Monday, May 28, 2007

Squid Configuration

Access list

1] for workstations (allow only mynetwork address)

acl mynetwork src 192.168.2.0/255.255.255.0
http_access allow mynetwork

2] for sites (ban friendster.com or regex listed in a file)

acl bannedsites url_regex -i ^http://www.friendster.com/
or
acl bannedsites url_regex -i "/etc/squid/bad-sites"
then
http_access deny bannedsites

place http_access below the workstations allow

example of content of "bad-sites"
pokemon
friendster
pornograp

3] for filesize (limits download of files to 3 MB during periods listed below)

acl morning time MTWHFA 9:00-11:00
acl afternoon time MTWHFA 9:00-11:00

reply_body_max_size 3000000 allow morning
reply_body_max_size 3000000 allow afternoon



Sunday, May 27, 2007

LTOT Training @ WMSU


Here is a group picture of the participants in the LTOT training held last May 19-28, 2007 @ WMSU Engineering Laboratory. My partner trainor is Ronald (on my left). :)

Locking Firefox in XP and Linux

A)Linux (tested on Ubuntu from http://kirksblog.steffensenfamily.com/archives/category/ubuntu/)

1] Backup you original configuration found at /usr/lib/firefox/firefox.cfg to firefox.cfg.old
2] Create a new firefox.cfg
//
lockPref("app.update.enabled", false);
lockPref("network.proxy.autoconfig_url","http://172.16.8.1/proxy.pac");
lockPref("network.proxy.type", 2);
lockPref("network.proxy.no_proxies_on", "localhost, 127.0.0.1, 172.16.8.0/21");
lockPref("network.proxy.share_proxy_settings", true);
lockPref("browser.startup.homepage","http://www.adzu.edu.ph");
----here is another example-----
//
lockPref("app.update.enabled", false);
lockPref("network.proxy.type", 1);
lockPref("network.proxy.share_proxy_settings", true);
lockPref("network.proxy.http", "192.168.2.31");
lockPref("network.proxy.http_port", 3128);
lockPref("browser.startup.homepage","http://www.lxer.com | ");

3] Restart firefox.

B) Windows XP (from http://ilias.ca/blog/2005/03/locking-mozilla-firefox-settings/)

1] Create mozilla.txt and begin the first line with two forward slashes.
2] Put all the settings you would like to lock. Example:
//
lockPref("network.proxy.autoconfig_url","http://172.16.8.1/proxy.pac");
lockPref("network.proxy.type", 2);
lockPref("network.proxy.no_proxies_on", "localhost, 127.0.0.1, 172.16.8.0/21");
lockPref("network.proxy.share_proxy_settings", true);
lockPref("browser.startup.homepage","http://www.adzu.edu.ph");

3] Convert the file to mozilla.cfg using this and save it at location where firefox.exe which is usually at C:\Program Files\Mozilla Firefox

4] In C:\Program Files\Mozilla Firefox\greprefs\ there’s a file called all.js.
Open all.js in a text editor, and add the following line at the end of it:

pref("general.config.filename", "mozilla.cfg");


To determine the things to lockdown type about:config at the location bar of firefox.

Original posted: March 4, 2007

Saturday, May 26, 2007

Wednesday, May 16, 2007

could not open default font 'fixed'

Got this while installing xserver-xorg into an Ubuntu 6.10 server edition. My solution is to install xfonts-base. Execute with this command in your Command Line interface (CLI) also known as shell prompt:


sudo aptitude install xfonts-base