Blog Archives

Protection Against OpenSSL Heartbleed bug

Posted on April 11, 2014 by Farooq Sheikh — Leave a comment

The Heartbleed Bug is a recently found (2014-04-07) serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. Please see this page for…

Tagged with: apache, Apache 2.x, Cloud Computing, Heartbleed, Linux, linux administrator, Linux Security, Linux/Unix, Networking, Nginx, OpenSSL, Sockets, system administrator, TCP, VM, VM Security
Posted in Cloud Computing, Linux, Nginx, Security

Protect Login Page From Bruteforce Attack In Nginx

Posted on April 1, 2014 by Farooq Sheikh — Leave a comment

You can easily use Nginx rate limit module to protect your login page from bruteforce dictionary attack. In this example i am more interested to protect wordpress login page (wp-login.php) from bruteforce dictionary attack. We are using Nginx as front-end proxy server and…

Tagged with: apache, Apache 2.x, bruteforce, Cloud Computing, DDoS, front end proxy server, limit_req_zone, Linux, linux administrator, Linux Security, Linux/Unix, monitor network traffic, netstat, network traffic, Networking, Nginx, protect wordpress login page, Sockets, SQL, system administrator, TCP, VM, VM Security
Posted in Cloud Computing, Linux, Nginx, Security

Useful Commands To Monitor Network Traffic Using Netstate

Posted on March 30, 2014 by Farooq Sheikh — Leave a comment

netstat (network statistics) is a command-line tool that displays network connections (both incoming and outgoing), routing tables, and a number of network interface (network interface controller or software-defined network interface) and network protocol statistics. This command is also used to…

Tagged with: apache, Apache 2.x, Cloud Computing, DDoS, front end proxy server, Linux, linux administrator, Linux Security, Linux/Unix, monitor network traffic, netstat, network traffic, Networking, Nginx, Sockets, SQL, system administrator, TCP, VM, VM Security
Posted in Cloud Computing, Linux, Security

Linux VM Security – Basic Policies and Guidelines

Posted on March 29, 2014 by Farooq Sheikh — Leave a comment

I would recommend to have following minimum procedures in place to protect Linux VMs over internet. Never share root password to individuals (VM users) Only give root access to individuals through sudo list (if required). VM root password must be strong…

Tagged with: apache, Apache 2.x, front end proxy server, Java EE, Linux, linux administrator, Linux Security, Linux/Unix, Networking, Nginx, Perl, PHP, root password, RSA Key, Shell scripting, Sockets, SQL, SSH, SSL tunneling, sudo, TCP, Tomcat, Ubuntu, VM, VM Security, X.509 certificate
Posted in Linux, Nginx, Security

Useful Commands for Web Server Access Log Monitoring

Posted on March 27, 2014 by Farooq Sheikh — Leave a comment

Following commands will help you to monitor your web server (httpd, nginx etc) access logs. Example: I am more interested to check who has tried to access our wordpress blogs admin login page. [root@]# grep -R “wp-login” host.access.log 192.227.253.247 – –…

Tagged with: ActiveMQ, Adobe Photoshop, AIX, Ant, Apache 2.x, Apache Axis, API, BEA WebLogic Server 8.x, BugNET, Bugzilla, C#, C/C++, C3P0, CSS, Developer 2000, DOM2, DTD, ECLIPSE, EJB, Email Protocols (smtp, Enterprise Architect, ESB, Exchange MAPI Protocol, FTP, Hibernate, IIS, imap, J2EE, J2ME, J2SE, Java, Java EE, JAXB, JAXP, JBoss, JBoss 4.x, JCAPS 5.x, JDBC, JMeter, JMS, JMS/MQ, JNDI, JPA, Jquery, JSON, JSP, JSTL, JUnit, Linux, Linux/Unix, Log4J, Macintosh, Maven, MS Access, MySQL (5.x), Networking, Nginx, Object Oriented, Open Ldap, OpenXML4J, Perl, PHP, PL/SQL, Publisher / Subscriber, Rational Rose Enterprise, Restful, RMI, RPC, SAX2, Scrum or Extreme Programming, Servlets, Shell scripting, SOA, SOAP, SOAP GUI, Sockets, Spring, Spring AOP, SQL, SqlServer2000, Stored Procedures), TCP, Test-driven design (TDD), Tomcat, Tomcat 5.x, Ubuntu, UDDI, UDP, UML, VC++, Visual Basic 6.0, Visual Studio .NET, Visual Studio 6.0, WebLogic Workshop 8.1, Webservices, WebSphere 4.0/5, WS-Security, WSDL, WSS4J, X.509 certificate, XFire, XML, XMLBeans, Xpath, XQuery, XSD, XSLT 1.0
Posted in Linux, Nginx

resume

Posted on February 7, 2013 by Farooq Sheikh — Leave a comment

Farooq Sheikh Rawalpindi, Pakistan E-mail: farooqsh@gmail.com OBJECTIVE To obtain a challenging position in the field of IT where I can utilize my potentials and enhance my skills. SUMMARY Overall 12+ years of IT experience including Object Oriented technologies on client…