<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Sys Admin Guides, How To&#039;s, etc  by Marios Maravelias &#187; Security</title>
	<atom:link href="http://www.sys-admin.gr/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.sys-admin.gr</link>
	<description>where prophets and madmen...walk hand in hand</description>
	<lastBuildDate>Fri, 07 May 2010 10:44:53 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Get notified when root logs in.</title>
		<link>http://www.sys-admin.gr/47/security/get-notified-when-root-logs-in/</link>
		<comments>http://www.sys-admin.gr/47/security/get-notified-when-root-logs-in/#comments</comments>
		<pubDate>Mon, 29 Oct 2007 13:49:35 +0000</pubDate>
		<dc:creator>MaRiOs</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Unix/Linux Various]]></category>
		<category><![CDATA[get]]></category>
		<category><![CDATA[in]]></category>
		<category><![CDATA[logs]]></category>
		<category><![CDATA[notified]]></category>
		<category><![CDATA[Root]]></category>
		<category><![CDATA[unix]]></category>
		<category><![CDATA[when]]></category>

		<guid isPermaLink="false">http://www.sys-admin.gr/archives/security/47</guid>
		<description><![CDATA[edit the file /root/.bashrc and add the following lines: echo &#8216;ALERT &#8211; Root Shell Access on:&#8217; `date` `who` &#124; mail -s &#8220;Alert: Root Access from `who &#124; cut -d&#8221;(&#8221; -f2 &#124; cut -d&#8221;)&#8221; -f1`&#8221; myemail@domain.tld save and exit, logout and login again, this will send you an email everytime a user who logs via ssh [...]]]></description>
		<wfw:commentRss>http://www.sys-admin.gr/47/security/get-notified-when-root-logs-in/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Checking if a server is under ddos attack</title>
		<link>http://www.sys-admin.gr/32/security/checking-if-a-server-is-under-ddos/</link>
		<comments>http://www.sys-admin.gr/32/security/checking-if-a-server-is-under-ddos/#comments</comments>
		<pubDate>Mon, 04 Jun 2007 13:39:02 +0000</pubDate>
		<dc:creator>MaRiOs</dc:creator>
				<category><![CDATA[Network]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Unix/Linux Various]]></category>
		<category><![CDATA[a]]></category>
		<category><![CDATA[attack]]></category>
		<category><![CDATA[Checking]]></category>
		<category><![CDATA[ddos]]></category>
		<category><![CDATA[Hacking]]></category>
		<category><![CDATA[if]]></category>
		<category><![CDATA[is]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[server]]></category>
		<category><![CDATA[under]]></category>
		<category><![CDATA[unix]]></category>

		<guid isPermaLink="false">http://www.sys-admin.gr/archives/security/32</guid>
		<description><![CDATA[A quick and usefull command for checking if a server is under ddos is: netstat -anp &#124;grep &#8216;tcp\&#124;udp&#8217; &#124; awk &#8216;{print $5}&#8217; &#124; cut -d: -f1 &#124; sort &#124; uniq -c &#124; sort -n That will list the IPs taking the most amount of connections to a server. It is important to remember that the [...]]]></description>
		<wfw:commentRss>http://www.sys-admin.gr/32/security/checking-if-a-server-is-under-ddos/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Email Header Injection in PHP</title>
		<link>http://www.sys-admin.gr/28/security/email-header-injection-in-php/</link>
		<comments>http://www.sys-admin.gr/28/security/email-header-injection-in-php/#comments</comments>
		<pubDate>Mon, 04 Jun 2007 13:13:24 +0000</pubDate>
		<dc:creator>MaRiOs</dc:creator>
				<category><![CDATA[php]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[Hacking]]></category>
		<category><![CDATA[Header]]></category>
		<category><![CDATA[How]]></category>
		<category><![CDATA[in]]></category>
		<category><![CDATA[Injection]]></category>
		<category><![CDATA[to]]></category>

		<guid isPermaLink="false">http://www.sys-admin.gr/archives/security/28</guid>
		<description><![CDATA[It has become apparent that spammers are getting even smarter than we take them for. Rather than abuse open relays, which are almost non-existent, these scum-of-the-earth &#8216;traders&#8217; are now abusing contact forms. However, the problem isn&#8217;t necessarily that they are attempting to use the contact forms. The problem that exists is that the average coder [...]]]></description>
		<wfw:commentRss>http://www.sys-admin.gr/28/security/email-header-injection-in-php/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SSH vs Script Kiddies How-to Guide</title>
		<link>http://www.sys-admin.gr/26/security/ssh-vs-script-kiddies-how-to-guide/</link>
		<comments>http://www.sys-admin.gr/26/security/ssh-vs-script-kiddies-how-to-guide/#comments</comments>
		<pubDate>Thu, 31 May 2007 13:58:43 +0000</pubDate>
		<dc:creator>MaRiOs</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Unix/Linux Various]]></category>
		<category><![CDATA[anti]]></category>
		<category><![CDATA[antihacking]]></category>
		<category><![CDATA[Guide]]></category>
		<category><![CDATA[Hacking]]></category>
		<category><![CDATA[How]]></category>
		<category><![CDATA[Kiddies]]></category>
		<category><![CDATA[Script]]></category>
		<category><![CDATA[ssh]]></category>
		<category><![CDATA[to]]></category>
		<category><![CDATA[unix]]></category>
		<category><![CDATA[vs]]></category>

		<guid isPermaLink="false">http://www.sys-admin.gr/archives/security/26</guid>
		<description><![CDATA[Scope Some idiot created a SSH worm that uses a dictionary attack to try to log into a computer over port 22. The worm tries to set up shop on your computer and tries to find the next vulnerable computer. This clogs up networks with bazillions of SSH login attempts. A number of people created [...]]]></description>
		<wfw:commentRss>http://www.sys-admin.gr/26/security/ssh-vs-script-kiddies-how-to-guide/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PHP Email Contact form with Captcha</title>
		<link>http://www.sys-admin.gr/21/php/contact-form-with-captcha/</link>
		<comments>http://www.sys-admin.gr/21/php/contact-form-with-captcha/#comments</comments>
		<pubDate>Wed, 30 May 2007 13:43:20 +0000</pubDate>
		<dc:creator>MaRiOs</dc:creator>
				<category><![CDATA[php]]></category>
		<category><![CDATA[anti]]></category>
		<category><![CDATA[antispam]]></category>
		<category><![CDATA[Captcha]]></category>
		<category><![CDATA[Contact]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[form]]></category>
		<category><![CDATA[image]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[verification]]></category>
		<category><![CDATA[with]]></category>

		<guid isPermaLink="false">http://www.sys-admin.gr/archives/php/21</guid>
		<description><![CDATA[PHP Contact form with image verification. If you use a normal contact form then spammers will fond a way to automatically send junk messages through that form, so you need a way to verify that the sender is an actual person and not an automated script. A good solution for this is to use an [...]]]></description>
		<wfw:commentRss>http://www.sys-admin.gr/21/php/contact-form-with-captcha/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>What is a null route?</title>
		<link>http://www.sys-admin.gr/19/security/what-is-a-null-route/</link>
		<comments>http://www.sys-admin.gr/19/security/what-is-a-null-route/#comments</comments>
		<pubDate>Wed, 30 May 2007 12:50:27 +0000</pubDate>
		<dc:creator>MaRiOs</dc:creator>
				<category><![CDATA[Network]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Unix/Linux Various]]></category>
		<category><![CDATA[a]]></category>
		<category><![CDATA[anti]]></category>
		<category><![CDATA[hack]]></category>
		<category><![CDATA[is]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[null]]></category>
		<category><![CDATA[protection]]></category>
		<category><![CDATA[route]]></category>
		<category><![CDATA[unix]]></category>
		<category><![CDATA[What]]></category>

		<guid isPermaLink="false">http://www.sys-admin.gr/archives/security/19</guid>
		<description><![CDATA[What is a null route? A null route is a route that goes to nowhere. The reason for creating a null route is to prevent your system from sending any data to a remote system. Creating a null route Null routes are usually created using the `route` command. This works under both Windows and Unix, [...]]]></description>
		<wfw:commentRss>http://www.sys-admin.gr/19/security/what-is-a-null-route/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

