How secured is the network from outside world?

It is assured without doubt that things don't seem the way they are. My routers web interface was configured in a way I wanted, only to find that it has least changed the priorities. For instance the WAN interface and LAN interface was changed but the nmap output for open port is pretty evident.
PORT     STATE SERVICE
21/tcp   open  ftp
23/tcp   open  telnet
80/tcp   open  http
5431/tcp open  park-agent
This is how I configured the router
Not only that the TR-069(technical report) client config for ACS (auto configuration servers)was enabled all the time in the CPE(customer premises equipment). This enabled the ones who provided the device to carry out the so called upgrades(I sincerely doubt that)  in my device.  
In short the only protection that is there is because of the dynamic IP address that is allotted to the user...

IP Masking or hostname cloak for IRC - Tor way

In order to Hide the ip address in the user column in the irc of xchat in freenode network
eg ~ranjit@117.199.5.190 to ~ranjit@somedomainname.org

visit
http://freenode.net/faq.shtml#gettinghelp
http://freenode.net/irc_servers.shtml#tor

To know about Tor
https://www.torproject.org/docs/faq.html.en#WhatIsTor

**Call it a hysteria.... I think I was subjected to DoS**
I haven't implemented it yet.

Love/Hate relationship with BSNL

The most responsible and irresponsible(at the same time) form of government based service ever. The frequent disconnection of BB is very usual with dataone connection provided by bsnl and some of the line condition that carries the signal is in such a dilapidated condition that its not possible for quality service until it is replaced and the line man will simply rejoin the exposed joins which corrodes subjected to env condition.
I tried to bring to notice of BSNL official thru online grievance method. It was logged on nov 2010 and the rest of response from BSNL is given below.
Looking at the resolution they have provided its pathetic. They have closed it without the problem being solved, reason- it's not a problem for them since its a commonly occurring situation.

* Name and ph no have been changed

Docket No. Date Booked Category Name
KRL/CO/2010/17587 19/11/2010 I XYXYXYXY PILLAI


Grievance Status Details
Docket No. KRL/CO/2010/17587
Date Booked 19/11/2010
Name XYXYXYXY PILLAI
Phone 0000000
Grievance Dataone Broadband frequently disconnects
Current Status CASE IS YET TO BE FINALLY DISPOSED OFF BY CIRCLE HEAD OFFICE . FORWARDED TO CONCERNED UNITS/SECTIONS FOR TAKING NECESSARY ACTION. PENDING AT TRIVANDRUM HEAD OFFICE.

revision:- 14/02/2011 got a call from bsnl, regarding the disconnection issue that was reported on below given date.
Once before in feb I received a call from bsnl regarding the BB and I said "NO haven't got a problem" and I started thinking when I complained and soon it struck me that it was on 19/11/2010 that I filed a grievance and repented saying no to a call that rarely comes. well in 14/02 i got a call and was asked again well then I asked them when was the complaint registered and they said it was some days back. I rectified by saying some months back and described my issue of frequent disconnection and also quoted that the IBF also have users facing the same problem and I thought its a trademark of BSNL to have such a BB connection. He replied that it could be a line problem . I even said that between my home to the telephone post there are 3 exposed joints which itself is pathetic and can I have a single line extended from the post to my home. response can be done. still waiting for the action.
Until now nothing happened and checking out the status of complaint - check out

Docket No. KRL/CO/2010/17587
Date Booked 19/11/2010
Name XYXYXYXY PILLAI
Phone 83743499
Grievance Dataone Broadband frequently disconnects
Current Status CASE FINALLY CLOSED BY CIRCLE HEAD OFFICE ON 14/02/2011 WITH THE REMARKS CLOSED

Online Grievance:- http://www.kerala.bsnl.co.in/Grievance/publicgrievance.asp


 
Creating an impression is not a priority here (as is seen)

The UI has been changed from a single and simple GTA02 device to a more muddled/messier front page which is a sketch form of devices (and its byproduct) lying around the desktop(if it falls in that group). The mere intention of such an approach is not to entice others with a color display rather giving a black and white impression of what its all about and what it gets involved with. Though lot of work is yet to be done hopefully will implement what is needed. Felt better to display the whole scenario which makes the mobile device(gta02) important. Its not a standalone rather most work involves the IA32 machine which deserves mentioning and this is how I felt is/was right. The Idea is to change the image of respective device on mouse hover as well as display the config of device in a tooltip. This is mostly done for and on firefox. Don't have time to do the adaptation work for other browsers.

I made use of PS for slicing and saved it in html format. Vala!!! I don't have to create a table it does for you.
The overlapped text in the tooltip was rectified by specifying the line height , setting it equal to the font size for #tooltip

adding
background: white none repeat scroll 0% 0%; height: 0px; line-height: 0px; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;
for table td messes up with the default drupal settings so add it to table#Table_01 td

Tested on firefox: 3.0.11 and everything is working as expected.

Without consensus..

yesterday as I was carrying out my mundane task with my wa3002g4 - regular disconnection issue still persisting - but with all that and no program accessing the network the wlan indicator was blinking as in being accessed and with the firewire it was evident that the network was being used without my consensus and now was very eager to find which program was accessing the network so with little search, the very regular form of suggestion - netstat/tcpdump/wireshark was propping up so with the tcpdump found that the
ec2-184-73-194-227.compute-1.amazonaws.com.www
was accessing my box without permission. but even before checking which was the process that was doing it. It stopped - later on found that it was the amazon site doing its job - but how could they do that with no consensus.

The output of tcpdump

ranjit@dell-laptop:~$ sudo tcpdump -i ath0
[sudo] password for ranjit:
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ath0, link-type EN10MB (Ethernet), capture size 96 bytes
21:53:31.197831 IP 192.168.1.2.50074 > resolver2.opendns.com.domain: 38512+ TXT? current.cvd.clamav.net. (40)
21:53:31.214828 IP 192.168.1.2.38499 > resolver2.opendns.com.domain: 29628+ PTR? 220.220.67.208.in-addr.arpa. (45)
21:53:31.786371 IP resolver2.opendns.com.domain > 192.168.1.2.50074: 38512 1/0/0 TXT[|domain]
21:53:31.828202 IP resolver2.opendns.com.domain > 192.168.1.2.38499: 29628 1/0/0 (80)
21:53:31.828568 IP 192.168.1.2.56419 > resolver2.opendns.com.domain: 382+ PTR? 2.1.168.192.in-addr.arpa. (42)
21:53:32.400625 IP resolver2.opendns.com.domain > 192.168.1.2.56419: 382 NXDomain 0/0/0 (42)
21:53:32.962176 IP 192.168.1.2.36395 > resolver2.opendns.com.domain: 49785+ A? database.clamav.net. (37)
21:53:33.217134 IP 192.168.1.2.46661 > ec2-184-73-194-227.compute-1.amazonaws.com.www: S 1825043612:1825043612(0) win 5840
21:53:33.531595 IP resolver2.opendns.com.domain > 192.168.1.2.36395: 49785 7/0/0 CNAME[|domain]
21:53:33.532318 IP 192.168.1.2.42104 > resolver2.opendns.com.domain: 17149+ A? database.clamav.net. (37)
21:53:33.725063 IP ec2-184-73-194-227.compute-1.amazonaws.com.www > 192.168.1.2.46661: S 225898766:225898766(0) ack 1825043613 win 5840
21:53:33.725154 IP 192.168.1.2.46661 > ec2-184-73-194-227.compute-1.amazonaws.com.www: . ack 1 win 5840
21:53:33.725360 IP 192.168.1.2.46661 > ec2-184-73-194-227.compute-1.amazonaws.com.www: P 1:580(579) ack 1 win 5840
21:53:34.115542 IP resolver2.opendns.com.domain > 192.168.1.2.42104: 17149 7/0/0 CNAME[|domain]
21:53:34.116268 IP 192.168.1.2.52688 > resolver2.opendns.com.domain: 22086+ A? database.clamav.net. (37)
21:53:34.249847 IP ec2-184-73-194-227.compute-1.amazonaws.com.www > 192.168.1.2.46661: . ack 580 win 5211
21:53:34.707608 IP ec2-184-73-194-227.compute-1.amazonaws.com.www > 192.168.1.2.46661: F 232:232(0) ack 580 win 5211
21:53:34.707686 IP 192.168.1.2.46661 > ec2-184-73-194-227.compute-1.amazonaws.com.www: . ack 1 win 5840
21:53:34.709628 IP ec2-184-73-194-227.compute-1.amazonaws.com.www > 192.168.1.2.46661: P 1:232(231) ack 580 win 5211
21:53:34.709677 IP 192.168.1.2.46661 > ec2-184-73-194-227.compute-1.amazonaws.com.www: . ack 233 win 6432
21:53:34.710019 IP 192.168.1.2.46661 > ec2-184-73-194-227.compute-1.amazonaws.com.www: F 580:580(0) ack 233 win 6432
21:53:34.712310 IP resolver2.opendns.com.domain > 192.168.1.2.52688: 22086 7/0/0 CNAME[|domain]
21:53:34.713132 IP 192.168.1.2.41256 > resolver2.opendns.com.domain: 6712+ A? database.clamav.net. (37)
21:53:35.209814 IP ec2-184-73-194-227.compute-1.amazonaws.com.www > 192.168.1.2.46661: . ack 581 win 5211
21:53:35.293719 IP resolver2.opendns.com.domain > 192.168.1.2.41256: 6712 7/0/0 CNAME[|domain]
21:53:35.295279 IP 192.168.1.2.37929 > resolver2.opendns.com.domain: 37947+ A? database.clamav.net. (37)
21:53:35.876052 IP resolver2.opendns.com.domain > 192.168.1.2.37929: 37947 7/0/0 CNAME[|domain]
21:53:35.882849 IP server-216-137-63-13.lhr3.cloudfront.net.www > 192.168.1.2.43040: F 2145307016:2145307016(0) ack 305058198 win 6880
21:53:35.884099 IP server-216-137-63-13.lhr3.cloudfront.net.www > 192.168.1.2.43039: F 2144127637:2144127637(0) ack 299530464 win 6650
21:53:35.921135 IP 192.168.1.2.43040 > server-216-137-63-13.lhr3.cloudfront.net.www: . ack 1 win 11360
21:53:35.921386 IP 192.168.1.2.43039 > server-216-137-63-13.lhr3.cloudfront.net.www: . ack 1 win 53960
21:53:35.936700 IP 192.168.1.2.38807 > resolver2.opendns.com.domain: 65025+ A? database.clamav.net. (37)
21:53:36.506826 IP resolver2.opendns.com.domain > 192.168.1.2.38807: 65025 7/0/0 CNAME[|domain]
21:53:37.402571 IP 192.168.1.2.58837 > resolver2.opendns.com.domain: 18747+ PTR? 227.194.73.184.in-addr.arpa. (45)
21:53:37.992783 IP resolver2.opendns.com.domain > 192.168.1.2.58837: 18747 1/0/0 (101)
21:53:37.993610 IP 192.168.1.2.45190 > resolver2.opendns.com.domain: 41743+ PTR? 13.63.137.216.in-addr.arpa. (44)
21:53:38.720639 IP resolver2.opendns.com.domain > 192.168.1.2.45190: 41743 1/0/0 (98)
21:53:39.731410 IP 192.168.1.2.43040 > server-216-137-63-13.lhr3.cloudfront.net.www: F 1:1(0) ack 1 win 11360
21:53:39.731514 IP 192.168.1.2.43039 > server-216-137-63-13.lhr3.cloudfront.net.www: F 1:1(0) ack 1 win 53960
21:53:39.896928 IP server-216-137-63-13.lhr3.cloudfront.net.www > 192.168.1.2.43034: F 2136823304:2136823304(0) ack 273815452 win 8944
21:53:39.933138 IP 192.168.1.2.43034 > server-216-137-63-13.lhr3.cloudfront.net.www: . ack 1 win 28400

41 packets captured
41 packets received by filter
0 packets dropped by kernel
ranjit@dell-laptop:~$

or use tcpdump -ni ath0

the links below are the outcome of the amazon related stuff

http://aws.amazon.com/ec2/
http://www.malwareurl.com/listing.php?as=AS14618

Festival Season...

It's just coincidence that when in southern part of India one festival is ongoing correspondingly in north India another version of it is celebrated.
Wonder why all these are not standardized in this era of standardization .

 



Netbook - LiMo

visit  http://bit.ly/bS9mPd

top