 - Integrated Mirage™ 3 Graphics Chipset for AMD Socket AM2 CPUs
  - SiS761GX - Integrated Mirage™ 1 Graphics Chipset for AMD Athlon™ 64 FX processors
  - SiS756 - First PCI Express Athlon™ 64 FX North Bridge Chipset
  - SiS755FX - The First AMD Athlon™ 64 FX North Bridge Chipset
  - SiS755 - The First AMD Athlon™ 64 North Bridge Chipset
  - SiS760GX - The Integrated Mirage™ 2 Graphics Chipset for AMD Athlon™ 64
  - SiS760 - The World First Integrated Chipset for AMD Athlon™ 64
- AMD 64 Chipset
  - SiS771 - Integrated Mirage™ 3 Graphics Chipset for AMD Socket AM2 CPUs
  - SiS761GX - Integrated Mirage™ 1 Graphics Chipset for AMD Athlon™ 64 FX processors
  - SiS756 - First PCI Express Athlon™ 64 FX North Bridge Chipset
  - SiS755FX - The First AMD Athlon™ 64 FX North Bridge Chipset
  - SiS755 - The First AMD Athlon™ 64 North Bridge Chipset
  - SiS760GX - The Integrated Mirage™ 2 Graphics Chipset for AMD Athlon™ 64
  - SiS760 - The World First Integrated Chipset for AMD Athlon™ 64
- AMD athlon XP Chipset
  - SiS748 - SiS AGP 8X and DDR400-supporting Chipset for AMD Athlon™ XP
  - SiS741 - The Integrated Mirage™ Graphics Chipset for AMD Athlon™ XP FSB400
  - SiS741GX - The Integrated Mirage™ Graphics Chipset for AMD Athlon™ XP FSB333
- South Bridge
  - SiS968 - The Southbridge for Windows Vista Ready
  - SiS966 - PCI Express MuTIOL® 1G Media I/O
  - SiS966L - PCI Express MuTIOL® 1G Media I/O
  - SiS965 - PCI Express MuTIOL® 1G Media I/O
  - SiS965L - PCI Express MuTIOL® 1G Media I/O
  - SiS964 - MuTIOL® 1G Media I/O
  - SiS964L - MuTIOL® 1G Media I/O
  - SiS963 - MuTIOL® 1G Media I/O
  - SiS963L - MuTIOL® 1G Media I/O
VIA Technologies
- K8 Series: AMD Opteron/Athlon 64/Athlon 64 FX
  - VIA K8T900
  - VIA K8T890
  - VIA K8M890
  - VIA K8N890
  - VIA K8T800 Pro
  - VIA K8N800A (N/IG)
  - VIA K8N800 (N/IG)
- P4 Series: Intel® Core™2 Duo, Pentium®, and Celeron®
  - VIA PT890
  - VIA PT880 Ultra
  - VIA P4M900
  - VIA P4M890
  - VIA P4M800
  - VIA P4M800 Pro
  - VIA PN800
- C Series: VIA C7®, C7®-D, C3™-M, VIA C3™ and VIA Eden™, Intel Pentium® and Celeron®
  - VIA CN896
  - VIA CN800
  - VIA CX700M
  - VIA CX700
  - VIA CN700
  - VIA CN400
  - VIA CLE266
- V Series: VIA C7®-M and VIA C7®-M ULV
  - VIA VN896
  - VIA VN800
  - VIA VX700
- K7 Series: AMD Athlon XP/Duron™
  - VIA KT880
  - VIA KT600
- VIA South Bridge Solutions: VIA Integrated South Bridges
  - VIA VT8251
  - VIA VT8237R Plus
  - VIA VT8237A
  - VIA VT8235
- Embedded & Legacy Chipsets: VIA C3™-M, VIA C3™ and VIA Eden™, Intel Pentium III and Celeron® (Socket 370)
  - VIA PLE133T (I/G)
  - VIA PN133 (N/IG

Using MDaemon PRO as a MAIL Server

2007-06-13T02:50:00.000-07:00

MDaemon is one of the utilized software as server mail besides other mail server software.

Hardware requirement for MDaemeon as a Mail Server is :

For small usage any Pentium Class With RAM 32Mb

For biggest usage min. Pentium III With RAM 128Mb

Operating System: Windows '98, Windows NT, Windows 2000, Windows 2003 (My suggestion is use Windows NT or Windows 2000, Windows 2003 so that security system and the stability can be improved)

Service E-Mail Protocol

protocol

Simple Mail transfer protocol (SMTP)
Post Office Protocol Version 3 (POP3

IMAP

Simple Mail Transfer Protocol (SMTP)

Post Office Protocol version 3 (POP3)

Function of DNS server in Email service

E-Mail Services in LAN
E-Mail service in LAN environment generally aim to facilitate coordination between internal of an organization. The Scope of LAN in fact can be extended in WAN scale. This mode is not used public network or Internet.

Email service in WAN

Forwarding of E-Mail in public network using internet or WAN, an E-Mail will passed through some server, before is finally accepted by address of target. As have been explained at previous, DNS server function is vital as indicator to route passed by the email.

sending email through internet can be use by: Relay SMTP Server and MX Record at DNS Server. To get an email can be choose with ETRN, Domain POP, Multi POP, SMTP.

Setting MDaemon at LAN

Make Domain at Local Network
Make Account and Mailbox each user
Configure E-Mail client each user

Setting Primary Domain

Domain Name: (fill with organization domain)
HELLO Domain: (name of domain which [is] used in SMTP instruction HELLO/ehlo in process delivery of E-Mail.)
Machine Name: (Domain Name)
Domain IP: (Computer IP at Local Network)
Bind listening sockets to this IP only: (Leave it blank for single Domain, usually this fill use for multiple domain)
ISP or Smart host’s IP or domain name: (Leave it blank for E-mail at LAN)

Create Account Mail

Full Name: filled with complete name of user
Mailbox Account: Filled with name to be used as E-Mail address
Allow this account to be accessed with POP/IMAP mail clients: is used to give rights so that the account can be accessed from POP client /IMAP like Outlook and Eudora.
Account password: Password for the account.
Comments on this Account: Column to fill in various note lionized for the account.

Message directory: location of directory path where E-Mail keep
Storage Format: representing depository format of file in folder for every user.
Enable automatic extraction of MIME encoded attachments: if this choice is activated, MDAEMON will extract E-Mail attachment which have found by MIME format to every E-Mail which enter. This facility is used especially for the client of E-Mail which do not have ability of MIME file extract.

Setting MDaemon at WAN
Steps to conduct MDAEMON configuration for internet connection shall be as follows:

Modem Configuration, DialUp Networking to ISP, RAS DialUp/DialDown in MDaemon.
DNS Configuration.
Sending Email Configuration.
Receipt Email Configuration.

RAS DialUp/DialDown

Enable RAS dialup/dialdown engine: To activation Dialup function.
Make this many attemps to establish a session: Is used to determine how many times MDAEMON repeat dial to ISP.
After dialing, wait this many seconds for a valid connection: This shares determine how long MDAEMON await to get link to ISP
Connection persistence: you can decide MDAEMON will continuously
connect, or determined by] certain time interval (in minute) before finally MDAEMON disconnect with ISP, if there is no activity.

Use any currently active dialup session: To determine what is MDAEMON will use conection which is active to deliver of and acceptance of E-Mail,
so that no need to dial.
Logon name: Filled with got account from your ISP.
Logon password: Password for the logon to ISP.
Use this RAS dialup profile: Is available internet connection type choice combo box. This box present networking dialup choice as according to internet connection which have installed in Windows.

DNS Configuration

Sending E-mail using SMTP Relay

Receive E-mail using MultiPOP

If ISP or hosting web do not provide DomainpPOP facility and also ETRN.
MultiPOP using as ETRN and DomainPOP
You wish free E-Mail service host in MDAEMON, so that user in network do not
need connection to internet to get the E-Mail.

The configuration as follows:
1. Enable MultiPOP mail collection for this account: to activate MultiPOP function
2. Server: POP3 server name - got from ISP
3. Logon: User account in POP3 server
4. Password: Password in POP3 server or APOP shared secret
5. Use APOP (password field contains shared secret: Make this active if authentication password is APOP
6. a copy of message on POP server: Keep the E-mail in POP3 server even MDaemon already downloaded, later you can read your mail from other location.
7. messages once [xx] or more have accumulated (0 = never): Maximum Email keeping in POP3 server
8. download messages larger than [xx] kb (0 = no limit: The limit of E-Mail size download.

Internet Protocol keyword

2007-06-04T21:16:00.001-07:00

Most Windows have the ability to define Internet Protocol (IP) packet filters for protocol numbers. IP packet filters are commonly used to restrict traffic in and out of each interface.

We used this Protocol number to configure firewalls, routers and proxy. Next session i want to write about network firewall. This is as reference only, so if you want to know more about this visit the associated, like Microsoft, cisco, etc..etc

Internet Protocol Number:

Decimal	Keyword	Protocol
0		Reserved
1	ICMP	Internet Control Message
2	IGMP	Internet Group Management
3	GGP	Gateway-To-Gateway
4	IP	IP in IP (Encapsulation)
5	ST	Stream
6	TCP	Transmission Control
7	UCL	UCL
8	EGP	Exterior Gateway Protocol
9	IGP	Any Private Interior Gateway
10	BBN-RCC-MON	BBN RCC Monitoring
11	NVP-II	Network Voice Protocol
12	PUP	PUP
13	ARGUS	ARGUS
14	EMCON	EMCON
15	XNET	Cross Net Debugger
16	CHAOS	Chaos
17	UDP	User Datagram
18	MUX	Multiplexing
19	DCN-MEAS	DCN Measurement Subsystems
20	HMP	Host Monitoring
21	PRM	Packet Radio Measurement
2	XNS-IDP	Xerox NS IDP
23	TRUNK-1	Trunk-1
24	TRUNK-2	Trunk-2
25	LEAF-1	LEAF-1
26	LEAF-2	LEAF2
27	RDP	Reliable Data Protocol
28	IRTP	Internet Reliable Transaction
29	ISO-TP4	ISO Transport Protocol Class 4
30	NETBLT	Bulk Data Transfer Protocol
31	MFE-NSP	MFE Network Services Protocol
32	MERIT-INP	MERIT Internodal Protocol
33	SEP	Sequential Exchange Protocol
34	3PC	Third Party Connect Protocol
35	IDPR	Inter-Domain Policy Routing Protocol
36	XTP	XTP
37	DDP	Datagram Delivery Protocol
38	IDPR-CMTP	IDPR Control Message Transport Protocol
39	TP++	TP++ Transport Protocol
40	IL	IL Transport Protocol
41	SIP	Simple Internet Protocol
42	SDRP	Source Demand Routing Protocol
43	SIP-SR	SIP Source Route
44	SIP-FRAG	SIP Fragment
45	IDRP	Inter Domain Routing Protocol
46	RSVP	Reservation Protocol
47	GRE	General Routing Encapsulation
48	MHRP	Mobile Host Routing Protocol
49	BNA	BNA
50	SIPP-ESP	SIPP Encap Security Payload
51	SIPP-AH	SIPP Authentication Header
52	I-NLSP	Integrated Net Layer Security TUBA
53	SWIPE	IP With Encryption
54	NHRP	NBMA Next Hoop Resolution Protocol
55 - 60		Unassigned
61		Any Host Internal Protocol
62	CFTP	CFTP
63		Any Local Network
64	SAT-EXPAK	SATNET and Backroom EXPAK
65	KRYPTOLAN	Kryptolan
66	RVD	MIT Remote Virtual Disk Protocol
67	IPPC	Internet Pluribus Packet Core
68		Any distributed File System
69	SAT-MON	SATNET Monitoring
70	VISA	VISA Protocol
71	IPCV	Internet Packet Core Utility
72	CPNX	Computer Protocol Network Executive
73	CPHB	Computer Protocol Heart Beat
74	WSN	Wang Span Network
75	PVP	Packet Video Protocol
76	BR-SAT-MON	Backroom SATNET Monitoring
77	SUN-ND	SUN ND PROTOCOL-Temporary
78	WB-MON	WIDEBAND Monitoring
79	WB-EXPAK	WIDEBAND Expak
80	ISO-IP	ISO Internet Protocol
81	VMTP	VMTP
82	SECURE-VMTP	Secure - VMTP
83	VINES	VINES
84	TTP	TTP
85	NSFNET-IGP	NSFNET-IGP
86	DGP	Dissimilar Gateway Protocol
87	TCF	TCF
88	IGRP	IGRP
89	OSPFIGP	OSPFIGP
90	SPRITE-RPC	Sprite RPC Protocol
91	LARP	Locus Address Resolution Protocol
92	MTP	Multicast Transport Protocol
93	AX.25	AX.25 Frames
94	IPIP	IP-within-IP Encapsulation Protocol
95	MICP	Mobile Internetworking Control Pro
96	SCC-SP	Semaphore Communication Sec. Pro
97	ETHERIP	Ethernet-within-IP Encapsulation
98	ENCAP	Encapsulation Header
99		Any Private Encryption Scheme
100	GMTP	GMTP
101-254		Unassigned
255		Reserved

General Computer Port list

2007-06-04T06:07:00.000-07:00

Just another General Computer port. Computer Network Administrator must know below computer port and my previous posted about Computer Port List.

What is TCP/UDP?
TCP and UDP are transport protocols used for communication between computers.

TCP:Abbreviation of Transmission Control Protocol, and pronounced as separate letters. TCP is one of the main protocols in TCP/IP networks. Whereas the IP protocol deals only with packets, TCP enables two hosts to establish a connection and exchange streams of data. TCP guarantees delivery of data and also guarantees that packets will be delivered in the same order in which they were sent.

UDP:Short for User Datagram Protocol, a connectionless protocol that, like TCP, runs on top of IP networks. Unlike TCP/IP, UDP/IP provides very few error recovery services, offering instead a direct way to send and receive datagrams over an IP network. It's used primarily for broadcasting messages over a network.

Service Name	UDP	TCP
Browsing datagram responses of NETBIOS over TCP/IP	138
Browsing requests of NetBIOS over TCP/IP	137
Client/Server Communication		135
Common Internet File System (CIFS)	445	139,445
Content Replication Service		560
Cybercash Administration		8001
Cybercash Coin Gateway		8002
Cybercash Credit Gateway		8000
DCOM (SCM uses UDP/TCP to dynamically assign ports for DCOM)	135	135
DHCP Client		67
DHCP Server		68
DHCP Manager		135
DNS Administration		139
DNS client to server lookup (varies)	53	53
Exchange Server 5.0
Client Server Communication		135
Exchange Administration		135
IMAP		143
IMAP (SSL)		993
LDAP		389
LDAP (SSL)		636
MTA – X.400 over TCP/IP		102
POP3		110
POP3 (SSL)		995
RPC		135
SMTP		25
NNTP		119
NNTP (SSL)		563
File shares name lookup	137
File shares session		139
FTP		21
FTP-data		20
HTTP		80
HTTP-Secure Sockets Layer (SSL)		443
Internet Information Services (IIS)		80
IMAP		143
IMAP (SSL)		993
IKE	500
IRC		531
ISPMOD (SBA 2^nd tier DNS registration wizard)		1234
Kerberos de-multiplexer		2053
Kerberos klogin		543
Kerberos kpasswd (v5)	464	464
Kerberos krb5	88	88
Kerberos kshell		544
L2TP	1701
LDAP		389
LDAP (SSL)		636
Login Sequence	137, 138	139
Macintosh, File Services (AFP/IP)		548
Membership DPA		568
Membership MSN		569
Microsoft Chat Client to server		6667
Microsoft Chat server to server		6665
Microsoft Message Queue Client	1801	1801
Microsoft Message Queue Server	3527	135,2101
Microsoft Message Queue Server		2103, 2105
MTA – X.400 over TCP/IP		102
NetBT datagrams	138
NetBT name lookups	137
NetBT service sessions		139
NetLogon	138
NetMeeting Audio Call Control		1731
NetMeeting H.323 Call Setup		1720
NetMeeting H.323 streaming RTP over UDP	Dynamic
NetMeeting Internet Locator Server ILS		389
NetMeeting RTP audio stream	Dynamic
NetMeeting T.120		1503
NetMeeting User Location Service		522
NetMeeting user location service ULS		522
Network Load Balancing	2504
NNTP		119
NNTP (SSL)		563
Outlook (see “Exchange” for ports
Pass Through Verification	137, 138	139
POP3		110
POP3 (SSL)		995
PPTP control		1723
Printer sharing name lookup	137
Printer sharing session		139
Radius accounting (Routing and Remote Access)	1646/1813
Radius Authentication (Routing and Remote Acces)	1645/1812
Remote Install TFTP		69
RPC Client Fixed port session Queries		1500
RPC Client Using a Fixed port session Replication		2500
RPC Session Ports		Dynamic
RPC User Manager, Service Manager, Port Manager		135
SCM Used by DCOM	135	135
SMTP		25
SNMP	161
SNMP Trap	162
SQL Named Pipes Encryption Over Other Protocols Name Lookup	137
SQL RPC Encryption Over Other Protocols Name Lookup	137
SQL Session		139
SQL Session		1433
SQL Session		1024 - 5000
SQL Session Mapper		135
SQL TCP Client Name Lookup	53	53
TelNet		23
Terminal Server		3389
UNIX Printing		515
WINS Manager		135
WINS NetBios Over TCP/IP Name Service	137
WINS Proxy	137
WINS Registration		137
WINS Replication		42
X400		102

Blog reaction exchange

2007-06-02T07:09:00.000-07:00

The intention of tagged train or exchange link is to increase your Technorati rating as well as your Google PR and other search engines. That's why every blogger need to exchange link with others blog.

On my review a view month ago, Most bloggers I know have great trouble exchanging links with other blogs, this is also happened with me. So I Just developed this strategy and this strategy called "Blog reaction exchange". It's simple to set up and in theory will work extremely well (if you do as well the blog reaction will shown soon, and the link post will shown under "link to this post" in your joining content), so must leave comment and leave your content posted address once you joined. We need that participants visit yours and leave comment on your joining post.

The rule:

Tell on your posted, you are invited by whom and make a little bit about his/her blog as introduce, but remember, make the link point to the content, not to home site(i.e: I was invited by: Beyond Technology etc..etc...) see the link: http://it-matters-job.blogspot.com/2007/06/blog-reaction.html)

Make tag that you think would like to participate. Write a little bit about your friends blog.(for example:My tag - Only GOD keeps me going. This is talking about etc..etc, Or Why you invite him/her and tell a little bit about your friend blog, whatever belong to their blog

Every your new blog reaction from this train must visit and leave comment in related content

Please do not copy and paste about this post, you have to rewrite and make something different. As my review, when Google detect duplicate post it will be impact to our page rank.

Make your rule, but point 1,2,4 must included, because this is my rule abut blog friends promotion or just follow my rule but remember point 4

So, now this is my promotion blog, to make their blog reaction:

[B][E][A][U][T][I][F][U][L]
This is a blog who love shopping, a lot of interested things on her blog. She is very welcome to the visitor, especially who leave comment. Check it now..!

Nastasshea
This is about her fairy tale, Something fun on her blog, her posted is unpredictable. That's why i often visit her blog. Visit now and you can found a different out there.

Wildheart's Work...
Her name is Joe Cheray, She is the owner and manager of Kansans and Friends In Weight Loss. This is her miscellanious creative works blog. She just tagged me with anothers train.

C e l l T e c h H u b . . .
This blog covers a wide range of topics - from 2G/3G network insights to value added service implementation in cellular systems,from SS7 signaling basics to the most recent 3G mobile phone reviews

Bajaenergy / Energy BLOG
It is an Energy Data Warehouse, you can find news, stats, reports, interviews, videos, etc .. all update to students, companies, universities, whatever who likes to know more about energy sector.

A Nice Place In The Sun
She is a children's writer working on the publication of two easy readers! While researching agents, books, publishers, and writing. She decided to start a blog for parents about children's books, with articles of interest to parents, and book reviews. So visit her..!

Cafe Noche - by Miss Nice
She is my new friend and members in my MyBlogLog community. The 1st thing that I remember from her is the description of her blog "Whatever matters to me gets put up on my blog". I Like the posted about Dubai, nice place for vacation.

Free Books Yaro Starak - By Jennie VW
This Blog all material from E-Book Yaro Starak. Tips for Blogger to earn Money. She has a tips to earn money on blog. Why you blog?, what is your Goal? and how to make money online?. This is the content you can found out there. Even her blog just started, i like to shared and get blog succeed with her. Do you?

I Love Tangerine! - By Sleeping Princes
She is a twisted little loony in a whirl of confusion. The descriptions of this blog is "Of all the pain, the greatest pain is to love, but to love in vain" This is her another blog, Her permanent blog is : Sleeping Princess, so want to know her site?

Odlum Online - Web Page Design For Everyone - By Andrew Odlum
Odlum Online is devoted to exploring the internet and explaining all of the elements of web page design in an easy to understand way. Come learn along with him as he will try to make web page design accessible to everyone.

Love Forever
FAITH, HOPE, LOVE, THESE THREE, BUT THE GREATEST OF THESE IS LOVE. WHAT IS THAT LOVE TRUTHFULLY? PLEASE CLICK AND READ "LOVE" IN BLOG ARCHIVE. Thank's...! "This Blog contain about love and some module study about problem of which can assist others as one of the forming of love.

Il protagonista
This is about personal Blog

Flexible life
Life is easy. Handle it with care. Never Surrender!

If you are not in above list, you can participate also, just leave comment and i will check your site asap, once i review about your site added you to the list.

Computer Port list

2007-05-29T23:32:00.000-07:00

What is Computer port ?

An interface on a computer to which you can connect a device. Personal computers have various types of ports. Internally, there are several ports for connecting disk drives, display screens, and keyboards.

Externally, personal computers have ports for connecting modems, printers, mice, and other peripheral devices.

Almost all personal computers come with a serial RS-232C port or RS-422 port for connecting a modem or mouse and a parallel port for connecting a printer.

On PCs, the parallel port is a Centronics interface that uses a 25-pin connector. SCSI (Small Computer System Interface) ports support higher transmission speeds than do conventional ports and enable you to attach up to seven devices to the same port.

In TCP/IP and UDP networks, an endpoint to a logical connection. The port number identifies what type of port it is.

For Network administrator must know about the computer Port, to identify network attack and network function purposed.

Below is a general computer port list and the service port name:

Service Name	Port Number
Windows Services
Browsing DHCP Lease DHCP Manager Directory Replication DNS Administration DNS Resolution Event Viewer File Sharing Logon Sequence NetLogon Pass Through Validation Performance Monitor PPTP Printing Registry Editor Server Manager Trusts User Manager WinNT Diagnostics WinNT Secure channel Wins Replication Wins Manager Wins Registration Direct Hosting of SMB over TCP/IP	UDP:137,138 UDP:67,68 TCP:135 UDP:138 TCP:139 TCP:135 UDP:53 TCP:139 TCP:139 UDP:137,138 TCP:139 UDP:138 UDP:137,138 TCP:139 TCP:139 TCP:1723 IP Protocol:47 (GRE) UDP:137,138 TCP:139 TCP:139 TCP:139 UDP:137,138 TCP:139 TCP:139 TCP:139 UDP:137,138 TCP:139 TCP:42 TCP:135 TCP:137 TCP,UDP:445

Service Name	Port Number
Windows Load balancing System (WLBS) & convoy for cluster Control
Convoy WLBS	UDP:1717 UDP:2504
Microsoft Exchange
Client/Server Comm. Exchange Administrator IMAP IMAP (SSL) LDAP LDAP (SSL) MTA – X.400 over TCP/IP POP3 POP3 (SSL) RPC SMTP NNTP NNTP (SSL)	TCP:135 TCP:135 TCP:143 TCP:993 TCP:389 TCP:636 TCP:102 TCP:110 TCP:995 TCP:135 TCP:25 TCP:119 TCP:563
Windows Terminal Services
RDP Client (Microsoft) ActiveX Client (TSAC) ICA Client (Citrix) Terminal Server IPSec ISAKMP ESP AH Karberos Karberos RSVP RSVP	TCP:3389 TCP:80,3389 TCP:1494 TCP:3389 UDP:500 IP Protocol 50 IP Protocol 51 TCP;UDP:88 IP Protocol:46

Callback connection setting

2007-05-25T20:20:00.000-07:00

The callback feature instructs your remote access server to disconnect, and then to call you back, after you dial in.

What does it mean and what for ?
Call the server from your home, then immediately hanging up by the server and then server dialing you back.
Required callback enhances network security by ensuring that only users from specific locations can access the server. By dropping the call, and then calling back a moment later to the preassigned callback number, most impersonators can be thwarted.

How it work ?

You call the server to the server via modem, once your server modem response, your connection automatically disconnected then your server call you back.

What for ?
For example, you need some file from your network server while you are at home or you are out of office, and this is reduce your phone charge and the others one, you can used internet trough your server network as a gateway.

How to Setting ?

Office/Server Setting:
step 1: Incoming Connection

Open Network Connection -> Create a new connection -> Next -> Select Set up an Advance Connection -> Next -> Accept incoming connection -> Select your modem device -> Do not allow virtual private connection -> select User Permission -> Next -> Finish.

step 2:
Set Remote Access Server (RAS)
Of course this part must configured by your administrator (if you want to know how to configure RAS, ask me). If you are as a user, put the modem to your computer as your network client, then do the only step1, and of course you have to let your computer on when you leave.

Your Home Computer setting:
step 1:

Open Network Connection -> Create a new connection -> Next -> Connect to the Internet -> Next -> Setup my connection manually -> Connect using a dial-up modem -> Type connection name -> Next -> Type the Phone Number -> Type User Name and password that you has been permission to connect as above (server configuration) -> Next -> Finish.

step 2:
Open Network Connections.
On the Advanced menu, click Dial-up Preferences.
On the Callback tab, do one of the following:
1. If you do not want to use callback, click No callback.

2. If you want to decide whether to use callback at the time you connect, click Ask me during dialing when the server offers.

3.If you want to use callback consistently, click Always call me back at the number(s) below, and select the modem or device on which you want to be called back.

4.If Phone number is blank for the device you have selected, click Edit, and then type the number.

5.If you want to remove a modem or device from the list of possible callback devices, click the modem or device, and then click Delete.

(see the final setting screen)

Now try connect to your computer office.
The surprised is,
1. The phone cost become to your office computer phone line. Your cost only on the first called.
2. If your office computer able to connect the internet via you server connection, you can used internet too from your home (must check your office computer firewall setting).

Who will be joint next Alexa redirect train

2007-05-23T07:31:00.000-07:00

Understand that we need rank for our blog. They say size doesn't matter, but rank does.

Let us play Alexa redirect train. See your Alexa rank before joint this, then We will dance for better Alexa rank and next week let's us see your Alexa rank next week.

This is the train: ~Start Copying Here~
Alexa Redirect Train by Carl Ocab

Rules:

1. Put anything you like above this list – Chit Chat, talkies, introduce what this is. Something like that
2. Start copying on the “~Start Copying Here~” and copy all the things listed without removing the links (Of course, the train would be no use without those links)
3. Move all the sites labeled “Newbies” to the list labeled “Oldies”
4. Add 5 sites that you want to include in the train and make their link like this: http://redirect.alexa.com/redirect?www.example.com then invite them to join the train.
5. Visit all the listed sites! (That’s not much work! Remember, if you plant good seeds they will also grow good) and look at your high Alexa ranking next week!
Newbies
PandaCube-A Digital Notebook

My Life and my Views

chococherrycoco

Love Forever

Il protagonista

Oldies
Beyond Technology
Only GOD keeps me going
Mr & Mrs Imran
My Fairy-Tale
Life in the Fast Lane
The BenSpark
[B][E][A][U][T][I][F][U][L]
7Confessions
Celebrity Brands
Still Frames
Connected Internet
DoshDosh
Lyte Byte
Refelctions Of Time
The Cure For Silence
Blog About Money Online
Manila Mom
ScottPot
How to earn money online?
Quasi Fictional
Make Money Blogging!
Make Money Online 2.0
Nate Whitehill
Jozzua
Grow your Writing Business
CultureShiok
Gary Lee
Smart Wealthy Rich
TechZi
Erik Karey: Internet Entrepreneur
Tjantunen.com
Hate The Grind
Earn Money Blogging
be the change - tread the path
Money making Ideas in Blog
cymru66
Cell Rater
Click Fire

~End Copying Here~

BIOS signal error message

2007-05-19T22:37:00.000-07:00

PC is not response once you turn on and got "Beep" sound. Don't panic.

How to construe the beep signal message from the PC.

AMI-BIOS:
1Beep:RAM damaged or unplugged correctly
6Beep:Gate A20 error - Keyboard unplugged or damaged
8Beep:Card Graphic damaged or unplugged correctly
11Beep:Checksum-Error, check CMOS Battery on motherboard

Award-BIOS:
1Long beep:RAM problem, plug RAM correctly
1Long beep + 2short beep: Graphic card problem
1Long beep + 3short beep: Keyboard problem (Version 4.5 above this signal means graphic card problem)
un-break beep: RAM or graphic card not found

Phoenix-BIOS:
1beep+1beep+4beep: BIOS damaged
1beep+2beep+1beep: Motherboard problem or damaged
1beep+3beep+1beep: RAM problem, check RAM position
3beep+1beep+1beep: Motherboard problem or damaged
3beep+3beep+4beep: Graphic card problem or unplugged.

Now you know the BIOS signal, keep it for easy to find and solved your PC problem.

How to setting Thera for flexi

2007-05-19T11:43:00.000-07:00

As the first Pocket PC to have integrated wireless communication capabilities, the Audiovox Thera 2032 (Toshiba 2032) opens the door to the next generation of feature-rich Pocket PCs. Manufactured by Toshiba and marketed by Audiovox, the compact and user-friendly Thera 2032, delivers the comprehensive functionality of Microsoft Windows Powered Pocket PC 2002 software. In addition, the Thera 2032 boasts a TFT screen with a touch-screen interface, as well as an on-screen keyboard and handwriting recognition.

Audiovox Thera (PDA-Phone) or Toshiba SP-2032

1. Start - Program- Watcher - Admin
2. Activation Wizard - Next - Manual Activation - Next - Next
3. Enter ESN
4. Enter Activation Code (Default: 000000) Next
5. Enter MIN (10 Digits, without 0), re-enter verification MIN, Next
6. Enter SID Flexi 10496
7. initialization process Service: wait for 3 minute, message "not in service" that’s okay.
8. Restart Terminal
9. Watcher - Tools Option - choose Select System: Home Only, Save

Advance Menu, two number for manage easier:
1. Watcher
2. Ctrl-D
3. exit from Advanced Menu, enter password: ##debug
4. modem configuration, enter password: nozirevpst
5. programming Code, enter password: ##nozirevpst or
979797 or 000000

Specification:
- Modes CDMA 800 / CDMA 1900
- Weight : 7.00 oz (198 g)
- Dimensions : 128 x 77 x 20 mm
- Stub Antenna
- Battery Life Talk: 3.00 hours (180 minutes)
- Standby: 100 hours (4.2 days)10 hours in PDA mode (without wireless activity)
- Battery Type LiIon
- Display Type: LCD (Color TFT/TFD)
- Colors: 65,536 (16-bit)
- Size: 240 x 320 pixels
- Reflective TFT LCD
- Platform / OS Windows Mobile for Pocket PCs, Memory 32 MB (built-in, shared flash memory)
- Alarm : Yes
- Calculator : Yes
- Calendar : Yes
- E-Mail Client : Yes
- Expansion Card Card Type : MultiMediaCard (MMC) / Secure Digital (SD)
- Games : Solitaire included / other Pocket PC games can be added
- Headset Jack (2.5 mm) located on top
- High-Speed Data Technology: 1xRTT
- Infrared (IR) Yes
- Integrated PDA OS: Microsoft Pocket PC 2002
Intel Strong ARM 206-MHz processor / 32 MB SDRAM / 32 MB Flash ROM
- Multiple Numbers per Name : Yes
- PC Sync ActiveSync 3.5
- Side Keys voice memo key
- Speaker Phone : Yes
- Text Messaging 2-Way : Yes
- To-Do List : Yes
- Touch Screen : Yes
- USB : Yes
- Vibrate : Yes
- Voice Memo : Yes
- Wireless Internet Browser Software: Pocket Internet Explorer

Network security - Firewall setting

2007-05-17T20:56:00.000-07:00

You probably know that you need firewall security; in fact, you may even already have a firewall management program in place. But what exactly is firewall security, and what does firewall management entail?

The word firewall originally referred literally to a wall, which was constructed to halt the spread of a fire. In the world of computer firewall protection, a firewall refers to a network device which blocks certain kinds of network traffic, forming a barrier between a trusted and an untrusted network. It is analogous to a physical firewall in the sense that firewall security attempts to block the spread of computer attacks.

How Does Firewall Management Work?

A firewall management program can be configured one of two basic ways:

* A default-deny policy. The firewall administrator lists the allowed network services, and everything else is denied.
* A default-allow policy. The firewall administrator lists network services which are not allowed, and everything else is accepted.

A default-deny approach to firewall security is by far the more secure, but due to the difficulty in configuring and managing a network in that fashion, many networks instead use the default-allow approach. Let's assume for the moment that your firewall management program utilizes a default-deny policy, and you only have certain services enabled that you want people to be able to use from the Internet. For example, you have a web server which you want the general public to be able to access. What happens next depends on what kind of firewall security you have.

Below is a firewall security script, has been tested with Kerio Personal Firewall, may this rule can accepted to others firewall:

LSA Shell (lsass.exe) -> Ask - Permit - Ask - Ask
Windows NT Logon Application (winlogon.exe) -> Ask - Permit - Ask - Ask (log)
Userinit Logon Application (userinit.exe) -> Ask - Permit - Ask - Ask
Generic Host Process (svchost.exe) -> Ask - Permit - Ask - Ask (log)
Microsoft File & Printer Sharing -> Deny All (For LAN can be: Ask - Permit - Ask - Ask)
Any Other Application -> Deny - Ask - Deny - Ask (log & alert). invisible mode
Internet Browser Application -> ask - deny - deny - permit (log)
Kaspersky AntiVirus/ Kaspersky Internet Security -> ask - deny - deny - permit (log)
FTP Manager Application -> permit - permit - permit - permit (log & alert)
Yahoo Messenger -> deny - ask - deny - permit (log & alert)

Below is the rule script for Filter packet in Ferio Firewall or Tiny firewall and may can accepted to others firewall:

RULE 1
Description: ISP Domain Name Server Any App UDP
Protocol: UDP
Direction: Both
Local Port: Any
Local App.: Any
Remote Address Type: Single
Host address: IP number (Your ISP DNS server)
Port type: Single
Port number: 53
Action PERMIT

RULE 2
Description: Other DNS
Protocol: TCP and UDP
Direction: Both
Local Port: Any
Local App.: Any
Remote Address Type: Any
Port type: Single
Port number: 53
Action DENY

RULE 3
Description: Back Orifice Block (Logged)
Protocol: TCP and UDP
Direction: Incoming
Port type: List of Ports
Local App.: Any
List of Ports: 54320,54321,31337
Remote Address Type: Any
Port type: Any
Action DENY

RULE 4
Description: Netbus Block (Logged)
Protocol: TCP
Direction: Incoming
Port type: List of Ports
Local App.: Any
List of Ports: 12456,12345,12346,20034
Remote Address Type: Any
Port type: Any
Action DENY

RULE 5
Description: RPCSS (Logged)
Protocol: UDP
Direction: Incoming
Port type: Single port
Local App.: Any
Port number: 135
Remote Address Type: Any
Port type: Any
Action DENY

RULE 6
Description: Block Low Trojan Ports TCP UDP (Notify)
Protocol: TCP and UDP
Direction: Both
Port type: Port/range
Local App.: Any
First port number: 1
Last port number: 79
Remote Address Type: Any
Port type: Any
Action DENY

RULE 7
Description: Block High Trojan Ports TCP UDP (Notify)
Protocol: TCP and UDP
Direction: Both
Port type: Port/range
Local App.: Any
First port number: 5000
Last port number: 65535
Remote Address Type: Any
Port type: Any
Action DENY

RULE 8
Description: Block Outbound Unauthorized Apps TCP UDP
(Notify)
Protocol: TCP and UDP
Direction: Outgoing
Port type: Any
Local App.: Any
Remote Address Type: Any
Port type: Any
Action DENY
Nb: Kaspersky Antivirus 6 & Kaspersky Internet Security 6 usage, the remote port address choose Any)

RULE 9
Description: Block Inbound Unknown Apps TCP UDP
(Notify)
Protocol: TCP and UDP
Direction: Incoming
Port type: Any
Local App.: Any
Remote Address Type: Any
Port type: Any
Action DENY

RULE 10
Description: Block ICMP (Logged)
Protocol: ICMP
Direction: Both
ICMP Type: Echo Reply, Destination Unreachable, Source
Quench, Redirect,
Echo, Time Exceeded, Parameter Prob, Time Stamp, Time
StampReply, Info
Request, Info Reply, Address, Address Reply, Router
Advertisement, Router
Solicitation (ALL)
Remote Endpoint: Any
Action DENY

RULE 11
Description: In Block Ping and TraceRoute ICMP
(Notify)
Protocol: ICMP
Direction: Incoming
ICMP Type: Echo
Remote Endpoint: Any
Action DENY

RULE 12
Description: Out Block Ping and Trace Route ICMP
(Notify)
Protocol: ICMP
Direction: Outgoing
ICMP Type: Echo Reply, Destination Unreachable, Time
Exceeded
Remote Endpoint: Any
Action DENY

RULE 13
Description: Block Common Ports (Logged)
Protocol: TCP and UDP
Direction: Incoming
Port type: List of Ports
Local App.: Any
List of Ports:
113,79,21,80,443,8080,143,110,25,23,22,42,53,98
Remote Address Type: Any
Port type: Any
Action DENY

RULE 14
Description: Loopback
Protocol: TCP and UDP
Direction: Both
Local Port: Any
Local App.: Any
Remote Address Type: Single
Host address: 127.0.0.1
Port type: Any
Action PERMIT

RULE 15
Description: Block Inbound NetBIOS TCP UDP (Notify)
Protocol: TCP and UDP
Direction: Incoming
Port type: Port/Range
First Port: 137
Last Port: 139
Local App.: Any
Remote Address Type: Any
Port type: Any
Action DENY

RULE 16
Description: Block Outbound NetBIOS TCP UDP (Notify)
Protocol: TCP and UDP
Direction: Outgoing
Local Port: Any
Local App.: Any
Remote Address Type: Any
Port type: Port/Range
First Port: 137
Last Port: 139
Action DENY

RULE 17
Description: Bootpc (Logged)
Protocol: TCP and UDP
Direction: Incoming
Port type: Single port
Local App.: Any
Port number: 68
Remote Address Type: Any
Port type: Any
Action DENY

RULE 18
Description: Out Needed To Ping And TraceRoute Others
Protocol: ICMP
Direction: Outgoing
ICMP Type: Echo
Remote Endpoint: Any
Action PERMIT

RULE 19
Description: In Needed To Ping And TraceRoute Others
Protocol: ICMP
Direction: Incoming
ICMP Type: Echo Reply, Destination Unreachable, Time
Exceeded
Remote Endpoint: Any
Action PERMIT

RULE 20
Description: Internet Explorer-Web browsing (logged)
Protocol: TCP
Direction: Outgoing
Port type: Any
Local App.: Only selected below => iexplore.exe
Remote Address Type: Any
Port type: Any
List of ports: Any
Action PERMIT

RULE 21
Description: Outlook Express
Protocol: TCP
Direction: Outgoing
Port type: Any
Local App.: Only selected below => msimn.exe
Remote Address Type: Any
Port type: List of ports
List of ports: 25,110,119,143
Action PERMIT

RULE 22
Description: Yahoo Messenger
Protocol: TCP
Direction: Outgoing
Port Type: Any
Local App.: Only selected below => yahoomessenger.exe
Remote Address Type: Any
Port Type: List of ports
List of ports: 443,80,5050
Action PERMIT

RULE 23
Description: Yahoo Messenger
Protocol: UDP
Direction: Outgoing
Port Type: Any
Local App.: Only selected below => yahoomessenger.exe
Remote Address Type: Any
Port Type: single
List of ports: 3478
Action PERMIT

RULE 24
Description: Download Manager (logged)
Protocol: TCP
Direction: Outgoing
Port Type: Any
Local App.: Only selected below => (your download manager file)
Remote Address Type: Any
Port Type: List of ports
List of ports: 80,21
Action PERMIT

For filter packet setting on Local Area Network (LAN) can added with below rule script to allow NetBIOS access at specific port:

RULE 15a
Description: Trusted Inbound NetBIOS TCP UDP
Protocol: TCP and UDP
Direction: Incoming
Port type: Port/Range
First Port: 137
Last Port: 139
Local App.: Any
Remote Address Type: Trusted Address Group
Port type: Any
Action PERMIT

RULE 16b
Description: Trusted Outbound NetBIOS TCP UDP
Protocol: TCP and UDP
Direction: Outgoing
Local Port: Any
Local App.: Any
Remote Address Type: Trusted Address Group
Port type: Port/Range
First Port: 137
Last Port: 139
Action PERMIT

My Visitor

2007-05-17T07:22:00.000-07:00

This site started on Wednesday, May 2, 2007, This site is talking about the Computer Technology, networking, gadgets and others regarding to Technology information. (author: Jan Pieter Marbun)

This site is my experience as an IT worker at manufactured company. I dedicated this site to my friends, my staff and reader's who loved the Information Technology jobs.

Thanks to my visitor and my readers for stopped by this site, please do leave comment when you visit this site and i Appreciate for your review.

Below is my visitor and some of my comment about their site:

From MyBlogLog:
1.

chemstudioster

Member Since: 22nd Mar 2007

Tech_tube

Member Since: 27th Apr 2007

Der0nITE

Member Since: 27th Apr 2007

charleyhtb

Member Since: 3rd May 2007

sylvied

Member Since: 20th Mar 2007

baLooT

Member Since: 8th Feb 2007

imaginarydivabc

Member Since: 29th Nov 2006

kkama67

Member Since: 24th Feb 2007

shokthx

Member Since: 19th Mar 2007

10.

Rouvanne

Member Since: 13th Feb 2007

11.

sexyinred

Member Since: 18th Jan 2007

12.

wildheart4vr

Member Since: 3rd May 2007

13.

singaporecutegirl

Member Since: 21st Apr 2007

14.

wizcoder

Member Since: 25th Oct 2006

15.

RES

Member Since: 14th Apr 2007

16.

dmgparis

Member Since: 21st Mar 2007

17.

dunn

Member Since: 15th Mar 2007

18.

kyutbabe

Member Since: 24th Apr 2007

19.

echathost

Member Since: 15th Feb 2007

20.

security

Member Since: 13th Apr 2007

21.

Brunail

Member Since: 5th Sep 2006

22.

suntze

Member Since: 23rd Mar 2007

23.

fastfastlane

Member Since: 12th Apr 2007

24.

akijinn

Member Since: 5th Apr 2007

25.

mrjoe46

Member Since: 16th May 2007

26.

LJP

Member Since: 1st Apr 2007

I love their site, visit their site often. Need your response and comment to improved this site.

Testing Audio card Quality using RMAA

2007-05-13T08:19:00.000-07:00

Microsoft suggested to installed audio component at PC for standard facility, In the middle of year 1990

Now sound Card is included in the PC motherboard as responded to Microsoft suggestion. Many type and kind of sound card used on the PC motherboard at the moment, but sometimes PC consumer is not care about the quality of the sound.

Four criteria to determine quality of sound card as below:

1. Resolution
2. Sampling rate
3. Signal/noise ratio (SNR)
4. Channel quantity

The explanation of sound criteria:

1. Resolution

This is a level of original sound compression.
Resolution is higher, compression level make distantly spaced and the sound quality more high. Sound resolution about 16 bit, but some already 20 – 24 bit.

2. Sampling rate:

Conversion analog to digital by second value. Sampling standard value is 44.1Khz, almost sound card work with 48Khz and at the moment thru 192Khz.

3. Signal to Noise Ratio (SNR)

Major sound and minor sound differential result by sound card. This parameter is important to build the sound clearly. The standard of SNR is 80db. High end chip audio, the value thru 100db

4. Channel quantity.

In the past the channel of sound is only two, left speaker and right speaker. Now, most sound chip produced 6 channel or 5.1 (left and right speaker, in front and behind plus 2 center speaker for bass and sound vocal)
The latest system is 7.1, this is 6(5.1) channel plus 2 speaker in the center.

To check our sound card on pc, physically we can see.
“Open the pc chasing, look at the sound card. The position of sound card is different for each motherboard, belong to the brand, check the manual book for sure and follow the above that informed sound card specification".

Quality tested

It is difficult to check quality of PC sound card, caused the result almost subjective disposed.

We can used RightMark Audio analyzer (RMAA) (download), to test with scientific method.

RMAA suite is designed for testing quality of analog and digital paths of any audio devices, be it a sound card, an MP3 player, a consumer CD/DVD player or an acoustic set. The results are obtained by playing and recording test signals passed through the tested audio path by means of frequency analysis algorithms. A more common mark is also provided for those unfamiliar with measured technical parameters.

How to used the program ? see my tested.

First, you must have supporting component (audio cable, to connect in-audio port and out-audio port)

The steps run is:

1. Connect in-audio port (red color) with out-audio port (green color) with the cable.

2. Run program RMAA 5.5, for easy choose wizard, this is simple running tested.

3. Choose test parameter, included playback/recording source, resolution and sampling rate.

4. Follow the step, the most important is set volume output and input to standardized supposed. Pre requirement input sound is about 1db.

5. To set input and output as pre requirement, set the volume at volume panel. Most The important set is “Wave out” and “Master” for playback and “Line in” for recording.

6. When the box indicator light is green, the test be run. Click start button, and wait the process.

7. Once the process finish, you can save the result with HTML format. In the result will shown the sound quality with any variable, included the explanation. Done.

Resolution canal type SNR (db) manufactured:

Analog Devices AD1885 16 bit 2 90
Analog Devices AD1985 18/20 bit 6 80-90
C-Media CMI9738 18 bit 4 72-82
C-Media CM19761 16/20 bit 6 90-95
Realtek ALC201A 18 bit 2 90
Realtek ALC650 18/20 bit 6 90
Realtek ALC655 16 bit 6 90
Realtek ALC658 18/20 bit 6 100
Realtek ALC850 16 bit 8 100
Realtek ALC880 24 bit 8 103
Via Envy24 24 bit 8 N/A

Sound dictionary:

1.Frequency response: is the measure of any system's response at the output to a signal of varying frequency (but constant amplitude) at its input. It is usually referred to in connection with electronic amplifiers, loudspeakers and similar systems. The frequency response is typically characterized by the magnitude of the system's response, measured in dB, and the phase, measured in radians, versus frequency

2.Noise Level: is the noise power of the longitudinal sound wave relative to a point of reference.
Note: Noise level is usually measured in dB for relative power or picowatts for absolute power

3.Dynamic Range: The ratio between the loudest and softest sounds

4.THD (Total Harmonic Distortion): The total harmonic distortion, or THD, of a signal is a measurement of the harmonic distortion present and is defined as the ratio of the sum of the powers of all harmonic components to the power of the fundamental.

5.IMD+Noise: Intermodulation Distorsion (IMD): Distortion in sound output as a failed in the sound card. Lowest is better

6.Stereo Crosstalk: physical defect happened when the sound should be in the right speaker, sound in the left speaker

ROUTER Configuration (part: III end)

2007-05-12T01:30:00.000-07:00

Cisco Basic Router

The basic component of cisco is :

1. Processor

2. Memory :

* Read only Memory (ROM) : This is like a rom at the pc, got standard program inside the rom and will run on booting process.

* Flash memory : Keeping Operation system of the Cisco called IOS
* Random access memory (RAM) : Using for buffering, storage and others.
* Non volatile RAM (NVRAM) : Keeping configuration from IOS when Cisco boot.

3. Interface :
The interface of cisco router is :

interface using format name dan number on IOS, The number started from zero (0). But the assigning the number belong to the type of the router. For the Cisco Router the interface modul is fixed:

For the Cisco Router 7500 series with versatile Interface processor, where is the modul got ethernet slot, the assigning system more specific and be carefully. Ethernet4/0/1 means port number 2 at 1st adapter in slot 4.

Console Console

Cisco Router have console port at behind the hadware. This port console be function for direct communication access into the Cisco router. The standard console port using serial asynchronous EIA/TIA-232, the others name is RS-232.

For the console port connector belong to the router type. For the Low end to middle router, using RJ45 connector, for the other Routers class using DB25 connector.

Auxiliary port

Cisco router have auxiliary port. port auxiliary using standard serial connection same with console port using serial asynchronous EIA/TIA-232 direct connection to Cisco router. Port auxiliary also for alternative access to the cisco router via modem, Administrator can used this serial when the network path from the router got problem.

Configuration File
Two type IOS configuration:
1. Existing configuration from the RAM
2. Startup configuration under NVRAM

We can change the configuration even the IOS active or running. The changes effected directly, but don't forget must save to NVRAM as startup once we changes the configure under running system.

Configure Cisco Router under PC

To configure Cisco Router from PC, need software communication called Emulation software terminal. This software function is sended the command into Cisco router. This software is has been installed included your Windows system.

Next step you have to setup the emulation software setting.

9600 baud
8 data bits
No parity
1 stop bit
No flow control

You can also connect to the router using telnet, but you must set the router IP first.

Router command mode:
This is some command of Cisco.

Started to setup new cisco:

To start configuration of Cisco, we must go under configure command.
The step to configure using the emulation software connected with console port of Cisco router is:

When the router boot up, Generally will be shown and asked you to confirm. Answer with : No

Would you like to enter the initial configuration dialog [yes] : no
.
.
router>

Router prompt default is router> called user EXEC mode. Mode router>

router> We can changes display like dos command.

Router>
1600>
1700>

Under User EXEC mode can see all the command with type ?

router> ?

To let you know the syntax type:

Router> ?
Router> show ?
Router>show conf?

Access the mode must know the to enter the configure command:

1700> enable
password: ******
router #

For configure :

Router# configure terminal
Router (config) #

Once you changes the configure, save the configuration into NVRAM:

Router# copy running-config startup-config
Building configuration . . .

Save result:

[OK]
router#

The next step for configuration is:
• Global parameter configuration
• Security Configuration
• Fast ethernet interface configuration
• Serial interface configuration
• Dynamic routing configuration
• Command-line access to the router

Global parameter configuration:

To start router configuration, we must set configure with – enable :

Router> enable
Router #

Step to configure global parameter router :

Security configuration setting,

INTERFACE FAST ETHERNET configuration

See the router prompt . . . has been changes with above

Serial INTERFACE setting

Dynamic routing parameter setting

COMMAND-LINE access configuration

To save all configuration :

1700# writ3e memory

To check configuration status:

stc# show interface ser0
Serial0 is up, line protocol is up
Hardware is PowerQUICC Serial
Description: leased line to headquarters
Interface is unnumbered. Using address of FastEthernet0 (192.168.20.1)
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255
Encapsulation PPP, loopback not set, keepalive set (10 sec)
LCP Closed
.
.
.

make sure serial and protocol line is up.

We do the same setting in LTX side. The different is only on the router IP, we assign LTX IP : 192.168.10.1
Assign the ip for each modem before Router check with your provider.

LTX access internet must route to STC network, because direct access into Internet from STC network.

This is only basic to connect between different network, for security firewall must set into the router.

ROUTER Configuration (part: II)

2007-05-09T10:03:00.000-07:00

Static and Dynamic Routers

For routing between routers to work efficiently in an internetwork, routers must have knowledge of other network IDs or be configured with a default route. On large internetwork, the routing tables must be maintained so that the traffic always travels along optimal paths. How the routing tables are maintained defines the distinction between static and dynamic routing.

Static Routing

A router with manually configured routing tables is known as a static router. A network administrator, with knowledge of the internetwork topology, manually builds and updates the routing table, programming all routes in the routing table. Static routers can work well for small internetworks but do not scale well to large or dynamically changing internetworks due to their manual administration.

Static routers are not fault tolerant. The lifetime of a manually configured static route is infinite and, therefore, static routers do not sense and recover from downed routers or downed links.

A good example of a static router is a multihomed computer running Windows 2000 (a computer with multiple network interface cards). Creating a static IP router with Windows 2000 is as simple as installing multiple network interface cards, configuring TCP/IP, and enabling IP routing.

Dynamic Routing

A router with dynamically configured routing tables is known as a dynamic router. Dynamic routing consists of routing tables that are built and maintained automatically through an ongoing communication between routers. This communication is facilitated by a routing protocol, a series of periodic or on-demand messages containing routing information that is exchanged between routers. Except for their initial configuration, dynamic routers require little ongoing maintenance, and therefore can scale to larger internetworks.

Dynamic routing is fault tolerant. Dynamic routes learned from other routers have a finite lifetime. If a router or link goes down, the routers sense the change in the internetwork topology through the expiration of the lifetime of the learned route in the routing table. This change can then be propagated to other routers so that all the routers on the internetwork become aware of the new internetwork topology.

The ability to scale and recover from internetwork faults makes dynamic routing the better choice for medium, large, and very large internetworks.

A good example of a dynamic router is a computer with Windows 2000 Server and the Routing and Remote Access Service running the Routing Information Protocol (RIP) and Open Shortest Path First (OSPF) routing protocols for IP and RIP for IPX.

TCP/IP Interior Routing Protocols (RIP, OSPF, GGP, HELLO, IGRP, EIGRP)

Modern TCP/IP routing architecture groups routers into autonomous systems (ASes) that are independently controlled by different organizations and companies. The routing protocols used to facilitate the exchange of routing information between routers within an AS are called interior routing protocols (or historically, interior gateway protocols). Since most network administrators are responsible for routers within a particular organization, these are the routing protocols you are most likely to deal with unless you become a major Internet big-shot.

One of the benefits of autonomous systems architecture is that the details of what happens within an AS are hidden from the rest of the internetwork. This means that there is no need for universal agreement on a single "language" for an internet as is the case for exterior routing protocols. As a network administrator for an AS, you are free to choose whatever interior routing protocol best suits your networks. The result of this is that there is no agreement on the use of a single TCP/IP interior routing protocol. There are several common ones in use today, though as is usually the case, some are more popular than others.

TCP/IP Routing Information Protocol (RIP, RIP-2 and RIPng):

The most popular of the TCP/IP interior routing protocols is the Routing Information Protocol (RIP). The simplicity of the name matches the simplicity of the protocol—RIP is one of the easiest to configure and least resource-demanding of all the routing protocols. Its popularity is due both to this simplicity and its long history. In fact, support for RIP has been built into operating systems for as long as TCP/IP itself has existed.

In this section I describe the characteristics and operation of the TCP/IP Routing Information Protocol (RIP). There are three versions of RIP: RIP versions 1 and 2 for IP version 4 and RIPng (next generation) for IP version 6. The basic operation of the protocol is mostly the same for all three versions, but there are also some notable differences between them, especially in terms of the format of messages sent.

For this reason, I have divided my description of RIP into two subsections. In the first, I describe the fundamental attributes of RIP and its operation in general terms for all three versions. In the second, I take a closer look at each version, showing the message format used for each and discussing version-specific features as well.

Open Shortest Path First (OSPF):

Interior routing protocols using a distance-vector routing algorithm, such as the Routing Information Protocol (RIP), have a long history and work well in a small group of routers. However, they also have some serious limitations in both scalability and performance that makes them poorly-suited to larger autonomous systems or those with specific performance issues. Many organizations that start out using RIP quickly found that its restrictions and issues made it less than ideal.

To solve this problem, a new routing protocol was developed in the late 1980s that uses the more capable (and more complex) link-state or shortest path first routing algorithm. This protocol is called Open Shortest Path First (OSPF). It fixes many of the issues with RIP and allows routes to be selected dynamically based on the current state of the network, not just a static picture of how routers are connected. It also includes numerous advanced features, including support for a hierarchical topology and automatic load sharing amongst routes. On the downside, it is a complicated protocol, which means it is often not used unless it is really needed. This makes it the complement of RIP and is the reason they both have a place in the spectrum of TCP/IP routing protocols.

Gateway-to-Gateway Protocol (GGP):

GGP is a MILNET protocol specifying how core routers (gateways) should exchange reachability and routing information. GGP uses a distributed shortest-path algorithm. The Gateway-to-Gateway Protocol is obsolete.

HELLO:

HELLO protocol is an early version of routing protocol for TCP/IP network using a distance-vector algorithm. HELLO does not use hop count as a metric. Instead, it attempts to select the best route by assessing network delays and choosing the path with the shortest delay. HELLO protocols also contain routing information in the form of a set of destinations that the sending router is able to reach and a metric for each. The HELLO protocol was developed in the early 1980s and documented in RFC 891. The name “HELLO” is capitalized and it should not be confused with the hello process used by a few protocols.

IGRP: Interior Gateway Routing Protocol:

The Interior Gateway Routing Protocol (IGRP) is a routing protocol to provide routing within an autonomous system (AS). In the mid-1980s, the most popular interior routing protocol was the Routing Information Protocol (RIP). Although RIP was quite useful for routing within small- to moderate-sized, relatively homogeneous internetworks, its limits were being pushed by network growth. The popularity of Cisco routers and the robustness of IGRP encouraged many organizations with large internetworks to replace RIP with IGRP.

EIGRP: Enhanced Interior Gateway Routing Protocol:

Enhanced Interior Gateway Routing Protocol (EIGRP) is an enhanced version of IGRP. IGRP is Cisco's Interior Gateway Routing Protocol used in TCP/IP and OSI internets. It is regarded as an interior gateway protocol (IGP) but has also been used extensively as an exterior gateway protocol for inter-domain routing.

ROUTER Concept:

Before we know more about how to configure Cisco Router, we have to know the basic rule of routing concept, how to assigned IP number, subnetting, netmasking and others related to the routing concept.

Example:

Host A : 192.168.1.9 (C network class subnet : 192.168.1.xxx)
Host B : 192.168.1.10 (C network class subnet : 192.168.1.xxx)
Host C : 192.168.5.8 (C network class subnet : 192.168.5.xxx)
Host D : 192.168.6.5 (C network class subnet : 192.168.6.xxx)

A Host able to communicate with B Host (see the subnet)

A Host to C Host or A Host to D Host cannot communicate (see the subnet)

B Host to C Host or B Host to D Host cannot communicate (see the subnet)

The question:

How to connect between A host and C Host ?

Answer:

We can connect between different subnet Host with ROUTER.

How to run new Router to connect between different host ? (see my case)

Case :
We have two factory with different area and of course got network each factory. My Boss need to connect between factory, let's say Factory Stc and factory Ltx. Stc Factory is a data central and as a gateway for internet connection, because no internet connection around location of Ltx factory. (see the scheme picture)

What we have to do once get the router...?

to be continued....!

ROUTER Configuration (part: I)

2007-05-06T00:37:00.000-07:00

The first question is, what’s Router ?

Router is A device that forwards data packets along networks. A router is connected to at least two networks, commonly two LANs or WANs or a LAN and its ISP’s network. Routers are located at gateways, the places where two or more networks connect.

Routers use headers and forwarding tables to determine the best path for forwarding the packets, and they use protocols such as ICMP to communicate with each other and configure the best route between any two hosts.

So how to connect between above network?
This posting will explain the mechanism, router basic command and Interior Routing Protocol that we called IRP.

I wrote this based on my tested and implemented at my office using Cisco Router 805 Series since 2002 until now and so far is working well.
TCP/IP Concept: what is tcp/ip ?

TCP/IP (Transmission Control Protocol/Internet Protocol) is the basic communication language or protocol of the Internet. It canbe used as a communications protocol also in a private network (either an intranet or an extranet). When you are set up with direct access to the Internet, your computer is provided with a copy of the TCP/IP program just as every other computer that you may send messages to or get information from also has a copy of TCP/IP.

TCP/IP is a two-layer program. The higher layer, Transmission Control Protocol, manages the assembling of a message or file into smaller packets that are transmitted over the Internet and received by a TCP layer that reassembles the packets into the original message. The lower layer, Internet Protocol, handles the address part of each packet so that it gets to the right destination.
Each gateway computer on the network checks this address to see where to forward the message. Even though some packets from the same message are routed differently than others, they'll be reassembled at the destination.

TCP/IP uses the client/server model of communication in which a computer user requests and is provided a service (such as sending a Web page) by another computer (a server) in the network. TCP/IP communication is primarily point-to-point, meaning each communication is from one point (or host computer) in the network to another point or host computer. TCP/IP and the higher-level applications that use it are collectively said to be "stateless" because each client request is considered a new request unrelated to any previous one (unlike ordinary phone conversations that require a dedicated connection for the call duration). Being stateless frees network paths so that everyone can use them continuously. (Note that the TCP layer itself is not stateless as far as any one message is concerned. Its connection remains in place until all packets in a message have been received.)

Many Internet users are familiar with the even higher layer application protocols that use TCP/IP to get to the Internet. These include the World Wide Web's Hypertext Transfer Protocol (HTTP), the File Transfer Protocol (FTP), Telnet (Telnet) which lets you logon to remote computers, and the Simple Mail Transfer Protocol (SMTP). These and other protocols are often packaged together with TCP/IP as a "suite."

Personal computer users with an analog phone modem connection to the Internet usually get to the Internet through the Serial Line Internet Protocol (SLIP) or the Point-to-Point Protocol (PPP). These protocols encapsulate the IP packets so that they can be sent over the dial-up phone connection to an access provider's modem.

Protocols related to TCP/IP include the User Datagram Protocol (UDP), which is used instead of TCP for special purposes. Other protocols are used by network host computers for exchanging router information. These include the Internet Control Message Protocol (ICMP), the Interior Gateway Protocol (IGP), the Exterior Gateway Protocol (EGP), and the Border Gateway Protocol (BGP).

Routing: what Is Routing?

Routing is a process of moving a packet of data from source to destination. Routing is usually performed by a dedicated device called a router. Routing is a key feature of the Internet because it enables messages to pass from one computer to another and eventually reach the target machine. Each intermediary computer performs routing by passing along the message to the next computer. Part of this process involves analyzing a routing table to determine the best path.

Routing is often confused with bridging, which performs a similar function. The principal difference between the two is that bridging occurs at a lower level and is therefore more of a hardware function whereas routing occurs at a higher level where the software component is more important. And because routing occurs at a higher level, it can perform more complex analysis to determine the optimal path for the packet. Want to know more about routing.

to be continued.....

Cisco router 805 specification

2007-05-06T00:22:00.000-07:00

We used this router since 2002 until now.

Cisco 805 Series Serial Router

The Cisco 805 Serial Router offers enhanced network security and reliability through the power of Cisco IOS^® Software technology tailored for small offices.

Figure 1

The Cisco 805 Serial Router gives small offices enhanced security, superior reliability, and safe investment with low cost of ownership.

The Cisco 805 Serial Router extends the power of Cisco IOS Software technology to small offices. Cisco IOS Software offers enhanced security, reliability, and safe investment, combined with low cost of ownership, to enable customers to benefit from increased productivity, simplified communication, and reduced costs (Figure 1). The Cisco 805 Serial Router enables customers to benefit from value-added services such as managed network services, virtual private networks (VPNs), point-of-sale (POS) applications, and secure Internet access.

Benefits of Using Cisco 805 Serial Router

Taking advantage of its expertise and leadership in Internet solutions, Cisco Systems offers solutions for small-office routing solutions that provide secure and reliable access to the Internet or corporate networks.

Enhanced Security

The Cisco 805 Serial Router has enhanced security features such as an integrated stateful firewall and IP Security (IPSec) encryption to enable VPNs. These features allow small offices and telecommuters to conduct business over the Internet while protecting valuable resources.

Superior Reliability

Because the Cisco 805 Serial Router is based on the same proven Cisco IOS Software technology used throughout the Internet, small offices can depend on it just as enterprise customers take advantage of Cisco reliability. In addition, a Cisco 805 Serial Router provides Internet access to multiple users without being tied to a server or dedicated PC. This means if a server on the LAN crashes, other users remain connected to the Internet.

Safe Investment and Low Cost of Ownership

The Cisco 805 Serial Router offers memory options that can be upgraded in the field so the latest networking features can be added when necessary. With an advanced processor and memory architecture, they can support future applications as customer networking needs expand. Table 1 provides a summary of Cisco 805 Serial Router hardware features.

With Cisco IOS Software, customers using the Cisco 805 Serial Router can reduce operational costs for training, management, installation, and deployment.

Table 1 : Summary of Cisco 805 Serial Router Hardware features.

Feature	Details
LAN	One 10BASE-T (RJ-45)
WAN	Serial port compatible with EIA/TIA-232, EIA/TIA-449, EIA/TIA-530, EIA/TIA-530A, X.21, and V.35 standards (Both data terminal equipment [DTE] and data communications equipment [DCE])
Console port	RJ-45
LAN port	One Ethernet

Product Features

Security

To take advantage of the unprecedented opportunities offered by communications and commerce over the Internet, companies need to secure private information. Cisco Secure Integrated Software provides many technologies to build a custom security solution. The elements of security services include perimeter security, identity, monitoring, privacy, firewalls, IPSec encryption, and VPNs.

Standard Security

Perimeter security refers to the control of traffic entry and exit between network boundaries, such as between private networks, intranets, extranets, or the Internet. Cisco IOS Software perimeter security technologies provide a highly flexible, superior solution with features such as:

•Standard and extended access control lists (ACLs)

•Lock and key (dynamic ACLs)

•Router and route authentication, authorization, and accounting (AAA) protocols such as Password Authentication Protocol (PAP) or Challenge Handshake Authentication Protocol (CHAP), and MS-CHAP

•Network Address Translation (NAT) (including multi-NAT)

•Token card authentication with Cisco Secure authentication

NAT eliminates the need to re-address all hosts with existing private network addresses and hides internal addresses from public view. For businesses that want to allow selected access to the network, NAT can be configured to allow only certain types of data requests such as Web browsing, e-mail, or file transfers.

Enhanced Security

•Dynamic firewall—Companies increasingly rely on internal networks and servers to access company data. To use the Internet as a key business tool, companies must connect their internal networks to the Internet, while keeping sensitive internal data secure. Company data can be protected against unauthorized access with stateful firewalls. The integrated Cisco IOS Firewall Feature Set is a stateful firewall that provides:

–Stateful (dynamic) ACLs (application or context based)

–Java blocking

–Denial-of-service attack detection and prevention

–Real-time alerts and audit trails

Dynamic firewalls provide these vital enhanced security features. The term firewall is used by many vendors, but not uniformly referred to as stateful firewalls. Firewalls that are not dynamic do not provide these enhanced security features.

Encryption and Tunneling

The Cisco 805 Serial Router provides IPSec encryption technology to enable small offices and telecommuters to deploy VPNs. IPSec encryption provides privacy, integrity, and authenticity for transmission of sensitive information over the Internet. The unique end-to-end Cisco offering allows customers to implement IPSec encryption transparently into the network without affecting individual PCs. The Cisco 805 Serial Router with IPSec encryption allows significant cost savings by using the Internet to create secure connections between small offices and teleworkers. As a component of the Cisco VPN solution, the Cisco 805 Serial Router supports:

•IPSec tunneling with 128- or 56-bit Data Encryption Standard (DES or Triple DES [3DES])

•Layer 2 Tunneling Protocol (L2TP)

•Generic routing encapsulation (GRE)

Manageability

The Cisco 805 Serial Router supports management by a wide range of platforms and applications. Cisco ConfigMaker (Microsoft) and CiscoView (UNIX) applications provide superior capabilities for configuration and security management, as well as performance and fault monitoring. The Cisco 805 Serial Router supports centralized administration and management using Simple Network Management Protocol (SNMP), Telnet, or local management through the router console port.

Safe Investment

Small offices with limited time, money, and staff need to know their technology investments are safe. Field-expandable DRAM and Flash memory allow small offices to take advantage of new Cisco IOS Software feature enhancements. And because the Cisco 805 Serial Router incorporates an advanced processor and memory architecture, it can support future applications as customer networking needs expand.

Companies using the Cisco 805 Serial Router can take advantage of Cisco industry-leading support options that help to ensure the router stays up and running. These support services include:

•Cisco IOS Software updates in features such as protocol, security, and bandwidth

•Full access to Cisco.com for technical assistance and product information

•Twenty-four-hour access to the industry's largest dedicated technical support staff, with the first 90 days included at no charge

Installation and Configuration Tools

The Cisco 805 Serial Router also supports configuration with the Cisco ConfigMaker application. Cisco ConfigMaker is a software tool designed to configure a small network of Cisco routers, switches, hubs, and other network devices from a single PC using Windows 95, 98, 2000, or NT 4.0. It is designed for resellers and network administrators of small and medium-sized businesses that are proficient in LAN and WAN fundamentals and basic network design.

For additional setup ease, the Cisco 805 Serial Router has color-coded ports and cables to help users make proper connections. Quick Reference Guide documentation provides easy-to-follow installation instructions. Key features and benefits of the Cisco 805 Serial Router are defined in Table 2, and Table 3 lists Cisco 805 Serial Router hardware specifications.

Table 2 Cisco 805 Serial Router Key Features and Benefits
Feature	Benefit
Standard Security
PAP, CHAP, MS-CHAP, and ACLs	•Protects network from unauthorized access
Route and router authentication	•Accepts routing table updates from only known routers, ensuring no corrupt information from unknown sources is received
Enhanced Security
Cisco IOS Firewall feature set	•Offers internal users secure, per-application dynamic ACLs for all traffic across perimeters •Defends and protects router resources against denial-of-service attacks •Checks packet headers and drops suspicious packets •Protects against unidentified, malicious Java applets •Details transactions for reporting on a per-application, per-feature basis
IPSec encryption (DES and 3DES)	•Ensures data integrity and authenticity of origin by using standards-based encryption •Provides security for all users on the LAN without configuring individual PCs
Superior Reliability
Cisco IOS Software technology	•Proven technology that is used throughout the backbone of the Internet
Standalone router	•Provides Internet access to multiple users without being tied to a server or dedicated PC; if one user on the LAN crashes, other users can still access the Internet
Management
Cisco Configmaker, SNMP, Service Assurance (SA) Agent, TACAS+	•Graphical user interface (GUI)-based windows configuration tools for novice users •Remote management and monitoring by way of SNMP or Telnet and local management through console port
Safe Investment
Field-expandable memory	•Allows customers to add features as networking needs expand
Advanced processor and memory architecture	•Ensures the platform can support processor-intensive applications
World-class support	•Helps customers keep their Cisco 805 serial routers running all the time
Low Cost of Ownership
Lower operational costs	•Allows customers to use existing knowledge of Cisco IOS Software for installation and manageability
Bandwidth Optimization
Quality of service (QoS) and Weighted Fair Queuing	•Ensures consistent response times for multiple applications by allocating bandwidth intelligently •Gives the most important applications priority use of the WAN line
Choice of encapsulation (Point-to-Point Protocol [PPP], High-Level Data Link Control [HDLC], Frame Relay)	•Ensures compatibility with existing network
"Snapshot" routing for IP and Internetwork Packet Exchange (IPX)	•Allows efficient use of available bandwidth
X.25 packet data	•Permits data transfer over X.25 networks
Simplified Setup and Installation
NAT	•Lets businesses conserve valuable IP addresses •Reduces time and costs by reducing IP address management
Cisco IOS Software Easy IP	•Enables true mobility-client IP addresses are transparently configured via the Cisco IOS Dynamic Host Control Protocol (DHCP) server each time a client powers up
Color-coded ports and cables and Quick Start Reference Guide	•Helps users make proper connections •Provides easy-to-follow installation instructions

Table 3 Cisco 805 Serial Router Hardware Specification
Feature	Description
10BASE-T Ethernet port	Provides connection to a 10BASE-T (10 Mbps) Ethernet network, compatible with a 10/100-Mbps device
Serial port	Provides connection to EIA/TIA-232, EIA/TIA-449, EIA/TIA-530, EIA/TIA-530A, X.21, and V.35 DTE or DCE
RJ-45 console port	Provides connection to terminal or PC for software configuration and for router troubleshooting
Flash memory	Router provides 4 MB of Flash memory
DRAM	Router provides 8 MB of DRAM¹
Ease of installation	Color-coded ports and cables reduce the chance of error
Cisco IOS Software	Router supports a subset of Cisco IOS Software
Cable lock	Provides a way to physically secure router
Locking power connector	Locks power connector in place
Wall-mount feature	Brackets on router bottom provide a way to mount router on wall or vertical surface

Cisco IOS Software Feature Sets

Five Cisco IOS Software feature sets are available on the Cisco 805 Serial Router:

•IP

•IP/Plus

•IP/FW

•IP/VPN

•IP/VPN/IPX/Plus

Technical Specification


Description	Design Specification
Physical Dimensions
Dimensions (H x W x D)	2.0 x 9.7 x 8.3 in. (5.1 x 24.6 x 21.1 cm)
Weight (does not include desktop power supply)	1.5 lb (0.66 kg)
Environmental Operating Ranges
Nonoperating temperature	-4 to 149°F (-20 to 65°C)
Nonoperating humidity	5 to 95%, relative humidity
Nonoperating altitude	0 to 15,000 ft (4570 m)
Operating temperature	32 to 104°F (0 to 40°C)
Operating humidity	10 to 85%, relative humidity
Operating altitude	0 to 10,000 ft (3000m)
Power
AC input voltage	100 to 240 VAC
Frequency	50 to 60 Hz
Power consumption	20W

Regulatory Approvals


Safety Standards	EMI Standards	PTT Standards
UL 1950	CFR 47, part 15, class B	CTR2
CSA 22.2 No. 950	ICES, Issue 2, class B	TC 130
TUV-GS to EN 60950:1992 with Amendments A1 through A4	VCCI class 2	(CE168_X_)
IEC 60950 with Amendments A1 through A4 and all country deviations	AZ/NRZ 3548 class B	JATE
TS-001:1997	EN 55022, IEC 1000-3-3
IEC 1000-4-2 level 4
AS/NZS 3260 with Amendments A1 through A4	IEC 1000-4-3 level 3
IEC 1000-4-4 level 3
EN 300 047	IEC 1000-4-5 level 3
EN 41003
IEEE 802.3

How to remove content advisory password

2007-05-03T06:36:00.000-07:00

If your computer got password to surf the internet, you can try this to removed the content advisory password on your browser.

1. Click on Start and choose Run.

2. Type in RegEdit and select OK.

3. Now click on the little plus sign to the left of H_KEY_LOCAL_MACHINE.

4. Continue to drill down, always clicking on the plus sign at the left of the named key, through Software, Microsoft, Windows, Current Version and Policies.

5. Now click on the Ratings folder.

6. In the right pane of the RegEdit window, you'll see an icon called Key. Click on it and press Delete.

7. Next, choose Registry and then Exit to exit RegEdit. You've just deleted your original Content Advisory password.

8. Restart the computer and run Internet Explorer again.

9. Choose View and then Internet Options (or Options for version 3.x). For IE 5 or greater, Click on Tools, Internet Options.

10. Click on the Content tab and click on Disable. When asked for a password, don't enter anything; just click on OK. This will disable Content Advisor because there's no longer a password.

How to fix Problems with Content Advisor Missing Information
In most cases, this problem occurs when the Ratings.pol file is damaged, follow the instructions below to fix this issue:

1. Quit Internet Explorer

2. Open My Computer, click on Tools, Folder Options

3. Click on the View tab and make sure "Show hidden files and folders" is selected, you may also want to uncheck the box next to "Hide extensions for known file types" and click Ok

4. Double click on Drive C in My Computer

5. Double click on the Windows folder and then double click on the System folder

6. Search for the file RATINGS.POL and right click on it and choose Rename. Rename it to RATINGS.OLD

7. Close out of the open Windows and then reopen Internet Explorer

8. Click on Tools, Internet Options

9. Click on the Content tab, then click on Settings

10 Type in the Supervisor password if necessary and click Ok

11. Select the Ratings options you would like and click Ok and close out of Internet Explorer

12. When you reopen Internet Explorer, everything should work.

SMTP Investigation for Telkom adsl connection

2007-05-02T05:27:00.000-07:00

Investigate SMTP Connection for TELKOM ADSL :

Below is a FAQ to investigate SMTP Relay, smtp.telkom.net. Follow this step to do smtp investigation:

1. Run test nslookup to the smtp telkom server :

IP not found from smtp.telkom.net?, check your DNS number, don’t know your DNS number ? You can asked what’s the DNS number for your telkom connection to astinet customer service (147).

2. Run ping to smtp server :

When your ping results is RTO (Request Time Out), that’s means your computer/network is unconnected with telkom server. You have to checked your adsl connection or adsl modem indicator. ADSL indicator lamps is blink that’s mean no adsl signal to your modem or cannot login.

3. Tracert into smtp server :

Tracert result display is indicated server found.

4. Test send email via telnet :

Sending email via telnet, used for tested into smtp telkom.net server. Do this test if sending mail via Outlook express failed.

Above picture is a Linux testing result, for the process step you can do via cmd (command prompt) windows, but the words that you type is disappear.

If you see the above picture result, that’s means sending email via telnet is successful, but send mail using Outlook Express almost failed, Had to checked your Outlook express software.

If all step had been done, but cannot send mail, check from your server side :

1. Are your server using Firewall ?
2. Check your ADSL configuration, do not block smtp (25 port)
3. Do you have anothers application problem with your server ?, example : wingate ?

Note for wingate had special configuration for SMTP mail server, check your wingate configuration.

Technorati Cosmos: other blogs commenting on this post