Showing posts with label kedar mohile. Show all posts
Showing posts with label kedar mohile. Show all posts

Wednesday, April 22, 2009

How to enable Multicast Forwarding in the TCP/IP stack for Windows Server 2008

EnableMulticastForwarding

Key: Tcpip\Parameters

Value Type: REG_DWORD—Boolean

Valid Range: 0, 1 (false, true)
Default: 0 (false)
Description: The routing service uses this value to control whether or not IP multicasts are forwarded. This value is created by the Routing and Remote Access service.

Wednesday, April 8, 2009

Enabling ECN (Explicit Congestion Notification) which is now included in the TCP/IP stack for Windows Server 2008

What is ECN?
Explicit Congestion Notification (ECN) is an extension to the Internet Protocol and is defined in RFC 3168 (2001). ECN allows end-to-end notification of network congestion without dropping packets.The Addition of Explicit Congestion Notification (ECN) to IP, states that with the addition of active queue management (for example, WRED) to the Internet infrastructure, routers are no longer limited to packet loss as an indication of congestion.

ECN and Windows Operating Systems
ECN has now been added to the TCP/IP stack in the following Windows Operating Systems:
  1. Windows Vista
  2. Windows 7
  3. Windows Server 2008

How do we enable ECN is Windows Operating System?

  1. Open a command prompt as an adminstrator
  2. Type "netsh int tcp show global"this will show your current TCP/IP state
  3. To enable ECN, in command prompt type:"netsh int tcp set global ecncapability=enabled"
  4. To enable CTCP (Compound TCP)in command prompt type:"netsh int tcp set global congestionprovider=ctcp"
  5. To verify changes Type "netsh int tcp show global"

Saturday, November 29, 2008

Ethical Hacking vs. Malicious Hacking

Ask any developer if he has ever hacked. Ask yourself if you ever been a hacker. The answers will probably be yes. We have all hacked, at one time or another, for one reason or another. Administrators hack to find shortcuts around configuration obstacles. Security professionals attempt to wiggle their way into an application/database through unintentional (or even intentional) backdoors; they may even attempt to bring systems down in various ways. Security professionals hack into networks and applications because they are asked to; they are asked to find any weakness that they can and then disclose them to their employers. They are performing ethical hacking in which they have agreed to disclose all findings back to the employer, and they may have signed nondisclosure agreements to verify that they will NOT disclose this information to anyone else. But you don’t have to be a hired security professional to perform ethical hacking. Ethical hacking occurs anytime you are “testing the limits” of the code you have written or the code that has been written by a co-worker. Ethical hacking is done in an attempt to prevent malicious attacks from being successful. Malicious hacking, on the other hand, is completed with no intention of disclosing weaknesses that have been discovered and are exploitable. Malicious hackers are more likely to exploit a weakness than they are to report the weakness to the necessary people, thus avoiding having a patch/fix created for the weakness. Their intrusions could lead to theft, a DDoS attack, defacing of a Web site, or any of the other attack forms that are listed throughout this chapter. Simply put, malicious hacking is done with the intent to cause harm. Somewhere in between the definition of an ethical hacker and a malicious hacker lies the argument of legal issues concerning any form of hacking. Is it ever truly okay for someone to scan your ports or poke around in some manner in search of an exploitable weakness? Whether the intent is to report the findings or to exploit them. If a company hasn’t directly requested attempts at an intrusion, then the “assistance” is unwelcome.