jump to navigation

RVSkin Master Account (hosting) removed by accident also How do you ReInstall RVSKIN March 21, 2007

Posted by paragonhost in Linux, ParagonHost, cPanel.
add a comment
Category  cPanel WHM
Question  RVSkin Master Account (hosting) removed by accident also How do you ReInstall RVSKIN
Answer  If you delete the master account (Hosting account that ends with a .zz) you will need to run the following commands as root:

rm -f  /usr/local/cpanel/Cpanel/rvversion
perl  /root/rvadmin/auto_rvskin.pl

This will ReInstall RVSkin and rebuild the master hosting account.

You will need a “active” support account at RVSkin in order to install using the above commands. May need to update your support subscription.

Supporting File   
Keywords  rvskin cpanel whm reinstall master hosting account command line script perl script install rvadmin rvskin reinstallation

Attach any filetype with GMail: Google Mail Hack March 13, 2007

Posted by paragonhost in Collaboration, Internet, Security Focus, Technology News.
1 comment so far

Cheat the GMail Antivirus Scanner: Attach any filetype with GMail

When you send and receive attachments with GMail, they’re auto scanned for viruses. If Gmail thinks your mail has viruses, it will attempt to clean the file or remove it. But if it detects a virus and can’t remove it, then you won’t be able to download it.

Thanks to the new GMail Anti Virus Scanner, you cannot send or receive emails with exe, dll, ocx, com or bat attachments even if they are sent in a zipped (.zip, .tar, .tgz, .taz, .z, .gz) format (The .rar format is still allowed)

GMail has some the best spam filtering and phishing detection capabilities but the GMail virus scanning is a bit disappointing. When I tried to email a Firefox 1.5 installer to a colleague, GMail uploaded the entire file (Firefox Setup 1.5.exe 4.98 MB) and then threw this alert:

This is an executable file. For security reasons, Gmail does not allow you to send this type of file.

This is such a poor solution. GMail Virus Scanner didn’t scan the attachment, it just blocked it since it was an exe file. Why is Google calling it an AntiVirus scanner when it is merely blocking attachments of certain types like .exe? Yahoo! webmail too have an anti-virus but they accept .exe files since the yahoo anti-virus would scan even exe files and clean them if found infected.

Secondly, why did GMail upload the entire exe file to its server for scanning but didn’t scan since it was an exe.? The GMail file uploader should be smart enough to disallow users from uploading files with extensions like exe, com, ocx, etc.

Google has no plans to make the “limited” antivirus feature optional, nor does it plan to stop blocking executables. Yahoo! Mail uses Symantec software to scan for viruses. Hotmail licenses its technology from Trend Micro. Google isn’t saying which vendor is providing the antivirus technology.

Since you cannot Turn Off GMail Anti Virus Scanning, you can use these GMail hacks to send program file (exe), virus samples and other blocked formats with GMail:

Technique 1. Use a free file hosing online service like Rapidshare, Megaupload or Yousendit to upload your file and send the link of the uploaded file in your GMail message.

2. Rename the file: Change the file extension to fool the GMail scanner. The new attachment could contain instructions making it easier for the recepient to derive the actuall attachment type. For instance,

Rename Adobe-Reader.exe to Adobe-Reader.exe.removeme

3. If you have lot of exe files to send, put them in a zip file and change the extension of the zip file as mentioned in the previous step. Remember that GMail denies zip attachments that contain exe files. Pass-Protection won’t work either since GMail can examine exe filenames even in password protected zipped files as the archived filename listings are not encrypted by the Zip program.

4. Use a different compression software like WinRAR which compresses files in .rar format. GMail is currently not scanning or blocking .rar filetypes. But there is a high probability that GMail might support rar formats in future. In that case, you can consider splitting the rar files and attaching them separately (like .r1, .r2..)

Important: I would recommend only the first technique since all others violate Google policies and Google could even terminate your GMail account.

Sending Virus infected files with GMail: Yes, it is against the GMail TOS to send viruses in email but ocassionally, we need to mail an infected file for reporting purposes to an antivirus vendor. Like the Symantec Security Response center encourages users to submit virus samples for analysis. You can use any of the above techniques to bypass the virus scanner and attach infected files in your emails.

Now that limited virus scanning is in, we can expect GMail to move quickly out of the beta once the GCal (Google Calendar) application is available. The Google Calendar domain is already live.

Aggregation: ParagonHost, LLC http://www.paragonhost.com

“World Class Internet Services”

Remote MySQL Connection to a cPanel server:: How To March 10, 2007

Posted by paragonhost in Linux, ParagonHost.
2 comments

Remote MySQL Connection :: How To
Can I remotely connect to mysql? YES!
Follow these simple instructions to remotely connect to mysql.

Before you can connect to MySQL, You must enable your computer as an access host. It may sound confusing, but CPanel makes this ver simpe. First, login to cpanel using yourdomain.com/cpanel. Then, on the main menu of CPanel, click [MySQL]. Now, scroll down to about mid way through the page until you see “Access Hosts:”. Under that, you will see a list of all the IPs that are permitted to connect to your mysql databases. As default, only “localhost” will be listed. Directly under that, you will see “Host (% wildcard is allowed):” with a text field next to it. In that text field you can enter your computers IP address. After you enter your IP address, click [Add Host] and your done. Your computer can now remotely connect to your mysql database(s).

How can I find out my computers IP address?

- Simple, just go to http://www.ViewIP.info Wait a minute, my IP constantly changes!

Okay, you have a dynamic IP address. Therefore, everytime you go online, or every once in awhile, your IP changes. You have a few options here. The most secure, would be to update your IP in “Allowed Hosts” in CPanel (under MySQL) everytime your IP changes. However, you do have other options available. However, you could simply enter “%” (a percentage sign) in the “access hosts” text filed in CPanel (under mysql). This would allow any IP to remotely connect via mysql. Another option: Lets say the first three parts of your IP never change. Then, you could enter 93.138.%.% , where the first two parts are your actual IP address numbers.

After your IP is added to the Access Hosts list:

First, you will have to create a mysql database and assign a user to it. Please see documentation on how to do this, as this article will assume you already have a database setup. Your username and password will be the username and password of the user assigned to the database.

Database name = cpanelusername_databasename

Database username = cpanelusername_databaseusername

MySQL Connection Port = 3306

* The database name and username is clearly displayed in CPanel, in the MySQL area.

Aggregation: ParagonHost, LLC http://www.paragonhost.com“World Class Internet Services”

MORE FREQUENT AND MORE DAMAGING ATTACKS ON DNS March 4, 2007

Posted by paragonhost in Hosting News, Security Focus.
add a comment

For Immediate Release

Press Contact:

Michael Azzano

Cosmo PR

415/596-1978

michael@cosmo-pr.com

DNS EXPERT CALLS FOR PREPAREDNESS IN FACE OF POTENTIALLY

MORE FREQUENT AND MORE DAMAGING ATTACKS ON DNS

DNSstuff.com unveils one of the first public root server time maps to track performance

and minimize business risk; Recent survey data reveals that 70% of all DNS servers have

one or more improperly configured settings

Newburyport, MA – February 8, 2007 – DNSstuff.com, a global leader in DNS issues

and tools with one of the largest communities of IT professionals on the Web, today

issued a warning and called for greater preparedness as a result of the recent attack

targeting root servers. This attack is the latest in a series of distributed denial-of-service

attacks targeting DNS servers that began late last year. DNSstuff.com today also

introduced a new root server time map tool designed to help IT professionals track the

performance of and possible attacks on these servers.

“It is likely that this latest apparent probing effort was testing the resiliency of DNS,”

explained Paul D. Parisi, CTO of DNSstuff.com. “This could be a harbinger of more

targeted attacks against .com parent servers or even individual enterprise servers, neither

of which may have the resiliency or redundancy of the systems attacked earlier this week.

Either of these scenarios could have catastrophic consequences for the Internet-at-large or

specific organizations.”

New Tool to Spot Attacks

The new DNSstuff.com root server time map allows IT professionals to monitor the state

of root and .com servers supporting DNS. Now anyone can check real-time performance

of these servers to spot long latency times or unusual behavior in response times. The

root server time map can be found at http://www.dnsstuff.com/info/roottimes.htm.

Even without an increase in targeted or malicious attacks on DNS servers, many of those

same servers remain vulnerable or are performing poorly because of simple human error.

There are over 85 million domains on the Web, and a survey by DNSstuff.com of its

users revealed that there are significant, fixable configuration issues with DNS settings

for nearly 70% of those active domains. These incorrect settings can lead to site outages

or improperly routed email, and a targeted attack exploiting these settings could lead to

even more widespread network and Internet outages.

Simple Prevention Settings

“We are a robust web application and the Web’s acknowledged leader in helping IT

professionals better manage their networks and DNS through expert advice, best practices

and relevant resources,” continued Parisi. “Unfortunately, many people are relying on

improperly configured DNS and are unintentionally leaving themselves, and therefore the

web, vulnerable to attack. ”

There are some simple steps that can be taken to improve DNS security at an enterprise

level. These include maintaining a minimum of two physically and geographically

separate servers to help thwart a denial-of-service attack, and proper configuration of

your Primary and Secondary name servers to utilize the natural resiliency of DNS. More

tips and information for DNS configuration can be found at DNSstuff.com or by signing

up for the company’s monthly IQ Mail by emailing DNSIQ@dnsstuff.com.

About DNSstuff.com

DNSstuff.com is the Web’s premiere destination for DNS professionals, offering free

online tools to monitor and maintain one of the most vital, yet vulnerable, lynchpins in

the infrastructure supporting the Web – the Domain Name System. DNSstuff.com is a

web application providing expertise and all the tools necessary to ensure that your DNS

operates smoothly, efficiently and safely. It is one of the largest and most trusted

communities of IT professionals on the Web, and can be found at www.dnsstuff.com.

###