Saturday, July 17, 2010

8 More Linux Distributions for Web Server

8 More Linux Distributions for Web Server: I've already shared with you a list of some of the best and most well-known Linux distributions used on web servers.

However, there are still plenty of excellent server-oriented Linux distros that I failed to mention there.

So I think it is important to make a follow up post and bring you another round of Linux distributions for web server.

ClearOS
Based on CentOS, ClearOS is a network and gateway server especially made for small businesses and distributed environments. It offers a comprehensive list of integrated services that are easy to configure through its intuitive and user-friendly web-based interface. ClearOS also features several essential tools and modules that include antispam, antivirus, content filtering, VPN, bandwidth manager, SSL certification, web log analyzer, etc. The distribution is available as a free download including free security updates for 18 months.

EnGarde Secure Linux
EnGarde Secure Linux is a server-oriented distribution that offers services like web, DNS, and the ability to email simply and securely without the need for laborious 'hardening' done by the user. It also provides integrated intrusion detection, advanced kernel and network security features, and graphical auditing and reporting, which can all be controlled through its simplified browser-based management system called Guardian Digital WebTool.

Openwall GNU/*/Linux
Openwall GNU/*/Linux, 'Owl' for short, is a security-enhanced operating system with Linux and GNU software as its core and is intended for use as server platform. Its patches and security extensions have been included into many major Linux distributions. Openwall GNU/*/Linux pulls source code and design concepts from several sources including parts of the GNU userland and OpenBSD for its OpenSSH suite and the inspiration behind its own blowfish-based crypt for password hashing.

SME Server
SME Server is a simple, powerful, and secure Linux server that is based on CentOS, which utilizes publicly available open source Red Hat Enterprise Linux sources. Joseph and Kim Morrison created it in January 1999. The company introduced the first version of its flagship software product, the e-smith server and gateway, in April 1999. It has since been used by thousands of individuals, companies and organizations all over the world.

StartCom Linux
Based on the Red Hat AS source code, StartCom Enterprise Linux is the optimum solution for middle-size servers to large data centers. Its latest version supports the largest commodity-architecture servers with up to 16 CPUs and 64GB (on x86 systems) of main memory, Global File System - for highly scalable, high performance data sharing in multi-system configurations. StartCom Linux offers a comprehensive collection of open source server applications like mail, file (SMB/NFS), DNS, web, FTP, and a complete desktop environment.

Turbolinux
Turbolinux is made from the ground-up to cater to enterprise computing needs. Turbolinux 7 Server was the first-ever to conform to Internationalization standards to help simplify development of applications that need multiple language support. It also supports the Large File Support (LFS) standard for working with applications that control or manage up to four terabytes of data - a standard prerequisite for infrastructures serving Fortune 500 and larger companies. Such industrial-strength environments produce the fundamental point upon which PowerCockpit and other Turbolinux innovations were created.

Zeroshell
Zeroshell is a small Linux distribution for servers and embedded devices. It has a main objective of providing network services in a simple and efficient way. You can get it in the form of live CD or compact Flash image, and it can be configured through a web browser. Some of the main features of Zeroshell include: load balancing and failover of multiple Internet connections, UMTS/HSDPA connections by using 3G modems, RADIUS server for providing secure authentication and automatic management of encryption keys to wireless networks, captive portal to support web login, and many more.

Superb Mini Server
Superb Mini Server (SMS) is a Slackware-based server distribution that can be managed through its web interface. Even though considered as a mini server, it has all the features of a powerful web server and contains packages such as apache2, sendmail, postfix, spamassassin, clamav, squid, iptables, MailScanner, mysql, cups and a whole lot more. SMS also has a full-featured php based bit torrent client that can be managed and accessed from anywhere.

Monday, July 12, 2010

New Linux OS REMnux Designed For Reverse Engineering Malware

A security expert has released a stripped-down Ubuntu distribution designed specifically for reverse-engineering malware.

The OS, called REMnux, includes a slew of popular malware-analysis, network monitoring and memory forensics tools the comprise a very powerful environment for taking apart malicious code.

Many security professionals who find themselves needing to analyze a specific piece of malware end up in a difficult situation.

The classic approach to analyzing malware is to set up a virtual machine on a PC specifically designed for that purpose and then let the malware loose and see what it does.

But that usually only shows you part of the picture; much of the malware's behavior can remain hidden without the ability to do some deeper analysis.

And that's exactly what REMnux is designed to do. The OS is a lightweight version of Ubuntu that is distributed as a VMware virtual machine. It can be booted via several VMware products, or through X-Windows.


Recommended Reads
REMnux is the creation of Lenny Zeltser, an expert on malware reverse engineering who teaches a popular course on the topic at SANS conferences.

He said that he put the operating system together after years of having students ask him which tools to use and what works best.

He originally used Red Hat Linux but recently decided that Ubuntu was a better fit.

The OS includes a virtual treasue chest of reverse-engineering and malware-analysis tools. REMNux has three separate tools for analyzinf Flash-specific malware, including SWFtools, Flasm and Flare, as well as several applications for analyzing malicious PDFs, including Didier Stevens' analysis tools.

REMNux also has a number of tools for de-obfuscating JavaScript, including Rhino debugger, a version of Firefox with NoScript, JavaScript Deobfuscator and Firebug installed, and Windows Script Decoder.

Zeltser said that he wasn't trying to make REMNux the be-all and end-all reverse-engineering environment, but a useful collection of tools for people looking to get into the field.

"This doesn't have every tool in it, because I think people can get distracted with too many tools in there," Zeltser said. "It's good for people getting started who may not be Linux experts. My hope is that people will look at it and help improve it."

In addition to the JavaScript and Adobe analysis tools, Zeltser also included a small Web server, and IRC server and a pseudo-DNS server.

He also included Honeyd, the virtual honeypot server. There also is a customized shellcode analyzer that will take malicious shellcode, create a Windows executable from it and then run it so you can observe its behavior.

"The goal is for people to get into this and see how things work and start understanding the way that malware works," Zeltser said.

Friday, July 9, 2010

25+ IT Job Sites and a Winning Formula

Yes, the IT job market is tough these days.

It’s a far cry from the late nineties, when just showing up with a pulse earned you a signing bonus. I’m told by top IT employment specialists that these days even highly qualified tech professionals can’t always find positions, at least not easily.

Employers know they can afford to be picky. Their desks are stacked high with resumes – many from skilled and experienced IT staffers.

So IT job hunters need to pursue every available avenue. The best, of course, is person-to-person networking.

Working the phone, pressing the flesh at trade meetings, touching base with old colleagues.

IT job sites are another invaluable resource. Yet it’s not enough to simply troll through them and hope. It's best to choose specific sites and set up automatic notifications -- to jump on an opening the moment it comes out.


But what IT job sites to choose? For this you need a formula for maximum advantage. One such formula: 2 general-mega sites + 3 niche sites. (Thanks for this formula goes to Peter Weddle, editor of the well-respected Guide to Employment Web Sites.)

For the mega-general picks, choose among the deep portals like Yahoo Tech Jobs, Monster.com IT Jobs and Indeed’s Computer/Internet Jobs, an IT job aggregator.

For the niche sites, pick a couple of ultra-focused listings like PHP Jobs or JobsInLogistics.

Okay, so what are some niche IT job sites worth considering? Explore the following list – or suggest your favorites in the Comments box below this article.


IT Job Sites
1) Dice
Considered by IT professionals to be one of the leading job boards. Naturally its listings have fallen since the boom years, yet it remains a top destination.


2) JustTechJobs
Targeted, even micro-targeted, this portal offers a plethora of sub sites like JustJavaJobs, JustSAPJobs, JustWebJobs and JustNetworkingJobs.


3) Graduating Engineer
Help, I just graduated! Hey, at least you didn’t get a degree in History. For fresh grads, it offers a list of starting salaries (churned out by Salary.com), along with job interview tips.



4) USAJobs
The U.S. government’s job search portal includes plenty of IT jobs. Oddly, it’s possible that the government is one of the best employers in this protracted downturn.


5) DevBistro
Since 2003, offering listings for programmers and Web developers, along with fresh openings for SEO, software architect, Q/A testing and others.




6) IT Manager Jobs
Hosted by Salary.com, IT Manager Jobs ranges from help desk manager to network operations manager. And yes, the managers tend to earn the most (and deal with the most headaches!)


7) Craigslist: Search by City or State
Actually one of the mega-sites, but you can use it as a narrow-caster by drilling down by city or state. A ton of employers use it, though some employers complain that they get scores of not-so-hot applicants from this vast site. Yet it continues to be used by IT job seekers.


8) 37Signals Job Board
Provides IT job listings from plenty of other sites -- programming and design jobs and many other tech jobs, from project manager to digital user analyst.


9) JavaJobs.net
Java is hot. Here you’ll find a full boat of jobs requiring skill in this popular programming language. JavJava DB, Java Studio, Java ME…




10) PHP-Freelancers
The freelance market can be brutal. Check out the fees that pros are getting for contract-based PHP coding. Are you scoring the best rate?



11) Google Job Search
Great resource. Not an IT job site but a directory of job sites where you can filter the jobs by category. Plus this page offers lists of headhunters and resume advice services.



12) iCrunchData
Kind of like a LinkedIn for IT professionals. Post your photo and resume, scan the jobs, interact with your fellow tech staffers. Social networking meets IT job hunting.



13) IT Jobs at CW Jobs
This UK-based site offers nearly 10,000 IT jobs, from hundreds of firms, with a lot of contract gigs.


14) The Ladders: Technology Jobs
Yes, IT pays well, as long as you can stay employed. Ladders lists IT (and also non-IT) jobs that pay $100k or more a year. Encouraging fact: after management jobs, the largest category at the site is technology jobs.



15)Jobs for Programmers
Visual Basic, Java, C++, .NET – jobs for all these specialties. Plus, explore the sister site, Programming from Home. What, no “programming in your pajamas” site?


16) ComputerJobs
Been around a long time, and one year this site even won a “Weddle” award for User’s Choice. Owned by JobServe.com, which also owns ComputerWork.


17) PHP Jobs
Like all popular programming languages, PHP is international, so these listings span the country and the globe.


18) Vault: Technology Jobs No, not an IT job site, but a source of information about your potential IT employer. Vault offers reams of information on companies and educational programs.



19) IEEE Job Site
As the times have changed, IEEE (Institute of Electrical and Electronic Engineers) has expanded its purview far beyond electric engineers, hence the IT jobs on this site.


20) oDesk
Popular among programmers and tech support staff from developing countries, oDesk focuses on freelance tech work.


21) Information Technology Crossing
You have to pay to join. The site claims that charging users instead of employers (the usual method) enables them to list more IT job openings.


22) JobsInLogistics
Don’t be discouraged by the Logistics label: Take a look at this site’s Systems/ IT section. And remember that companies involved with logistics are some of the largest IT employers.


23) Net Temps: Info Tech
Yes, you want a full-time gig, but in the meantime you can pick up some contract work. Some companies hire contract workers part-time as an audition for a full-time gig.


24) RoadTechs: Computer and Telecom
Have skills, will travel. Focusing on short term (or “indefinite term”) jobs, RoadTechs bills itself as “the interactive site for the traveling contractor.”


25) TheITJobBoard
Both temp and full-time IT jobs, emphasizing the UK and European market. On a recent visit it claimed some 26,000 jobs.

26) ExecutivesOnTheWeb

27) Job Fox

28) Career Jet
Careerjet.ae is a job search engine for the United Arab Emirates. In one simple search, Careerjet gives job seekers access to a huge selection of jobs that are sourced from various internet sites, saving the trouble of having to visit each site individually.

Also have a look at this too:
http://sattia.blogspot.com/2009/09/jobs-in-egypt-groups.html