Just more ramblings of another IT Guy

Category Archives: Security

Outbound traffic on UDP port 3544

Posted on 22/02/2015 by Googs

While reviewing  firewall logs I observed unexpected outbound communication attempts on UDP 3544 from a newly deployed Windows 7 installation.   “…..dstip=“157.56.144.215” proto=“17” length=“89” tos=“0x00” prec=“0x00” ttl=“127” srcport=“64379” dstport=“3544“…..”   After quick a quick Google search it became apparent that … Continue reading →

Posted in Security, Tips+Tricks | Leave a comment

Need a cheap ( or free) SSL certificate for a non-production site?

Posted on 30/04/2013 by Googs

Building a demo website or deploying a new application and need to secure communication via SSL? For example, when installing OwnCloud you may want to ensure that your personal files are being sent and received securely no mater where you are … Continue reading →

Posted in Security, Server, Tips+Tricks | Tagged , , | 1 Comment

Check the certificate configuration of SSL webserver

Posted on 24/04/2013 by Googs

Qualys have provided a very useful tool for checking that the SSL side of your website is correctly configured. The SSL Server Test can be found here. The tool is available free of charge and will carry out a real-time … Continue reading →

Posted in Security, Server | Tagged | Leave a comment

Commands to edit iptables

Posted on 05/01/2013 by Googs

  To view the current rules and also view the rule ID use the following: iptables -L -n –line-numbers                      or iptables -nL -v –line-numbers   To delete a rule use: iptables -D INPUT X  (where x is the ID … Continue reading →

Posted in Handy Linux Commands, Security, Tips+Tricks | Leave a comment

CLI commands to enable encryption between FortiGate and FortiAnalyzer

Posted on 10/07/2012 by Googs

Use the following commands to enable encryption between the FortiGate unit and the FortiAnalyzer unit: On the FortiGate unit: config log fortianalyzer setting set encrypt enable set psksecret <presharedkey_str> set localid <devname_str> end On the FortiAnalyzer unit: config log device edit … Continue reading →

Posted in FortiAnalyzer, Fortigate, Security, Tips+Tricks | Leave a comment

Microsoft Update breaks Fortigate SSL VPN portal

Posted on 05/02/2012 by Googs

It seems that a a recent update provided by Microsoft to fix vulnerabilities in  has broken fuctionality of the SSL VPN on Fortigate devices. If you see the following error messages when browsing to the login page you may be … Continue reading →

Posted in Fortigate, Security, Windows | 4 Comments

Vulnerability in WPS leaves many WPA/WPA2 protected networks open to exploitation…..

Posted on 10/01/2012 by Googs

It seems that a weakness in WPS has severely weakened the security of many WPA and WPA2 protected wireless networks. The WPA Pre-Shared Key and WPS PIN can be recovered in a matter of hours using a “Reaver”. Ars-Technica have … Continue reading →

Posted in Security | Tagged , | Leave a comment

Outlook 2010 and direct booking with Exchange 2003

Posted on 15/11/2011 by Googs

There seems to be an issue when using Outlook 2010 Direct Booking with Exchange 2003. The resource is not booked and the user does not receive any error message.   Microsft have provided solutions to this problem  along with a … Continue reading →

Posted in Security, Windows | Leave a comment

Cisco Warranty CD links to malware site

Posted on 05/08/2011 by Googs

Documents on the cd may contain links to content from a malacious website http://www.cisco.com/warp/public/707/cisco-sr-20110803-cd.shtml

Posted in Security | Leave a comment