Security World: August 2005

Wednesday, August 31, 2005

Re: rules for FTP access

Manuel Mely wrote:
>>my problem is that I am not able to enable ftp connections ...
>
>
> All you have to do is to permit ftp connections in your firewall ;)
>
> iptables -A INPUT -i ??? -s ??? -p tcp --dport 20:21 -j ACCEPT

but, once I have loaded contrack ftp modules and I want to permit ftp
client connections from my private subnet, which is behind eth1, to
Internet through eth0, I should do:

iptables -A FORWARD -i eth1 -o eth0 -p tcp --dport 20:21 -j ACCEPT

is it right?

I am sorry but it is not long time that I'm playing with iptables and
firewalls...:-)

thanks, fabrizio.

>
> Also, enable ip_nat_ftp module and ip_conntrack_ftp!
>
> Salu2
> Mely
>
>
> On Wed, 2005-08-31 at 15:07 +0200, Fabrizio Sannicolo' wrote:
>
>>dear Sir/Madam,
>>
>>I have a linux box (sarge) as router/firewall in my organization. At the
>>moment that Linux box has 3 ethernet cards as follows:
>>
>>eth0 with public IP
>>eth1 private subnet
>>eth2 DMZ and WiFi
>>
>>I use iptables to forward traffic from Intranet to Internet and
>>viceversa using a rule such as
>>
>>iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source $SERV_EXT
>>
>>I also enable specific services with rules such as
>>
>> -m state
>>--state NEW -j ACCEPT
>>
>>or
>>
>>iptables -A FORWARD -i eth1 -o eth0 -p tcp --dport 80 -m state --state
>>NEW -j ACCEPT
>>
>>for any chain I let ESTABLISHED and RELATED connection...
>>
>>iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
>>
>>
>>and, at the end of each chain (INPUT, OUTPUT and FORWARD), I put
>>
>>iptables -A INPUT -j DROP
>>
>>my problem is that I am not able to enable ftp connections ...
>>
>>Could you help me, please?
>>
>>thanks, fabrizio.
>>
>>

--
To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

eSecurity News Summer 2005: Proven Security Made Better

((((((((((((((((((( McAfee eSecurity News ))))))))))))))))))

[ This message is brought to you as a subscriber to the
McAfee Dispatch. If you wish to no longer wish to receive
email from McAfee, please unsubscribe at the bottom of this
message. ]

============================================================
eSecurity News * Summer 2005 * McAfee(r), Inc.
............................................................
Proven Security
McAfee Protects over 100 million computers worldwide
============================================================

In this issue:

Virus Watch | Firewall Forum | Anti-Spyware Alley
Anti-Spam Central

Special Offer:
$49.99 for new McAfee Home Wireless Network Security

============================================================
Virus Watch
------------------------------------------------------------
Viruses Still Cost: Virus attacks (ahead of hackers, spyware
and other threats) were again the source of the greatest
financial losses, accounting for 32% of the overall losses
reported.*
============================================================

Are you being protected by our improved anti-virus engine?
To help detect, quarantine and block evolving threats,
McAfee VirusScan(r) now features:

o New! Spyware blocking on access -- helps stop
potentially unwanted programs (PUPs) like key-loggers
and Web dialers -- which can rob personally identifiable
information or redirect your surfing -- before they try
to install or launch on your system.

o New! Daily virus definition updates (DATs) -- they
download faster, smaller and timelier anti-virus
protection, critical during virus outbreaks.

o New! Inline file cleaning -- speeds virus disinfection
of compromised programs with less interruption to your
work.

*Source: Tenth Annual Computer Crime and Security Survey,
Computer Security Institute (CSI), July 2005

--> Get New McAfee VirusScan

o New Users
http://us.mcafee.com/root/package.asp?pkgid=100

o Upgrade Center
http://us.mcafee.com/root/upgradecenter.asp

o Current Subscribers
http://us.mcafee.com/root/myAccount.asp

--> Top Viruses Tracked by AVERT
http://us.mcafee.com/virusInfo/default.asp

============================================================
Firewall Forum
------------------------------------------------------------
ID Theft Non-Stop: Nearly 1 million users have suffered from
identity theft fraud, costing banks and card issuers $1.2
billion in direct losses in the past year.*
============================================================

Providing greater control over your anti-hacking security,
McAfee Personal Firewall Plus now features:

o New! Granular access control -- grants immediate,
current-session-only Internet access to specific
programs (e.g., music or Flash-based applications),
rather than riskier "always allow" or "never allow"
permissions.

o New! Silent, "load-and-go" installation -- gets upgraded
firewall protection up and running fast without slowing
your work.

o New! Smart full screen mode -- auto detects and
temporarily suspends pop-up messages and alerts for
uninterrupted online entertainment and gaming sessions.

*Source: Phishing Victims Likely Will Suffer Identity Theft
Fraud, A. Litan, Gartner, May 2005

--> Get New McAfee Personal Firewall Plus

o New Users
http://us.mcafee.com/root/package.asp?pkgid=103

o Upgrade Center
http://us.mcafee.com/root/upgradecenter.asp

o Current Subscribers
http://us.mcafee.com/root/myAccount.asp

>>>>>>>>>>>>>>>>>>> MCAFEE STORE SPECIAL <<<<<<<<<<<<<<<<<<<

60%* of home wireless networks are unsafe
from Wi-Fi(r) hijackers!

Stay safe with new McAfee Wireless Home Network Security.

-Protects your wireless network and data, safeguards
transactions sent over Wi-Fi
-Encrypts personal information, rotating your security
key every 3 hours
-Blocks hackers from hijacking or "freeloading" on
your connection
-Allows trusted friends and family to easily connect to
your network
-Protects up to 5 PCs
-Easy to install

Buy it now for only $49.99 thru Sept. 16, 2005 here:
http://us.mcafee.com/root/campaign.asp?cid=16350

Learn more here:
http://us.mcafee.com/root/package.asp?pkgid=250

*Source: www.worldwidewardrive.org

Mobile Pipeline (August 2005): "...impressive product
provides strong security, ease of use, and compatibility
across several major brands of routers... along with a
feature, automatic key rotation, that typically is found
on higher-end WLAN security products."

============================================================
Anti-Spyware Alley
------------------------------------------------------------
PUPs Getting Worse: 12% increase in the number of new
potentially unwanted programs (like spyware and adware)
created in Q2 2005 vs. Q1 2005.*
============================================================

For your protection against this increasing tide of
privacy and PC performance threats, we've upgraded
McAfee AntiSpyware with:

o New! Cookie tracking -- allows you to detect and remove
monitoring cookies, which can report your surfing habits
and additional personal information for online advertisers
and other third parties.

o New! System monitors -- pro-actively alert you if
malicious programs attack start-up programs, browser
settings, registry settings or your host file, helping
root out potentially unwanted programs (PUPs) before they
compromise your privacy.

o New! Anti-browser hijack prevention -- lets you restore
browser settings, home pages, ActiveX settings, security
settings, toolbars and trusted sites with a single click.

*Source: Top Threats for Q2 2005, McAfee AVERT, July 2005

--> Get New McAfee AntiSpyware

o New Users
http://us.mcafee.com/root/package.asp?pkgid=206

o Upgrade Center
http://us.mcafee.com/root/upgradecenter.asp

============================================================
Anti-Spam Central
------------------------------------------------------------
Phishing Exploding: One leading anti-Phishing consortium
estimates that 75 million to 150 million Phishing e-mails
are sent every day on the Internet.*
============================================================

Make sure your anti-spam protection can keep up with this
growing identity theft tactic. For your security, we've
given McAfee SpamKiller(r):

o New! Anti-Phishing Internet Explorer plug-in -- helps
prevent identity theft by alerting you if you are being
directed to a known or potentially fraudulent website
where online thieves hope to trick you into divulging
confidential information like passwords and credit card
numbers.

o New! Improved anti-spam engine -- uses advanced
meta-character filtering and "junk text" identification
to block more incoming spam, like text disguised with
wildcard characters (e.g., Viag*ra).

o New! Streamlined set-up and configuration -- automatically
detects, installs and merges new protection for all email
accounts guarded by SpamKiller, saving time and guesswork.

*Source: McAfee Virtual Criminology Report, July 2005

--> Get New McAfee SpamKiller

o New Users
http://us.mcafee.com/root/package.asp?pkgid=156

o Upgrade Center
http://us.mcafee.com/root/upgradecenter.asp

o Current Subscribers
http://us.mcafee.com/root/myAccount.asp

------------------------------------------------------------
QuickLinks

o Bundle Center
http://us.mcafee.com/root/bundles.asp?cid=9909

o Free Services
http://us.mcafee.com/root/catalog.asp?catid=free

o McAfee Upgrade Center
http://us.mcafee.com/root/upgradecenter.asp

o PC Performance
http://us.mcafee.com/root/catalog.asp?catid=pc

------------------------------------------------------------

[ You are currently subscribed as: security.world@gmail.com ]

Subscribe: If you received this message from a friend and
would like to subscribe to eSecurity News, virus alerts
and special offers, visit:
http://us.mcafee.com/root/campaign.asp?cid=9843

Unsubscribe: http://dispatch.mcafee.com/us/unsub.asp

McAfee Support: Got a product question? Visit:
http://us.mcafee.com/root/campaign.asp?cid=9842

Legal Note: This software does not guarantee protection
against all possible threats. Offers subject to change
without notice. Offers may vary on http://www.mcafee.com

View our privacy policy:
http://us.mcafee.com/root/campaign.asp?cid=8207

Technical Note: SpamKiller supports MSN/Hotmail, POP3 and
MAPI email accounts, but currently does not filter AOL,
Yahoo! or other Web-based email. Most Internet email
systems use POP3 accounts. By directly supporting multiple
client-based email applications (Outlook Express, Eudora,
Netscape etc.) and Web-based email clients (MSN/Hotmail),
SpamKiller enables you to benefit from its advanced
filtering without forcing you to change how you access
and read your email.

McAfee, SpamKiller and VirusScan are registered trademarks
or trademarks of McAfee, Inc. and/or its affiliates in the
US and/or other countries. All other registered and
unregistered trademarks herein are the sole property of
their respective owners.

3965 Freedom Circle, Santa Clara, CA 95054 (408) 992-8599
(c) 2005, McAfee, Inc. All Rights Reserved.

New Release! Download Cloudscape Version 10.1

_______________________________________________________________________

This mail is never sent unsolicited. This is a JupiterWeb mailing.
You elected to receive this third party message at a JupiterWeb site. (Go to
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,ioaa,6tcd,co7e,jjlo
for a complete listing). ClickZ, DevX, EarthWeb, Graphics.com and internet.com are
JupiterWeb networks.
_______________________________________________________________________

Get Free Developer Whitepapers and Tools!

** New Release: Download Cloudscape Version 10.1!
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,5fnj,mk,co7e,jjlo

** Whitepaper: The 20 Commandments of Software Packaging
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,8bst,3qgd,co7e,jjlo

** MSDN Webcast: Microsoft Studio Tools for Office--Open Forum
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,99b1,awn3,co7e,jjlo

** Whitepaper: Strategies for Architecting High Performance J2EE Applications
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,jyjf,4fli,co7e,jjlo

** Whitepaper: Why Move from Windows NT to SUSE LINUX?
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,jnu3,52cz,co7e,jjlo

** On-Demand Webcast: Introduction to UML2
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,c687,1irk,co7e,jjlo

** Download: Write 10,000 Lines of Code in 10 Minutes with Iron Speed Designer
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,9h8q,gdsh,co7e,jjlo

** Tutorial: Eclipse for Visual Studio Developers
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,g575,i0te,co7e,jjlo

** Special Offer! Free 30-Day Trial: Quickbase for Project Management
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,f4hm,f4s1,co7e,jjlo

** What's New in Visual Basic and C# for Visual Studio 2005?
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,hazs,cusx,co7e,jjlo

** Download: Toad for Oracle
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,c0bp,f0ey,co7e,jjlo

** Download: Automate Excel Reporting with SoftWidgets Spread Server.
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,acgt,8miy,co7e,jjlo

__________________________________________________________________

New Release: Download Cloudscape Version 10.1!
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,5fnj,mk,co7e,jjlo

New functionality, new support, expanded capabilities! Download Cloudscape, the
small-footprint database, based on the open-source Apache Derby, for developers building
Windows, Java and Linux applications.
__________________________________________________________________

Whitepaper: The 20 Commandments of Software Packaging
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,8bst,3qgd,co7e,jjlo

Software packaging expert Nelson Ruest has compiled "The 20 Commandments of Software
Packaging", a comprehensive list of tasks you should perform to ensure software packages
deploy successfully and function reliably.
__________________________________________________________________

MSDN Webcast: Microsoft Studio Tools for Office--Open Forum
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,99b1,awn3,co7e,jjlo

Visual Studio 2005 Tools for the Microsoft Office System adds a great new range of
capabilities, such as hosting Word and Excel as full-fledged designers within the Visual
Studio development environment, programming directly against data and view objects, and
creating a custom Document Actions Pane. Developers can utilize these new features to
build solutions that work with the current and upcoming versions of Word and Excel. Join
host Mike Hernandez and members of the Visual Studio Tools for Office team for this open
forum, and ask them the questions that have been on your mind since you started to
evaluate and test the beta.
__________________________________________________________________

Whitepaper: Strategies for Architecting High Performance J2EE Applications
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,jyjf,4fli,co7e,jjlo

The failure of an application to meet performance requirements can have a devastating
impact on your business. In this whitepaper you'll learn tactics to create and tune high
performing, scalable J2EE applications.
__________________________________________________________________

Whitepaper: Why Move from Windows NT to SUSE LINUX?
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,jnu3,52cz,co7e,jjlo

Migrate to Linux and take advantage of the reliability and security of Linux. Learn why
SUSE Linux is the optimum choice to replace Windows NT Server.
__________________________________________________________________

On-Demand Webcast: Introduction to UML2
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,c687,1irk,co7e,jjlo

The Unified Modeling Language (UML) is the standard language for visualizing, specifying,
constructing, and documenting the artifacts of a software-intensive system. In this
session learn the basic UML diagrams, and the notation changes in UML 2.0, the latest
version.
__________________________________________________________________

Download: Write 10,000 Lines of Code in 10 Minutes with Iron Speed Designer
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,9h8q,gdsh,co7e,jjlo

Iron Speed Designer is a software development tool for building database, reporting, and
forms applications for .NET without hand-coding. Quickly create visually stunning,
feature-complete Web applications with database access and security. Iron Speed Designer
accelerates development by eliminating routine infrastructure programming, giving you
ready-to-deploy n-tier Web applications in minutes. Download Evaluation.
__________________________________________________________________

Tutorial: Eclipse for Visual Studio Developers
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,g575,i0te,co7e,jjlo

Compare and contrast the two IDEs, and learn Eclipse concepts, terminology, and workflow
in the context of Visual Studio.
__________________________________________________________________

Special Offer! Free 30-Day Trial: Quickbase for Project Management
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,f4hm,f4s1,co7e,jjlo

Learn Why 32 of the Fortune 100 Use Quickbase
Web-based Quickbase from Intuit is an easy, flexible and affordable way to manage
projects with better visibility and accountability for everyone. With QuickBase your team
can manage projects, tasks and documents, share and update information instantly, and
control access to date. QuickBase is perfect for mid-size and large businesses. Sign up
now and try QuickBase FREE for 30 days!
__________________________________________________________________

What's New in Visual Basic and C# for Visual Studio 2005?
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,hazs,cusx,co7e,jjlo

Visual Basic and C# get updates in the latest version of Microsoft's IDE. Those changes
fall into three areas: changes to the language itself; changes to the compiler and how it
converts source code into managed executables, and changes to the IDE to better support
coding in that language.
_________________________________________________________________

Download: Toad for Oracle
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,c0bp,f0ey,co7e,jjlo

Do you know whos been in your database?
Detect unauthorized access and internal abuse of your database with Toad(R) for Oracle
the industry leading development & administration tool. Download a trial of Toad now.
__________________________________________________________________

Download: Automate Excel Reporting with SoftWidgets Spread Server.
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,acgt,8miy,co7e,jjlo

Load user-defined Excel templates, containing formatted sheets and charts, with data from
any database. Generated files can be distributed to a file server or as an email
attachment. For advanced spreadsheet generation requirements, extend Spread Server via
custom Excel macros and/or .NET snap-in.
_________________________________________________________________

Check out technical whitepapers on JupiterWeb with the following links:
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,8o9x,l9rs,co7e,jjlo
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,5dfk,6n6u,co7e,jjlo
_______________________________________________________________

internet.com and EarthWeb are divisions of JupiterWeb
JupiterWeb is a Jupitermedia Corporation property
23 Old Kings Highway South
Darien, CT 06820

If you wish to be removed from future JupiterWeb Special Offer mailings, please go to:
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,k5q5,vn4,co7e,jjlo

__________________________________________________________________________________

You are subscribed to Wireless Application Development at this email address
security.world@gmail.com.

Please click here if you would like to unsubscribe from this Distribution List:
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,dm3e,7yr0,co7e,jjlo&MLM_UNIQUEID=9058ade9fc&MLM_MID=86554&MLM_MLID=1&MLM_JOBID=619

Please click here if you would like to stop receiving Announcement Lists messages from
Jupitermedia:
http://nl.internet.com/ct.html?rtr=on&s=1,1usa,1,7bth,9guq,co7e,jjlo&MLM_UNIQUEID=9058ade9fc&MLM_MID=86554&MLM_MLID=1&MLM_JOBID=619

Or you may email announcementlist@jupitermedia.com or write to: Jupitermedia Corporation,
Attention:
Announcement Lists, 23 Old Kings Highway South, Darien, CT 06820
__________________________________________________________________________________

Security, compliance and management converge

NETWORK WORLD NEWSLETTER: SCOTT CRAWFORD ON NETWORK/SYSTEMS MANAGEMENT
08/31/05
Today's focus: Security, compliance and management converge

Dear security.world@gmail.com,

In this issue:

* What the convergence of security, compliance and management
means
* Links related to Network/Systems Management
* Featured reader resource
_______________________________________________________________
This newsletter is sponsored by HP
FROM THE NETWORK CORE TO THE NETWORK EDGE

Traffic management becomes critical as your network
infrastructure expands to support different types of traffic and
users. Most traffic management solutions have serious
limitations: too expensive, difficult to use, and overly taxing
on bandwidth. However ProCurve Networking by HP addresses these
requirements, overcomes the limitations of other solutions, and
gives you valuable insight into LAN performance.
http://www.fattail.com/redir/redirect.asp?CID=111652
_______________________________________________________________
TROUBLE IN PARADISE?

As technologies such as VoIP emerge to advance networks, many
believe the tools to manage them are falling behind. Traditional
management software models simply can't keep up with the rate of
real-time change that today's applications sustain. Is there a
solution pending or should network managers rely on their own
innovations? Click here:
http://www.fattail.com/redir/redirect.asp?CID=111607
_______________________________________________________________

Today's focus: Security, compliance and management converge

By Scott Crawford

The convergence of security, compliance, and management has
become a significant area of focus for Enterprise Management
Associates.

On Sept. 8, I'll be hosting an EMA Webcast that takes a look at
some of the ways this convergence is shaping the managed
enterprise (more information about that below). Until then, let
me whet your appetite for this event by giving you some examples
of why this trend is something the enterprise should know more
about.

Beyond the core benefits of centralization and automation are
even more significant ways in which security, compliance, and
enterprise management combine to provide maximum value. Using
tools such as vulnerability management to inform and define
software management priorities, for example, has revolutionized
many approaches to systems management.

More recently, we've seen security management tools increasingly
integrate remediation functionality themselves. This represents
the logical next step in their evolution, since closing gaps
completes a lifecycle approach to security and compliance
management.

However, when this task touches on business-critical
functionality, it is not something undertaken lightly. Patch
management is perhaps the best-known example of this - but that
raises the thorny issue of automating systems reconfiguration in
response to a security event. No one wants to be responsible for
deploying the "Mother of All Denial-of-Service Vehicles"!

Because of these and other factors, we are seeing three primary
ways in which security and compliance are converging with
management.

First, when security and compliance issues are central, or when
security and compliance products have a more mature concept of
the relevant issues, they are best positioned to directly manage
critical functionality themselves. Identity-based access
management fits into this category - but increasingly, so do
emerging tools like policy management systems that address a
wide range of policy-dependent issues.

Second, when there is compatibility between security and
compliance tools and enterprise management, remediation may best
be negotiated between their respective strengths. This is the
meeting ground of evolving integrated products such as endpoint
compliance enforcement systems, and next-generation security
event management systems.

Third, when an enterprise management product has principal
responsibility for critical functionality, extending its
capabilities in security and compliance management may make the
most sense, particularly when it adds to the return on
investment of the management product and reduces the need for
other security- or compliance-specific expenditures.
Configuration and change management software is an example of
this group, which can be further enhanced with greater
integration of identity-based controls.

We'll go into a lot more detail on these topics and even more
examples on Sept. 8 at 4 p.m. Eastern/1 p.m. Pacific. I invite
you to join us for this event by registering here
<http://www.emausa.com/ema_lead.php?ls=securityNWW0905>.

Next week in this space I'll talk about some of the gaps in this
trend, which will give you an idea of what to look for in the
new and emerging ways in which security and compliance are
converging with enterprise management.

The top 5: Today's most-read stories

1. 2005 salary survey <http://www.networkworld.com/nlnsm3898>

2. Google dives deeper into networking
<http://www.networkworld.com/nlnsm6209>

3. Cisco aims to simplify switch mgmt.
<http://www.networkworld.com/nlnsm6210>

4. VoIP season about to heat up
<http://www.networkworld.com/nlnsm6211>

5. A proposal for governing the 'Net
<http://www.networkworld.com/nlnsm6212>

Today's most-forwarded story:

VoIP rollouts generate heat, power concerns
<http://www.networkworld.com/nlnsm6213>

_______________________________________________________________
To contact:

Scott Crawford, CISSP, is a Senior Analyst focused on IT
security, systems and application management with Enterprise
Management Associates in Boulder, Colo., an analyst and market
research firm focusing exclusively on all aspects of enterprise
management systems and services. The former information security
chief for the International Data Centre of the Comprehensive
Nuclear-Test-Ban Treaty Organization in Vienna, Austria, Crawford
has also been a systems professional with the University Corporation
for Atmospheric Research as well as Emerson, HP, and other
organizations in both public and private sectors. He can be
reached at scrawford@enterprisemanagement.com
_______________________________________________________________
This newsletter is sponsored by HP
FROM THE NETWORK CORE TO THE NETWORK EDGE

Archive of the Network/Systems Management newsletter:
http://www.networkworld.com/newsletters/nsm/index.html

Management Research Center:
http://www.networkworld.com/topics/management.html
_______________________________________________________________
FEATURED READER RESOURCE
VoIP

For the latest in VoIP, check out NW's Research Center on this
very topic. Here you will find a collection of the latest news,
reviews, product testing results and more all related to keeping
VoIP networks performing at their best. Click here for more:
<http://www.networkworld.com/topics/voip.html>
_______________________________________________________________
May We Send You a Free Print Subscription?
You've got the technology snapshot of your choice delivered
at your fingertips each day. Now, extend your knowledge by
receiving 51 FREE issues to our print publication. Apply
today at http://www.subscribenw.com/nl2

International subscribers click here:
http://nww1.com/go/circ_promo.html

_______________________________________________________________
SUBSCRIPTION SERVICES

To subscribe or unsubscribe to any Network World e-mail
newsletters, go to:
<http://www.nwwsubscribe.com/Changes.aspx>

To change your e-mail address, go to:
<http://www.nwwsubscribe.com/ChangeMail.aspx>

Subscription questions? Contact Customer Service by replying to
this message.

This message was sent to: security.world@gmail.com
Please use this address when modifying your subscription.
_______________________________________________________________

Have editorial comments? Write Jeff Caruso, Newsletter Editor,
at: <mailto:jcaruso@nww.com>

Inquiries to: NL Customer Service, Network World, Inc., 118
Turnpike Road, Southborough, MA 01772

For advertising information, write Kevin Normandeau, V.P. of
Online Development, at: <mailto:sponsorships@nwfusion.com>

Linux computing on the couch, from across the room

NETWORK WORLD NEWSLETTER: PHIL HOCHMUTH ON LINUX
08/31/05
Today's focus: Linux computing on the couch, from across the
room

Dear security.world@gmail.com,

In this issue:

* Package ties remote control to Linux
* Links related to Linux
* Featured reader resource
_______________________________________________________________
This newsletter is sponsored by HP
FROM THE NETWORK CORE TO THE NETWORK EDGE

Traffic management becomes critical as your network
infrastructure expands to support different types of traffic and
users. Most traffic management solutions have serious
limitations: too expensive, difficult to use, and overly taxing
on bandwidth. However ProCurve Networking by HP addresses these
requirements, overcomes the limitations of other solutions, and
gives you valuable insight into LAN performance.
http://www.fattail.com/redir/redirect.asp?CID=111670
_______________________________________________________________
TROUBLE IN PARADISE?

As technologies such as VoIP emerge to advance networks, many
believe the tools to manage them are falling behind. Traditional
management software models simply can't keep up with the rate of
real-time change that today's applications sustain. Is there a
solution pending or should network managers rely on their own
innovations? Click here:
http://www.fattail.com/redir/redirect.asp?CID=111599
_______________________________________________________________

Today's focus: Linux computing on the couch, from across the
room

By Phil Hochmuth

Linux PC enthusiasts may be tired of hearing about all the ways
Microsoft PCs are taking over the living room. Having conquered
most home offices and dens, Windows is now running such
entertainment apps as MP3 players, CDs and DVDs with its XP
Media Center Edition, complete with a PC-friendly remote control
that's similar to a cable TV or home electronics controller. But
Linux can also play in the home entertainment arena, with help
from a package called Linux Infrared Remote Control.

The software <http://www.lirc.org/> allows Linux computers to
receive infrared signals and translate them into instructions
that can be used to operate any application the box can run. By
connecting a USB or serial IR receiver, or through built-in IR
interfaces (such as IrDA ports on laptops), LIRC can be used to
launch applications or other services, and control the operation
of programs such as MP3 and CD players, or any other device
attached to the PC. IR commands can even be mapped to mouse
movements, allowing users to mirror point-and-click functions on
a remote.

Most standard infrared remotes can be used with the system. LIRC
commands are set up by defining a function - such as hitting
"play" on an MP3 app, or launching a Web site - then mapping the
function to a remote control's IR signal. The application
"learns" the signal by pointing the remote at the IR receiver.

Once set up, a Linux PC with a remote control interface can
become a powerful home entertainment gadget. A quiet-running
LIRC-enabled Linux PC or laptop attached to a TV and stereo can
provide lots of fun features, from couch-based Web surfing
(great for live Fantasy Football stat tracking on the Web during
NFL games) as well as bringing a library of MP3s out of the PC
den and onto the living room stereo system. Outfitted with a TV
input card and a fat hard drive, the PC could even take over as
a cable television receiver and digital video recorder. (TiVo
is, after all, a Linux-based appliance.)

It could also be argued that having a Linux-based home
entertainment PC removes the risk of having "Slammer" or
"ILOVEYOU" being added to your music collection, or the "BSOD"
while trying to watch CNN or MTV.

The top 5: Today's most-read stories

1. 2005 salary survey <http://www.networkworld.com/nllinux3885>

2. Google dives deeper into networking
<http://www.networkworld.com/nllinux6168>

3. Cisco aims to simplify switch mgmt.
<http://www.networkworld.com/nllinux6169>

4. VoIP season about to heat up
<http://www.networkworld.com/nllinux6170>

5. A proposal for governing the 'Net
<http://www.networkworld.com/nllinux6171>

Today's most-forwarded story:

VoIP rollouts generate heat, power concerns
<http://www.networkworld.com/nllinux6172>

_______________________________________________________________
To contact: Phil Hochmuth

Phil Hochmuth is a Network World Senior Editor and a former
systems integrator. You can reach him at
<mailto:phochmut@nww.com>.
_______________________________________________________________
This newsletter is sponsored by HP
FROM THE NETWORK CORE TO THE NETWORK EDGE

Traffic management becomes critical as your network
infrastructure expands to support different types of traffic and
users. Most traffic management solutions have serious
limitations: too expensive, difficult to use, and overly taxing
on bandwidth. However ProCurve Networking by HP addresses these
requirements, overcomes the limitations of other solutions, and
gives you valuable insight into LAN performance.
http://www.fattail.com/redir/redirect.asp?CID=111669
_______________________________________________________________
ARCHIVE LINKS

Breaking Linux news from Network World and around the 'Net,
updated daily: http://www.networkworld.com/topics/linux.html

Archive of the Linux newsletter:
http://www.networkworld.com/newsletters/linux/index.html
_______________________________________________________________
FEATURED READER RESOURCE
VoIP

International subscribers click here:
http://nww1.com/go/circ_promo.html
_______________________________________________________________
SUBSCRIPTION SERVICES

To subscribe or unsubscribe to any Network World e-mail
newsletters, go to:
<http://www.nwwsubscribe.com/Changes.aspx>

To change your e-mail address, go to:
<http://www.nwwsubscribe.com/ChangeMail.aspx>

Subscription questions? Contact Customer Service by replying to
this message.

This message was sent to: security.world@gmail.com
Please use this address when modifying your subscription.
_______________________________________________________________

Have editorial comments? Write Jeff Caruso, Newsletter Editor,
at: <mailto:jcaruso@nww.com>

Inquiries to: NL Customer Service, Network World, Inc., 118
Turnpike Road, Southborough, MA 01772

For advertising information, write Kevin Normandeau, V.P. of
Online Development, at: <mailto:sponsorships@nwfusion.com>

Whitepapers Download

NETWORK WORLD NEWSLETTER: WHITEPAPERS DOWNLOAD
08/31/05

Dear security.world@gmail.com,

Today we have 5 feature articles for you from WiredRed
Software, BMC, Internet Security Systems, Chelsio
Communications, and APC.
You can see all of the available whitepapers at:
http://www.networkworld.com/productcentral/whitepapers.html
_______________________________________________________________
WiredRed Software
Web Conferencing - The Case for Installed Software

e/pop Web Conferencing - Share desktop, apps, PowerPoint and
multiparty video. Secure connections with SSL and even your own
PKI. Easy admin with user, feature and QoS controls. Software or
service: easy 5 minute server install, or one phone call hosted
service activation. Free trial.
http://www.fattail.com/redir/redirect.asp?CID=111508
_______________________________________________________________
BMC
Effortless Systems Management

Now, you don't have to choose between functionality and
simplicity in systems management. BMC Performance Manager
enables a unique approach to systems management that
automatically applies the appropriate technology based on IT
policy. Find out more in this complimentary white paper from BMC
Software. Get it now!
http://www.fattail.com/redir/redirect.asp?CID=110901
_______________________________________________________________
Internet Security Systems
Spyware Prevention: Internet Security Systems' Multi-Layered
Approach to Stopping Information Theft

Learn how spyware infiltrates and endangers organizations, and
how to establish a multi-layered security solution that will
search and destroy existing spyware and block installation and
execution of incoming spyware.
http://www.fattail.com/redir/redirect.asp?CID=110857
_______________________________________________________________
Chelsio Communications
The Value Proposition of TCP Offload for 10Gb Ethernet

TCP offload has been a controversial technology, partly because
past implementations showed little performance or cost benefits.
With the recent advent of 10 Gbps Ethernet, and the resulting
CPU-to-network performance gap, the value proposition of a
properly architected TCP offload engine is demonstrated both in
terms of performance and cost savings.
http://www.fattail.com/redir/redirect.asp?CID=112125
_______________________________________________________________
APC
Determining Total Cost of Ownership for Data Center and Network
Room Infrastructure

An improved method for measuring Total Cost of Ownership of data
center and network room physical infrastructure and relating
these costs to the overall Information Technology infrastructure
is described, with examples. The largest cost driver is shown to
be unnecessary unabsorbed costs resulting from the oversizing of
the infrastructure.
http://www.fattail.com/redir/redirect.asp?CID=112037
_______________________________________________________________
Whitepaper index on Network World Fusion:

Akamai
Web Application Performance Directly Impacts Business
http://adserver.fattail.com/redir/redirect.asp?CID=107522

APC
Determining Total Cost of Ownership for Data Center and Network
Room Infrastructure
http://adserver.fattail.com/redir/redirect.asp?CID=111763

APC
Calculating Total Power Requirements for Data Centers
http://adserver.fattail.com/redir/redirect.asp?CID=111764

APC
Avoiding Costs From Oversizing Data Center and Network Room
Infrastructure
http://adserver.fattail.com/redir/redirect.asp?CID=111765

Arbor Networks
Safe Quarantine - Automated Worm Suppression
http://adserver.fattail.com/redir/redirect.asp?CID=103413

Arbor Networks
Best Practices for Simplifying Regulatory Compliance
http://adserver.fattail.com/redir/redirect.asp?CID=107288

BMC
Effortless Systems Management
http://adserver.fattail.com/redir/redirect.asp?CID=110902

Chelsio Communications
The Value Proposition of TCP Offload for 10Gb Ethernet
http://adserver.fattail.com/redir/redirect.asp?CID=112082

Chelsio Communications
Jumbo Ethernet Frames: Advantages and Disadvantages
http://adserver.fattail.com/redir/redirect.asp?CID=112092

Chelsio Communications
Independent Performance Benchmarks of 10Gb Ethernet with TCP
Offload
http://adserver.fattail.com/redir/redirect.asp?CID=112095

Ciena
Adaptive WAN: Enabling Web Services, Networked Remote Storage
and Grid Computing
http://adserver.fattail.com/redir/redirect.asp?CID=109276

Internet Security Systems
Spyware Prevention: Internet Security Systems' Multi-Layered
Approach to Stopping Information Theft
http://adserver.fattail.com/redir/redirect.asp?CID=110610

Iomega
REV drives-revolutionizing backup
http://adserver.fattail.com/redir/redirect.asp?CID=110862

Mimosa Systems
Mimosa NearPoint: Unified Protection, Archiving & Recovery for
Microsoft Exchange
http://adserver.fattail.com/redir/redirect.asp?CID=111767

Neterion
10 Gb Ethernet or 1 GbE Trunking?
http://adserver.fattail.com/redir/redirect.asp?CID=111768

Permeo
What Does Secure On Demand Access Really Mean?
http://adserver.fattail.com/redir/redirect.asp?CID=111513

Permeo
SSL VPNs and the Lockdown Loophole
http://adserver.fattail.com/redir/redirect.asp?CID=111514

Permeo
SSL VPN Selection Guidelines and Best Practices
http://adserver.fattail.com/redir/redirect.asp?CID=111515

ProCurve Networking by HP
Protecting the Extended Enterprise Network: Security Strategies
and Solutions White Paper
http://adserver.fattail.com/redir/redirect.asp?CID=109419

ShoreTel
Computerworld VoIP Survey
http://adserver.fattail.com/redir/redirect.asp?CID=103490

Siemens
LifeWorks@Com: Unified Domains and Unified User Experiences
http://adserver.fattail.com/redir/redirect.asp?CID=102196

SSH Communications Security
SSH Communications Security introduces the new SSH G3
Architecture
http://adserver.fattail.com/redir/redirect.asp?CID=99692

WiredRed
Web Conferencing - The Case for Installed Software
http://adserver.fattail.com/redir/redirect.asp?CID=108954
_______________________________________________________________
May We Send You a Free Print Subscription?
You've got the technology snapshot of your choice delivered
at your fingertips each day. Now, extend your knowledge by
receiving 51 FREE issues to our print publication. Apply
today at http://www.subscribenw.com/nl2