Dr Mahbob Blog

my twitter page [link]

Dual WAN Connection
Policy Based Firewall with Scheduling
Bandwidth Management
IPsec/PPTP VPN Servers
DMZ, NAT, Syslog, Content Filter, IM blocking

re you still using a PC based Firewall program to manage your company’s network? The AirLive RS family of security gateways are designed to offer complete advance Firewall,2-Way Bandwidth manager, VPN servers, Messenger Control, Access Authentication, and much more in an all-in-one box. The RS-1200 is powered by a powerful 266Mhz RISC processor. It is available at a fraction of the cost of Software based solutions.

Dual WAN Connection

The RS-1200 offer 2 of WAN interface for load balancing and redundancy. Reducing the risk of a potentially catastrophic shutdown if one of the connections should fail. In addition to maintaining a reliable connection, RS-1200 features out-bound load balancing that can increase your upstream bandwidth when connecting to 2 different ISP services.

DMZ port support

DMZ port is a specific hardware port that lets outside user from internet access your servers without exposing your network to attack. Therefore, you can put your server group on the DMZ port and put your PC network on the regular LAN port. This setup protects your local network from the traffic to the server group. Best of all, users can choose to use NAT or Transparent modes for the DMZ port.

QoS Bandwidth Management

The RS-1200 feature AirLive’s second generation bandwidth management function with easier setting and more features. Administrators can control the bandwidth speed for downstream and upstream traffic separately. For each traffic direction, administrators can define the Guaranteed (Minimum) and Maximum bandwidth. Furthermore, the bandwidth definition can be saved as a policy for firewall. So the administrator can easily control the bandwidth of a single IP, IP group, or by application Best of all, application support are user definable for infinite expandability. Whether it is for business to set priority of their application or for selling Internet services by bandwidth, the RS-1200 has the function for it.

VPN Server and client

The RS-1200 features advance VPN server and client function.The gateway offers both IPsec and PPTP server function plus PPTP client function, So whether you want to work from home or connect 2 office networks together over Internet securely, the RS-1200 has the function for you.

Policy Based Firewall with scheduling

For each policy, administrator can define a password needed for accessing. Take for example, you can set a policy for web browsing (port 80). And the gateway will automatically pop-up a window asking the user to enter password when they want to access the Internet. Up to 200 authentication policies can be made. This feature is useful for system administrator who want to limit certain service to certain individuals regardless of which station they use. Furthermore, it can also be used for control of selling Internet services.

Password Authentication for Internet Access

Some router provide Multi-DMZ support. But the RS-1200 goes one extra step to provide multi virtual server support. So that means if your ISP provide more than one real IP address, you can take full advantage of it by assigning different forwarding rules for each real IP address. Up to 4 real IP addresses are supported each with its own NAT table

Content Filtering

System administrators can establish and enforce acceptable Internet access policies. Content filtering enables the blocking of certain websites either by IP or by domain name. Administrators can also define schedule for each content filtering rules. But best of all, you can also choose to block javascript, active-X, POP-UP, or Cookies. Up to 300 content filtering rules can be made.

Messenger and Skype Blocking

One of the biggest headache for system administrators is to block messenger and Skype traffic. Because these application use dynamic ports that are hard to block, it is usually difficult to block those particular applications. With the RS-1200, it can block MSN messenger, Yahoo Messenger, ICQ, QQ messenger, Skype, Google Talk, and gadu-gadu traffic with a click of a button.

Advance Security Functions

The gateway can be either configured in transparent mode as a gateway or enable the NAT router function. It has many security features built-in such as SPI, SYN, ICMP, DoS, UDP, Ping of Death and Port Scan. The traffic log can be sent automatically by email or by Syslog function. The gateway even features Accounting Report function that display individual IP/service’s usage in time or Kilobytes. Therefore, administrator can charge account by time or traffic used.

The RS-1200 is a product that combines the most important and useful security features in one package. It allows you to take complete control over your network. Contact your authorized AirLive dealer for details

source [link]

I just bought one it cost about 110 KD and it is useful for controlling bandwidth for big houses with many users and also for small companies .

كتب عبدالله النجار والمحرر الأمني وأحمد الشمري: تأخر الهيئة للمعلومات المدنية في اصدار البطاقة الذكية أوقع الكويت في حرج في تنفيذ قرار مجلس التعاون الخليجي التنقل بين مواطنيها بالبطاقة، لا سيما ان دولا نفذت هذا المشروع.

وذكرت مصادر مسؤولة لـ «الوطن» ان «البطاقة الذكية هي البديلة عن البطاقة المدنية الحالية، ووزراء الداخلية وافقوا على تنقل المواطنين بها قبل عامين»، لافتة الى ان «عدم الاصدار يعود الى عدم اختيار الشركة المصنعة حتى الآن على الرغم من ان المعلومات والبيانات الخاصة بالمواطنين والمقيمين جاهزة ومخزنة بالاصل في اجهزة المعلومات الخاصة في الهيئة.. ما يعني انه ليس هناك شيء يعوق اختيار الشركة المصنعة».

وتابعت المصادر: «الامارات وعمان طبقتا المشروع، وكذلك دول خليجية اخرى ومن ضمنها الكويت.. لكن الكويتيين لا يستطيعون السفر برا بوساطة المدنية الحالية، لأن السعودية تشترط البطاقة الذكية التي اتفق عليها وأصدرتها الدول الخليجية»، مشيرة الى ان «السعودية أصدرت هذه البطاقة، بعكس الكويت».

وكانت الكويت اعلنت انها ستنفذ مشروع التنقل بالبطاقة الذكية في مطلع مارس 2009، اعتمادا على ما وعد به المسؤولون في هيئة المعلومات المدنية القياديين في وزارة الداخلية.

من جهة أخرى، في اجتماع مجلس الوزراء الاسبوع الماضي أقرت زيادة القضاة ووكلاء النيابة، أما ما يتعلق بأعضاء الفتوى والتشريع، ومحققي وزارة الداخلية وخبراء وزارة العدل والقضاة الوافدين.. فالأمر مؤجل بالنسبة لهم إلى أجل غير مسمى.. على حد تعبير مصدر وزاري معني بالموضوع.

وذكر المصدر: «لن نقر زيادات مالية على رواتب هذه الفئات.. على الأقل في الفترة المقبلة المنظورة.. فرواتبهم جيدة، ولا نعتقد أنهم بحاجة إلى زيادة».

وأضاف: «الأمر أحيل إلى جهات مختصة، لدرس الموضوع، وبحثه لاحقا».

source [link]

1000GB DIVX Wi-Fi Hard Disk & Recorder from merlin

A Home Multimedia station – available in sizes from 500GB to 1TB.

Play movies and MP3s directly on your TV/Home Theatre from it’s built in hard disk storage or via your home computer on Wireless or cable LAN.

Records directly from TV or DVD – with time shift recording to pause live TV or to watch instant replays of your favorite sports events.

Available in sizes of 500GB to 1000 GB

On the 1000GB model you can record over 1000hrs of DVD quality video directly from TV/DVD movies or Satellite.

You can also store over 1000 downloaded movies and close to 200,000 MP3′s!

Prices start from Dhs 1450/-

source [link]

I just bought one from Eureka 1TB storage around 128 KD

It’s good but transferring files from the hard disk to the computer through the network I have some issues plus the files will be stored maximum with 1GB each file so if you record long movie with 13 GB total it will be around 13 files and still I don’t know how to merge them! I’m still trying to solve these issues . actually I bought it to convert my old VHS to digital files .

update1:

I found that merlin is using OpenSource linux with busybox [link] . I found this by telnet to the IP address of the device . If I find more I will write it down .

TomTom, the maker of personal and in-car navigation devices that just won a bidding war ($4.2 billion, 2.9 billion euros) with competitor Garmin for digital mapping provider TeleAtlas, has announced a partnership with Google. Google Maps will now give users the option to send maps or business listings to TomTom devices. Google (and Yahoo) already offer “send to car” for BMW and Mercedes cars. MapQuest has a similar deal with GM’s On Star telematics system.

Here’s a video demonstration of how it works:

According to Google, the system should be live now in the US, Europe, Middle East and African markets. But we’ve looked, and a “Send To GPS” option still doesn’t seem to be live despite appearing in the TomTom video. The screenshots below show how the “Send” link for a map item still only has an email option:

Personal navigation devices represent an interesting mobile alternative to cellphones for users to access content on the go. They are becoming much more than simply ways to get maps and directions. For example, the new Dash Express positions itself as an “open content platform” for third party developers. And Dash has content deals with Yahoo and Zillow, among others.

Consumers currently pay monthly fees for these devices. There is no advertising on them but they will eventually become ad and mobile commerce vehicles. Indeed, expect search and search advertising to eventually make their way onto these devices and into cars accordingly.

source: [link]

I have tomtom and I’m looking for the middle east maps and I couldn’t find it otherwise it have great feature and it is going live plus you can add your own voices for direction and also community map share see this clip also map share it is good for dubai where all construction works.

WOW

VS

My previous post about WOL Security Key I tried to use WOL Security Seal and I compare it to I found Yahoo! was better because I can upload my own image which I can express my self [link] opposite of WOL that I can choose only from their image which was very bad test come on guys you can do better than that!

but the idea behind this is for protecting users against phishing last year was very bad for all banks when users received emails from banks email address and they build same website interface and butting unnoticed url like for example instead of hotmail.com I can but h0tmail.com “0″ (zero) instead of “o” or dns attacks on PC’s so you will never find it unless you are expert with dns for example I can change “C:\WINDOWS\system32\drivers\etc” hosts file and redirect you to my own server so you will never know .

http://security.yahoo.com/article.html?aid=2006102507

update (this is the email I got about phishing)

Subject: Fwd: FW: قرصنة لعملاء بيت التمويل الكويتي

I heard they have been calling their customers who went to Dubai telling them they will cancel their cards against Fraud as well… Read this below. Regardless if story is true or not, this fraud’s been going on for sometime, and you should never trust any email asking to update bank details. Best way to be sure if you have to is, make sure the URL is the right one.

For example, NBK.com and not NBK-Kuwait.com or NBK-online.com.

مرحبا جميعاً

اليوم بس جيت أفتح إيميلي لقيت فيه رساله من عنوان (kfh@online.kfh.com)

عنوانها : Update Your Records Please‏

و تطلب تحديث بيانات العميل لدى بيت التمويل و وضع البن كوود و رقم الحساب بطريقة مشبوهه عن طريق لينك مخفي تحت جملة

( ملاحظة عندما لا يتم تحديث بياناتك سيتم توقيف خدمة التمويل اونلاين تلقـائياً )

**

صفحة تحديث البيانات المزعومة كان فيها شيء مشبوه و هو اللينك الخاص بالصفحة والغير تابع لموقع بنك بيت التمويل الكويتي

إتصلنا بخدمة * الو بيتك * للتأكد و منها تحولنا لأكثر من موظف لين ما كلمنا الشخص المسئول عن ستاف خدمة العملاء و أكد انه الموضوع عباره عن قرصنة اليكترونية من بعد إطلاعه على صور الإيميل

انتبهوا من هذا الايميل لانه مصمم بصورة شبيه بصفحات موقع بنك بيت التمويل الإلكتروني

*

*

وزعوها لمعارفكم

Just I saw the news google down [link]:

Google Users Get Bogus Warning On Site Searches

MOUNTAIN VIEW, Calif. — Computer users doing Google searches during a nearly one-hour period Saturday were greeted with disturbing but erroneous messages that every site turned up in the results might be harmful.

The company blamed the mistake on human error and apologized for any inconvenience caused to users and site owners whose pages were incorrectly labeled.

The glitch occurred between 7:30 a.m. and 8:25 a.m., Google Inc. said in an explanation on its company blog. Anyone who did a Google search during that time likely saw the message “This site may harm your computer” accompanying every search result, the company said.

Google said it routinely flags any search results with that message if the site is known to install malicious software in the background or otherwise surreptitiously, a practice aimed at protecting its users. It gets its list of suspicious sites from StopBadware.org, a nonprofit project headed by legal scholars at Harvard and Oxford universities who research consumer complaints.

Saturday’s error happened when the latest update to the list was received from StopBadware but was checked in erroneously in such a way that the warning would apply to all URLs, the company said in a statement.

The glitch was caught by on-call staff and the file was quickly fixed, Google said. Since the updates are applied in a staggered and rolling fashion, the errors began appearing at 7:27 a.m. and disappeared no later than 8:25 a.m., with the duration for any particular user approximately 40 minutes, it said.

“We will carefully investigate this incident and put more robust file checks in to prevent it from happening again,” said Marissa Mayer, vice president of search products and user experience, in the statement.